Unknow IP showing in Firewall and Activity tab

[jlanders]

Hello,

I am trying to figure out why I am showing an unknow Mac/IP in my Activity tab and my Firewall messages tab. These IP's are trying to access multiple ports. I am trying to determine if I have an intruder or if there is some worm or something broadcasting from my machines.

Any ideas on this one

Thanks in advance.
James

[jamesc]

I am trying to figure out why I am showing an unknow Mac/IP in my Activity tab and my Firewall messages tab

1. Please let the forum know an example firewall tab message: Source IP and Port, Destination IP and Port, Reason, Protocol and Info.
**If the Source IP Address is from the internet, you may be able to find out what domain name the ip address belongs to by using the 'a' switch in a ping command; it may be an address you recognise. The command below is an example that will return one of our servers fully qualified domain names.

(Windows) Start menu --> Run --> Cmd --> ping -a 210.55.214.36


2. You need to let the forum know what subnet your LAN is on; i.e. 192.1680.x


3. You need to confirm to the forum users that your network cards were correctly detected in WinGate for firewall and connectivity purposes. The network card / modem pointing towards the internet should be set as EXTERNAL in WinGate, and the network card pointing towards your LAN is marked as INTERNAL. FYI: If you only have one network card, and it has a default gateway set to a hardware router with a firewall, then you can set it as INTERNAL in WinGate; WinGate can do single network card NAT. please see the image attached for see where to set network interfaces as INTERNAL / EXTERNAL.