Mourning the loss of our friend, WhitPhil.
There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
Search
 
General Security
Tag Cloud
access audio black screen blue screen boot bsod connection crash desktop driver drivers dvd email error excel firefox hard drive hardware hijackthis internet keyboard laptop malware monitor motherboard network networking outlook problem processor ram recovery registry cleaner router safe mode screen slow sound spyware trojan upgrade video virus vista vundo windows windows 7 windows vista windows xp wireless
Search
Search for:
Tech Support Guy Forums > Security & Malware Removal > General Security >
Inbound Events on Mcafee Firewall.

Tip: Click here to scan for System Errors and Optimize PC performance
[ Sponsored Link ]

Closed Thread
 
Thread Tools
kurosawa's Avatar
Junior Member with 6 posts.
 
Join Date: Sep 2008
Experience: Beginner
26-Sep-2008, 04:46 PM #1
Inbound Events on Mcafee Firewall.
I'm not sure if this happens all the time, but I was going through my Mcafee settings and found the option to see all outbound, inbound, IDEs, etc. Being curious, I clicked on Inbound events only to see that I'm getting about 20 Inbound events every minute. Here's what the event detail says of one of them: A computer at xxx.xxx.xxx.xxx has attempted an unsolicited connection to TCP port 22349 on your computer. Now, about 99% of all the events show the same port - 22349. Very few of them show 1026, 1027, or 1028. I've done research on the latter three and it turns out that those ports are in fact very common among hack attempts. There has also been a few IPs constantly attempting to ICMP Ping me. Every now and then I see an event called Microsoft-SQL Server (or Monitor). Oh, and there are an extremely wide varieties of IPs that are logged in the events. Some are repeated multiple times. Like this one IP that keeps pinging me from the Middle Eastern/China area. I run virus scans twice a week using both Ad-aware and Mcafee, never picked anything up. However, I just ran a Malwarebyte scan and detected 2 files - but they were both registry changes from HJT (kind of weird). This post is getting a bit long, so I'll sum it up by asking: Do Inbound attempts happen all the time even if your system is clean?
kurosawa's Avatar
Junior Member with 6 posts.
 
Join Date: Sep 2008
Experience: Beginner
26-Sep-2008, 05:08 PM #2
Well, this is embarrassing. Turns out my Bitcomet uses PORT 22349. All those connections are people trying to log back on to my longterm seeding. Whoopsie. Anywho, I'm still curious to the answer for my original question above.
TDA-INC's Avatar
Computer Specs
Junior Member with 9 posts.
 
Join Date: Oct 2008
Experience: Intermediate
24-Oct-2008, 05:52 PM #3
If you want to know more about port security go to the following link.

http://www.grc.com

click on the "Shields Up" logo, then scroll down to "Hot Spots", and click on the "Shields Up". This is a very excellent place to start with port security. You will find out where the leaks are at, whether it is open, failed, passed, or stealth, and how to secure them. Just take your time, browse, and enjoy the site. I have been using this site for many years, and have had a lot of success using it for other peoples pc's.

But TSG is the best for any kind of answer. I kinda stumbled on the site when I D/L'd Firefox. Being the Alpha-Geek-Nerd that I am, I decided to go through the whole add ons section, (recommend at least two days off). Then I found the add-on for TSG read a bit about them and then went to the site, liked what I saw and added the 'add-on',. Glad I did! Sorry about the long post, I do hope this gets you going.
TDA-INC's Avatar
Computer Specs
Junior Member with 9 posts.
 
Join Date: Oct 2008
Experience: Intermediate
24-Oct-2008, 05:56 PM #4
OOps correct link s/b as below. Sorry.

http://www.grc.com
Closed Thread Bookmark and Share

THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Smart Search

Find your solution!



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who want to help you solve your computer problems. See our Welcome Guide to get started.

Thread Tools


You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -5. The time now is 06:33 AM.
Copyright © 1996 - 2009 TechGuy, Inc. All rights reserved.
Powered by vBulletin, Copyright © 2000 - 2009, Jelsoft Enterprises Ltd.
Powered by Cermak Technologies, Inc.