Hi, I'm running the latest version of Comodo. So far I have had about 438 intrusion attempts blocked (in only a matter of a few days). Is this normal? To me it looks more like outbound attempts but I'm still learning. My IP is the source each time. Most of the protocalls are IGMP but a few are UDP. Most of the destination IPs are the same and when a port is listed (only a few times) both the source and the destination are 1900. When I look at my network security policy there are no blocked items except "block and log unmatching requests" that is set for firefox, IE, and Comodo. By the way, I have a router with an SPI firewall. Sorry if this is a noobish question.