Should I be seeing this much activity? in Security

Should I be seeing this much activity? in Security http://www.dslreports.com/forum/r19068318 en Thu, 10 Dec 2009 05:44:28 EDT Thu, 10 Dec 2009 05:44:28 EDT Re: Should I be seeing this much activity? http://www.dslreports.com/forum/remark,19069515 Culvin : I get a massive amount of noise from Shaw too.

]]> http://www.dslreports.com/forum/remark,19069515 Thu, 13 Sep 2007 19:02:12 EDT Re: Should I be seeing this much activity? http://www.dslreports.com/forum/remark,19068621 NetFixer :

said by margaf77

:

So much of it is coming from shawcable

That is of course possible, but since it is trivial (and common) to spoof the source IP in messenger spam UDP packets, Shaw Communications Inc., Shaw Cablesystems G.P., and/or their customers may actually be blameless here.
--
We can never have enough of nature.
We need to witness our own limits transgressed, and some life pasturing freely where we never wander.
Test your firewall.]]> http://www.dslreports.com/forum/remark,19068621 Thu, 13 Sep 2007 16:25:40 EDT Re: Should I be seeing this much activity? http://www.dslreports.com/forum/remark,19068528 Just Basics : 98 percent of what my firewall blocks is from Shaw cable - same ports.]]> http://www.dslreports.com/forum/remark,19068528 Thu, 13 Sep 2007 16:06:19 EDT Re: Should I be seeing this much activity? http://www.dslreports.com/forum/remark,19068467 margaf77 : So much of it is coming from shawcable]]> http://www.dslreports.com/forum/remark,19068467 Thu, 13 Sep 2007 15:56:57 EDT Re: Should I be seeing this much activity? http://www.dslreports.com/forum/remark,19068422 TE : Probably just Messenger noise. As long as your firewall blocks it, I wouldn't worry too much.

»www.linklogger.com/UDP1026.htm]]> http://www.dslreports.com/forum/remark,19068422 Thu, 13 Sep 2007 15:51:28 EDT Re: Should I be seeing this much activity? http://www.dslreports.com/forum/remark,19068419 margaf77 : Ubuntu with ATI has its issues ;)]]> http://www.dslreports.com/forum/remark,19068419 Thu, 13 Sep 2007 15:51:12 EDT Re: Should I be seeing this much activity? http://www.dslreports.com/forum/remark,19068414 NetFixer : Looks pretty normal to me.
I would be more concerned about all the blank areas I see in your screen shot, you may have a serious video controller problem.

Sep 13 13:59:36 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:3803 dst:66.134.0.234:445 Rule: Default deny ^M Sep 13 13:59:38 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:3803 dst:66.134.0.234:445 Rule: Default deny ^M Sep 13 14:01:53 dcs-gw1 Drop UDP packet from WAN src:202.97.238.203:45618 dst:66.134.0.234:1027 Rule: Default deny ^M Sep 13 14:01:53 dcs-gw1 Drop UDP packet from WAN src:202.97.238.203:45618 dst:66.134.0.234:1026 Rule: Default deny ^M Sep 13 14:02:55 dcs-gw2 Drop UDP packet from WAN src:58.244.205.82:39273 dst:74.245.184.227:1027 Rule: Default deny ^M Sep 13 14:02:55 dcs-gw2 Drop UDP packet from WAN src:58.244.205.82:39271 dst:74.245.184.227:1026 Rule: Default deny ^M Sep 13 14:03:16 dcs-gw1 Drop TCP packet from WAN src:64.187.96.17:16357 dst:66.134.0.234:10000 Rule: Default deny ^M Sep 13 14:03:29 dcs-gw1 Drop UDP packet from WAN src:221.208.208.97:42116 dst:66.134.0.234:1027 Rule: Default deny ^M Sep 13 14:03:29 dcs-gw1 Drop UDP packet from WAN src:221.208.208.97:42116 dst:66.134.0.234:1026 Rule: Default deny ^M Sep 13 14:12:28 dcs-gw1 Drop TCP packet from WAN src:64.105.208.141:4570 dst:66.134.0.234:445 Rule: Default deny ^M Sep 13 14:12:31 dcs-gw1 Drop TCP packet from WAN src:64.105.208.141:4570 dst:66.134.0.234:445 Rule: Default deny ^M Sep 13 14:15:56 dcs-gw1 Drop TCP packet from WAN src:218.10.111.119:12200 dst:66.134.0.234:7212 Rule: Default deny ^M Sep 13 14:18:33 dcs-gw1 Drop TCP packet from WAN src:63.203.86.154:2814 dst:66.134.0.234:2967 Rule: Default deny ^M Sep 13 14:18:42 dcs-gw1 last message repeated 2 timesSep 13 14:19:15 dcs-gw1 Drop UDP packet from WAN src:221.208.208.103:60639 dst:66.134.0.234:1027 Rule: Default deny ^M Sep 13 14:19:15 dcs-gw1 Drop UDP packet from WAN src:221.208.208.103:60639 dst:66.134.0.234:1026 Rule: Default deny ^M Sep 13 14:20:20 dcs-gw1 Drop UDP packet from WAN src:218.11.132.40:4179 dst:66.134.0.234:1434 Rule: Default deny ^M Sep 13 14:20:22 dcs-gw1 Drop UDP packet from WAN src:221.208.208.100:41256 dst:66.134.0.234:1026 Rule: Default deny ^M Sep 13 14:22:52 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:4419 dst:66.134.0.234:445 Rule: Default deny ^M Sep 13 14:22:55 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:4419 dst:66.134.0.234:445 Rule: Default deny ^M Sep 13 14:23:50 dcs-gw1 Drop TCP packet from WAN src:66.159.194.163:3063 dst:66.134.0.234:139 Rule: Default deny ^M Sep 13 14:23:53 dcs-gw1 Drop TCP packet from WAN src:66.159.194.163:3063 dst:66.134.0.234:139 Rule: Default deny ^M Sep 13 14:25:39 dcs-gw1 Drop TCP packet from WAN src:66.134.77.93:4221 dst:66.134.0.234:445 Rule: Default deny ^M Sep 13 14:25:43 dcs-gw1 Drop TCP packet from WAN src:66.134.77.93:4221 dst:66.134.0.234:445 Rule: Default deny ^M Sep 13 14:26:51 dcs-gw1 Drop UDP packet from WAN src:202.97.238.200:53146 dst:66.134.0.234:1027 Rule: Default deny ^M Sep 13 14:27:27 dcs-gw1 Drop UDP packet from WAN src:142.48.204.11:30453 dst:66.134.0.234:1026 Rule: Default deny ^M Sep 13 14:28:15 dcs-gw1 Drop UDP packet from WAN src:221.208.208.100:43648 dst:66.134.0.234:1026 Rule: Default deny ^M Sep 13 14:28:18 dcs-gw2 Drop TCP packet from WAN src:205.188.159.119:143 dst:74.245.184.227:60445 Rule: Default deny ^M Sep 13 14:28:43 dcs-gw2 last message repeated 7 timesSep 13 14:29:09 dcs-gw2 Drop TCP packet from WAN src:205.188.159.119:143 dst:74.245.184.227:60445 Rule: Default deny ^M Sep 13 14:29:59 dcs-gw2 Drop TCP packet from WAN src:205.188.159.119:143 dst:74.245.184.227:60445 Rule: Default deny ^M Sep 13 14:30:51 dcs-gw2 Drop TCP packet from WAN src:61.152.160.66:6000 dst:74.245.184.227:2967 Rule: Default deny ^M Sep 13 14:33:00 dcs-gw2 Drop UDP packet from WAN src:43.67.234.120:0 dst:74.245.184.227:1026 Rule: Default deny ^M Sep 13 14:33:58 dcs-gw1 Drop TCP packet from WAN src:64.105.208.141:4084 dst:66.134.0.234:445 Rule: Default deny ^M Sep 13 14:34:00 dcs-gw1 Drop TCP packet from WAN src:64.105.208.141:4084 dst:66.134.0.234:445 Rule: Default deny ^M Sep 13 14:38:29 dcs-gw1 Drop UDP packet from WAN src:202.97.238.200:57812 dst:66.134.0.234:1026 Rule: Default deny ^M Sep 13 14:38:29 dcs-gw1 Drop UDP packet from WAN src:202.97.238.200:57812 dst:66.134.0.234:1027 Rule: Default deny ^M Sep 13 14:40:25 dcs-gw1 Drop UDP packet from WAN src:221.209.110.8:51446 dst:66.134.0.234:1027 Rule: Default deny ^M Sep 13 14:40:25 dcs-gw1 Drop UDP packet from WAN src:221.209.110.8:51446 dst:66.134.0.234:1026 Rule: Default deny ^M Sep 13 14:43:28 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:3064 dst:66.134.0.234:445 Rule: Default deny ^M Sep 13 14:43:31 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:3064 dst:66.134.0.234:445 Rule: Default deny ^M

--
We can never have enough of nature.
We need to witness our own limits transgressed, and some life pasturing freely where we never wander.
Test your firewall.]]> http://www.dslreports.com/forum/remark,19068414 Thu, 13 Sep 2007 15:50:18 EDT Should I be seeing this much activity? http://www.dslreports.com/forum/remark,19068318 margaf77 : My router died today so I directly connected to my cable modem until I have time to get a new one. I am seeing a huge amount of activity on my firewall. It sure seems like a lot of people are out "checking doorknobs" and has certainly given me a new appreciation for the added protection of my router.

]]> http://www.dslreports.com/forum/remark,19068318 Thu, 13 Sep 2007 15:36:03 EDT