Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Strange Mcafee Inbound log activity


  • Please log in to reply
No replies to this topic

#1 Larbin

Larbin

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:55 AM

Posted 22 July 2009 - 11:14 PM

Hello,
Here's a crazy mystery. When I veiw the Mcafee Inbound Events Log we found that other PCs on the same home network are reporting in their 'Mcafee Inbound Events Log' the following six events from this pc every 20 minutes:
TCP port 2191
TCP port 9100
spooler
HOSTS2 Name Server
HTTP protocol over TLS/SSL
World Wide Web HTTP

The thing about Mcafee is it's reporting attempted intrusions. And they all appear from the offending machine and no other machine. As follows:
"A computer at xxxx has attempted an unsolicited connection to TCP port 443 on your computer. The source IP is a 'non-routable' IP"
"A computer at xxxx has attempted an unsolicited connection to TCP port 81 on your computer. The source IP is a 'non-routable' IP"
"A computer at xxxx has attempted an unsolicited connection to TCP port 515 on your computer. The source IP is a 'non-routable' IP"
"A computer at xxxx has attempted an unsolicited connection to TCP port 9100 on your computer. The source IP is a 'non-routable' IP"
"A computer at xxxx has attempted an unsolicited connection to TCP port 2191 on your computer. The source IP is a 'non-routable' IP"
"A computer at xxxx has attempted an unsolicited connection to TCP port 80 on your computer. The source IP is a 'non-routable' IP"


Thanks in advance for any help or direction,
Larbin

BC AdBot (Login to Remove)

 


m



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users