Am I being hacked?

Not long after I started running Indigo and Prism I noticed an ongoing stream of failed screensharing attempts from random IP addresses in Console. Kinda looks like a brute force attack. Is this a known issue with Indigo and/or any suggestions on how I can stop it from happening?

Code: Select all

11/20/13 10:56:44.410 AM screensharingd[120]: Authentication: FAILED :: User Name: N/A :: Viewer Address: 5.79.65.105 :: Type: VNC DES
11/20/13 10:57:45.879 AM screensharingd[120]: Authentication: FAILED :: User Name: N/A :: Viewer Address: 24.56.76.242 :: Type: VNC DES
11/20/13 11:00:06.734 AM screensharingd[120]: Authentication: FAILED :: User Name: N/A :: Viewer Address: 221.141.2.48 :: Type: VNC DES
11/20/13 11:03:02.403 AM screensharingd[120]: Authentication: FAILED :: User Name: N/A :: Viewer Address: 112.175.245.6 :: Type: VNC DES
11/20/13 11:04:03.953 AM screensharingd[120]: Authentication: FAILED :: User Name: N/A :: Viewer Address: 121.125.64.181 :: Type: VNC DES
11/20/13 11:05:17.663 AM screensharingd[120]: Authentication: FAILED :: User Name: N/A :: Viewer Address: 221.143.43.141 :: Type: VNC DES


[matt (support)]

That does look like someone attempting to access screen sharing (VNC) on your Mac, but I don't believe it is related to Indigo or Prism (neither of which use VNC or screensharing).

Choose the Indigo Server->Stop Server menu item then wait a while and see if the connection attempts continue. Normally this type of attack is filtered at your router / DSL/Cable modem level if you have it configured correctly (presuming you don't have port forwarding setup for VNC).

Not long after I started running Indigo and Prism I noticed an ongoing stream of failed screensharing attempts from random IP addresses in Console. Kinda looks like a brute force attack. Is this a known issue with Indigo and/or any suggestions on how I can stop it from happening?

[/code]

I had a similar situation, but with VNC (port5900). I changed the incoming port on my router to a non standard port and the attempts stopped.

Likley, someone scanned your IP address looking for known open service ports, found some, and are now trying to get in.

Thanks guys- I changed the VNC port forward to something less standard and will see if that makes a difference!