Hi,
A couple of weeks ago I upgraded to Windows 8.1 and the last couple of days I get repeated messages in Comodo Log where it says …Svchost.exe - IN - UDP - from my modem router 192.168.1.1 via different ports to my local computer 192.168.1.4 via always the same port 56427.
Simultaneously it has also been an increased activity reported in the Log as …Svchost.exe - Out - UPD - local address 192.168.1.4 via always same port 56427 - to 239.255.255.250 with always the same destination port 1900.
Third there has been a request via ICMP to 239.255.255.250.
What picks up my attention is the “IN” from my local modem router. So I am wondering if this is some kind of attack from the outside where the originating ip-address is concealed by my modems internal address?
I someone could please enlighten me or give me some insights on what is really happening here I would very much appreciate it.
I have attached a picture of the log “…Svchost.exe - IN - UDP - from my modem router 192.168.1.1 via different ports to my local computer 192.168.1.4 via always the same port 56427”
Thanks,
Laurus
[attachment deleted by admin]