Firewall Logs

[BBFCFM]

So I'm on my computer, chilling, and I suddenly get this Denial of Service on my computer. I think nothing of it, and I reboot and move on. It happens again. I look at my logs, but I'm on dialup, so the ppp logs are blank. I turn the internet back on, turn off every port, and this is what I see.

Jun 15 00:19:38 NetRestore ipfw: 12190 Deny TCP 12.75.77.22:1848 12.77.201.72:1433 in via ppp0
Jun 15 00:19:41 NetRestore ipfw: 12190 Deny TCP 12.75.77.22:1848 12.77.201.72:1433 in via ppp0
Jun 15 00:19:52 NetRestore ipfw: 12190 Deny TCP 12.73.120.229:3949 12.77.201.72:1433 in via ppp0
Jun 15 00:19:55 NetRestore ipfw: 12190 Deny TCP 12.73.120.229:3949 12.77.201.72:1433 in via ppp0
Jun 15 00:20:14 NetRestore ipfw: 35000 Deny UDP 69.109.1.147:14659 12.77.201.72:1026 in via ppp0
Jun 15 00:21:30 NetRestore ipfw: 35000 Deny UDP 210.190.168.105:2108 12.77.201.72:1026 in via ppp0
Jun 15 00:28:43 NetRestore ipfw: Stealth Mode connection attempt to UDP 12.77.201.72:49250 from 204.127.160.4:53
Jun 15 00:28:44 NetRestore ipfw: Stealth Mode connection attempt to UDP 12.77.201.72:49248 from 204.127.160.4:53
Jun 15 00:29:09 NetRestore ipfw: 35000 Deny UDP 195.70.74.221:12628 12.77.201.72:1026 in via ppp0
Jun 15 00:31:11 NetRestore ipfw: 35000 Deny UDP 222.88.173.5:7373 12.77.201.72:1026 in via ppp0
Jun 15 00:31:36 NetRestore ipfw: Stealth Mode connection attempt to TCP 12.77.201.72:49315 from 63.218.23.137:80
Jun 15 00:31:39 NetRestore ipfw: Stealth Mode connection attempt to TCP 12.77.201.72:49315 from 63.218.23.137:80
Jun 15 00:31:45 NetRestore ipfw: Stealth Mode connection attempt to TCP 12.77.201.72:49315 from 63.218.23.137:80
Jun 15 00:31:57 NetRestore ipfw: Stealth Mode connection attempt to TCP 12.77.201.72:49315 from 63.218.23.137:80
Jun 15 00:32:21 NetRestore ipfw: Stealth Mode connection attempt to TCP 12.77.201.72:49315 from 63.218.23.137:80
Jun 15 00:33:09 NetRestore ipfw: Stealth Mode connection attempt to TCP 12.77.201.72:49315 from 63.218.23.137:80
Jun 15 00:35:33 NetRestore ipfw: 35000 Deny UDP 69.113.89.182:19461 12.77.201.72:1027 in via ppp0
Jun 15 00:35:42 NetRestore ipfw: 35000 Deny UDP 220.217.134.233:16801 12.77.201.72:1434 in via ppp0
Jun 15 00:39:12 NetRestore ipfw: Stealth Mode connection attempt to TCP 12.77.201.72:49353 from 64.233.187.104:80

Everytime some dude tries to access my computer, I ping them do death. So does anyone know I can keep certain ports open without these douchebag hackers from hitting my computer with Denial of Service programs? Jerks...

 

[Makosuke]

Not entirely sure what you mean by "Denial of Service" programs--I'm guessing you're running some 3rd party firewall software that reports when somebody's trying to access your computer? If so, perhaps you should just turn the notification off.

From the looks of the log snippit you posted, it's nothing more than generic bot connect attempts--I see these frequently on servers and individual comptuers I work with, generally pounding on the SSH service with random usernames. So long as you're not getting thousands of connect attempts in the space of seconds (which you're not, at least in the chunk you posted), it won't perceptably affect your computer.

Generally so long as you're running a firewall, are up to date with security patches, and have reasonably strong passwords, you have nothing to worry about.

 

[Flying Llama]

Same thing happens to me, all the time. Yes, it really bugs me...
I'm on Tiger using the built-in firewall, and have enabled stealth mode and firewall logging in the sharing preference pane, if anyone want to see the same thing...

llama

 

[superbovine]

assuming you are not using dialup get a broadband router which has a built in firewall, and nice handles all that garbage.

 

[Celeron]

Welcome to life on the Internet. This sort of stuff happens all the time, every day, to just about every computer. Its nothing to worry about, move along.

And I hate to break it to you, you aren't pinging any one to death with your dial-up connection.