So I'm dealing with a [presumably] unrelated issue, when looking through my Event Viewer I see a lot of log entries with regards to connection failures to this ip:
31.192.105.20 IP Address Whois | DomainTools.com
They're all being rejected thank God,
But I'm curious how to pinpoint what's attempting the connection and how to make it stop.
Any insights? I apologize if this is in the wrong forum.
Have you installed the TightVNC remote desktop software? The logged event source seem related to that. TightVNC: VNC-Compatible Free Remote Control / Remote Desktop Software
If not, something else might have installed it.
I do use TightVNC, yeah. How did you manage to verify it was related to that?
From a quick online search for event source tvnserver :)
I don't know that software but you might want to go through its settings to see if you can limit the use of it from the Internet. And your firewall settings too. And any port forwards if you have a router.
If you only use it for communications between certain computers I'd make sure those are the only ones allowed in firewalls etc.
I appreciate it, I don't know why I didn't think to Google tvnserver.
It's a mobile-to-desktop VPN, but it shouldn't be connecting out to anything from the PC, so I'm going to kill it off to be safe.
Thanks Tookeri.
See this post for checking out connections to suspicious ip addresses:
ThreatCheck released
See this software if you want to attempt to identify the culprit:
CrowdInspect | CrowdStrike
If you're lucky it will show the process name and file path.
Quote