1.

Solve : intrusion attempt??

Answer» After looking in vista event viewer security log i found several of these:

The Windows Filtering Platform has BLOCKED a connection.

Application Information:
Process ID:1048
Application NAME:\device\harddiskvolume2\windows\system32\svchost.exe

Network Information:
Direction:Inbound
Source Address:239.255.255.250
Source Port:1900
Destination Address:xxxx
Destination Port:xxxx
Protocol:17

Filter Information:
Filter Run-Time ID:0
Layer Name:Receive/Accept
Layer Run-Time ID:44

i was wondering if this is an intrusion attempt, an attak or why are they attempting a connection to my computer? and is it legal?That's a reserved IP address... Hmm... What port was it, out of interest? (It's perfectly safe to reveal that.)2308
Hmm... possibly an intrusion attempt. I can't see any other reason for it really. Possibly it's looking for BackOrifice or some similar trojan. Do you not have an external ROUTER/firewall?ye, both. but i have a few open ports tat i use to play online games. If port 2308 is amongst the ports being forwarded to your PC then I think you have your answer. Note that this may be something one of you online games is TRYING to do LEGITIMATELY - it may be that you've opened the port on your router and not done so on your PC. Check if any of the games requires UDP port 2308.


Discussion

No Comment Found