Re: OT - Am I being probed or ?

Top Page
Attachments:
Message as email
+ (text/plain)
+ (text/html)
+ (text/plain)
Delete this message
Reply to this message
Author: Randy Melder
Date:  
To: Main PLUG discussion list
Subject: Re: OT - Am I being probed or ?
never say never...

The 10.x.x.x network is 'reserved' for private use, but alas... our enemies
to the east route these address blocks for black hat ops.

Your router ACL should include rules denying traffic inbound from the
private networks:
10.0.0.0 /8
172.16.0.0 /12 (I think)
192.168.0.0 /16

It sounds like this rule isn't in force and you'll need to implement per
your router setup.

; ) .randy



On 1/5/07, Jon M. Hanson <> wrote:
>
> An IP address starting with 10 Is a private address and is not routeable
> on the Internet. Someone is likely spoofing their source address if you're
> not using that as your network.
>
> As far as your ISP probing port 80, it may be against your Terms of
> Service to run a webserver so they may be checking if you are.
>
> ------- Original Message -------
> From: Dazed_75 <>
> To: "Main PLUG discussion list" <>
> Sent: 01/05/07, 05:19:05 PM
> Subject: OT - Am I being probed or ?
>
> The incoming log on my router shows repeatedly blocking 10.20.71.1 from
> accessing a port? name of bootpc using udp. What does this mean?
>
> The other one I see repeating seems to be form my ISP (Mediacom) who
> apparently leases facilities from AT&T. that is 12.201.126.113 sending
> TCP
> traffic to a port identified in the log as WWW. Any idea why they would
> be
> doing that (whatever it is).
>
> BTW, my router is a Linksys WRT54GL with *v4.71.1, Hyperwrt 2.1b1 +
> Thibor15c [May 12 2006]*
>
> --
> Be who you are and say what you feel, because those who mind don't matter
> and those who matter don't mind. - Dr. Seuss
>
> ---------------------------------------------------
> PLUG-discuss mailing list -
> To subscribe, unsubscribe, or to change you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>




--



http://spindomains.us/
---------------------------------------------------
PLUG-discuss mailing list -
To subscribe, unsubscribe, or to change you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss