Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

How can I tell if theres an attempted access to a non-public area of monitored machine?

April 26, 2017area attempted Machine non-public

0

Posted

How can I tell if theres an attempted access to a non-public area of monitored machine?

1 Answer

0

Posted

First if your machine is a private machine which most at-home systems are (i.e. your system is not a Web Server) then anyone visiting is unwelcome. If you do offer public services such as being a Web Server then you need to be aware of what ports are being used. A Web Server usually uses port 80. If you see an “established incoming” connection on another port then this should concern you. You should identify the port being used to validate the service is not a public service. This appears in the agent list window. The action you should then take is to identify the visitor using our IP tracking tool by entering the IP address or the domain name in the VisualRoute input field. VisualRoute will then trace the location of the address on a world map and provide the “whois” information so you can report the unwanted visit to the hosting provider.