Should I be seeing this much activity? - dslreports.com

			Search:
	login · register

	All Forums		Hot Topics		Gallery

how-to block ads

Forums » Up and Running » Security » Security » Should I be seeing this much activity?


Search Topic:	Uniqs: 1164	Share Topic:	RSS topic:	toggle: flat / full normal / watch	Posting:	Post a:	Post a:

Links: ·Hijack This logs? ·Panda Free Tools ·Vundo Removal

c7.statcounter.com »
« Media Player Classic AVI File Processing Buffer Overflow

Author

All Replies

margaf77

join:2000-12-22
Bayonne, NJ

·Optimum Online

·RoadRunner Cable

Should I be seeing this much activity?

Click for full size

My router died today so I directly connected to my cable modem until I have time to get a new one. I am seeing a huge amount of activity on my firewall. It sure seems like a lot of people are out "checking doorknobs" and has certainly given me a new appreciation for the added protection of my router.

to forum · permalink ·

· 2007-09-13 15:36:03 ·

NetFixer
Freedom is NOT Free
Premium
join:2004-06-24
Murfreesboro, TN

·AT&T Southeast

·Cingular Wireless

·AT&T CallVantage

Looks pretty normal to me.
I would be more concerned about all the blank areas I see in your screen shot, you may have a serious video controller problem.

Sep 13 13:59:36 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:3803 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 13:59:38 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:3803 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:01:53 dcs-gw1 Drop UDP packet from WAN src:202.97.238.203:45618 dst:66.134.0.234:1027 Rule: Default deny ^M 
Sep 13 14:01:53 dcs-gw1 Drop UDP packet from WAN src:202.97.238.203:45618 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:02:55 dcs-gw2 Drop UDP packet from WAN src:58.244.205.82:39273 dst:74.245.184.227:1027 Rule: Default deny ^M 
Sep 13 14:02:55 dcs-gw2 Drop UDP packet from WAN src:58.244.205.82:39271 dst:74.245.184.227:1026 Rule: Default deny ^M 
Sep 13 14:03:16 dcs-gw1 Drop TCP packet from WAN src:64.187.96.17:16357 dst:66.134.0.234:10000 Rule: Default deny ^M 
Sep 13 14:03:29 dcs-gw1 Drop UDP packet from WAN src:221.208.208.97:42116 dst:66.134.0.234:1027 Rule: Default deny ^M 
Sep 13 14:03:29 dcs-gw1 Drop UDP packet from WAN src:221.208.208.97:42116 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:12:28 dcs-gw1 Drop TCP packet from WAN src:64.105.208.141:4570 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:12:31 dcs-gw1 Drop TCP packet from WAN src:64.105.208.141:4570 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:15:56 dcs-gw1 Drop TCP packet from WAN src:218.10.111.119:12200 dst:66.134.0.234:7212 Rule: Default deny ^M 
Sep 13 14:18:33 dcs-gw1 Drop TCP packet from WAN src:63.203.86.154:2814 dst:66.134.0.234:2967 Rule: Default deny ^M 
Sep 13 14:18:42 dcs-gw1 last message repeated 2 times
Sep 13 14:19:15 dcs-gw1 Drop UDP packet from WAN src:221.208.208.103:60639 dst:66.134.0.234:1027 Rule: Default deny ^M 
Sep 13 14:19:15 dcs-gw1 Drop UDP packet from WAN src:221.208.208.103:60639 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:20:20 dcs-gw1 Drop UDP packet from WAN src:218.11.132.40:4179 dst:66.134.0.234:1434 Rule: Default deny ^M 
Sep 13 14:20:22 dcs-gw1 Drop UDP packet from WAN src:221.208.208.100:41256 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:22:52 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:4419 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:22:55 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:4419 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:23:50 dcs-gw1 Drop TCP packet from WAN src:66.159.194.163:3063 dst:66.134.0.234:139 Rule: Default deny ^M 
Sep 13 14:23:53 dcs-gw1 Drop TCP packet from WAN src:66.159.194.163:3063 dst:66.134.0.234:139 Rule: Default deny ^M 
Sep 13 14:25:39 dcs-gw1 Drop TCP packet from WAN src:66.134.77.93:4221 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:25:43 dcs-gw1 Drop TCP packet from WAN src:66.134.77.93:4221 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:26:51 dcs-gw1 Drop UDP packet from WAN src:202.97.238.200:53146 dst:66.134.0.234:1027 Rule: Default deny ^M 
Sep 13 14:27:27 dcs-gw1 Drop UDP packet from WAN src:142.48.204.11:30453 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:28:15 dcs-gw1 Drop UDP packet from WAN src:221.208.208.100:43648 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:28:18 dcs-gw2 Drop TCP packet from WAN src:205.188.159.119:143 dst:74.245.184.227:60445 Rule: Default deny ^M 
Sep 13 14:28:43 dcs-gw2 last message repeated 7 times
Sep 13 14:29:09 dcs-gw2 Drop TCP packet from WAN src:205.188.159.119:143 dst:74.245.184.227:60445 Rule: Default deny ^M 
Sep 13 14:29:59 dcs-gw2 Drop TCP packet from WAN src:205.188.159.119:143 dst:74.245.184.227:60445 Rule: Default deny ^M 
Sep 13 14:30:51 dcs-gw2 Drop TCP packet from WAN src:61.152.160.66:6000 dst:74.245.184.227:2967 Rule: Default deny ^M 
Sep 13 14:33:00 dcs-gw2 Drop UDP packet from WAN src:43.67.234.120:0 dst:74.245.184.227:1026 Rule: Default deny ^M 
Sep 13 14:33:58 dcs-gw1 Drop TCP packet from WAN src:64.105.208.141:4084 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:34:00 dcs-gw1 Drop TCP packet from WAN src:64.105.208.141:4084 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:38:29 dcs-gw1 Drop UDP packet from WAN src:202.97.238.200:57812 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:38:29 dcs-gw1 Drop UDP packet from WAN src:202.97.238.200:57812 dst:66.134.0.234:1027 Rule: Default deny ^M 
Sep 13 14:40:25 dcs-gw1 Drop UDP packet from WAN src:221.209.110.8:51446 dst:66.134.0.234:1027 Rule: Default deny ^M 
Sep 13 14:40:25 dcs-gw1 Drop UDP packet from WAN src:221.209.110.8:51446 dst:66.134.0.234:1026 Rule: Default deny ^M 
Sep 13 14:43:28 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:3064 dst:66.134.0.234:445 Rule: Default deny ^M 
Sep 13 14:43:31 dcs-gw1 Drop TCP packet from WAN src:66.167.71.60:3064 dst:66.134.0.234:445 Rule: Default deny ^M

--
We can never have enough of nature.
We need to witness our own limits transgressed, and some life pasturing freely where we never wander.
Test your firewall.

to forum · permalink ·

· 2007-09-13 15:50:18 ·

margaf77

join:2000-12-22
Bayonne, NJ

Ubuntu with ATI has its issues

to forum · permalink ·

· 2007-09-13 15:51:12 ·

TE
I must crunch

join:2006-05-07
Brea, CA
clubs:

reply to margaf77
Probably just Messenger noise. As long as your firewall blocks it, I wouldn't worry too much.

»www.linklogger.com/UDP1026.htm

to forum · permalink ·

· 2007-09-13 15:51:28 ·

margaf77

join:2000-12-22
Bayonne, NJ

So much of it is coming from shawcable

to forum · permalink ·

· 2007-09-13 15:56:57 ·

Just Basics

join:2003-06-08
Painter, VA

reply to margaf77
98 percent of what my firewall blocks is from Shaw cable - same ports.

to forum · permalink ·

· 2007-09-13 16:06:19 ·

NetFixer
Freedom is NOT Free
Premium
join:2004-06-24
Murfreesboro, TN

·AT&T Southeast

·Cingular Wireless

·AT&T CallVantage

reply to margaf77

said by margaf77

:

So much of it is coming from shawcable

That is of course possible, but since it is trivial (and common) to spoof the source IP in messenger spam UDP packets, Shaw Communications Inc., Shaw Cablesystems G.P., and/or their customers may actually be blameless here.
--
We can never have enough of nature.
We need to witness our own limits transgressed, and some life pasturing freely where we never wander.
Test your firewall.

to forum · permalink ·

· 2007-09-13 16:25:40 ·

Culvin

join:2004-07-31
Colorado Springs, CO

reply to margaf77

Click for full size

I get a massive amount of noise from Shaw too.

to forum · permalink ·

· 2007-09-13 19:02:12 ·

Topic: Follow · Sitemark · Mark Unread

Forums » Up and Running » Security » Security	c7.statcounter.com » « Media Player Classic AVI File Processing Buffer Overflow


Saturday, 28-Nov 17:31:43	Terms of Use \| Privacy Policy \| Hosting by www.nac.net - DSL,Hosting & Co-lo \| feedback \| contact over 10 years online! © 1999-2009 dslreports.com. page compression OFF

Most commented news this week
· [122] Time Warner Cable Fires Broadside At Broadcasters
· [112] New AT&T Ad Campaign Hits Back At Verizon
· [96] Apple Joins AT&T Verizon Snark Fest
· [87] New Bill Takes Aim At Higher Verizon ETFs
· [80] TiVo Sees Record Customer Losses
· [70] Verizon CEO: Hulu Will Be Dead Soon
· [69] In-Flight Internet Headed For Bumpy Landing?
· [63] Weekend Open Thread
· [62] Thanksgiving Open Thread
· [40] EFF Wages War On Fine Print

Most people now reading
· 3.x Feral Druid - Bear Tanking Guide [World of Warcraft]
· ToC 4th boss - Preliminary Strategy for Twin Valkyr [World of Warcraft]
· [ Classes] Druid tanking: rotation and glyphs [World of Warcraft]
· Windows 7 boot manager editing questions [Microsoft Help]
· how to use the 2nd line with phone hooked to the 1st line? [VOIP Tech Chat]
· Using AirMax to provide triple play services? [Wireless Service Providers]
· Why would I want an e reader? [General Questions]
· Windows 7 - Dell ALPS Touchpad driver [Microsoft Help]
· Using DIR-615 C1/3.01 with Trendnet TEW-652BRP in N Mode [D-Link]
· Backstab vs screws (not which to use) [Home Repair & Improvement]