Strange Chinese process access to kdc in Mountain Lion

Discussion in 'OS X Mountain Lion (10.8)' started by blackxacto, Feb 5, 2013.

  1. blackxacto macrumors 6502

    blackxacto

    Joined:
    Jun 15, 2009
    Location:
    Middle TN
    #1
    Today, Little Snitch warned me that:

    kdc wants to accept an incoming connection from 221.2.209.46 on TCP port 88 (kerberos), Process ID 42, User: root (UID: 0)

    I looked up the IP address: The number of this IP address is 221.2.209.46. This IP address is fixed within China, and registered in Jinan, Shandong. IP Country code is CN. IP address ISP is "China Unicom Shandong province network", organization is "China Unicom Shandong province network". IP address longitude is 116.9972 and latitude is 36.668301.

    Until I find out what is going on w this kdc process, I instructed Little Snitch to query me if it happens again.

    What is happening here folks? Any help would be appreciated.

    27" iMac10,1
    3.06 GHz Intel Core 2 Duo
    12gig RAM/OSX10.8.2/1 TBHD
     
  2. vanc macrumors 6502

    Joined:
    Nov 21, 2007
    #2
    If you are behind a firewall, or even a simple home router, there should be no direct access from outside your local network, unless you have port mappings in your router or firewall.
     
  3. blackxacto thread starter macrumors 6502

    blackxacto

    Joined:
    Jun 15, 2009
    Location:
    Middle TN
    #3
    I use Little Snitch as my Firewall to learn all the processes going on.

    I get confused about what a firewall stops. Don't I want some of my software to communicate back and forth? Turning on the Apple Firewall stops all communication coming in or going out, I forget how it goes.

    I'd appreciate any explanation of what the Apple Firewall will do if I turn it on.
     
  4. Gogol macrumors member

    Joined:
    Jan 1, 2013
    Location:
    The Netherlands
    #4
    It is possible that someone is already inside the network from another computer in your network. You have to check other computers in your network.
     
  5. blackxacto thread starter macrumors 6502

    blackxacto

    Joined:
    Jun 15, 2009
    Location:
    Middle TN
    #5
    I am one computer with a Comcast cable connection
     

Share This Page