should i be worried?

CFP says that it has blocked 244 intrusion attempts. The source IP’s are all different, same destination IP of course (mine) and I tried tracing the IP, I found out that most of them are from Greece China and such. Were they trying to hack my system or what? Is there anything I should do? Thanks.

EDIT: Applications: System,Windows Operating System,and svchost.

Hello Knox,

I am new to this forum also and just installed Comodo Internet Security about 2 weeks ago.
I’ve been having the same problem as you with many entries logged by the firewall.

If you want some reading to do while you wait for an expert, look through my postings:

Subject: ‘Items blocked by firewall’
Started by me ‘chuckm60090’

I was being helped by Kail, He’s very good.

Maybe it will help you understand what’s going on.

Chuck

The topic chuck mentions is this one: https://forums.comodo.com/firewall_help/items_blocked_by_firewall-t42477.0.html .

It may be a bit of a read for a newbie but is most certainly worth a read.

Knox. On what type of connection are you? Cable, Dial up or ADSL? Is there a router in your network?

Can you show us a screenshot of your Firewall logs? They can be found under Firewall → Common Tasks → View Firewall Events.

How to post a screenshot?

When the window you want the screenshot is active push alt+print screen. The window is now copied to the clipboard. Paste the image in any image editing program, Paint, Paint.net, the Gimp etc, and save the file as 32 bits png image.

At the forum push the reply button. Or when using the Quick reply type some text and push the preview button.

Underneath the text box click on Additional options. Push the Choose button and navigate to the file and select it. When you want to post more images click on the more attachments link.

When done typing push the Post or Preview button.

Keep us posted.

[at] EricJH

Im on DSL (the modem type) and yes, I do have a router, but I hardly turn it on. (Once a month maybe)

Ok, I used Adobe Fireworks on this one.

[at]Chuck

Very informative post. Thanks. :slight_smile:

There a few known ports , 135 and 445, that are righteously blocked. Read these two articles by Gibson Research Company about them:
http://www.grc.com/port_445.htm
http://www.grc.com/port_135.htm

I also notice ICMP traffic from one single source 217.0.92.117. That could be your Global Gateway from your ISP. Can you look up the gateway address? How to do? Go to Start → Run → cmd → enter → ipconfig /all → enter → now look up the information regarding your active network adapter.

The other ports are pretty random at first sight. It is just internet chatter of all sorts and kinds with nice and not so nice intentions. But, that’s why you have a firewall.

If you would put your router in between the modem and your computer you would see less of these things as the NAT of the router will stop it as it is unsolicited traffic. If your router has some kind of basic (stateful inspection) firewall it usually never hurts to switch it on.

Having a router in between you are protected from direct access from the web in case your firewall is down; for example when unistalling it.

217.0.92.117 is from Germany, according to http://whatismyipaddress.com/staticpages/index.php/lookup-results. So under what settings should my firewall be?

https://forums.comodo.com/overview_cis/configuring_cis_for_maximum_security_with_zero_alerts_for_novices-t37236.0.html
hi Knox
I advise you to turn on your router,I installed to somebody CIS on his Pc and his web connection is via router; I notice he has no Intrusion Attempts . Also I advise you to un-install your old CIS(with Revo uninstaller)and install the new released CIS 3.10…531 version.hope this it’s useful

EricJH & baptistul thank you so much for your assistance. ;D