Advertisement
Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
If we do not hit our goal we will be forced to close the site.

Current status: https://keepboardsalive.com/

Annual subs are best for most impact. If you are still undecided on going Ad Free - you can also donate using the Paypal Donate option. All contribution helps. Thank you.
https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.

Suspicious Netgear Router log entries

  • 19-07-2006 03:06PM
    #1
    m_stan
    Registered Users, Registered Users 2 Posts: 1,653 ✭✭✭


    I have remote desktop enabled on my Mac at home via VNC, and my Netgear router is telling me something is trying to access it on this port (see below). I have a good password set, but should I be worried ?

    What are the chances of this being just port scanning rather than a human actually trying to access the machine ?

    The source IP's (which I've edited out below) are different everytime, and it's happening probably once a day.

    Tue, 2006-07-18 15:00:12 - TCP Packet - Source:[EDITED_OUT],60628 Destination:[EDITED_OUT],5900 - [VNC-Mini rule match]
    Wed, 2006-07-19 03:49:22 - TCP Packet - Source:[EDITED_OUT],3709 Destination:[EDITED_OUT],5900 - [VNC-Mini rule match]
    Wed, 2006-07-19 08:19:53 - TCP Packet - Source:[EDITED_OUT],2025 Destination:[EDITED_OUT],5900 - [VNC-Mini rule match]


Comments

  • #2
    Squeegee
    Closed Accounts Posts: 8 ✭Squeegee


    Hi,
    you could try changing the port of the VNC server and see if it happens again (if it does then its a scanner). Another line of defence you could try is a "port knocker" - tho don't know if there is one available for the MAC...


Advertisement