InterviewSolution
Saved Bookmarks
| 1. |
Solve : intrusion attempt?? |
|
Answer» After looking in vista event viewer security log i found several of these: The Windows Filtering Platform has BLOCKED a connection. Application Information: Process ID:1048 Application NAME:\device\harddiskvolume2\windows\system32\svchost.exe Network Information: Direction:Inbound Source Address:239.255.255.250 Source Port:1900 Destination Address:xxxx Destination Port:xxxx Protocol:17 Filter Information: Filter Run-Time ID:0 Layer Name:Receive/Accept Layer Run-Time ID:44 i was wondering if this is an intrusion attempt, an attak or why are they attempting a connection to my computer? and is it legal?That's a reserved IP address... Hmm... What port was it, out of interest? (It's perfectly safe to reveal that.)2308 Hmm... possibly an intrusion attempt. I can't see any other reason for it really. Possibly it's looking for BackOrifice or some similar trojan. Do you not have an external ROUTER/firewall?ye, both. but i have a few open ports tat i use to play online games. If port 2308 is amongst the ports being forwarded to your PC then I think you have your answer. Note that this may be something one of you online games is TRYING to do LEGITIMATELY - it may be that you've opened the port on your router and not done so on your PC. Check if any of the games requires UDP port 2308. |
|