2015-07-01

Yes, this is almost certainly a sign that your machine has been compromised. I believe that this IP is that of a known spamming network. You can take a look here:
http://www.reputationauthority.org/look ... mit=Search

You can see on the right side it says:
DNS Block Lists:
dnsbl1.dnsbl.borderware.com
dnsbl2.dnsbl.borderware.com
dnsbl3.dnsbl.borderware.com
dul.dnsbl.borderware.com

This means that IP has been blocked for sending spam.

SSHD is not for screen sharing, it's for securely connecting to your machine remotely (through a shell). That means they have gained access to your computer, and are probably using it to send spam.

I can't advise much further than to reinstall a fresh copy of OS-X. If you choose to do otherwise, I would block whatever connects to your computer through SSH for the foreseeable future, and figure out how they created the backdoor on your machine.

Statistics: Posted by antlong — Wed Jul 01, 2015 6:23 pm

Show more