Incoming UDP Packets, hundreds of them

progers · 03-12-2007, 18:22

Recently installed my Netgear DIR-655 wireless router - a brilliant device.

Getting hundreds of UDP packets coming from ip addresses beginning 24.64 which trace to a Canadian isp ShawCable net.
Is it worth reporting these or do you think they are spoofed addresses?

Also, is anyone else seeing these ip addresses?

Mick Fisher · 03-12-2007, 18:31

Yep, my software firewall reports the same amongst many others. As they are all getting blocked I'm not bothered about them.

SOSAGES · 03-12-2007, 18:32

i wouldnt worry about it, dont look through firewall logs as it will only make you want to unplug the cable connection

if your pc is running fine and speed seems ok then ignore it.

whats the full ip and what port is it looking at?

piggy · 03-12-2007, 21:38

Quote:

Originally Posted by SOSAGES

i wouldnt worry about it, dont look through firewall logs as it will only make you want to unplug the cable connection

if your pc is running fine and speed seems ok then ignore it.

whats the full ip and what port is it looking at?

good advice

03-12-2007, 23:28

Quote:

Originally Posted by progers

Recently installed my Netgear DIR-655 wireless router - a brilliant device.

Getting hundreds of UDP packets coming from ip addresses beginning 24.64 which trace to a Canadian isp ShawCable net.
Is it worth reporting these or do you think they are spoofed addresses?

Also, is anyone else seeing these ip addresses?

Bet you've torrented recently

dev · 04-12-2007, 00:17

this is what i hate about firewalls. you don't tell people to get a firewall and they get infected by everything known to a computer, you do tell people and they come asking about every connection that is blocked

progers · 04-12-2007, 18:13

Quote:

Originally Posted by SOSAGES

i wouldnt worry about it, dont look through firewall logs as it will only make you want to unplug the cable connection

if your pc is running fine and speed seems ok then ignore it.

whats the full ip and what port is it looking at?

There are loads of ip addresses, e.g.
24.64.216.127:30842

24.64.237.43:29168

All looking at ports 1026, 1027 & 1028

I'm not worried about then as the router is blocking them but they account for 98% of the router log entries which does get slightly annoying

---------- Post added at 18:13 ---------- Previous post was at 18:11 ----------

Quote:

Originally Posted by dev

this is what i hate about firewalls. you don't tell people to get a firewall and they get infected by everything known to a computer, you do tell people and they come asking about every connection that is blocked

Thanks for your really helpful reply

DaiNasty · 04-12-2007, 23:23

Quote:

Originally Posted by progers

There are loads of ip addresses, e.g.
24.64.216.127:30842

24.64.237.43:29168

All looking at ports 1026, 1027 & 1028

Usually messenger spam. Just internet background jabber. Your firewall's doing it's job. Best to ignore it and move on.

zer0 · 10-12-2007, 18:40

was wondering about this too but as it was being blocked was only slightly peeved at the amount in the log, whats weirder is i get nearly the same amount of these that dont seem like internet connections atall (no router just software firewall)
Blocked Incoming UDP 10.3.0.1 port 67 localhost 255.255.255.255 localMAC FF-FF-FF-FF-FF-FF