This forum thread needs a solution.
Kudos0

Unknown computer attempting to access Firefox

Posted: 06-Oct-2023 | 3:22PM · 6 Replies ·

Got a dialog from Norton 360 saying "the computer '104.18.26.193' is attempting to access Firefox on your computer.  The Port number was 52020.  I was not visiting any sketchy sites at the time.  Mac OS version 10.15.7.  I blocked the connection both times I received the notification.  This number is not the address of any of my devices.  I can't find any info on what this activity could be associated with, and online and phone support has been entirely unhelpful.  Does anyone know anything about what this could be related to?  I understand the connection was caught and blocked, but I'm just trying to understand if this was an intrusion attempt about which I should be worried.  Thanks to anyone for any insight!

File Attachment: 
Image icon Screen Shot 2023-10-06 at 12.20.14 PM.png
Labels: Catalina, Alerts/Notifications, Connection Blocking, Customer Support Feedback, Firefox, Firewall, macOS

Replies

Kudos1 Stats

Re: Unknown computer attempting to access Firefox

Posted: 06-Oct-2023 | 4:35PM · Edited: 06-Oct-2023 | 4:42PM · Permalink

2 detected files communicating with this IP address
104.18.26.193(104.16.0.0/13)

2023-10-06  3/ 61 PDF 6976e3158f975e5827bbb33e731d0485.virus
2023-10-03  56/ 71  Win32 EXE015a2d80a2f74672cd44d2dfd2f5ab5bc1924f7913ebf01304c8bc06813509f3

https://www.virustotal.com/gui/ip-address/104.18.26.193/relations

104.18.26.193 was found in our database!
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

https://www.abuseipdb.com/check/104.18.26.193

Kudos0

Re: Unknown computer attempting to access Firefox

Posted: 06-Oct-2023 | 7:40PM · Permalink

Thanks. So I take it that means it is potentially malicious. Any action you would recommend?
Kudos0

Re: Unknown computer attempting to access Firefox

Posted: 06-Oct-2023 | 8:42PM · Edited: 06-Oct-2023 | 8:52PM · Permalink

How frequent is the dialog from Norton 360? 
Just the two times?
And the same '104.18.26.193'?
Recent Firefox extension &or program install? 
How does your machine feel? 

Malwarebytes: How to install Malwarebytes & run a scan
https://malwaretips.com/blogs/run-a-scan-with-malwarebytes/

Mac Malware Removal Help & Support
https://forums.malwarebytes.com/forum/165-mac-malware-removal-help-support/

Caveat: I'm not Mac user. 

Kudos0

Re: Unknown computer attempting to access Firefox

Posted: 06-Oct-2023 | 8:48PM · Permalink

That’s correct. I do have Malwarebytes and scanned with normal results.
Kudos0

Re: Unknown computer attempting to access Firefox

Posted: 06-Oct-2023 | 9:04PM · Edited: 06-Oct-2023 | 9:39PM · Permalink

from the IP Abuse Report 

Brute-Force 
Credentials brute force attacks on webpage logins and services.

Bad Web Bot 
Webpage scraping (for email addresses, content, etc)

Web App Attack
Attempts to probe for or exploit installed web applications.

Port Scan Hacking
Scanning for open ports and vulnerable services. 

A port scan is a common technique hackers use to discover open doors or weak points in a network. A port scan attack helps cyber criminals find open ports and figure out whether they are receiving or sending data.

Sounds like bots were scanning for open ports and vulnerable services. 

Just the two times.  Sounds like nasty was knocking at your door and you're okay.  

If you're still concerned. 
Maybe, ask for a security checkup => Mac Malware Removal Help & Support.
I follow Windows Malware Removal Help & Support. 
Malwarebytes staff & experts...help all. Ya' don't need a paid subscription. 

Caveat: I'm not Mac user.  I'm not Norton.  I'm Norton user. 

Kudos0

Re: Unknown computer attempting to access Firefox

Posted: 06-Oct-2023 | 9:42PM · Permalink

Norton should add intelligent firewall to Mac like they have for Windows. Sometimes things like this are really annoying.

This thread is closed from further comment. Please visit the forum to start a new thread.