port scanning

Marvin GodfatherofSoul Bellamy mbellamy at kc.rr.com
Wed Oct 30 12:45:48 CST 2002


My web site is *ancient*, at least 3 1/2 years old.  I'm actually in the 
process of building a web server/mail server machine on my intranet, but 
the installation (Mandrake 9.0) keeps hanging :(  

How is it possible, then that I'm seeing a hit on my firewall to my 
private IPs?  And, it's not just from on subnet, it looks like traffic 
from everywhere.

Jun 11 18:44:26 myhostname ipmon[17494]: 18:44:26.340564              
ep0 @0:17 b 63.215.143.144,80 -> my.ip.add.ress,2049 PR tcp len 20 44 -AS IN
Jun 11 18:44:38 myhostname ipmon[17494]: 18:44:38.315933              
ep0 @0:17 b 63.215.143.144,80 -> my.ip.add.ress,2049 PR tcp len 20 40 -A IN
Jun 11 18:44:38 myhostname ipmon[17494]: 18:44:38.342418              
ep0 @0:17 b 63.215.143.144,80 -> my.ip.add.ress,2049 PR tcp len 20 44 -AS IN
Jun 11 18:45:03 myhostname ipmon[17494]: 18:45:02.345944              
ep0 @0:17 b 63.215.143.144,80 -> my.ip.add.ress,2049 PR tcp len 20 44 -AS IN
Jun 11 18:45:32 myhostname ipmon[17494]: 18:45:32.350857              
ep0 @0:17 b 63.215.143.144,80 -> my.ip.add.ress,2049 PR tcp len 20 40 -AR IN
Jun 11 20:33:10 myhostname ipmon[17494]: 20:33:10.171628              
ep0 @0:17 b 146.83.123.85,27015 -> my.ip.add.ress,2049 PR udp len 20 34  IN
Jun 11 20:33:11 myhostname ipmon[17494]: 20:33:10.701114 2x              
ep0 @0:17 b 146.83.123.85,27015 -> my.ip.add.ress,2049 PR udp len 20 280  IN
Jun 11 20:33:12 myhostname ipmon[17494]: 20:33:11.811189 2x              
ep0 @0:17 b 146.83.123.85,27015 -> my.ip.add.ress,2049 PR udp len 20 280  IN
Jun 11 22:19:06 myhostname ipmon[17494]: 22:19:05.350149              
ep0 @0:17 b 216.40.217.210,80 -> my.ip.add.ress,2049 PR tcp len 20 48 -AS IN
Jun 11 22:19:09 myhostname ipmon[17494]: 22:19:08.155282              
ep0 @0:17 b 216.40.217.210,80 -> my.ip.add.ress,2049 PR tcp len 20 48 -AS IN
Jun 11 22:19:10 myhostname ipmon[17494]: 22:19:09.581939              
ep0 @0:17 b 216.40.217.210,80 -> my.ip.add.ress,2049 PR tcp len 20 48 -AS IN
Jun 11 22:19:14 myhostname ipmon[17494]: 22:19:14.075385              
ep0 @0:17 b 216.40.217.210,80 -> my.ip.add.ress,2049 PR tcp len 20 48 -AS IN
Jun 11 22:19:16 myhostname ipmon[17494]: 22:19:15.501978              
ep0 @0:17 b 216.40.217.210,80 -> my.ip.add.ress,2049 PR tcp len 20 48 -AS IN
Jun 11 22:19:26 myhostname ipmon[17494]: 22:19:25.934845              
ep0 @0:17 b 216.40.217.210,80 -> my.ip.add.ress,2049 PR tcp len 20 48 -AS IN
Jun 11 22:19:28 myhostname ipmon[17494]: 22:19:27.568988              
ep0 @0:17 b 216.40.217.210,80 -> my.ip.add.ress,2049 PR tcp len 20 48 -AS IN
Jun 11 22:19:51 myhostname ipmon[17494]: 22:19:51.126414              
ep0 @0:17 b 216.40.217.210,80 -> my.ip.add.ress,2049 PR tcp len 20 48 -AS IN
Jun 11 22:20:39 myhostname ipmon[17494]: 22:20:38.380869              
ep0 @0:17 b 216.40.217.210,80 -> my.ip.add.ress,2049 PR tcp len 20 48 -AS IN
Jun 12 22:00:30 myhostname ipmon[17494]: 22:00:30.387010              
ep0 @0:17 b 208.181.81.4,27015 -> my.ip.add.ress,2049 PR udp len 20 34  IN
Jun 12 22:00:32 myhostname ipmon[17494]: 22:00:32.054618              
ep0 @0:17 b 208.181.81.4,27015 -> my.ip.add.ress,2049 PR udp len 20 294  IN
Jun 12 22:00:34 myhostname ipmon[17494]: 22:00:33.654575              
ep0 @0:17 b 208.181.81.4,27015 -> my.ip.add.ress,2049 PR udp len 20 294  IN
Jun 12 22:00:35 myhostname ipmon[17494]: 22:00:35.271081              
ep0 @0:17 b 208.181.81.4,27015 -> my.ip.add.ress,2049 PR udp len 20 294  IN
Jun 12 22:00:37 myhostname ipmon[17494]: 22:00:36.893869              
ep0 @0:17 b 208.181.81.4,27015 -> my.ip.add.ress,2049 PR udp len 20 294  IN
Jun 12 23:33:42 myhostname ipmon[17494]: 23:33:41.478584              
ep0 @0:17 b 24.94.163.34,53 -> my.ip.add.ress,2049 PR udp len 20 80  IN
Jun 12 23:33:47 myhostname ipmon[17494]: 23:33:47.004067              
ep0 @0:17 b 24.94.163.33,53 -> my.ip.add.ress,2049 PR udp len 20 80  IN
Jun 12 23:33:53 myhostname ipmon[17494]: 23:33:52.519590              
ep0 @0:17 b 24.94.163.34,53 -> my.ip.add.ress,2049 PR udp len 20 80  IN
Jun 12 23:33:58 myhostname ipmon[17494]: 23:33:58.043324              
ep0 @0:17 b 24.94.163.33,53 -> my.ip.add.ress,2049 PR udp len 20 80  IN
Jun 12 23:34:04 myhostname ipmon[17494]: 23:34:03.570799              
ep0 @0:17 b 24.94.163.34,53 -> my.ip.add.ress,2049 PR udp len 20 80  IN
Jun 12 23:34:11 myhostname ipmon[17494]: 23:34:11.052687              
ep0 @0:17 b 24.94.163.33,53 -> my.ip.add.ress,2049 PR udp len 20 80  IN
Jun 12 23:34:18 myhostname ipmon[17494]: 23:34:18.568054              
ep0 @0:17 b 24.94.163.34,53 -> my.ip.add.ress,2049 PR udp len 20 80  IN
Jun 12 23:34:29 myhostname ipmon[17494]: 23:34:29.113097              
ep0 @0:17 b 24.94.163.33,53 -> my.ip.add.ress,2049 PR udp len 20 80  IN
Jun 13 17:31:24 myhostname ipmon[17494]: 17:31:24.201652              
ep0 @0:17 b 213.186.34.200,27016 -> my.ip.add.ress,2049 PR udp len 20 34  IN
Jun 13 17:31:26 myhostname ipmon[17494]: 17:31:26.190293              
ep0 @0:17 b 213.186.34.200,27016 -> my.ip.add.ress,2049 PR udp len 20 
282  IN
Jun 13 17:31:28 myhostname ipmon[17494]: 17:31:28.211345              
ep0 @0:17 b 213.186.34.200,27016 -> my.ip.add.ress,2049 PR udp len 20 
282  IN
Jun 13 17:31:30 myhostname ipmon[17494]: 17:31:30.150030              
ep0 @0:17 b 213.186.34.200,27016 -> my.ip.add.ress,2049 PR udp len 20 
282  IN
Jun 13 17:31:32 myhostname ipmon[17494]: 17:31:32.142371              
ep0 @0:17 b 213.186.34.200,27016 -> my.ip.add.ress,2049 PR udp len 20 
282  IN
Jun 13 17:55:36 myhostname ipmon[17494]: 17:55:35.646702              
ep0 @0:17 b 65.100.39.185,63427 -> my.ip.add.ress,2049 PR udp len 20 34  IN
Jun 13 17:55:37 myhostname ipmon[17494]: 17:55:36.780495              
ep0 @0:17 b 65.100.39.185,63427 -> my.ip.add.ress,2049 PR udp len 20 299  IN
Jun 13 17:55:38 myhostname ipmon[17494]: 17:55:37.937119              
ep0 @0:17 b 65.100.39.185,63427 -> my.ip.add.ress,2049 PR udp len 20 299  IN
Jun 13 17:55:39 myhostname ipmon[17494]: 17:55:39.012100              
ep0 @0:17 b 65.100.39.185,63427 -> my.ip.add.ress,2049 PR udp len 20 299  IN
Jun 13 17:55:40 myhostname ipmon[17494]: 17:55:40.348146              
ep0 @0:17 b 65.100.39.185,63427 -> my.ip.add.ress,2049 PR udp len 20 299  IN
Jun 13 21:43:32 myhostname ipmon[17494]: 21:43:32.432763              
ep0 @0:17 b 203.79.89.76,27015 -> my.ip.add.ress,2049 PR udp len 20 34  IN
Jun 13 21:43:35 myhostname ipmon[17494]: 21:43:34.415037              
ep0 @0:17 b 203.79.89.76,27015 -> my.ip.add.ress,2049 PR udp len 20 271  IN
Jun 13 21:43:37 myhostname ipmon[17494]: 21:43:36.430771              
ep0 @0:17 b 203.79.89.76,27015 -> my.ip.add.ress,2049 PR udp len 20 271  IN
Jun 13 21:43:39 myhostname ipmon[17494]: 21:43:38.460436              
ep0 @0:17 b 203.79.89.76,27015 -> my.ip.add.ress,2049 PR udp len 20 271  IN
Jun 13 21:43:41 myhostname ipmon[17494]: 21:43:40.467791              
ep0 @0:17 b 203.79.89.76,27015 -> my.ip.add.ress,2049 PR udp len 20 271  IN
Jun 14 17:11:56 myhostname ipmon[17494]: 17:11:55.599966              
ep0 @0:17 b 4.65.88.99,27015 -> my.ip.add.ress,2049 PR udp len 20 34  IN
Jun 14 17:11:57 myhostname ipmon[17494]: 17:11:57.382307              
ep0 @0:17 b 4.65.88.99,27015 -> my.ip.add.ress,2049 PR udp len 20 258  IN
Jun 14 17:11:59 myhostname ipmon[17494]: 17:11:59.185507              
ep0 @0:17 b 4.65.88.99,27015 -> my.ip.add.ress,2049 PR udp len 20 258  IN
Jun 14 17:12:01 myhostname ipmon[17494]: 17:12:01.018124              
ep0 @0:17 b 4.65.88.99,27015 -> my.ip.add.ress,2049 PR udp len 20 258  IN
Jun 14 17:12:03 myhostname ipmon[17494]: 17:12:02.857746              
ep0 @0:17 b 4.65.88.99,27015 -> my.ip.add.ress,2049 PR udp len 20 258  IN
Jun 14 18:30:27 myhostname ipmon[17494]: 18:30:27.059804              
ep0 @0:17 b 65.113.114.229,27015 -> my.ip.add.ress,2049 PR udp len 20 
1332  IN
Jun 15 09:58:25 myhostname ipmon[17494]: 09:58:24.956839              
ep0 @0:17 b 129.241.210.26,27016 -> my.ip.add.ress,2049 PR udp len 20 34  IN
Jun 15 09:58:26 myhostname ipmon[17494]: 09:58:25.785823 2x              
ep0 @0:17 b 129.241.210.26,27016 -> my.ip.add.ress,2049 PR udp len 20 
291  IN
Jun 15 09:58:28 myhostname ipmon[17494]: 09:58:28.333540              
ep0 @0:17 b 129.241.210.26,27016 -> my.ip.add.ress,2049 PR udp len 20 
291  IN
Jun 15 09:58:30 myhostname ipmon[17494]: 09:58:30.059013              
ep0 @0:17 b 129.241.210.26,27016 -> my.ip.add.ress,2049 PR udp len 20 
291  IN
Jun 15 12:00:35 myhostname ipmon[17494]: 12:00:34.939078              
ep0 @0:17 b 80.87.131.119,27030 -> my.ip.add.ress,2049 PR udp len 20 282  IN
Jun 16 12:27:42 myhostname ipmon[17494]: 12:27:41.240216              
ep0 @0:17 b 24.94.163.34,53 -> my.ip.add.ress,2049 PR udp len 20 192  IN
Jun 16 12:27:47 myhostname ipmon[17494]: 12:27:46.776347              
ep0 @0:17 b 24.94.163.33,53 -> my.ip.add.ress,2049 PR udp len 20 192  IN
Jun 16 12:27:53 myhostname ipmon[17494]: 12:27:52.261163              
ep0 @0:17 b 24.94.163.34,53 -> my.ip.add.ress,2049 PR udp len 20 192  IN
Jun 16 12:27:58 myhostname ipmon[17494]: 12:27:57.774463              
ep0 @0:17 b 24.94.163.33,53 -> my.ip.add.ress,2049 PR udp len 20 192  IN
Jun 16 12:28:03 myhostname ipmon[17494]: 12:28:03.284754              
ep0 @0:17 b 24.94.163.34,53 -> my.ip.add.ress,2049 PR udp len 20 192  IN
Jun 16 12:28:11 myhostname ipmon[17494]: 12:28:10.795783              
ep0 @0:17 b 24.94.163.33,53 -> my.ip.add.ress,2049 PR udp len 20 192  IN
Jun 16 12:28:18 myhostname ipmon[17494]: 12:28:18.304654              
ep0 @0:17 b 24.94.163.34,53 -> my.ip.add.ress,2049 PR udp len 20 192  IN
Jun 16 12:28:29 myhostname ipmon[17494]: 12:28:28.827489              
ep0 @0:17 b 24.94.163.33,53 -> my.ip.add.ress,2049 PR udp len 20 192  IN
Jun 16 21:24:22 myhostname ipmon[17494]: 21:24:21.503501              
ep0 @0:17 b 80.87.131.119,27030 -> my.ip.add.ress,2049 PR udp len 20 34  IN
Jun 16 21:24:24 myhostname ipmon[17494]: 21:24:23.460245              
ep0 @0:17 b 80.87.131.119,27030 -> my.ip.add.ress,2049 PR udp len 20 285  IN
Jun 16 21:24:26 myhostname ipmon[17494]: 21:24:25.464378              
ep0 @0:17 b 80.87.131.119,27030 -> my.ip.add.ress,2049 PR udp len 20 285  IN
Jun 16 21:24:28 myhostname ipmon[17494]: 21:24:27.490700              
ep0 @0:17 b 80.87.131.119,27030 -> my.ip.add.ress,2049 PR udp len 20 285  IN
Jun 16 21:24:30 myhostname ipmon[17494]: 21:24:29.540001              
ep0 @0:17 b 80.87.131.119,27030 -> my.ip.add.ress,2049 PR udp len 20 285  IN
Jun 17 19:54:27 myhostname ipmon[17494]: 19:54:26.339153              
ep0 @0:17 b 209.120.142.131,27015 -> my.ip.add.ress,2049 PR udp len 20 
1317  IN
Jun 18 17:51:14 myhostname ipmon[17494]: 17:51:13.809973              
ep0 @0:17 b 64.213.145.148,27015 -> my.ip.add.ress,2049 PR udp len 20 34  IN
Jun 18 17:51:16 myhostname ipmon[17494]: 17:51:15.514071              
ep0 @0:17 b 64.213.145.148,27015 -> my.ip.add.ress,2049 PR udp len 20 
294  IN
Jun 18 17:51:18 myhostname ipmon[17494]: 17:51:17.192464              
ep0 @0:17 b 64.213.145.148,27015 -> my.ip.add.ress,2049 PR udp len 20 
294  IN
Jun 18 17:51:19 myhostname ipmon[17494]: 17:51:18.851976              
ep0 @0:17 b 64.213.145.148,27015 -> my.ip.add.ress,2049 PR udp len 20 
294  IN
Jun 18 17:51:21 myhostname ipmon[17494]: 17:51:20.552184              
ep0 @0:17 b 64.213.145.148,27015 -> my.ip.add.ress,2049 PR udp len 20 
294  IN
Jun 18 18:08:08 myhostname ipmon[17494]: 18:08:07.804503              
ep0 @0:17 b 195.184.98.106,27016 -> my.ip.add.ress,2049 PR udp len 20 34  IN
Jun 18 18:08:10 myhostname ipmon[17494]: 18:08:09.271764              
ep0 @0:17 b 195.184.98.106,27016 -> my.ip.add.ress,2049 PR udp len 20 
276  IN
Jun 18 18:08:11 myhostname ipmon[17494]: 18:08:10.647702              
ep0 @0:17 b 195.184.98.106,27016 -> my.ip.add.ress,2049 PR udp len 20 
276  IN
Jun 18 18:08:12 myhostname ipmon[17494]: 18:08:11.995285              
ep0 @0:17 b 195.184.98.106,27016 -> my.ip.add.ress,2049 PR udp len 20 
276  IN
Jun 18 18:08:14 myhostname ipmon[17494]: 18:08:13.439755              
ep0 @0:17 b 195.184.98.106,27016 -> my.ip.add.ress,2049 PR udp len 20 
276  IN
Jun 18 19:50:22 myhostname ipmon[17108]: 19:50:22.299007              
ep0 @0:16 b 192.48.245.169,27015 -> my.ip.add.ress,2049 PR udp len 20 
1330  IN
Jun 19 20:07:49 myhostname ipmon[17108]: 20:07:49.298163              
ep0 @0:16 b 207.38.1.201,80 -> my.ip.add.ress,2049 PR tcp len 20 44 -AS IN
Jun 19 20:07:52 myhostname ipmon[17108]: 20:07:52.278798              
ep0 @0:16 b 207.38.1.201,80 -> my.ip.add.ress,2049 PR tcp len 20 44 -AS IN
Jun 19 20:07:58 myhostname ipmon[17108]: 20:07:58.294059              
ep0 @0:16 b 207.38.1.201,80 -> my.ip.add.ress,2049 PR tcp len 20 44 -AS IN
Jun 19 20:08:10 myhostname ipmon[17108]: 20:08:10.332739              
ep0 @0:16 b 207.38.1.201,80 -> my.ip.add.ress,2049 PR tcp len 20 44 -AS IN
Jun 19 21:09:47 myhostname ipmon[17108]: 21:09:47.086678 3x              
ep0 @0:16 b 200.255.244.39,27022 -> my.ip.add.ress,2049 PR udp len 20 34  IN
Jun 19 21:09:49 myhostname ipmon[17108]: 21:09:48.920738              
ep0 @0:16 b 200.255.244.39,27022 -> my.ip.add.ress,2049 PR udp len 20 
292  IN
Jun 19 22:10:26 myhostname ipmon[17108]: 22:10:26.038999              
ep0 @0:16 b 194.159.245.16,80 -> my.ip.add.ress,2049 PR tcp len 20 48 -AS IN
Jun 19 22:10:29 myhostname ipmon[17108]: 22:10:28.949967              
ep0 @0:16 b 194.159.245.16,80 -> my.ip.add.ress,2049 PR tcp len 20 40 -A IN
Jun 19 22:10:29 myhostname ipmon[17108]: 22:10:29.406198              
ep0 @0:16 b 194.159.245.16,80 -> my.ip.add.ress,2049 PR tcp len 20 48 -AS IN
Jun 19 22:10:35 myhostname ipmon[17108]: 22:10:34.952040              
ep0 @0:16 b 194.159.245.16,80 -> my.ip.add.ress,2049 PR tcp len 20 40 -A IN
Jun 19 22:10:36 myhostname ipmon[17108]: 22:10:36.157321              
ep0 @0:16 b 194.159.245.16,80 -> my.ip.add.ress,2049 PR tcp len 20 48 -AS IN
Jun 19 22:10:47 myhostname ipmon[17108]: 22:10:46.944541              
ep0 @0:16 b 194.159.245.16,80 -> my.ip.add.ress,2049 PR tcp len 20 40 -A IN
Jun 19 22:10:50 myhostname ipmon[17108]: 22:10:49.691923              
ep0 @0:16 b 194.159.245.16,80 -> my.ip.add.ress,2049 PR tcp len 20 48 -AS IN
Jun 19 22:11:17 myhostname ipmon[17108]: 22:11:16.689688              
ep0 @0:16 b 194.159.245.16,80 -> my.ip.add.ress,2049 PR tcp len 20 48 -AS IN
Jun 19 22:12:10 myhostname ipmon[17108]: 22:12:10.692513              
ep0 @0:16 b 194.159.245.16,80 -> my.ip.add.ress,2049 PR tcp len 20 48 -AS IN
Jun 19 22:13:11 myhostname ipmon[17108]: 22:13:10.694786              
ep0 @0:16 b 194.159.245.16,80 -> my.ip.add.ress,2049 PR tcp len 20 48 -AS IN
Jun 19 22:14:11 myhostname ipmon[17108]: 22:14:10.698046              
ep0 @0:16 b 194.159.245.16,80 -> my.ip.add.ress,2049 PR tcp len 20 40 -AR IN
Jun 20 18:18:52 myhostname ipmon[17108]: 18:18:52.118276              
ep0 @0:16 b 62.80.127.50,29000 -> my.ip.add.ress,2049 PR udp len 20 34  IN
Jun 20 18:18:53 myhostname ipmon[17108]: 18:18:53.601040              
ep0 @0:16 b 62.80.127.50,29000 -> my.ip.add.ress,2049 PR udp len 20 289  IN
Jun 20 18:18:55 myhostname ipmon[17108]: 18:18:54.906693 2x              
ep0 @0:16 b 62.80.127.50,29000 -> my.ip.add.ress,2049 PR udp len 20 289  IN
Jun 20 18:18:56 myhostname ipmon[17108]: 18:18:56.529689              
ep0 @0:16 b 62.80.127.50,29000 -> my.ip.add.ress,2049 PR udp len 20 289  IN
Jun 20 20:41:27 myhostname ipmon[17108]: 20:41:26.865177 2x              
ep0 @0:24 b 212.130.87.155,27016 -> my.ip.add.ress,2049 PR udp len 20 34  IN
Jun 20 20:41:28 myhostname ipmon[17108]: 20:41:28.204831 2x              
ep0 @0:24 b 212.130.87.155,27016 -> my.ip.add.ress,2049 PR udp len 20 
281  IN
Jun 20 20:41:29 myhostname ipmon[17108]: 20:41:29.061234              
ep0 @0:24 b 212.130.87.155,27016 -> my.ip.add.ress,2049 PR udp len 20 
281  IN
Jun 21 17:17:54 myhostname ipmon[17108]: 17:17:54.207694              
ep0 @0:20 b 192.215.175.7,27020 -> my.ip.add.ress,2049 PR udp len 20 34  IN
Jun 21 17:17:56 myhostname ipmon[17108]: 17:17:55.932691              
ep0 @0:20 b 192.215.175.7,27020 -> my.ip.add.ress,2049 PR udp len 20 296  IN
Jun 21 17:17:57 myhostname ipmon[17108]: 17:17:57.692395              
ep0 @0:20 b 192.215.175.7,27020 -> my.ip.add.ress,2049 PR udp len 20 296  IN
Jun 21 17:18:01 myhostname ipmon[17108]: 17:18:01.232084              
ep0 @0:20 b 192.215.175.7,27020 -> my.ip.add.ress,2049 PR udp len 20 296  IN
Jun 21 18:53:03 myhostname ipmon[17108]: 18:53:02.736009 3x              
ep0 @0:20 b 213.40.130.43,27015 -> my.ip.add.ress,2049 PR udp len 20 34  IN
Jun 21 18:53:04 myhostname ipmon[17108]: 18:53:03.994605 2x              
ep0 @0:20 b 213.40.130.43,27015 -> my.ip.add.ress,2049 PR udp len 20 300  IN

JARiley at dstsystems.com wrote:

>No one out on the Internet can be hitting your internal private IP
>directly.  There aren't any routes out there for private subnets.  I see
>you have a web site on tripod.  Have you thought about hosting your own
>website?  I use Road Runner and host my own website.
>James Riley
>Staff Systems Programmer
>DST Systems, Inc.
>816.737.6951
>
>
>
>
>                                                                                                
>                    Marvin GodfatherofSoul                                                      
>                    Bellamy                      To:     Kclug <kclug at kclug.org>                
>                    <mbellamy at kc.rr.com>         cc:                                            
>                    Sent by:                     Subject:     port scanning                     
>                    owner-kclug at marauder.i                                                      
>                    lliana.net                                                                  
>                                                                                                
>                                                                                                
>                    10/30/2002 09:13 AM                                                         
>                                                                                                
>                                                                                                
>
>
>
>
>I noticed some peculiar logs produced by my packet filter.  While there
>are the typical blocked attempts to connect to my firewall on service
>ports, I also see attempts to connect to my workstation using its
>internal IP address.  I know IPNAT disguises internal IPs, so some
>application must be giving it away.  I think I've seen Counter Strike
>publicize my internal IP, but I'm not aware of other applications doing
>this.  What's scary is I've seen attempts to connect to my network
>server.  Unless Konqueror broadcasts internal IPs, no other application
>on this machine should be hitting external addresses.  All the attempts
>on my  network server were for the NFS ports, which is running on that
>machine.  This was over a 3 month period some time ago and the attempts
>came from different addresses.
>
>Example:
>
>Jun 21 18:53:04 firewallhostname ipmon[17108]: 18:53:03.994605 2x
>ep0 @0:20 b 213.40.130.43,27015 -> my.ip.add.ress,2049 PR udp len 20 300
>IN
>
>Any ideas?
>
>--
>|/ ____ |/ | Marvin Keith Bellamy
> @~/ Oo ~@  | AKA GodfatherofSoul
>/_( __/ )_ | website:  http://godfatherofsoul.tripod.com
>   __U_/    | E-mail:   mbellamy at kc.rr.com
>
>
>
>
>
>
>
>
>
>
>  
>

-- 
|/ ____ |/ | Marvin Keith Bellamy
 @~/ Oo ~@  | AKA GodfatherofSoul
/_( __/ )_ | website:  http://godfatherofsoul.tripod.com
   __U_/    | E-mail:   mbellamy at kc.rr.com




More information about the Kclug mailing list