PacketViper, LLC Geo IP Filter

About PacketViper, LLC


PacketViper, LLC develops  a intelligent Geo IP Network Filter capable of filtering any country to the port level.  PacketViper removes unwanted probing, fights against DDOS attacks, spam, and much more. With PacketViper on the front lines, security environments become less congested, and more effective.

About PacketViper:

PacketViper has ripped out the pages of complex geo location filtering, and inserted their own proving Geo IP filtering can be simple, and will improve the network security layer. PacketViper's new thinking of bi-directional per port  filtering performed at the gateway eliminates unwanted network traffic before entering the security environment, proving to lessen the impact of DDOS, spam, port probing, breaches, scanning, and reducing bandwidth usage. Scampering many preconception that geo location filtering is not effective in a security layer. PacketViper has also ripped away and silenced any preconceived notions that when geo location (country blocking) filtering is enabled, it causes more problems than its worth.

PacketViper comes as a never expiring free starter edition which can be download and tested without any investment needed.  Viper Network Systems has put their money where their mouth is, and has put it in the hands of the customer, to prove definitively PacketViper is the real deal in Geo IP Filtering.

PacketViper

PacketViper, a Point and Click Geo-IP Network Filter, can filter countries or companies by port, bi-directionally. PacketViper can be installed by moving two network cables, and no fuss. A complement to all network security environments.

PORT ALERT

HIGH SCAN VOLUME OF TCP 3389: Vulnerabilities on this interface allow a remote attacker to cause a Denial of Service (DoS) or potentially install Trojan Horse malware such as Backdoor.Win32.Agent.cdm.  Create a custom rule blocking inbound TCP 3389 or add this port to your HIGH RISK PORT GROUP. 

As this port may also be associated with legitimate traffic through Windows Terminal Server service, create a custom rule allowing known IP addresses and clients on inbound TCP 3389.

Posted 519 weeks ago

PORT ALERT

HIGH SCAN VOLUME OF UDP 53413: A remote attacker that knows the targeted router’s external IP address can gain access to it through the UDP port 53413. Create a custom rule blocking inbound UDP 53413 or add this port to your HIGH RISK PORT GROUP. This vulnerability is common within NETIS routers.

Scans may also originate from ShadowServers, an organization attempting to build a catalog of vulnerable routers with the purpose of notifiying network administrators.  Custom rule based blocking is nonetheless the recommended practice, as this mitigates vulnerability.

Posted 519 weeks ago

PORT ALERT

HIGH SCAN VOLUME OF TCP 29304: The previous 24 hours have shown an uptick in the number of scans on TCP 29304, many originating from high risk countries as well as known offenders.

Create a custom rule blocking inbound TCP 29304 or add this port to your HIGH RISK PORT GROUP.  Although this port is not associated with known vulnerabilities, patterns of activity indicate a potential threat.

Posted 519 weeks ago

GNL ADDED

GNL Added: DShield Blocklist.  Hosted by the Internet Storm Center, this blocklist augments our actively gathered In-House Threat Intelligence .  Avail 7/8/16

Posted 520 weeks ago

PORT ALERT

HIGH SCAN VOLUME OF UDP 53413: A remote attacker that knows the targeted router’s external IP address can gain access to it through the UDP port 53413. Create a custom rule blocking inbound UDP 53413 or add this port to your HIGH RISK PORT GROUP. This vulnerability is common within NETIS routers.

Scans may also originate from ShadowServers, an organization attempting to build a catalog of vulnerable routers with the purpose of notifiying network administrators.  Custom rule based blocking is nonetheless the recommended practice, as this mitigates vulnerability.

Posted 520 weeks ago

PORT ALERT

HIGH SCAN VOLUME OF UDP 5060: Vulnerabilities in various services utilizing this port allow a remote attacker to cause a denial of service (DoS) by sending either crafted or malformed packets to UDP 5060.  Create a custom rule blocking inbound UDP 5060 or add this port to your HIGH RISK PORT GROUP.   

Posted 520 weeks ago

PORT ALERT

HIGH SCAN VOLUME OF TCP 7342: A large number of scans have been seen over the past week on inbound port TCP 7342.  This port has not been used in any well-known attacks, but patterns of scanning are consistent with those seen on ports with known vulnerabilities.  Create a custom rule blocking inbound TCP 7342 or add this port to your HIGH RISK PORT GROUP.

Posted 520 weeks ago

PORT ALERT

HIGH SCAN VOLUME OF TCP 5554: A remote attacker that knows the targeted router’s external IP address can gain access to it through the TCP port 5554. Create a custom rule blocking inbound TCP 5554 or add this port to your HIGH RISK PORT GROUP. This vulnerability is common in Windows Systems not updated to Microsoft Security Bulletin [MS04-011]

Posted 521 weeks ago

PORT ALERT

HIGH SCAN VOLUME OF UDP 53413: A remote attacker that knows the targeted router’s external IP address can gain access to it through the UDP port 53413. Create a custom rule blocking inbound UDP 53413 or add this port to your HIGH RISK PORT GROUP. This vulnerability is common within NETIS routers.

Posted 521 weeks ago

GNL Added: Open SOCKS Proxy List has been added to our GNL’s.  Avail 6/29/16

Posted 521 weeks ago