Am I being hacked?

[ddeder]

I have a Linksys VPN router at my main office and a Netgear VPN router at a remote office. I have a tunnel set up between these routers so that we have access to the server from the remote office.

I am looking at the access log on the Linksys router and I see the following line show up a lot:

Mar 22 09:38:35 2006 Connection Accepted ICMP Type 8 Code 0 66.203.120.48->65.41.xxx.xxx on ixp1

Where 65.41.xxx.xxx is our internet IP address.

This entry shows up continually in our log but the last number of the first IP address is differnet for each entry (e.g. 66.203.120.35, 66.203.120.56, 66.203.120.76, etc...).

Can someone please tell me where this entry is coming from??

 

[nweaver]

ICMP type 8 is an echo request, or ping. Someone is pinging your IP address

 

[Yeormom]

That's very common...many applications use ping responses to judge performance or connectivity.

 

[ddeder]

Thanks. I found the setting in the router to turn off responding to pings. No more of these log entries after fixing this setting.