NIS 2012 19.9.1.14
Vista home premium, SP2
Desktop pc connected to router
Ok I don’t look at the NIS all the time anymore. But once in awhile I will.
So last night I see these entry in the firewall log-
Rule "Default Block LLMNR " stealthed(169.254.2xx.xxx, Port 53xx). Inbound UDP packet
Rule “Default Block LLMNR” stealthed (fe80::a962 then more numbers and letters Port 53XX). Inbound UDP
These types if entries show like 7-9 times all at the same date/time (2013-04-25. 23:03:53 with the last two digits changing by .10 every other entry ex 23:03:54)
There is also an entry in the group that is:
Rule “Default Block Web Services Discovery” Blocked ( 169.254.2xx.xxx, Port 37XX) inbound UDP packet.
Also another like above but with the “fe80::” type of address.
The 169.254.2xx.xx is NOT the same168.254.2xx.xx that shows in the log when I first turn on my computer ( you know the one that is the temp address until a real address is assigned)
So I’m concerned if this is some type of attack on my PC that has been blocked?
This doesn’t show all the time just once in awhile