NeilT

decided to ditch the godawful norton and install mcaffee security suite on Vista.

Having a look around on it and found the Firewall 'manage network' option so clicked it and it shows a nice map of my home network. Its wireless so I can see the Wii, 360 and my office pc. But I find another PC on there - address 192.168.2.3.

Traced the IP via MCAfee and reports the address as untraceable. The Network view shows it as a CA, USA registered IP and lists namservers as BLACKHOLE-1.IANA.ORG

So, obviously blocked this IP via the firewall pretty quick. Checked the logs and it appears this IP is 'attempting an unsolicited connection to UDP Port XXX' every few seconds or so.

So, question is apart from McAfee (which scanned my PC and all clear) is there anything else worth doing?

Anyone else had this?

Neil

BlkKnight

your wireless connection needs to be secured.

192.168.2.3 is a local IP address which your router has dutifully given out to someone as it's not secured. . . . .

Unless it is one of your devices. . . your Wii or your 360. . .

NeilT

it is secured, thats the odd thing!

no Wii and 360 assigned other IPs

Neil

BlkKnight

what do you get if you scan the ip?
GFI Network security

Markyboy uk

Secured using what type of encryption WEP or WPA? If its WEP its not adequately secured and can be hacked/cracked in less than 2 hours!

Change it to WPA or WPA2 and pick a long alphanumeric passphrase that would be unlikely to be in a wordlist file (used for a "dictionary attack).

WPA can also be cracked easily if you pick a short and easy passphrase like "subaru"