
Entries in "Access" which I've not created myself
This morning, under "Access" I've found several connections which have not been created by myself:
These are the funny entries:
Name:WIN-U9ELNVPPAD0
Organization:
Hosts Connected:
Guests Connected:
Guest Last Connected:2h 48m
Logged On User: WIN-U9ELNVPPAD0
Idle Time:2h 54m
Machine:WORKGROUP\WIN-U9ELNVPPAD0
Operating System:Windows 7 Professional (6.1.7601)
Processor(s):Intel(R) Xeon(R) CPU X5550 @ 2.67GHz (1 virtual)
Available Memory:1635 MB / 2047 MB
Network Address:80.130.94.223
Client Version:6.6.18120.6697
Now
12-12 08:07:19
12-12 05:24:43
12-12 05:21:22
12-12 05:21:22
Guest
Name:ODOMTDWGTKC
Organization:
Hosts Connected:
Guests Connected:
Guest Last Connected:2h 52m
Logged On User:ODOMTDWGTKC\Administrator
Idle Time:2h 54m
Machine:WORKGROUP\ODOMTDWGTKC
Operating System:Windows 7 Professional (6.1.7601)
Processor(s):Intel(R) Xeon(R) CPU E5-2690 0 @ 2.90GHz (2 virtual)
Available Memory:1035 MB / 2047 MB
Network Address:80.130.94.223
Client Version:6.6.18120.6697
Now
12-12 08:07:28
12-12 05:24:09
12-12 05:21:40
12-12 05:21:40
Guest
Name:
Organization:
Hosts Connected:
Guests Connected:
Guest Last Connected:4h 4m
Logged On User:
Idle Time:
Machine:
Operating System:
Processor(s):
Available Memory:
Network Address:71.138.129.33
Client Version:6.6.18120.6697
Now
12-12 08:07:10
12-12 04:11:36
12-12 04:08:22
Guest
Answer


My only valid client is WIN8DEV2, which I've created myself. The rest is what?

It is likely that those are sandbox machines used by various virus scanners. (See this article: https://docs.connectwise.com/ConnectWise_Control_Documentation/Technical_support_bulletins/Unknown_machines_appearing_in_list_of_access_sessions_on_Host_page)

thank you very much for clearing that Eric Davis!
I feel a little bit better now :)

Hmm, this morning I ended all sessions, but now I even got more. Some seem to have real (including Polish) usernames. This has not happened before any time in the last 3 months, so it does still worry me a bit.

I mean I have not even connected during the last 10 hours. (though I was logged in)
Customer support service by UserEcho
It is likely that those are sandbox machines used by various virus scanners. (See this article: https://docs.connectwise.com/ConnectWise_Control_Documentation/Technical_support_bulletins/Unknown_machines_appearing_in_list_of_access_sessions_on_Host_page)