Should I be seeing this much activity?

Author

All Replies

margaf77

join:2000-12-22
Bayonne, NJ

Reviews:

·Verizon FiOS

·Optimum Online

My router died today so I directly connected to my cable modem until I have time to get a new one. I am seeing a huge amount of activity on my firewall. It sure seems like a lot of people are out "checking doorknobs" and has certainly given me a new appreciation for the added protection of my router.

to forum · permalink · 2007-09-13 15:36:03 ·

NetFixer
Freedom is NOT free
Premium
join:2004-06-24
The 'Boro

Reviews:

·Vonage

·Cingular Wireless

·Comcast

·AT&T Southeast

Looks pretty normal to me.
I would be more concerned about all the blank areas I see in your screen shot, you may have a serious video controller problem.

Sep 13 13:59:36 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:3803 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 13:59:38 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:3803 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:01:53 dcs-gw1 Drop UDP packet from WAN src:202.97.238.203:45618 dst:66.134.0.234:1027 Rule: Default deny ^M 
Sep 13 14:01:53 dcs-gw1 Drop UDP packet from WAN src:202.97.238.203:45618 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:02:55 dcs-gw2 Drop UDP packet from WAN src:58.244.205.82:39273 dst:74.245.184.227:1027 Rule: Default deny ^M 
Sep 13 14:02:55 dcs-gw2 Drop UDP packet from WAN src:58.244.205.82:39271 dst:74.245.184.227:1026 Rule: Default deny ^M 
Sep 13 14:03:16 dcs-gw1 Drop TCP packet from WAN src:64.187.96.17:16357 dst:66.134.0.234:10000 Rule: Default deny ^M 
Sep 13 14:03:29 dcs-gw1 Drop UDP packet from WAN src:221.208.208.97:42116 dst:66.134.0.234:1027 Rule: Default deny ^M 
Sep 13 14:03:29 dcs-gw1 Drop UDP packet from WAN src:221.208.208.97:42116 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:12:28 dcs-gw1 Drop TCP packet from WAN src:64.105.208.141:4570 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:12:31 dcs-gw1 Drop TCP packet from WAN src:64.105.208.141:4570 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:15:56 dcs-gw1 Drop TCP packet from WAN src:218.10.111.119:12200 dst:66.134.0.234:7212 Rule: Default deny ^M 
Sep 13 14:18:33 dcs-gw1 Drop TCP packet from WAN src:63.203.86.154:2814 dst:66.134.0.234:2967 Rule: Default deny ^M 
Sep 13 14:18:42 dcs-gw1 last message repeated 2 times
Sep 13 14:19:15 dcs-gw1 Drop UDP packet from WAN src:221.208.208.103:60639 dst:66.134.0.234:1027 Rule: Default deny ^M 
Sep 13 14:19:15 dcs-gw1 Drop UDP packet from WAN src:221.208.208.103:60639 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:20:20 dcs-gw1 Drop UDP packet from WAN src:218.11.132.40:4179 dst:66.134.0.234:1434 Rule: Default deny ^M 
Sep 13 14:20:22 dcs-gw1 Drop UDP packet from WAN src:221.208.208.100:41256 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:22:52 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:4419 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:22:55 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:4419 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:23:50 dcs-gw1 Drop TCP packet from WAN src:66.159.194.163:3063 dst:66.134.0.234:139 Rule: Default deny ^M 
Sep 13 14:23:53 dcs-gw1 Drop TCP packet from WAN src:66.159.194.163:3063 dst:66.134.0.234:139 Rule: Default deny ^M 
Sep 13 14:25:39 dcs-gw1 Drop TCP packet from WAN src:66.134.77.93:4221 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:25:43 dcs-gw1 Drop TCP packet from WAN src:66.134.77.93:4221 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:26:51 dcs-gw1 Drop UDP packet from WAN src:202.97.238.200:53146 dst:66.134.0.234:1027 Rule: Default deny ^M 
Sep 13 14:27:27 dcs-gw1 Drop UDP packet from WAN src:142.48.204.11:30453 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:28:15 dcs-gw1 Drop UDP packet from WAN src:221.208.208.100:43648 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:28:18 dcs-gw2 Drop TCP packet from WAN src:205.188.159.119:143 dst:74.245.184.227:60445 Rule: Default deny ^M 
Sep 13 14:28:43 dcs-gw2 last message repeated 7 times
Sep 13 14:29:09 dcs-gw2 Drop TCP packet from WAN src:205.188.159.119:143 dst:74.245.184.227:60445 Rule: Default deny ^M 
Sep 13 14:29:59 dcs-gw2 Drop TCP packet from WAN src:205.188.159.119:143 dst:74.245.184.227:60445 Rule: Default deny ^M 
Sep 13 14:30:51 dcs-gw2 Drop TCP packet from WAN src:61.152.160.66:6000 dst:74.245.184.227:2967 Rule: Default deny ^M 
Sep 13 14:33:00 dcs-gw2 Drop UDP packet from WAN src:43.67.234.120:0 dst:74.245.184.227:1026 Rule: Default deny ^M 
Sep 13 14:33:58 dcs-gw1 Drop TCP packet from WAN src:64.105.208.141:4084 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:34:00 dcs-gw1 Drop TCP packet from WAN src:64.105.208.141:4084 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:38:29 dcs-gw1 Drop UDP packet from WAN src:202.97.238.200:57812 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:38:29 dcs-gw1 Drop UDP packet from WAN src:202.97.238.200:57812 dst:66.134.0.234:1027 Rule: Default deny ^M 
Sep 13 14:40:25 dcs-gw1 Drop UDP packet from WAN src:221.209.110.8:51446 dst:66.134.0.234:1027 Rule: Default deny ^M 
Sep 13 14:40:25 dcs-gw1 Drop UDP packet from WAN src:221.209.110.8:51446 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:43:28 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:3064 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:43:31 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:3064 dst:66.134.0.234:445 Rule: Default deny ^M

--
We can never have enough of nature.
We need to witness our own limits transgressed, and some life pasturing freely where we never wander.
Test your firewall.

to forum · permalink · 2007-09-13 15:50:18 ·

margaf77

join:2000-12-22
Bayonne, NJ

1 edit

Ubuntu with ATI has its issues

to forum · permalink · 2007-09-13 15:51:12 ·

TE
I must crunch

join:2006-05-07
Yorba Linda, CA

reply to margaf77
Probably just Messenger noise. As long as your firewall blocks it, I wouldn't worry too much.

»www.linklogger.com/UDP1026.htm

to forum · permalink · 2007-09-13 15:51:28 ·

margaf77

join:2000-12-22
Bayonne, NJ

So much of it is coming from shawcable

to forum · permalink · 2007-09-13 15:56:57 ·

Just Basics

join:2003-06-08
Painter, VA

reply to margaf77
98 percent of what my firewall blocks is from Shaw cable - same ports.

to forum · permalink · 2007-09-13 16:06:19 ·

NetFixer
Freedom is NOT free
Premium
join:2004-06-24
The 'Boro

Reviews:

·Vonage

·Cingular Wireless

·Comcast

·AT&T Southeast

reply to margaf77

said by margaf77:

So much of it is coming from shawcable

That is of course possible, but since it is trivial (and common) to spoof the source IP in messenger spam UDP packets, Shaw Communications Inc., Shaw Cablesystems G.P., and/or their customers may actually be blameless here.
--
We can never have enough of nature.
We need to witness our own limits transgressed, and some life pasturing freely where we never wander.
Test your firewall.

to forum · permalink · 2007-09-13 16:25:40 ·

Culvin

join:2004-07-31
Colorado Springs, CO

reply to margaf77

I get a massive amount of noise from Shaw too.

to forum · permalink · 2007-09-13 19:02:12 ·

Broadband Tech > Security > Security > Should I be seeing this much activity?

Should I be seeing this much activity?