I am recieving ICMP, UDP and TCP ping attacks on various ports on my computer. These attacks are every minute that I am online. There are two computers on my network and they are attacking both of them (or it could be the NAT distributing the attacks). I have a 2wire router and McAfee Security Centre. On McAfee, I have blocked on of the IPs on my computer, but it wont let me block the other.
How secure is the McAfee IP blocking? And is there any way to deter these hackers? (without installing software of buying hardware)
Those attacks would be hitting your router and if you have NAT on it that should stop them reaching your computers.
What is the make and model of your router and do you have the strongest encryptment enabled ?
What firewalls are you running on your computers ?
As you haven't filled in your System Specs and we can't see your computer we don't know what type of system you're running or what security you have on the machines, we don't even know if they are laptops or desktops.
Sorry, on my network there is one Dell Vostro 1500 laptop with McAfee Security Centre and one HP Pavilion Slimline (also running McAfee).
The router is a BT2700HGV and it is set to stealth mode
Heres a few screenshots of my router configuration. I hope this helps explain my problem (sorry if theres repeats of photos - it is difficult to manage my screenshots on this quick reply box)
I am no expert on any of this but I don't think you have much to worry about on this, the attacks are all low risk.
You still haven't told us what firewalls you are running on the two machines and do I assume you are using Vista on both ?
There are always going to be these sort of attacks, the probes are just flying around the Internet looking for a machine that is open so that they can sneak in and infect. If they don't found an open port they will just drop the packet and as you say your machine is in stealth mode they wont see it so they'll just go on and try somewhere else.
I expect one of the experts will see your post and come along and give you a better explanation than I can but if you have a secure router and a good firewall plus anti-virus protection and not forgetting common sense while surfing around I think you'll be safe.
Sorry Joan, yes both machines are running Vista SP2. Both have windows defender turned off (so it doesn't clash with McAfee) and the McAfee firewall is on. I am recieving more attacks than my router says. The router says 13 attacks this week however McAfee says there are 1224 attacks this month on the Laptop, and about 500 on the desktop.
One of the attackers keeps sending either 'NETBIOS Datagrams', 'NETBIOS Names' or 'SSDP' attacks. The other attacker is sending attacks to random UDP ports, with the occasional 'UDP Port Scan'. I can post a screenshot of the McAfee inbound internet log if you wish?
Notebook - Samsung HM320JI 320GB HD installed 07 August 2009.
External HDs [4];Maxtor One Touch4 - 500GB External HD [Drive M:\].Western Digital WDXMS1200TA - 120GB External HD [Drive G:\ - Windows Defender Backup Files only]. Two x LaCie 320GB Mobi
Mouse
Logitech Wireless V320 for Notebooks - Model M/N: M-RCD125
Internet Speed
Down 20000kb/sec / Up 1000kb/sec [Bigpond-Aus]
Other Info
Brother MFC-465CN; PC to Fax/Scan/Copy/Photo MFC. Epson Perfection V300 Photo Scanner. Siemens Speedstream 6520 Router. Wacom 'Bamboo Fun' CTE-650 PC Tablet, Stylus and Mouse. UAC - On;Activated. Browsers; [1] FireFox v3.6[2] IE8. Honorary R.S.M. to the 4th [Assault Pioneer] Troop Pune Sepoys , and 3rd Troop Jodhpur Bengali Lancers.
I'm afraid that this sort of hit'n'run behaviour is becoming a little more frequent here. The problem as I see it is that many of this sort, eventually realise that the biggest problem that they had all along, is sitting right in front of their PC/Laptop/Notebook.
Then they haven't the guts to swallow their pride and honestly 'fess up, acknowledge the mistake, thank all concerned who put them right, advise that all is good and going again, and then get on and enjoy the support of this Forum.
In my opinion, they are ultimately the biggest losers through it all......and if not seen here again - no loss.
Notebook - Samsung HM320JI 320GB HD installed 07 August 2009.
External HDs [4];Maxtor One Touch4 - 500GB External HD [Drive M:\].Western Digital WDXMS1200TA - 120GB External HD [Drive G:\ - Windows Defender Backup Files only]. Two x LaCie 320GB Mobi
Mouse
Logitech Wireless V320 for Notebooks - Model M/N: M-RCD125
Internet Speed
Down 20000kb/sec / Up 1000kb/sec [Bigpond-Aus]
Other Info
Brother MFC-465CN; PC to Fax/Scan/Copy/Photo MFC. Epson Perfection V300 Photo Scanner. Siemens Speedstream 6520 Router. Wacom 'Bamboo Fun' CTE-650 PC Tablet, Stylus and Mouse. UAC - On;Activated. Browsers; [1] FireFox v3.6[2] IE8. Honorary R.S.M. to the 4th [Assault Pioneer] Troop Pune Sepoys , and 3rd Troop Jodhpur Bengali Lancers.
Sorry, I was away on business. I have blocked the ping on my router however unfortunately this hasn't had any effect. I have also added the two IP addresses to the blocked list of the 'Windows Firewall With Advanced Security' and this has also had no effect. How efficient are these methods of blocking unsolicited connections?