Solved Hacker wont stop attacking me

[tom982]

I am recieving ICMP, UDP and TCP ping attacks on various ports on my computer. These attacks are every minute that I am online. There are two computers on my network and they are attacking both of them (or it could be the NAT distributing the attacks). I have a 2wire router and McAfee Security Centre. On McAfee, I have blocked on of the IPs on my computer, but it wont let me block the other.

How secure is the McAfee IP blocking? And is there any way to deter these hackers? (without installing software of buying hardware)

 

[Joan Archer]

Those attacks would be hitting your router and if you have NAT on it that should stop them reaching your computers.

What is the make and model of your router and do you have the strongest encryptment enabled ?

What firewalls are you running on your computers ?

As you haven't filled in your System Specs and we can't see your computer we don't know what type of system you're running or what security you have on the machines, we don't even know if they are laptops or desktops.

 

[tom982]

Sorry, on my network there is one Dell Vostro 1500 laptop with McAfee Security Centre and one HP Pavilion Slimline (also running McAfee).

The router is a BT2700HGV and it is set to stealth mode

Heres a few screenshots of my router configuration. I hope this helps explain my problem (sorry if theres repeats of photos - it is difficult to manage my screenshots on this quick reply box)

 

[tom982]

Sorry about the order of these photos. The third photo continues from the first photo

 

[Joan Archer]

I am no expert on any of this but I don't think you have much to worry about on this, the attacks are all low risk.

You still haven't told us what firewalls you are running on the two machines and do I assume you are using Vista on both ?

There are always going to be these sort of attacks, the probes are just flying around the Internet looking for a machine that is open so that they can sneak in and infect. If they don't found an open port they will just drop the packet and as you say your machine is in stealth mode they wont see it so they'll just go on and try somewhere else.

I expect one of the experts will see your post and come along and give you a better explanation than I can but if you have a secure router and a good firewall plus anti-virus protection and not forgetting common sense while surfing around I think you'll be safe.

 

[cwl7454]

One thing you can do is check "block ping". Here is a link that you can use that will explain and give you alot of info.

Block ICMP ping requests

 

[tom982]

Sorry Joan, yes both machines are running Vista SP2. Both have windows defender turned off (so it doesn't clash with McAfee) and the McAfee firewall is on. I am recieving more attacks than my router says. The router says 13 attacks this week however McAfee says there are 1224 attacks this month on the Laptop, and about 500 on the desktop.

 

[tom982]

One of the attackers keeps sending either 'NETBIOS Datagrams', 'NETBIOS Names' or 'SSDP' attacks. The other attacker is sending attacks to random UDP ports, with the occasional 'UDP Port Scan'. I can post a screenshot of the McAfee inbound internet log if you wish?

 

[Airbot]

Why not enable ping blocking as cwl7454 suggests.

 

[sassofalco]

Why not enable ping blocking as cwl7454 suggests.

Agree......Isn't that called just plain old "Common Sense"?????

 

[cwl7454]

haven't heard anything back in three weeks so guess his problem is solved. Consider this closed?

 

[sassofalco]

haven't heard anything back in three weeks so guess his problem is solved. Consider this closed?

.....or hacked into little pieces?












I'm afraid that this sort of hit'n'run behaviour is becoming a little more frequent here. The problem as I see it is that many of this sort, eventually realise that the biggest problem that they had all along, is sitting right in front of their PC/Laptop/Notebook.

Then they haven't the guts to swallow their pride and honestly 'fess up, acknowledge the mistake, thank all concerned who put them right, advise that all is good and going again, and then get on and enjoy the support of this Forum.

In my opinion, they are ultimately the biggest losers through it all......and if not seen here again - no loss.

 

[tom982]

Sorry, I was away on business. I have blocked the ping on my router however unfortunately this hasn't had any effect. I have also added the two IP addresses to the blocked list of the 'Windows Firewall With Advanced Security' and this has also had no effect. How efficient are these methods of blocking unsolicited connections?