7,000 Malicious connection blocked within the last 7 days

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

CaneHill

Thread Starter
Joined
Feb 22, 2017
Messages
7
My McAfee says I've had about 7,000 malicious connections block within the last 7 days. No viruses detection but I have tons of reports saying IP addresses are trying to access a bunch of different ports should I be concerned or should I not worry because McAfee is handing it or is it possible that these connections will bypass the software?
 

cwwozniak

Chuck
Trusted Advisor
Spam Fighter
Joined
Nov 28, 2005
Messages
66,020
Hi and welcome to TSG.

If the connection attempts come from many different IP addresses that are not in your own LAN's sub-net, it is most likely random hackers probing large blocks of public IP addresses for open ports on vulnerable computers or other Internet connected devices. In many cases the connection attempts may be coming from hacked or zombie computers that either try to propagate their malware to other found computers or report back to the hacker that took control of them. About 42 attempted accesses per hour is not really that much these days..

Routers that use Network Address Translation (NAT) to allow multiple devices on a private LAN to share a single public IP address on the Internet will typically block such probes from reaching the devices on the LAN, unless port forwarding has been set up or a given device put in the router's DMZ. Is your Internet connection through a router that uses NAT?
 
Joined
Sep 21, 2007
Messages
12,283
You need to worry about it only if those ports that they are trying to access really does have a program running behind it. So if they are trying to access a MS SQL port, and you really do have a MS SQL Server, then I would look into further hardening it.
 

CaneHill

Thread Starter
Joined
Feb 22, 2017
Messages
7
Hi and welcome to TSG.

If the connection attempts come from many different IP addresses that are not in your own LAN's sub-net, it is most likely random hackers probing large blocks of public IP addresses for open ports on vulnerable computers or other Internet connected devices. In many cases the connection attempts may be coming from hacked or zombie computers that either try to propagate their malware to other found computers or report back to the hacker that took control of them. About 42 attempted accesses per hour is not really that much these days..

Routers that use Network Address Translation (NAT) to allow multiple devices on a private LAN to share a single public IP address on the Internet will typically block such probes from reaching the devices on the LAN, unless port forwarding has been set up or a given device put in the router's DMZ. Is your Internet connection through a router that uses NAT?
I think it uses NAT because I have a NAT type on Xbox Live but im not sure if thats related
 

CaneHill

Thread Starter
Joined
Feb 22, 2017
Messages
7
You need to worry about it only if those ports that they are trying to access really does have a program running behind it. So if they are trying to access a MS SQL port, and you really do have a MS SQL Server, then I would look into further hardening it.
You need to worry about it only if those ports that they are trying to access really does have a program running behind it. So if they are trying to access a MS SQL port, and you really do have a MS SQL Server, then I would look into further hardening it.
its usually trying to access 1900 and it says its used for SSDP. but one security report said "source IP address has apparently attempted to scan your system by sending large amount of various TCP/IP packets" but that was only once I don't usually see that one. Also port 54882. I also have a lot trying to "Ping my PC". If this is a concer the how would i go about resolving this problem?
 
Joined
Sep 21, 2007
Messages
12,283
That's an unusually high number if you are behind a NAT router. Are you sure your have a router? And that it is not a cable modem with only 1 jack?
 

CaneHill

Thread Starter
Joined
Feb 22, 2017
Messages
7
That's an unusually high number if you are behind a NAT router. Are you sure your have a router? And that it is not a cable modem with only 1 jack?
I'm not really sure what I have, I know I need to have a wireless access point hooked up to it in order to connect wireless. I have AT&T U verse, idk if that helps.
 

CaneHill

Thread Starter
Joined
Feb 22, 2017
Messages
7
That's an unusually high number if you are behind a NAT router. Are you sure your have a router? And that it is not a cable modem with only 1 jack?
I also should mention that I have a VPN installed idk if that would interfere with McAfee or not
 
Joined
Sep 21, 2007
Messages
12,283
Usually, that is a NAT router. Just to confirm, do you know if it is a DSL line?

I would say 7000 is a unusually high number. Because the NAT router normally filters out a lot of attacks. Did you configure the router to put your PC into DMZ (for gaming purposes? )
 

CaneHill

Thread Starter
Joined
Feb 22, 2017
Messages
7
Usually, that is a NAT router. Just to confirm, do you know if it is a DSL line?

I would say 7000 is a unusually high number. Because the NAT router normally filters out a lot of attacks. Did you configure the router to put your PC into DMZ (for gaming purposes? )
I think DSL the data cable is plugged into the DSL port in the back and no I didnt configure my PC but I only play games on Xbox.
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Top