Community
My desktop went black
![](/upload/forum/avatar/09e/AusPicsmall2.png)
Suspected remote unauthorised access.
Closed HOST and desktop background returned.
Checked log file and found this:
05.02.2024---10:40:59:544 34 Remote Utilities - Host 70220 is started. GMT Windows 10.0 64bit
05.02.2024---10:40:59:936 96 Relay node: OK ID: xxx-xxx-xxx-xxx; Port: 5655; Try count: 1
05.02.2024---10:41:01:000 96 Relay node redirect: OK. Relay redirect. To: nn.nn.nn.nnn
05.02.2024---10:41:01:644 96 Relay node: OK ID: xxx-xxx-xxx-xxx; Port: 5655; Try count: 1
Replaced node numbers with x and relay ip numbers with n
No other records of a Relay Redirect in the log.
The only PC that has remote access to this is a laptop which is turned off.
Checked the relay IP and it's in the USA, I'm in the UK.
Has someone, somehow gained access to this PC via remote utilities?
Have changed Access numbers and passwords to be sure.
![](/upload/forum/avatar/6da/2020_11_06_0000.png)
Thank you for your message.
You need not worry. These lines only tell that your Host has successfully connected to our server relay infrastructure and is in the 'listening' mode. If it were an unauthorised connection, there would be for example this:05.02.2024---10:40:59:544 34 Remote Utilities - Host 70220 is started. GMT Windows 10.0 64bit
05.02.2024---10:40:59:936 96 Relay node: OK ID: xxx-xxx-xxx-xxx; Port: 5655; Try count: 1
05.02.2024---10:41:01:000 96 Relay node redirect: OK. Relay redirect. To: nn.nn.nn.nnn
05.02.2024---10:41:01:644 96 Relay node: OK ID: xxx-xxx-xxx-xxx; Port: 5655; Try count: 1
Remote screen connection. Started.or
FTP connection. Started.depending on the chosen connection mode.
You can also enable two-factor authentication. And if you want to additionally protect the address book that resides on your Viewer computer, use address book encryption.Have changed Access numbers and passwords to be sure.
Hope that helps.
![](/upload/forum/avatar/09e/AusPicsmall2.png)
Thanks Conrad, just me being a bit Paranoid I suppose, it was theConrad Sallian wrote:
Hello Chas,
Thank you for your message.You need not worry. These lines only tell that your Host has successfully connected to our server relay infrastructure and is in the 'listening' mode. If it were an unauthorised connection, there would be for example this:05.02.2024---10:40:59:544 34 Remote Utilities - Host 70220 is started. GMT Windows 10.0 64bit
05.02.2024---10:40:59:936 96 Relay node: OK ID: xxx-xxx-xxx-xxx; Port: 5655; Try count: 1
05.02.2024---10:41:01:000 96 Relay node redirect: OK. Relay redirect. To: nn.nn.nn.nnn
05.02.2024---10:41:01:644 96 Relay node: OK ID: xxx-xxx-xxx-xxx; Port: 5655; Try count: 1Remote screen connection. Started.orFTP connection. Started.depending on the chosen connection mode.You can also enable two-factor authentication. And if you want to additionally protect the address book that resides on your Viewer computer, use address book encryption.Have changed Access numbers and passwords to be sure.
Hope that helps.
05.02.2024---10:41:01:000 96 Relay node redirect: OK. Relay redirect. To: nn.nn.nn.nnn
That didn't appear anywhere else in previous sessions that worried me.
I'll follow up with 2FA and encrypt the address book too.
Cheers
Chas
* Website time zone: America/New_York (UTC -4)