Should I be seeing this much activity? - dslreports.com

republican-creole			Search:
	login · register

	All Forums		Hot Topics		Gallery

how-to block ads

Forums » Up and Running » Security » Security » Should I be seeing this much activity?


Search Topic:	Uniqs: 1150	Share Topic:	RSS topic:	toggle: flat / full normal / watch	Posting:	Post a:	Post a:

Links: ·Hijack This logs? ·Panda Free Tools ·Vundo Removal

c7.statcounter.com »
« Media Player Classic AVI File Processing Buffer Overflow

Author

All Replies

margaf77

join:2000-12-22
Bayonne, NJ

·Optimum Online

·RoadRunner Cable

Should I be seeing this much activity?

Click for full size

My router died today so I directly connected to my cable modem until I have time to get a new one. I am seeing a huge amount of activity on my firewall. It sure seems like a lot of people are out "checking doorknobs" and has certainly given me a new appreciation for the added protection of my router.

to forum · permalink ·

· 2007-09-13 15:36:03 ·

NetFixer
Freedom is NOT Free
Premium
join:2004-06-24
Murfreesboro, TN

·Cingular Wireless

·AT&T CallVantage

·AT&T Southeast

Looks pretty normal to me.
I would be more concerned about all the blank areas I see in your screen shot, you may have a serious video controller problem.

Sep 13 13:59:36 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:3803 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 13:59:38 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:3803 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:01:53 dcs-gw1 Drop UDP packet from WAN src:202.97.238.203:45618 dst:66.134.0.234:1027 Rule: Default deny ^M 
Sep 13 14:01:53 dcs-gw1 Drop UDP packet from WAN src:202.97.238.203:45618 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:02:55 dcs-gw2 Drop UDP packet from WAN src:58.244.205.82:39273 dst:74.245.184.227:1027 Rule: Default deny ^M 
Sep 13 14:02:55 dcs-gw2 Drop UDP packet from WAN src:58.244.205.82:39271 dst:74.245.184.227:1026 Rule: Default deny ^M 
Sep 13 14:03:16 dcs-gw1 Drop TCP packet from WAN src:64.187.96.17:16357 dst:66.134.0.234:10000 Rule: Default deny ^M 
Sep 13 14:03:29 dcs-gw1 Drop UDP packet from WAN src:221.208.208.97:42116 dst:66.134.0.234:1027 Rule: Default deny ^M 
Sep 13 14:03:29 dcs-gw1 Drop UDP packet from WAN src:221.208.208.97:42116 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:12:28 dcs-gw1 Drop TCP packet from WAN src:64.105.208.141:4570 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:12:31 dcs-gw1 Drop TCP packet from WAN src:64.105.208.141:4570 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:15:56 dcs-gw1 Drop TCP packet from WAN src:218.10.111.119:12200 dst:66.134.0.234:7212 Rule: Default deny ^M 
Sep 13 14:18:33 dcs-gw1 Drop TCP packet from WAN src:63.203.86.154:2814 dst:66.134.0.234:2967 Rule: Default deny ^M 
Sep 13 14:18:42 dcs-gw1 last message repeated 2 times
Sep 13 14:19:15 dcs-gw1 Drop UDP packet from WAN src:221.208.208.103:60639 dst:66.134.0.234:1027 Rule: Default deny ^M 
Sep 13 14:19:15 dcs-gw1 Drop UDP packet from WAN src:221.208.208.103:60639 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:20:20 dcs-gw1 Drop UDP packet from WAN src:218.11.132.40:4179 dst:66.134.0.234:1434 Rule: Default deny ^M 
Sep 13 14:20:22 dcs-gw1 Drop UDP packet from WAN src:221.208.208.100:41256 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:22:52 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:4419 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:22:55 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:4419 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:23:50 dcs-gw1 Drop TCP packet from WAN src:66.159.194.163:3063 dst:66.134.0.234:139 Rule: Default deny ^M 
Sep 13 14:23:53 dcs-gw1 Drop TCP packet from WAN src:66.159.194.163:3063 dst:66.134.0.234:139 Rule: Default deny ^M 
Sep 13 14:25:39 dcs-gw1 Drop TCP packet from WAN src:66.134.77.93:4221 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:25:43 dcs-gw1 Drop TCP packet from WAN src:66.134.77.93:4221 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:26:51 dcs-gw1 Drop UDP packet from WAN src:202.97.238.200:53146 dst:66.134.0.234:1027 Rule: Default deny ^M 
Sep 13 14:27:27 dcs-gw1 Drop UDP packet from WAN src:142.48.204.11:30453 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:28:15 dcs-gw1 Drop UDP packet from WAN src:221.208.208.100:43648 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:28:18 dcs-gw2 Drop TCP packet from WAN src:205.188.159.119:143 dst:74.245.184.227:60445 Rule: Default deny ^M 
Sep 13 14:28:43 dcs-gw2 last message repeated 7 times
Sep 13 14:29:09 dcs-gw2 Drop TCP packet from WAN src:205.188.159.119:143 dst:74.245.184.227:60445 Rule: Default deny ^M 
Sep 13 14:29:59 dcs-gw2 Drop TCP packet from WAN src:205.188.159.119:143 dst:74.245.184.227:60445 Rule: Default deny ^M 
Sep 13 14:30:51 dcs-gw2 Drop TCP packet from WAN src:61.152.160.66:6000 dst:74.245.184.227:2967 Rule: Default deny ^M 
Sep 13 14:33:00 dcs-gw2 Drop UDP packet from WAN src:43.67.234.120:0 dst:74.245.184.227:1026 Rule: Default deny ^M 
Sep 13 14:33:58 dcs-gw1 Drop TCP packet from WAN src:64.105.208.141:4084 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:34:00 dcs-gw1 Drop TCP packet from WAN src:64.105.208.141:4084 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:38:29 dcs-gw1 Drop UDP packet from WAN src:202.97.238.200:57812 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:38:29 dcs-gw1 Drop UDP packet from WAN src:202.97.238.200:57812 dst:66.134.0.234:1027 Rule: Default deny ^M 
Sep 13 14:40:25 dcs-gw1 Drop UDP packet from WAN src:221.209.110.8:51446 dst:66.134.0.234:1027 Rule: Default deny ^M 
Sep 13 14:40:25 dcs-gw1 Drop UDP packet from WAN src:221.209.110.8:51446 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:43:28 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:3064 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:43:31 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:3064 dst:66.134.0.234:445 Rule: Default deny ^M

--
We can never have enough of nature.
We need to witness our own limits transgressed, and some life pasturing freely where we never wander.
Test your firewall.

to forum · permalink ·

· 2007-09-13 15:50:18 ·

margaf77

join:2000-12-22
Bayonne, NJ

Ubuntu with ATI has its issues

to forum · permalink ·

· 2007-09-13 15:51:12 ·

TE
I must crunch

join:2006-05-07
Brea, CA
clubs:

reply to margaf77
Probably just Messenger noise. As long as your firewall blocks it, I wouldn't worry too much.

»www.linklogger.com/UDP1026.htm

to forum · permalink ·

· 2007-09-13 15:51:28 ·

margaf77

join:2000-12-22
Bayonne, NJ

So much of it is coming from shawcable

to forum · permalink ·

· 2007-09-13 15:56:57 ·

Just Basics

join:2003-06-08
Painter, VA

reply to margaf77
98 percent of what my firewall blocks is from Shaw cable - same ports.

to forum · permalink ·

· 2007-09-13 16:06:19 ·

NetFixer
Freedom is NOT Free
Premium
join:2004-06-24
Murfreesboro, TN

·Cingular Wireless

·AT&T CallVantage

·AT&T Southeast

reply to margaf77

said by margaf77

:

So much of it is coming from shawcable

That is of course possible, but since it is trivial (and common) to spoof the source IP in messenger spam UDP packets, Shaw Communications Inc., Shaw Cablesystems G.P., and/or their customers may actually be blameless here.
--
We can never have enough of nature.
We need to witness our own limits transgressed, and some life pasturing freely where we never wander.
Test your firewall.

to forum · permalink ·

· 2007-09-13 16:25:40 ·

Culvin

join:2004-07-31
Colorado Springs, CO

reply to margaf77

Click for full size

I get a massive amount of noise from Shaw too.

to forum · permalink ·

· 2007-09-13 19:02:12 ·

Topic: Follow · Sitemark · Mark Unread

Forums » Up and Running » Security » Security	c7.statcounter.com » « Media Player Classic AVI File Processing Buffer Overflow


Tuesday, 10-Nov 07:38:14	Terms of Use \| Privacy Policy \| Hosting by www.nac.net - DSL,Hosting & Co-lo \| feedback \| contact over 10 years online! © 1999-2009 dslreports.com. page compression OFF

Most commented news this week
· [83] VoIP Over 3G Still Not Working For iPhone
· [83] Verizon Keeps Swinging At AT&T
· [33] Bill Would Force ISPs To Block Financial Scams
· [24] Mediacom Hints At 50, 100 Mbps Speeds
· [14] Clearwire To Get Another $1.5 Billion
· [11] Monday Evening Links
· [9] 15 States Have Now Gotten Broadband Mapping Money
· [6] AT&T Launching New 7.2 Mbps 3G Modem

Most people now reading
· Windows 7 boot manager editing questions [Microsoft Help]
· 60 Minutes piece on cyber security last night [Security]
· [Internet] CRTC confirms throttling 10 hours per day [Bell Canada]
· How in the world am I going to get into college? [General Questions]
· Framed for child porn 151; by a PC virus [Security]
· Looking to adopt a new *nix [All Things Unix]
· [ Classes] 3.2.2 Rogue [World of Warcraft]
· Connecting to Google Voice Via SIP [VOIP Tech Chat]
· Google Has Acquired Gizmo5 [VOIP Tech Chat]