UltraVNC Viewer

[basso]

UltraVNC Viewer mode listen
when I use wncviewer in listening mode a number of unknown IPs try to connect crashing the app. I couldn't solve it via firewall. Using vncserver the problem does not occur and it generates a log with the IPs

vncviewer.exe -listen 5900 -disablesponsor -dsmplugin securevncplugin.dsm

22/08/2024 22:06:50 Invalid attempt from client 137.184.181.85
22/08/2024 22:06:56 Invalid attempt from client 45.55.68.101
22/08/2024 22:08:35 Invalid attempt from client 161.35.109.85
22/08/2024 22:08:40 Invalid attempt from client 161.35.109.85
22/08/2024 22:08:40 Invalid attempt from client 161.35.109.85
22/08/2024 22:09:04 Invalid attempt from client 137.184.181.85
22/08/2024 22:09:51 Invalid attempt from client 161.35.109.85
22/08/2024 22:09:55 Invalid attempt from client 161.35.109.85
22/08/2024 22:10:19 Invalid attempt from client 137.184.181.85
22/08/2024 22:10:24 Invalid attempt from client 161.35.109.85
22/08/2024 22:10:30 Invalid attempt from client 161.35.109.85
22/08/2024 22:10:35 Invalid attempt from client 161.35.109.85
22/08/2024 22:10:43 Invalid attempt from client 45.55.68.101
22/08/2024 22:10:44 Invalid attempt from client 161.35.109.85
22/08/2024 22:11:01 Invalid attempt from client 161.35.109.85
22/08/2024 22:11:06 Invalid attempt from client 107.174.202.131
22/08/2024 22:11:07 Invalid attempt from client 161.35.109.85
22/08/2024 22:11:54 Invalid attempt from client 137.184.181.85
22/08/2024 22:12:07 Invalid attempt from client 45.55.68.101
22/08/2024 22:13:12 Invalid attempt from client 137.184.181.85
22/08/2024 22:13:26 Invalid attempt from client 137.184.181.85
22/08/2024 22:13:54 Invalid attempt from client 45.55.68.101
22/08/2024 22:14:16 Connection received from 201.41.55.251
22/08/2024 22:14:21 Password authentication accepted from 201.41.55.251 (Interactive) (ID:1)
22/08/2024 22:14:50 Invalid attempt from client 161.35.109.85
22/08/2024 22:14:50 Invalid attempt from client 161.35.109.85
22/08/2024 22:15:37 Invalid attempt from client 45.55.68.101
22/08/2024 22:17:36 Invalid attempt from client 161.35.109.85
22/08/2024 22:17:50 Invalid attempt from client 45.55.68.101
22/08/2024 22:17:53 Invalid attempt from client 161.35.109.85
22/08/2024 22:18:00 Invalid attempt from client 161.35.109.85
22/08/2024 22:18:07 Invalid attempt from client 161.35.109.85
22/08/2024 22:18:12 Invalid attempt from client 161.35.109.85
22/08/2024 22:18:17 Invalid attempt from client 137.184.181.85
22/08/2024 22:18:36 Invalid attempt from client 137.184.181.85
22/08/2024 22:18:40 Invalid attempt from client 161.35.109.85
22/08/2024 22:18:40 Invalid attempt from client 137.184.181.85
22/08/2024 22:18:42 Invalid attempt from client 137.184.181.85
22/08/2024 22:18:46 Invalid attempt from client 161.35.109.85
22/08/2024 22:18:49 Invalid attempt from client 161.35.109.85
22/08/2024 22:18:52 Invalid attempt from client 137.184.181.85
22/08/2024 22:18:53 Invalid attempt from client 161.35.109.85
22/08/2024 22:18:55 Invalid attempt from client 137.184.181.85
22/08/2024 22:19:16 Invalid attempt from client 137.184.181.85
22/08/2024 22:19:17 Invalid attempt from client 161.35.109.85
22/08/2024 22:20:06 Invalid attempt from client 161.35.109.85
22/08/2024 22:20:11 Invalid attempt from client 137.184.181.85
22/08/2024 22:20:22 Invalid attempt from client 107.174.202.131
22/08/2024 22:20:29 Invalid attempt from client 137.184.181.85
22/08/2024 22:20:35 Invalid attempt from client 161.35.109.85
22/08/2024 22:20:38 Invalid attempt from client 137.184.181.85
22/08/2024 22:20:38 Invalid attempt from client 161.35.109.85
22/08/2024 22:20:39 Invalid attempt from client 137.184.181.85
22/08/2024 22:20:46 Invalid attempt from client 161.35.109.85
22/08/2024 22:20:51 Invalid attempt from client 137.184.181.85
22/08/2024 22:20:55 Invalid attempt from client 161.35.109.85
22/08/2024 22:20:56 Invalid attempt from client 137.184.181.85
22/08/2024 22:21:09 Invalid attempt from client 137.184.181.85
22/08/2024 22:21:13 Invalid attempt from client 161.35.109.85
22/08/2024 22:21:15 Invalid attempt from client 137.184.181.85
22/08/2024 22:21:17 Invalid attempt from client 161.35.109.85
22/08/2024 22:21:19 Invalid attempt from client 137.184.181.85
22/08/2024 22:21:23 Invalid attempt from client 161.35.109.85
22/08/2024 22:21:27 Invalid attempt from client 137.184.181.85
22/08/2024 22:21:48 Invalid attempt from client 137.184.181.85
22/08/2024 22:21:51 Invalid attempt from client 161.35.109.85
22/08/2024 22:21:54 Invalid attempt from client 137.184.181.85
22/08/2024 22:21:56 Invalid attempt from client 161.35.109.85
22/08/2024 22:21:56 Invalid attempt from client 137.184.181.85
22/08/2024 22:21:57 Invalid attempt from client 161.35.109.85
22/08/2024 22:21:58 Invalid attempt from client 137.184.181.85
22/08/2024 22:21:59 Invalid attempt from client 161.35.109.85
22/08/2024 22:22:07 Invalid attempt from client 137.184.181.85
22/08/2024 22:22:08 Client 201.41.55.251 disconnected (Interactive) (ID:1)
22/08/2024 22:29:06 Invalid attempt from client 161.35.109.85
22/08/2024 22:29:07 Invalid attempt from client 137.184.181.85
22/08/2024 22:29:09 Invalid attempt from client 137.184.181.85
22/08/2024 22:29:11 Invalid attempt from client 45.55.68.101
22/08/2024 22:29:14 Invalid attempt from client 137.184.181.85
22/08/2024 22:29:17 Invalid attempt from client 45.55.68.101
22/08/2024 22:29:21 Invalid attempt from client 45.55.68.101
22/08/2024 22:29:25 Invalid attempt from client 137.184.181.85
22/08/2024 22:29:30 Invalid attempt from client 161.35.109.85
22/08/2024 22:29:33 Invalid attempt from client 137.184.181.85
22/08/2024 22:29:34 Invalid attempt from client 161.35.109.85
22/08/2024 22:29:36 Invalid attempt from client 107.174.202.131
22/08/2024 22:29:37 Invalid attempt from client 45.55.68.101
22/08/2024 22:29:39 Invalid attempt from client 161.35.109.85
22/08/2024 22:29:41 Invalid attempt from client 137.184.181.85
22/08/2024 22:29:46 Invalid attempt from client 137.184.181.85
22/08/2024 22:29:49 Invalid attempt from client 45.55.68.101
22/08/2024 22:29:51 Invalid attempt from client 45.55.68.101
22/08/2024 22:29:57 Invalid attempt from client 45.55.68.101
22/08/2024 22:30:01 Invalid attempt from client 45.55.68.101
22/08/2024 22:30:04 Invalid attempt from client 137.184.181.85
22/08/2024 22:30:06 Invalid attempt from client 161.35.109.85
22/08/2024 22:30:08 Invalid attempt from client 161.35.109.85
22/08/2024 22:30:10 Invalid attempt from client 137.184.181.85
22/08/2024 22:30:13 Invalid attempt from client 161.35.109.85
22/08/2024 22:30:15 Invalid attempt from client 45.55.68.101
22/08/2024 22:30:16 Invalid attempt from client 137.184.181.85
22/08/2024 22:30:18 Invalid attempt from client 161.35.109.85
22/08/2024 22:30:21 Invalid attempt from client 137.184.181.85
22/08/2024 22:30:24 Invalid attempt from client 137.184.181.85
22/08/2024 22:30:41 Invalid attempt from client 137.184.181.85
22/08/2024 22:30:45 Invalid attempt from client 161.35.109.85
22/08/2024 22:30:50 Invalid attempt from client 137.184.181.85
22/08/2024 22:30:52 Invalid attempt from client 161.35.109.85
22/08/2024 22:30:57 Invalid attempt from client 161.35.109.85
22/08/2024 22:30:59 Invalid attempt from client 137.184.181.85
22/08/2024 22:31:03 Invalid attempt from client 137.184.181.85
22/08/2024 22:31:08 Invalid attempt from client 161.35.109.85
22/08/2024 22:31:18 Invalid attempt from client 137.184.181.85
22/08/2024 22:31:21 Invalid attempt from client 137.184.181.85
22/08/2024 22:31:25 Invalid attempt from client 161.35.109.85
22/08/2024 22:31:28 Invalid attempt from client 137.184.181.85
22/08/2024 22:31:31 Invalid attempt from client 161.35.109.85
22/08/2024 22:31:35 Invalid attempt from client 161.35.109.85
22/08/2024 22:31:37 Invalid attempt from client 137.184.181.85
22/08/2024 22:31:40 Invalid attempt from client 137.184.181.85
22/08/2024 22:31:55 Invalid attempt from client 137.184.181.85
22/08/2024 22:32:04 Invalid attempt from client 161.35.109.85
22/08/2024 22:32:05 Invalid attempt from client 137.184.181.85
22/08/2024 22:32:08 Invalid attempt from client 161.35.109.85
22/08/2024 22:32:08 Invalid attempt from client 161.35.109.85
22/08/2024 22:32:12 Invalid attempt from client 161.35.109.85
22/08/2024 22:32:16 Invalid attempt from client 137.184.181.85
22/08/2024 22:32:18 Invalid attempt from client 137.184.181.85
22/08/2024 22:32:22 Invalid attempt from client 45.55.68.101
22/08/2024 22:32:26 Invalid attempt from client 137.184.181.85
22/08/2024 22:32:35 Invalid attempt from client 137.184.181.85
22/08/2024 22:32:41 Invalid attempt from client 161.35.109.85
22/08/2024 22:32:42 Invalid attempt from client 137.184.181.85
22/08/2024 22:32:45 Invalid attempt from client 161.35.109.85
22/08/2024 22:32:51 Invalid attempt from client 161.35.109.85
22/08/2024 22:32:55 Invalid attempt from client 137.184.181.85
22/08/2024 22:32:59 Invalid attempt from client 137.184.181.85
22/08/2024 22:33:10 Invalid attempt from client 161.35.109.85
22/08/2024 22:33:12 Invalid attempt from client 137.184.181.85
22/08/2024 22:33:17 Invalid attempt from client 161.35.109.85
22/08/2024 22:33:21 Invalid attempt from client 137.184.181.85
22/08/2024 22:33:22 Invalid attempt from client 161.35.109.85
22/08/2024 22:33:26 Invalid attempt from client 137.184.181.85
22/08/2024 22:33:30 Invalid attempt from client 161.35.109.85
22/08/2024 22:33:35 Invalid attempt from client 137.184.181.85
22/08/2024 22:33:39 Invalid attempt from client 137.184.181.85
22/08/2024 22:33:43 Invalid attempt from client 45.55.68.101
22/08/2024 22:33:52 Invalid attempt from client 137.184.181.85
22/08/2024 22:33:56 Invalid attempt from client 161.35.109.85
22/08/2024 22:33:58 Invalid attempt from client 161.35.109.85
22/08/2024 22:34:00 Invalid attempt from client 137.184.181.85
22/08/2024 22:34:08 Invalid attempt from client 161.35.109.85
22/08/2024 22:34:10 Invalid attempt from client 161.35.109.85
22/08/2024 22:34:14 Invalid attempt from client 137.184.181.85
22/08/2024 22:34:18 Invalid attempt from client 137.184.181.85
22/08/2024 22:34:29 Invalid attempt from client 137.184.181.85
22/08/2024 22:34:29 Invalid attempt from client 137.184.181.85
22/08/2024 22:34:34 Invalid attempt from client 161.35.109.85
22/08/2024 22:34:35 Invalid attempt from client 161.35.109.85
22/08/2024 22:34:37 Invalid attempt from client 137.184.181.85
22/08/2024 22:34:48 Invalid attempt from client 161.35.109.85
22/08/2024 22:34:51 Invalid attempt from client 137.184.181.85
22/08/2024 22:34:54 Invalid attempt from client 137.184.181.85
22/08/2024 22:35:09 Invalid attempt from client 45.55.68.101
22/08/2024 22:35:11 Invalid attempt from client 161.35.109.85
22/08/2024 22:35:11 Invalid attempt from client 161.35.109.85
22/08/2024 22:35:14 Invalid attempt from client 161.35.109.85
22/08/2024 22:35:25 Invalid attempt from client 161.35.109.85
22/08/2024 22:35:50 Invalid attempt from client 161.35.109.85
22/08/2024 22:35:52 Invalid attempt from client 161.35.109.85
22/08/2024 22:36:04 Invalid attempt from client 161.35.109.85
22/08/2024 22:36:12 Invalid attempt from client 161.35.109.85
22/08/2024 22:36:29 Invalid attempt from client 161.35.109.85
22/08/2024 22:36:31 Invalid attempt from client 161.35.109.85
22/08/2024 22:36:40 Invalid attempt from client 161.35.109.85
22/08/2024 22:37:00 Invalid attempt from client 45.55.68.101
22/08/2024 22:37:08 Invalid attempt from client 161.35.109.85
22/08/2024 22:49:30 Invalid attempt from client 137.184.181.85
22/08/2024 22:49:32 Invalid attempt from client 137.184.181.85
22/08/2024 22:49:33 Password authentication accepted from 201.41.55.251 (Interactive) (ID:1)
22/08/2024 22:53:57 Invalid attempt from client 45.55.68.101
22/08/2024 22:54:13 Invalid attempt from client 137.184.181.85
22/08/2024 22:54:15 Client 201.41.55.251 disconnected (Interactive) (ID:1)
22/08/2024 22:54:29 Invalid attempt from client 137.184.181.85
22/08/2024 22:57:39 Invalid attempt from client 137.184.181.85
23/08/2024 00:00:20 Invalid attempt from client 161.35.109.85
23/08/2024 00:00:30 Invalid attempt from client 161.35.109.85
23/08/2024 00:00:43 Invalid attempt from client 161.35.109.85
23/08/2024 00:00:52 Invalid attempt from client 161.35.109.85
23/08/2024 00:00:56 Invalid attempt from client 161.35.109.85
23/08/2024 00:01:20 Invalid attempt from client 161.35.109.85
23/08/2024 00:01:25 Invalid attempt from client 45.55.68.101
23/08/2024 00:01:26 Invalid attempt from client 45.55.68.101
23/08/2024 00:01:28 Invalid attempt from client 161.35.109.85
23/08/2024 00:01:32 Invalid attempt from client 161.35.109.85
23/08/2024 00:01:33 Invalid attempt from client 161.35.109.85
23/08/2024 00:01:41 Invalid attempt from client 45.55.68.101
23/08/2024 00:01:43 Invalid attempt from client 45.55.68.101
23/08/2024 00:01:46 Invalid attempt from client 45.55.68.101
23/08/2024 00:01:56 Invalid attempt from client 161.35.109.85
23/08/2024 00:02:03 Invalid attempt from client 45.55.68.101
23/08/2024 00:02:06 Invalid attempt from client 45.55.68.101
23/08/2024 00:02:07 Invalid attempt from client 161.35.109.85
23/08/2024 00:02:12 Invalid attempt from client 161.35.109.85

[Ludovic]

What is your UltraVNC version?
Please update if you have not the latest.

A lot of people try to connect on the machine.

[Rudi De Vos]

https://www.abuseipdb.com/check/161.35.109.85 -- Port scan: 5900/tcp

Use another port the 5900, this usual already solve a lot of issue's

[basso]

There was no point in changing the port. I changed from 5900 to 2000 or 59000, the same happens. I changed the public IP and the problem also continued
Using VNCVIEWER in -listen mode popup windows popup negotiating protocol appears, crashes and terminates

Using VNCSERVER the crash problem does not occur and a file is created mslogon.log

26/08/2024 23:23:39 Invalid attempt from client 161.35.109.85
26/08/2024 23:23:45 Invalid attempt from client 161.35.109.85
26/08/2024 23:23:47 Invalid attempt from client 161.35.109.85
26/08/2024 23:23:51 Invalid attempt from client 45.55.68.101
26/08/2024 23:24:04 Connection received from 192.168.1.48
26/08/2024 23:24:06 Invalid attempt from client 161.35.109.85
26/08/2024 23:24:10 Invalid attempt from client 192.168.1.48
26/08/2024 23:24:19 Invalid attempt from client 161.35.109.85
26/08/2024 23:25:13 Invalid attempt from client 45.55.68.101
26/08/2024 23:26:32 Invalid attempt from client 45.55.68.101
26/08/2024 23:27:12 Invalid attempt from client 107.174.202.131
26/08/2024 23:27:48 Invalid attempt from client 45.55.68.101
26/08/2024 23:29:13 Invalid attempt from client 45.55.68.101
26/08/2024 23:29:26 Invalid attempt from client 161.35.109.85
26/08/2024 23:29:55 Invalid attempt from client 161.35.109.85
26/08/2024 23:29:59 Invalid attempt from client 161.35.109.85
26/08/2024 23:30:01 Invalid attempt from client 161.35.109.85
26/08/2024 23:30:05 Invalid attempt from client 161.35.109.85
26/08/2024 23:30:34 Invalid attempt from client 161.35.109.85
26/08/2024 23:30:40 Invalid attempt from client 161.35.109.85
26/08/2024 23:30:45 Invalid attempt from client 161.35.109.85

[basso]

https://www.abuseipdb.com/check/161.35.109.85 -- Port scan: 5900/tcp

Use another port the 5900, this usual already solve a lot of issue's

Yes, It worked by changing the por. Previous error was in the router configuration

Thank you
Regards
Luis Fernando