Is it normal for Mcafee to be blocking a suspicious incoming network connection from IP address 161.69.12.13 (hundreds of times/24 hrs) as reported in the security history?

[prairiedave]

One of my laptops has slowed down dramatically and won't allow facebook to load. This laptop is protected by Mcafee. I can use another laptop using the same home network and load FB and anything else. I looked at the security history of the slowed, non loading FB computer and I see that there are many hundreds of blocked suspicious incoming internet connections occurring within a 24 hour period. There appear to be 3 IP addresses being blocked. When I check the owner of the IP Addresses I find that one is McAfee (i.e. 161.69.12.13 ). Is this normal?

[selvan]

Hi

This shouldn't be happening because this IP resolves to McAfee's US site and McAfee by Default allows these connections. By any chance do you see a McAfee Update running in the background and/or a Web Browser that McAfee's site open.

You can turn this setting Off in General Settings and Alerts so that you aren't notified of incoming connections (McAfee's) being blocked.

[prairiedave]

I see this in the history log. I see a similar message with the default IP address of my wireless router. Looks like this has been going on for at least days now. I'm concerned that I have a virus that has effectively disabled McAfee's abaility to really update the virus signatures.

[selvan]

Well I can't conclude before I have a look at your PC. Is it possible for you to post the list of installed programs on your PC to analyse further. (Alternatively you can contact Tech Support Free from this link and open a Support Ticket, Post the same here so that I can follow up)

[prairiedave]

Ok I will open a support ticket and post the info back here. Thank You for the assistance. I'll be back with the support ticket info in about an hour.

[Hayton]

When I was a newcomer (2010) one of the first questions I asked in the Community was about blocked incoming requests from that IP address, although in my case I was looking at two entries in the logs not hundreds. The address is, as Selvan says, a McAfee server (https://ipdb.at/ip/161.69.12.13)

Possibly your firewall settings might affect how many of these you see - look under the Traffic Controller and Intrusion Detection sections - but you can specifically allow connections from IP address ranges in My Network Connections. I believe the entire block of 161.69.*.* addresses belongs to McAfee so it would be safe (and logical) to trust that range.

[exbrit]

Moved this to Personal Firewall as a better spot for it.

Peter

Volunteer Moderator