Compromised Mac's

Discussion in 'Community Discussion' started by trward79, Jun 30, 2011.

  1. trward79, Jun 30, 2011
    Last edited: Jun 30, 2011

    trward79 macrumors newbie

    Joined:
    Jun 30, 2011
    #1
    I was wondering if anyone has ever seen this in their log files?

    RemoteVNC[315]: Processing Remote Connection
    RemoteVNC[315]: Connecting to server: 217.128.96.213
    RemoteVNC[315]: Connection Accepted
    RemoteVNC[315]: Desktop Sharing Started

    Or does anyone know what this is?
     
  2. thejadedmonkey macrumors 604

    thejadedmonkey

    Joined:
    May 28, 2005
    Location:
    Pa
    #2
    That almost looks like you're trying to connect to a remote server. Do you use VNC? Otherwise I'd check in settings, sharing, remote desktop, (options?) and see if you have vnc enabled.
     
  3. DeepIn2U macrumors 68040

    DeepIn2U

    Joined:
    May 30, 2002
    Location:
    Toronto, Ontario, Canada
    #3
    my thoughts exactly. Seems like users are connecting to said terminals; something a security implementation should limit by default (or have restrictions on) utilizing admin account - if its a business Mac. I'd try to change the Mac name first just before disabling it to see reactions.
     

Share This Page