Help with firewall please LOL

Discussion in 'MacBook Pro' started by sg22, Jan 25, 2012.

  1. sg22 macrumors newbie

    Joined:
    Jan 25, 2012
    #1
    Hi, i have been a little paranoid about the safety of my mac recently, ive now set up the firewalls properly and installed some antivirus software, which found some malware and trojans which were aimed at Windows software (got rid of those). Yesterday i found some mysterious apps that i havent seen before "ARD Agent" and 2 or 3 other screen sharing programmes which i trashed instantly haha. Been looking at the firewall activity in Console and its been coming up with this pretty much every few minutes:

    Jan 25 11:59:13 Samuel-Grandisons-MacBook-Pro Firewall[57]: Stealth Mode connection attempt to UDP 192.168.1.4:50070 from 192.168.1.1:53
    Jan 25 11:59:17 Samuel-Grandisons-MacBook-Pro Firewall[57]: Stealth Mode connection attempt to TCP 192.168.1.4:49951 from 173.194.66.94:80
    Jan 25 12:00:23 Samuel-Grandisons-MacBook-Pro Firewall[57]: Stealth Mode connection attempt to UDP 192.168.1.4:62287 from 192.168.1.1:53
    Jan 25 12:36:57 Samuel-Grandisons-MacBook-Pro Firewall[57]: Stealth Mode connection attempt to UDP 192.168.1.4:54104 from 192.168.1.1:53
    Jan 25 12:47:48 Samuel-Grandisons-MacBook-Pro Firewall[57]: Stealth Mode connection attempt to UDP 192.168.1.4:61377 from 192.168.1.1:53
    Jan 25 13:03:02 Samuel-Grandisons-MacBook-Pro Firewall[57]: Stealth Mode connection attempt to UDP 192.168.1.4:58133 from 192.168.1.1:53
    Jan 25 13:03:02 Samuel-Grandisons-MacBook-Pro Firewall[57]: Stealth Mode connection attempt to UDP 192.168.1.4:61044 from 192.168.1.1:53
    Jan 25 13:21:01 Samuel-Grandisons-MacBook-Pro Firewall[57]: Stealth Mode connection attempt to UDP 192.168.1.4:52649 from 192.168.1.5:137
    Jan 25 13:25:04 Samuel-Grandisons-MacBook-Pro Firewall[57]: Stealth Mode connection attempt to UDP 192.168.1.4:63283 from 192.168.1.1:53

    This pretty much repeats itself over and over, is it just my router trying to contact my mac or is it someone trying to hack my mac through my router? I also found a random Ip adress had been signing into my facebook account even after i changed my password.

    So with all of that taken into consideration (facebook ip sign in, all the attempts to connect to udp from 192.168.1.1.53 & tcp from 178.79.201.145:80, malware & trojans found and the funny screen sharing apps i found) what the hell is going on?! Am i just being stupidly paranoid or is someone after me!?

    haha Please reply im bit out of my depth!
     
  2. trikky macrumors regular

    Joined:
    Nov 10, 2011
    #2
    192.168.x.x is a non-routable IP address, so it's going to be found locally. Check your router's information to see if that address has been assigned. It could be something like a smart phone, iPad, Wii...something within your home. Of course, if you don't have a good password on your wireless network, then it's likely your next door neighbour's smart phone, iPad, Wii...you get the idea.

    Entering the other address into Google gets a hit for...Google. The :80 is port 80, the well known port for http, so my guess is the Google web site is trying to hack your computer. :D
     

Share This Page