Do i allow or block?

Comodo Internet Security - CIS Firewall Help - CIS
1

A message keeps on popping which says "System is trying to receive a connection from the internet.

Application: System
Remote: 112.206.165.199 - TCP
Port: MS-ds(445)

What is this MS-ds(445)? Do i allow or block?

2

You should block this. It’s likely a malicious scan attempting to connect to any file shares you have on your PC, or it’s attempting to exploit an unpatched copy of Windows.

3

Hi seeL,

if you receive such an alert, it means that in the “Stealth Ports Wizard” GUI the option “Alert mean to incoming connections and make my ports stealth on a per case basis” has been chosen. This option is useful if you expect incoming connections from P2P, remote PC,…

If you don’t expect such connections and don’t want your PC being reachable from the outside, you can tell CFW to block silently inbound connections attempts by selecting in the stealth ports wizard GUI :

- “define a new trusted network and make my ports stealth for everyone else” if you have a private network and want the PC’s being able to communicate for file or printer sharing for example. Your PC will be reachable from the devices on your network but not visible from the outside

- “block all incoming connections and make my ports stealth for everyone” if you have one PC or several but don’t want them to communicate