[SpamCop-Geeks] Re: How is this IP addy possible?

Sue Morton spamcop-geeks
Thu, 6 Sep 2001 06:30:35 -0700


Hi Robi,

What is it you're looking at that tells you the addy is coming from
somewhere within CWNET?  Just because it's a 10.x.x.x addy?  I'd like to
know how you know, thanks...

--
Sue Morton


"Robi" <r_buecheler> wrote in message
news:9n5kur$b0p$1
> Sue, if I understand your headers correctly, you're on CWNET
>
> NNTP-Posting-Host: hiper2-d189.stk.cwnet.com
> hiper2-d189.stk.cwnet.com [209.209.112.189]
>
> someone on the same network might have a misconfigured router or
something.
> FWIW the scan is coming from somewhere inside of CWNET's network.
>
> The cause could be either HipCrimes new Agent or the Code Red trying to
> spread via HTTP. (I think it was CR who spreads that way).
>
> You might even try a tracert.
>
>
> HTH
>
> Robi
>
> "Sue Morton" <smnobody> wrote in message
> news:9n5asd$60m$1
> > Hello Geeks,
> >
> > This morning I just happened to notice ZAPro logged the following alert
> > while I was on the internet:
> >
> >   The firewall has blocked Internet access to your computer (HTTP) from
> > 10.16.1.51 (TCP Port 2757) [TCP Flags: S]. Time: 9/5/2001 6:00:36 AM
> >
> > I am still connected using the same dial-up session, it is now 6:43am on
> > 9/5.  ipconfig reports my current addy as 209.209.112.189.
> >
> > I find the logged IP addy quite curious... I'm no geek on TCP/IP but
this
> > looks like a private network addy?
> >
> > This PC I'm using is standalone, not on any network, only has an
internal
> > winmodem no ethernet or other network card.  I do occasionally connect
> with
> > this PC to a private network using VPN over my internet dial-up
> connection,
> > but have not done so for several days (definitely not today) and have
had
> > several reboots since the last time I used VPN on this PC.  I believe
the
> > network I connect with only uses 10.1.xxx.xxx addys anyway, not
> > 10.16.xxx.xxx.
> >
> > Would someone educate me on this situation?  I'm curious as I've not
seen
> an
> > addy like this one come through ZAPro before.  TIA for
help/enlightenment.
> >
> > --
> > Sue Morton
> >
> >
> >
> >
>
>