Is this normal or am I being hacked???

Networking/Security Forums -> Anonymity // Privacy // Spam

Author: nub2securityLocation: Montreal PostPosted: Tue May 22, 2007 6:52 pm    Post subject: Is this normal or am I being hacked???
    ----
Hi:

I'm getting these firewall reports in my event log:

#1:

Event Type: Success Audit
Event Source: Security
Event Category: Detailed Tracking
Event ID: 861
Date: 5/22/2007
Time: 11:37:19 AM
User: ***********
Description:
The Windows Firewall has detected an application listening for incoming
traffic.

Name: FIREFOX
Path: C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.exe
Process identifier: 2664
User account: *****
User domain: NT AUTHORITY
Service: NO
RPC server: No
IP version: IPv4
IP protocol: UDP
Port number: 2858
Allowed: YES
User notified: No

This pattern continues many *28 times* until I see
#2

Event Type: Failure Audit
Event Source: Security
Event Category: Detailed Tracking
Event ID: 861
Date: 5/22/2007
Time: 11:45:21 PM
User: NT AUTHORITY\SYSTEM
Description:
The Windows Firewall has detected an application listening for incoming traffic.

it appears using UDP protocol for the following ports,
#3477, 3479, 3465, 3477, 3467 3463, 3461, 3457, 3455, 3453, etc...
events are one right after the other in my security log

NOTE: I use Tor.

Is this normal or do I have issues or something that should not be happening here? Or am I being overly paranoid.

Thank you,
Any help is welcomed!
nub2security

Author: Dan.MLocation: Jacksonville, FL USA PostPosted: Sun Sep 16, 2007 5:15 am    Post subject:
    ----
I suspect that it is merely detecting Tor. Have you set it up to also relay traffic for peers? If so, then that is what is going on.



Networking/Security Forums -> Anonymity // Privacy // Spam


output generated using printer-friendly topic mod, All times are GMT + 2 Hours

Page 1 of 1

Powered by phpBB 2.0.x © 2001 phpBB Group