"Inbound Policy Violations" times 1000 = ???

Help for v2
1

Hi,
I just installed Comodo firewal; because I read it was a good free firewall.

Everything seems fin except the when I check the log there are 100’s of Inbound Policy Violations. They are happening constantly. About 5 every few seconds. I am connected directly to a cable modem and these IPs aren’t mine and XP is a week old fresh install(Clean). Is this normal behavour? Or is my computer really being bombarded like crazy?

Here’s a sample of the log:

Date/Time :2007-08-21 21:17:53
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 201.222.194.93, Port = 34707)
Protocol: UDP Incoming
Source: 201.222.194.93:35113
Destination: 76.15.22.66:34707
Reason: Network Control Rule ID = 5

Date/Time :2007-08-21 21:17:53
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 189.167.64.185, Port = 23859)
Protocol: UDP Incoming
Source: 189.167.64.185:29932
Destination: 76.15.22.66:23859
Reason: Network Control Rule ID = 5

Date/Time :2007-08-21 21:17:53
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 201.236.143.196, Port = 34707)
Protocol: UDP Incoming
Source: 201.236.143.196:42366
Destination: 76.15.22.66:34707
Reason: Network Control Rule ID = 5

Date/Time :2007-08-21 21:17:53
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 201.244.233.224, Port = 34707)
Protocol: UDP Incoming
Source: 201.244.233.224:34855
Destination: 76.15.22.66:34707
Reason: Network Control Rule ID = 5

Date/Time :2007-08-21 21:17:53
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 201.208.189.217, Port = 23859)
Protocol: TCP Incoming
Source: 201.208.189.217:3293
Destination: 76.15.22.66:23859
TCP Flags: SYN
Reason: Network Control Rule ID = 5

Date/Time :2007-08-21 21:17:53
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 201.219.81.142, Port = 34707)
Protocol: UDP Incoming
Source: 201.219.81.142:40794
Destination: 76.15.22.66:34707
Reason: Network Control Rule ID = 5

Date/Time :2007-08-21 21:17:53
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 190.1.167.236, Port = 34707)
Protocol: TCP Incoming
Source: 190.1.167.236:4115
Destination: 76.15.22.66:34707
TCP Flags: SYN
Reason: Network Control Rule ID = 5

Date/Time :2007-08-21 21:17:53
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 24.0.52.82, Port = 23859)
Protocol: TCP Incoming
Source: 24.0.52.82:2545
Destination: 76.15.22.66:23859
TCP Flags: SYN
Reason: Network Control Rule ID = 5

Date/Time :2007-08-21 21:17:53
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 71.187.186.180, Port = 34707)
Protocol: UDP Incoming
Source: 71.187.186.180:13682
Destination: 76.15.22.66:34707
Reason: Network Control Rule ID = 5

etc…etc…

2

Are you running any p2p type programs such as uTorrent, etc…?

jasper

3

I have Ares p2p, but it’s not running.

4

Those other IP addresses are searching to see if you are online or not probably. When you are using Ares then they are able to connect to you. Once you disconnect then they will check to see if you are still there.

I really can’t tell you how long they will try and connect. I’ve used uTorrent before and if I remember right I would get those attempts for a couple of days but the connection attempts could last longer.

jasper

5

Thanks Jasper. :SMLR

6

Glad I could help you. If you feel that this answers your questions completely then I am going to show this thread as resolved. If you need to open this thread again feel free to PM me or another MOD and we will be glad to unlock it.

Have a good one.

jasper