Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Repeating Connection To Internet


  • Please log in to reply
1 reply to this topic

#1 goggy

goggy

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:09:52 AM

Posted 18 March 2007 - 05:30 PM

OK, I have run full antivirus, Spybot S&D, Adaware, Crapcleaner and a scan at ewido. They all come up clean. I am running Comodo firewall and notice this connection about every ten seconds. I am baffled by this connection that keeps happening. I do not know how to track down what is trying to connect and being blocked (thank god) by CPF. Can anyone shed some light for me? The destination varies also(shown at bottom of this log)

Here is some of my current Comodo log file:

Date/Time :2007-03-18 15:23:18
Severity :Medium
Reporter :Network Monitor
Description:Outbound Policy Violation (Access Denied, ICMP = PORT UNREACHABLE)
Protocol:ICMP Outgoing
Source: 192.168.0.101
Destination: 72.39.209.240
Message: PORT UNREACHABLE
Reason: Network Control Rule ID = 8

Date/Time :2007-03-18 15:23:08
Severity :Medium
Reporter :Network Monitor
Description:Outbound Policy Violation (Access Denied, ICMP = PORT UNREACHABLE)
Protocol:ICMP Outgoing
Source: 192.168.0.101
Destination: 24.62.59.43
Message: PORT UNREACHABLE
Reason: Network Control Rule ID = 8

Date/Time :2007-03-18 15:23:08
Severity :Medium
Reporter :Network Monitor
Description:Outbound Policy Violation (Access Denied, ICMP = PORT UNREACHABLE)
Protocol:ICMP Outgoing
Source: 192.168.0.101
Destination: 72.39.209.240
Message: PORT UNREACHABLE
Reason: Network Control Rule ID = 8

Date/Time :2007-03-18 15:23:03
Severity :Medium
Reporter :Network Monitor
Description:Outbound Policy Violation (Access Denied, ICMP = PORT UNREACHABLE)
Protocol:ICMP Outgoing
Source: 192.168.0.101
Destination: 24.62.59.43
Message: PORT UNREACHABLE
Reason: Network Control Rule ID = 8

Date/Time :2007-03-18 15:22:48
Severity :Medium
Reporter :Network Monitor
Description:Outbound Policy Violation (Access Denied, ICMP = PORT UNREACHABLE)
Protocol:ICMP Outgoing
Source: 192.168.0.101
Destination: 24.62.59.43
Message: PORT UNREACHABLE
Reason: Network Control Rule ID = 8

Destination: 85.132.255.233
Destination: 124.79.111.34
Destination: 213.231.107.161
Destination: 41.212.192.10
Destination: 220.248.232.18
Destination: 67.189.87.51
Destination: 24.62.59.43
Destination: 219.194.167.108

BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,093 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:08:52 AM

Posted 19 March 2007 - 09:22 AM

According to this http://www.dnsstuff.com/tools/ip4r.ch?ip=192.168.0.101+
192.168.0.101 has no reverse DNS entry; some mail servers may not accept your mail.

In other words, that IP is listed as a spam site. Your computer may be a "zombie" attempting to send emails, be part of a DOS attack or used to control other computers.

Post a Hijack This log and let the experts take a look. Post it in the Hijack This forum by following the directions in the link below.
http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users