recently dropped packets

[kingmonty]

My router is configured with a packet filtering firewall, and after inspection of todays logs I discovered the following:

[2005-09-28 16:22:39] | From:[168.167.40.7] | Port:[8080] | [Blocked]
repeated close to 800 times in the period from 15:00 to 16:22
[2005-09-28 16:22:41] | From:[196.2.118.254] | Port:[135] | [Blocked]
repeated around 200 times in the same period
[2005-09-28 12:00:31] | From:[82.56.135.196] | Port:[4662] | [Blocked]
repeated a staggering 4023 times from 11:51:04

There were all in all 11000 odd attempts blocked by my router today alone!

Even though these packets are blocked by my router, I assume that the traffic still counts towards my bandwidth usage.

I think Iburst should install better packet filters - especially when new virusses and worms come about. My guess is that this activity is mostly due to probing worms and trojans. It seems there is a new virus making the rounds.

 

[Crash]

My firewall logs look da same maan.
Most of the IP's logged for me are other iButheads.
With regards to the bandwidth usage. Wouldn't stress to much.
I've found if you leave iBurst connected all the time, you might loose at most 5mb's to portscans and other crap.

 

[kingmonty]

yeah. I've been monitoring the last few days rather closely, but today was definitely a very busy day on the network.

 

[alchamy]

iBurst is a pool of unsecure machines spewing packets all over the place.

 

[bb_matt]

You shouldn't drop packets @#T@ !

Rather put them in the bin, instead of litering all over the show !
Jeez !

 

[kingmonty]

my *packets* are non recyclable - at least that's what it says on the wrapper....