It's not a routable address (in the sense of Internet routable) - read RFC
1918.

However, it can be used - perfectly properly - within your ISP's area of
influence.  For example, overlaying the 12.0.0.0/8 space AT&T (now Comcast)
uses for their cable modem system is a 10.0.0.0/8 space assignments used for
the management interfaces of the Cable Modems.

AT&T/Comcast may choose to route these addresses within their internal
networks, that's perfectly ok.  But they're not allowed to leak these
addresses to the public Internet.

This means every device has two IP addresses (perfectly legal), one which is
exposed to the public and one which - absent some work on the users' part -
is hidden and NOT exposed to the public.  Also perfectly legal.

The 10. address is probably spoofed, or it's coming from inside...

-----Burton

-----Original Message-----
From: Damon McMahon [mailto:[EMAIL PROTECTED]
Sent: Monday, July 07, 2003 12:46 AM
To: [EMAIL PROTECTED]
Subject: Continued probing with source IP 10.x.x.x


Greetings,

My firewall logs are recording repeated hits on 110/tcp (POP3) from what I
believe is a privately-assigned IP address - 10.128.108.4. All of these hits
have the ACK flag set, some of them have combinations of the PUSH, RST or
SYN flags set too.

I have a POP server on our network but it services internal requests from
our internal 192.168.0.0/24 subnet only.

We have a dynamic public IP address, but this phenomenon is spanning DHCP
reassignments of this address.

Is this a simple port scan from outside, or should I be more worried?

Any assistance or advice will be appreciated!

Damon

_________________________________________________________________
Hotmail is now available on Australian mobile phones. Go to
http://ninemsn.com.au/mobilecentral/signup.asp


---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.

Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.

Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------


---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------

Reply via email to