I found following in my Console on MBA 10.13

Stealth Mode connection attempt to UDP from    
Stealth Mode connection attempt to UDP from    
Stealth Mode connection attempt to UDP from

I know the is Google DNS server that I use.

The is my en0 IP.

The Host file looks like this

Host Database

# localhost is used to configure the loopback interface
# when the system is booting.  Do not change this entry.   localhost broadcasthost
::1             localhost 
fe80::1%lo0 localhost

I also found one of the IP actualy leads to a weird page. http://foro.euskaltel.com/Thread-Test-de-Velocidad-Internet?page=88

  • If your internal IP points to an outside host/domain, there is something going on with your machine. It could be in your hosts file, you could be have your own DNS server up and running or some other service that is resolving that IP/port to that particular page. – Allan Oct 19 '18 at 22:01
  • The title is three questions. That seems a little broad for someone who is a veteran user. Can you pick one if you want answers other than your self answer (which is greatly appreciated if you have sussed it all out now) – bmike Oct 19 '18 at 23:22
  • @bmike ok fixed, those are the same questions, (Who or What) = Why ! and the Post is very detailed with information. – Ruskes Oct 19 '18 at 23:40
  • I really like that edit. Thanks for being open to a suggestion. Hopefully it reverses the one vote deficit. – bmike Oct 19 '18 at 23:44

The request came from which is Google's Public Domain Name Server to my IP 192.xxx.xx

Google is probably responding to a request from my computer and my computer thinks the response is stealth connection attempt.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .