getting pinged repeatedly

I am new to this website. I would like to know if anyone can tell me what I should do to prevent someone from constantly pinging me. I am using a blue and white g3 mac. I have a cable internet connection. I have a firewall which has recently been alerting me that someone is attempting an intrusion. Most of the intrusions are coming from Canada. I live in the U.S. When I check the ip address of where the pings are coming from using showmyip.com it only provides the "last" point of origin.

I would like to know how I can prevent someone from constantly trying to intrude on my computer. It's annoying. Better yet, how can I find this person or people doing this ?

Your help is much appreciated.

Willow :(

What firewall are you using? Most have the option of blocking all ICMP traffic, which would be relevant to your case.

You shouldn't worry about these pings to much (unless they are coming at a rapid pace, of course). You probably are running some service that sends out packets checking for connectivity, or something along those lines :p

yeah i would check to make sure that your firewall, is working.
I had this idea from what i read that maybe this person is trying to overload your computer to make it crash.
I had someone try that, and i ended up gettting there ip and i contacted the relevant people and they had there connection disconected.
So don't worry about getting revenge or anything.
Me best opinion would be to check your firewall for any sort of problems and i would recommend in purchasing the macfee firewall.
I recently purchased the latest version, and tried to hack into my own system through a friends computer and i couldnt get anywere.
And them pinging you they are most likely tryin to get information to maybe attempt an attack.
But i would not worry, as it sounds like your firewall might be just enough to hold them off.
Please correct me if what i have said is wrong.
As i am still learning myself about computer security.
Cheers

Ok, it also maybe nothing. high speed ISPs often check on connections to the customers as part of daily life. If your ISP has offices in canada, that MAY be why. Also, instead of "blocking" the packets, try seeing if your firewall will "drop" them. That way if someone is actually trying to break in, they wont even know you exist. Staying in the shadows online is safer than jumping out and saying "got ya!"

So basically, check with your ISP and see if it's them, and also, try dropping the packets instead of blocking them. But as I said, alot of high speed ISPs do ping and check a few things on customers, so it may be nothing at all.

Hi,

You might like to try http://grc.com (Gibson Research Corporation) and try their firewall test?

If your firewall is monitoring all ports and has them in "stealth mode" the pings won't get a reply, so your machine will remain undetected.

Sam Spade v1.14 is quite a useful (free) internet analysis tool you should be able to find a local download site via Google.

I believe that the Walechia worm uses multiple pinging to look for vulnerable machines..............I was getting at least 500 per hour a few days ago. Most of these coming from other addresses within my ISP.

Are these pings all coming from the same address, or different ones? By "the same" I mean are the first two sets of the address the same. If the last two sets are different, then it sounds like the worm. If the numbers are all the same it sounds like someone/thing is out to get you?

I hope your firewall is monitoring for OUTGOING as well as incoming connections? There might be something on your machine that is starting these dialogues?

EDIT: The firewall test ought to work on a Mac, but I am not sure about sam spade?
Hope this helps

Thank you all for your suggestions. Here are the answers to your questions and what I did regarding your suggestions.

I went to the site grc.com and tested my computer connection's security. Everthing was fine except I had not set the firewall to Stealth, which resulted in the website being able to ping me. When I checked off Stealth Mode in Options to prohibit ping replies I ran the test again and the report came back perfect TruStealth rating no packets solicited were replied to.

I am presently using Netbarrier the latest version for Macs. McAfee appears to be only for Windows, also Samspade appears to be for windows.

I must say this pinging started a few days ago since having cable internet for almost two months now. Don't understand what brought it on.
The pings are coming from four different ips with the first two sets of numbers being different for all four and the last two sets of numbers also being different. e.g. One of the ip addresses with the same first two sets of numbers and the last two sets of numbers being different hit 10 times in one night, which is not much compared to 500.

Yes, the firewall is monitoring incoming and outgoing.

Everyone's suggestions seem to imply there is not much danger, of which you may be right, but since I am not aware of the differences in data signals over the internet I felt it was necessary to consult you. Better to be safe than sorry.

Willow

I think the main point here of the replies was to test your firewall so you do not respond to the pings.

This discussion has popped up several times in the last few weeks under different names
( Icmp?, Icmp 8 ?, Port 8 (Echo Request), pings & firewalls, etc. ).

I have noticed between 50 -500 each hour for the past several weeks. As others, a very large majority coming from my ISP's range.

My question is, is this the result of a virus, worm, or trojan?

OR, is this the work of some patch ???

It is the Win32/Nachi worm.

http://us.mcafee.com/virusInfo/defau...virus_k=100559

"large volumes of ICMP traffic in network"

We shut off all ICMP traffic on our intranet when this worm was going around.

Willow,

I think that your problem has ended..............but I do have a concern for your personal safety......sorry...............I am being deadly serious here...............I believe that Gore might have received the same message as myself???

Do lock all doors & windows........let people know where you are going... check in regularly. You might even report to your local police that you have been "cyberstalked"...OK I am assuming that you are a female? but even if you are a good looking bloke...........I am worried.

Please take care, whoever you are

I MEAN THAT.............I just got something through the AO system that worries the hell out of me

Cheers

Johnno

nihil.. what are you smoking ? don'cha think you might be overreacting a bit ?

Quote:

---

Originally posted here by nihil
Willow,

I think that your problem has ended..............but I do have a concern for your personal safety......sorry...............I am being deadly serious here...............I believe that Gore might have received the same message as myself???

Do lock all doors & windows........let people know where you are going... check in regularly. You might even report to your local police that you have been "cyberstalked"...OK I am assuming that you are a female? but even if you are a good looking bloke...........I am worried.

Please take care, whoever you are

I MEAN THAT.............I just got something through the AO system that worries the hell out of me

Cheers

Johnno

---

wtf Nihil?

Its just a simple ping man, I get them all the time from my ISP's DNS servers.

Cheyenne,

I got a weird positive antipoints from someone.........said "I won't be back" or something..........hell I drink like a fish... but that scared me sober! I am not joking old chap, I am seriously worried about this one.

Cheers


Johnno

Are you drunk right now?

No Sir, I am not


And I am seriously concerned here................look at the antipoints.....Gore and me....I bet Gore got a similar message?

cheers

no cheyenne.. I think he's smoking some real good ganja and is NOT sharing :mad: :rolleyes: :D

nihil.. PARANOIA.. will destroy ya

Gentlemen,

Please look at the antipoints awarded to Gore and myself?...a bit strange? why?...was our advice THAT good?......I will go back and try to copy the actual message I got...but I am worried.....and I am very serious

As for smoking....I am bloody allergic to it :D come out in a rash and all

cheers

actually Digital Syntax Ap'ed me and said that he wont come back and that he is sorry for what he has done ..im kinda worried right now too, now that you mention the worrying stuff ..I tried to PM him and e-mail him ..i also made a thread in GCC maybe he will reply ...wtf is going on .. ?

Thanks MemorY,

I did not want to name DigitalSyntax...but he sent me the message(via antipoints)...as I do not know the guy, I was very worried.........jumped to conclusions as usual?

Oh Well..............might as well get drunk?

Cheers mate :)

Im an idiot here so correct me if i am wrong. Is this a constant Pinging? like it happens several times in a minute? It is possible that you have been targeted for a DDOS attack by some kiddie. I could be wrong tho.

Sorry about the earlier panic.............when that guy AP'd me and claimed responsibility it kinda threw me :(

I notice that you are using cable. These tend to have a fixed IP address. As the system has not been in stealth mode up to now, it may have been detected by a number of people. It is also possible that you may have "inherited" an address that was owned by someone else before, and compromised whilst they had it?

The firewall will now prevent people "seeing" when the machine is connected, but it might still be an idea to get the address changed?

Cheers