Port Scan

Rasjid rasjidw at bigpond.com
Fri Oct 12 00:25:48 EST 2001


Having installed Smoothwall recently, I've been curious to see just how
much scanning I am subject to.  It seems that I had a scan from
61.183.133.14

What interested me was the traceroute:

traceroute to 61.183.133.14 (61.183.133.14), 30 hops max, 38 byte
packets
 1  <me>
<snip>
 5  GigabitEthernet0-0-0.civ-core2.Canberra.telstra.net (203.50.10.129) 
99.589 ms  98.745 ms  109.615
ms
<snip>
10  GigabitEthernet4-0.wel-gw1.Perth.telstra.net (203.50.113.18) 
159.559 ms  148.766 ms  149.717 ms
11  wel-hkt.HongKong.net.reach.com (203.50.126.70)  239.605 ms  248.786
ms  249.513 ms
<snip>
17  p-2-1-r1-a-hbwh-1.cn.net (202.97.40.50)  519.347 ms  508.721 ms 
519.378 ms
18  202.103.28.1 (202.103.28.1)  519.378 ms  508.843 ms  509.351 ms
19  202.110.130.2 (202.110.130.2)  509.443 ms  518.754 ms  509.495 ms
20  192.168.17.1 (192.168.17.1)  539.499 ms  475.948 ms  479.551 ms
21  61.183.133.14 (61.183.133.14)  1248.956 ms  588.728 ms  589.466 ms

Hop 20: I didn't think that 192.168.17.1 was a routable address, or have
I misunderstood something?  Or is this a case of IP spoofing in the act?

Rasjid.




More information about the linux mailing list