Hi there, I was browsing my NIS 2012 logs and came across a rash of "info" notices about my firewall...they all pretty much said the same as below and it seemed to be happening every 3 secs or so...can someon decipher it for me and tell me what it means and if I should be worried?
Category: Firewall - Activities Date & Time,Risk,Activity,Status,Recommended Action,Category
2012-06-10 19:44:09,Info,"Rule \"Default Block UPnP Discovery\" stealthed (10.0.1.4, Port ssdp(1900) ).
Inbound UDP packet. ",Detected,No Action Required,
Firewall - Activities
Rule "Default Block UPnP Discovery" stealthed (10.0.1.4, Port ssdp(1900) ).<br>
Inbound UDP packet. <br>
Local address, service is (239.255.255.250, Port ssdp(1900) ).<br>
Remote address, service is (10.0.1.4, Port (58540) ).<br>
Process name is "C:\Windows\System32\svchost.exe".
another varient:
Category: Firewall - Activities Date & Time,Risk,Activity,Status,Recommended Action,Category
2012-06-10 19:44:10,Info,"Rule \"Default Block UPnP Discovery\" stealthed (fe80::4cf:3f3:a4e7:b5ad, Port ssdp(1900) ).
Inbound UDP packet. ",Detected,No Action Required,
Firewall - Activities
Rule "Default Block UPnP Discovery" stealthed (fe80::4cf:3f3:a4e7:b5ad, Port ssdp(1900) ).<br>
Inbound UDP packet. <br>
Local address, service is (ff02::c, Port ssdp(1900) ).<br>
Remote address, service is (fe80::4cf:3f3:a4e7:b5ad, Port (52813) ).<br>
Process name is "C:\Windows\System32\svchost.exe".
NIS 2012 and Malwarebytes don't show anything unsual...
Thanks alot