0

I just used Onyx to clean out my caches and log files after which I did a reboot. Browsing the "All Messages" panel of the Console app I noticed this line:

10/27/13 3:38:03.000 PM kernel: 5.106.198.19

Since I did not recognize that IP I did a whois and to my surprise found out that it points to Eurolan Solutions in Romania.

So my question is why is my Mac 10.7.5 contacting Romania and how can I stop this from happening?

Many thanks

Improve this question
10
  • Could be any software reporting back to the developer..
    – Darius
    Commented Oct 27, 2013 at 20:09
  • Via the kernel? Forgive my ignorance, I know just enough to cause problems for those who know more. If you saw this line in your log, would you be concerned? Thanks for the response
    – Jack
    Commented Oct 27, 2013 at 20:12
  • Based on my somewhat limited knowledge of what a rootkit is it seems like one.
    – Jon
    Commented Oct 27, 2013 at 20:14
  • Are there OSX root kits floating around?
    – Jack
    Commented Oct 27, 2013 at 20:15
  • 1
    If you are really worried, you could use something like Little Snitch (or something similar) -> obdev.at/products/littlesnitch/index.html to identify any incoming and outgoing connection, and block / allow them as necessary.
    – Darius
    Commented Oct 27, 2013 at 20:21

1 Answer 1

Reset to default
1

After a trip to the Apple Store, I can report this is a non-issue. The Tech I spoke to said they had a server in the back room still running Lion. So he went and looked at the kernel.log and found the same entry that I had. Turns out the numbers I thought were an IP address seem to be tied to the Wifi card as a version number. Better safe than sorry I guess.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .