Firewall going CRAZY!!!

PowerYoga

Diamond Member
Nov 6, 2001
4,603
0
0
I switched to XP and my zonealarm and mcafee firewall are getting over 500+ alerts in less than 2 hours!!! Is some evildoer trying to attack my computer and look at my termpapers?!?!?

most of them are incoming tcp port scans. Some are outgoing signals i blocked (for some annoying programs :D) Any idea what's going on?
 

Bglad

Golden Member
Oct 29, 1999
1,571
0
0
For incoming you have to start tracking ip addresses to see who is contacting you.

For outgoing try Sygate. It will tell you what program is associated with blocked outgoing packets.
 

PowerYoga

Diamond Member
Nov 6, 2001
4,603
0
0
see, the thing is most of the ip addresses are different, and when I do track them, they all end up in different places (all over the world, even). Most of them don't have any contact information either. Any idea on what they're trying to do? I rarely get 2 of the same ip address hitting me.
 

DirtylilTechBoy

Senior member
Oct 19, 2001
304
0
0
If you have a static IP address... Change it....

Do those IP addresses have anything in common? Have you setup a time table to cross reference certain times with certain IP addresses? Such as during 4-8pm Ip addresses with "x" are more frequent?

-j
 

n0cmonkey

Elite Member
Jun 10, 2001
42,936
1
0
Chances are its nothing. I get scanned all day every day. I ignore it for the most part. But definitely make sure you have an up to date virus protection program, change ips if you can, and maybe let us know what they are doing. Certain types of scans you have to worry about more than I and vice versa.
 

PowerYoga

Diamond Member
Nov 6, 2001
4,603
0
0
mcafee firewall says " incoming TCP packet." while zone alarm says "blocked access to your computer". A lot of scans come from 207.188.7.xxx. Any more ideas
 

Bglad

Golden Member
Oct 29, 1999
1,571
0
0
Are you sure its not your own isp pinging you? See if this ip address leads you to your own isp. Does your own ip address start with the same prefix?
 

Miramonti

Lifer
Aug 26, 2000
28,651
100
91
welcome to cyberspace. it sounds like you have a cable modem because those ip sequences probably get hit the most. if you want another layer of protection get a router.


Is some evildoer trying to attack my computer and look at my termpapers?!?!?

And why would they want to be doing that?? That economics paper you got in your "my documents" folder is complete garbage... :Q;)
 

PowerYoga

Diamond Member
Nov 6, 2001
4,603
0
0
my economics paper is not garbage!! :eek: Its someone else's from off online (with my footnotes...) :D

I have no idea how to check my own ip address. In 98 i know but not in xp, anyone hope to enlighten me?

Some of the high-frequency attackers are from brazil too... o_O I'm on a school t1 connection which runs as fast as my dead cat.
 

Miramonti

Lifer
Aug 26, 2000
28,651
100
91
Yeah, I thought the footnotes were good but its the other stuff that I'm worried about....;)

click on 'my public ip is'

thats one way to check your ip.

but this is the real way:

go to "Run...", type "cmd", then "ipconfig", and that will give you your ip.