Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
OP, don't forget to disconnect the transdimensional demodulator that is next to the AirPort Card, that could be reason why you are getting pinged even though the physical interfaces to do so are disabled. Oh and rip off/ desolder the ethernet port and uninstall every app in your system and rely on Finder's search bar to type anything you want, I don't think finder pings in any way so you could try that. Also for extra protection shield every single port with aluminium. You don't want them signals reaching the pins of your ports. Glad I could help
Thanks, I just pulled the hardware for that old school feeling I was trying to get. Sorry I bothered to ask!

LOL. that is a funny post.
 
  • Like
Reactions: OSX7
Because I keep trying to explain when the hardware is pulled, then Word does not promote any requests?

LOLOLOL. They are just words aren't they. Well we've tried to improve your knowledge and explain...shame us lowly armchair geniuses know so little about the "real" world...at least you now understand Word is on your machine and not on the internet...don't you?

Try and be a little less arrogant and insulting of others, it'll help.
 
LOLOLOL. They are just words aren't they. Well we've tried to improve your knowledge and explain...shame us lowly armchair geniuses know so little about the "real" world...at least you now understand Word is on your machine and not on the internet...don't you?

Try and be a little less arrogant and insulting of others, it'll help.
LOL, I apologize if you took offense.
 
Thanks for chiming in. BTW, what IS UDP port 2222 Rockwell-csp2? Did I miss you or someone else explaining how this is a backdoor connection when your airport card is physically inside the computer?
What your posts indicate is that you may not understand that there are multiple applications in the world use port 2222.

The site you're looking at (http://www.speedguide.net/port.php?port=2222) is showing you a list of all of the applications they know of that use that port.

It's up to you to figure out if any of those apps actually apply in your situation.

Regarding Rockwell CSP2, I know the description on that site mentions TROJANS and BackDoors (two terms that really seem to have your attention), but if you further research the description, none of it seems to apply to your situation. The 3rd paragraph talks about one variant being an .EXE. Macs don't run EXEs, Windows computers do. Doing a Google for "rockwell CSP2 Mac OS X" turns up zero information about this affecting Macs.

So scratch that off the list and go to the next one. DirectAdmin. Quick Google seems to indicate that this isn't applicable to Macs, not that it was a bad thing. Apparently this application (on Linux) runs on port 2222 for admin functions. Not applicable to your situation.

The third entry for port 2222 shows this:

Microsoft Office OS X antipiracy network monitor (unofficial)

Doing a Google search about that turns up information about how Microsoft, in an effort to prevent people from installing one licensed copy of Microsoft Office on multiple computers in their house/office, has the Office programs broadcast out (across the local network) the license key, and takes some sort of action (shuts an app down?) if it seems multiple apps on different computers using a product key that's for individual use.

Hmmm, this seems to directly apply to your situation.

Office programs are going to make outgoing transmissions to broadcast on your local network, and they're also going to listen for replies on your local network. So you've got the potential for both outgoing/incoming packets, even if your local network isn't connected to the Internet.
 
What your posts indicate is that you may not understand that there are multiple applications in the world use port 2222.

The site you're looking at (http://www.speedguide.net/port.php?port=2222) is showing you a list of all of the applications they know of that use that port.

It's up to you to figure out if any of those apps actually apply in your situation.

Regarding Rockwell CSP2, I know the description on that site mentions TROJANS and BackDoors (two terms that really seem to have your attention), but if you further research the description, none of it seems to apply to your situation. The 3rd paragraph talks about one variant being an .EXE. Macs don't run EXEs, Windows computers do. Doing a Google for "rockwell CSP2 Mac OS X" turns up zero information about this affecting Macs.

So scratch that off the list and go to the next one. DirectAdmin. Quick Google seems to indicate that this isn't applicable to Macs, not that it was a bad thing. Apparently this application (on Linux) runs on port 2222 for admin functions. Not applicable to your situation.

The third entry for port 2222 shows this:

Microsoft Office OS X antipiracy network monitor (unofficial)

Doing a Google search about that turns up information about how Microsoft, in an effort to prevent people from installing one licensed copy of Microsoft Office on multiple computers in their house/office, has the Office programs broadcast out (across the local network) the license key, and takes some sort of action (shuts an app down?) if it seems multiple apps on different computers using a product key that's for individual use.

Hmmm, this seems to directly apply to your situation.

Oh, I thought I mentioned that Word was trying to access through UDP Port 2222 Rockwell CSP2 through a numerical internet address on my machine right after I got a pinged update for another app. Sorry I guess I explained that to other MR members via PM.
 
Oh, I thought I mentioned that Word was trying to access through UDP Port 2222 Rockwell CSP2 on my machine right after I got a pinged update for another app. Sorry I guess I explained that to other MR members via PM.
That website lists 9 different applications that could potentially use port 2222. So it's just called "port 2222".

It's not a well-known port, doesn't get a name behind it like "Port 2222 Rockwell CSP2". Besides, if it did, you'd probably want to list all 9 of the apps in the name, so it'd be "Port 2222 Rockwell CSP2, Direct Admin, Microsoft Office X anti piracy network monitor, Sweetheart/Way, EtherNet/IP I/O, [trojan] Rootshell left by AMD exploit, Rockwell CSP2, Peer Impact, Microsoft Office X antipiracy network monitor". Whew.

Rockwell CSP2 is simply one of the possible applications that could use this port.
Word (under "Microsoft Office X anti piracy network monitor (unofficial) is another application.

In your case, Word was the app using it the port. Rockwell CSP2 has nothing to do with port 2222 on your Mac, so I'm confused about why you keep mentioning. It's simply another application that exists somewhere in the world that also uses port 2222. Again, there are at least 8 other apps that exist that do the same. Just because you have one app on your Mac (Word) using port 2222 does not mean that the other eight applications that also use port 2222 have anything to do with your Mac.
 
Last edited:
That website lists 9 different applications that could potentially use port 2222. So it's just called "port 2222".

It's not a well-known port, doesn't get a name behind it like "Port 2222 Rockwell CSP2". Besides, if it did, you'd probably want to list all 9 of the apps in the name, so it'd be "Port 2222 Rockwell CSP2, Direct Admin, Microsoft Office X anti piracy network monitor, Sweetheart/Way, EtherNet/IP I/O, [trojan] Rootshell left by AMD exploit, Rockwell CSP2, Peer Impact, Microsoft Office X antipiracy network monitor". Whew.

Rockwell CSP2 is simply one of the possible applications that could use this port.
Word (under "Microsoft Office X anti piracy network monitor (unofficial) is another application.

In your case, Word was the app using it the port. Rockwell CSP2 has nothing to do with port 2222 on your Mac, so I'm confused about why you keep mentioning. It's simply another application that exists somewhere in the world that also uses port 2222. Again, there are at least 8 other apps that exist that do the same. Just because you have one app on your Mac (Word) using port 2222 does not mean that the other eight applications that also use port 2222 have anything to do with your Mac.
From my screenshot:

"Word wants to connect to (numerical internet address) on UDP port 2222 (rockwell-csp2)"

I get no prompt when the hardware is removed.
 
Last edited:
From my screenshot:

"Word wants to connect to (numerical internet address) on UDP port 2222 (rockwell-csp2)"
Oh, I see what you're saying.

Anyhow, UDP port 2222 on your Mac has absolutely zero correlation the actual rockwell-csp2 service, or any of the applications/trojans/backdoors that also utilize the same port, other than the Microsoft Office OS X anti piracy one that's included with the version of Word that you're running.
 
Oh, I see what you're saying.

Anyhow, UDP port 2222 on your Mac has absolutely zero correlation the rockwell-csp2 service, or any of the applications/trojans/backdoors that also utilize the same port, other than the Microsoft Office OS X anti piracy one.

Right. My question remains, why would I be getting this prompt if airport/bluetooth cables were pulled and airport was turned off?
 
You were told so many times, you're really not getting it are you?

Word, the software you're using as a word processor has built in outgoing requests and checks for numerous things, piracy, updates, etc. It's just trying to connect to fetch updates or validate your software.


Uninstall Word and you will not receive those prompts. That is literally your only solution.
 
Right. My question remains, why would I be getting this prompt if airport/bluetooth cables were pulled and airport was turned off?
Even if you turn off Airport and your ethernet port, a local type of networking (called loopback) that doesn't require any physical cards to be active continues to run.

Open up Terminal on that Mac and issue this command to see all networking interfaces:
ifconfig

If you see one that looks like below, that's loopback. I just turned off all 8 of my physical network interfaces on my Mac (to test this), and loopback continues to run.

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384

options=3<RXCSUM,TXCSUM>

inet6 ::1 prefixlen 128

inet 127.0.0.1 netmask 0xff000000

inet6 fe80::1%lo0 prefixlen 64 scooped 0x1
 
You were told so many times, you're really not getting it are you?

Word, the software you're using as a word processor has built in outgoing requests and checks for numerous things, piracy, updates, etc. It's just trying to connect to fetch updates or validate your software.


Uninstall Word and you will not receive those prompts. That is literally your only solution.
You are not understanding or I did not spell it out correctly. Only when ALL the hardware is pulled do the prompts stop. When just the cables are pulled, I get the Word prompts. This implies that Word is being prompted by an open connection somewhere in between just pulling the cables or going in and pulling out all the hardware completely.
 
Even if you turn off Airport and your ethernet port, a local type of networking (called loopback) that doesn't require any physical cards to be active continues to run.

Okay -- but JFYI no prompts when all the hardware is removed. None. Only got the prompts with the cables pulled but hardware intact.
 
Do what you want to do, if the prompts are gone, then you have found your solution. Or just ignore the alerts, you seem very paranoid.
I knew the solution was pulling absolutely all of the hardware, I was surprised that this was the only solution and surprised at the tenacity of Word and other apps to hook up to the internet.

Surprised at the desperate tenacity of outside vendors trying to access our machines.

...When I thought just a little elbow grease would put a stop to it.
 
I knew the solution was pulling absolutely all of the hardware, I was surprised that this was the only solution and surprised at the tenacity of Word and other apps to hook up to the internet.
That's because there is no hardware available for the software to attempt the networking.
 
Even if you turn off Airport and your ethernet port, a local type of networking (called loopback) that doesn't require any physical cards to be active continues to run.

Open up Terminal on that Mac and issue this command to see all networking interfaces:
ifconfig

If you see one that looks like below, that's loopback. I just turned off all 8 of my physical network interfaces on my Mac (to test this), and loopback continues to run.
Interesting. Thank you very much!
 
  • Like
Reactions: aristobrat
Nope
Word still looks for port 2222 at launch, as it is designed. Now, removing the hardware, you simply ended up by disabling Little Snitch, as it has nothing to look for, and can't see that Word still looks for that port.
Much easier (from the start), would be, after turning the interface OFF, then uninstall Little Snitch.
And, no more (bogus) reports
 
  • Like
Reactions: duervo
Nope
Word still looks for port 2222 at launch, as it is designed. Now, removing the hardware, you simply ended up by disabling Little Snitch, as it has nothing to look for, and can't see that Word still looks for that port.
Much easier (from the start), would be, after turning the interface OFF, then uninstall Little Snitch.
And, no more (bogus) reports

Interesting. So it is part of Word to look for an open port. I thought it was being prompted by an open portal. I was stumped that there was any open "portal" or "port" at all after pulling part of the hardware.

So Little Snitch was actually doing its job and there were open internet ports even though I disabled and turned off some of the hardware.

Again, what I remain amazed about is the tenacity of outside vendors to access our machines... I thought just a little elbow grease would turn it all off.

Not so. Thanks for your response.
 
Last edited:
No, not exactly.
LS, as far as I know, doesn't check to see if ports are actually working. Network ports are software generated, after all.
Word tries to access port 2222. LS reports it, even if the connection to the port can't work because of a software configuration (interface turned off)
So, in your case, after turning off interfaces, uninstalling LS would be your final fix. If you have no connection on that Mac to internet, not even a local network connection to a printer, then LS has no value to you on that Mac. Uninstall LS, and be good!
 
No, not exactly.
LS, as far as I know, doesn't check to see if ports are actually working. Network ports are software generated, after all.
Word tries to access port 2222. LS reports it, even if the connection to the port can't work because of a software configuration (interface turned off)
So, in your case, after turning off interfaces, uninstalling LS would be your final fix. If you have no connection on that Mac to internet, not even a local network connection to a printer, then LS has no value to you on that Mac. Uninstall LS, and be good!

Just for s----- and giggles, I'm keeping LS. My problem was I could not understand how there were any portals open with a minimum of hardware disconnects.

Remain amazed how tenacious outside vendors are to access our machines.
 
Remain amazed how tenacious outside vendors are to access our machines.
I guess in this case, Microsoft might say that they're amazed at how people tenaciously pirate their software -- and want it to stop! :)

At least in the case of Word, the open/listening ports were only for use on the internal network.

As long as your computers are connecting to the Internet through a router, and you haven't specifically enabled port-forwarding (or uPNP) on that router, having an open/listening port on your Mac is not enough to allow anyone from the outside Internet to connect to your Mac.
 
  • Like
Reactions: duervo
One of the funnier threads this one lol. OP there is a difference between "trying" to access the internet and actually accessing it. If you have your ethernet cable unplugged and wifi turned off the computer cannot access the internet. Many apps will TRY to "phone home" to see if there are updates ect even if the computer has no internet connection.
 
I guess in this case, Microsoft might say that they're amazed at how people tenaciously pirate their software -- and want it to stop! :)

At least in the case of Word, the open/listening ports were only for use on the internal network.

As long as your computers are connecting to the Internet through a router, and you haven't specifically enabled port-forwarding (or uPNP) on that router, having an open/listening port on your Mac is not enough to allow anyone from the outside Internet to connect to your Mac.

What's the Microsoft "internal network"?
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.