The originating IP was either spoofed they are currently experiencing network problems. From the 1000 ms+ responses I'd say it is network problems. What your seeing here is a routing loop. 211.103.56.2 points to 211.103.56.1 to get to 211.103.59.95. 211.103.56.1 points back at 211.103.56.2 (This may be either a static route for the Network/IP or a default gateway.) Basically what your seeing is it does not know how to get to the IP that scanned you. Derek Samford -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 14, 2001 12:44 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: I recently ran a tracert on a IP that had been scanning some of the systems I am responsible for and received some strange results. I was wondering if any of you could shed some light on this Issue. ------------------------------------------------------------------------- >From a Windows system: Tracing route to 211.103.59.95 over a maximum of 30 hops 1 ... 2 ... 3 ... 4 ... 5 ... 6 ... 7 .... 8 <10 ms <10 ms <10 ms 195.at-0-0-0.TR1.DCA8.ALTER.NET [152.63.32.158] 9 63 ms 94 ms 78 ms 115.at-6-1-0.TR3.SCL1.ALTER.NET [152.63.3.194] 10 78 ms 78 ms 78 ms 399.ATM6-0.XR1.PAO1.ALTER.NET [152.63.48.217] 11 63 ms 78 ms 78 ms 189.ATM5-0.GW7.PAO1.ALTER.NET [152.63.49.153] 12 62 ms 78 ms 94 ms hkt-gw2.customer.ALTER.NET [157.130.197.190] 13 63 ms 79 ms 93 ms g1-0.paix04.hkt.net [202.84.128.172] 14 1313 ms 1297 ms 1296 ms p5-0.yckbr03.hkt.net [202.84.128.221] 15 1266 ms 1297 ms 1265 ms 202.84.140.1 16 1265 ms 1282 ms 1265 ms pos7-0.tmhstcbr01.hkt.net [207.176.97.129] 17 1266 ms 1265 ms 1344 ms 207.176.96.68 18 1359 ms 1359 ms 1375 ms 207.176.98.38 19 1485 ms 1375 ms 1375 ms 211.103.6.146 20 1391 ms 1375 ms 1421 ms 211.103.56.2 21 1375 ms 1375 ms 1360 ms 211.103.56.1 22 1360 ms 1390 ms 1344 ms 211.103.56.2 23 1328 ms 1328 ms 1375 ms 211.103.56.1 24 1406 ms 1407 ms 1406 ms 211.103.56.2 25 1422 ms 1453 ms 1484 ms 211.103.56.1 26 1312 ms 1281 ms 1219 ms 211.103.56.2 27 1157 ms 1140 ms 1141 ms 211.103.56.1 28 1141 ms 1125 ms 1109 ms 211.103.56.2 29 1125 ms 1125 ms 1110 ms 211.103.56.1 30 1203 ms 1188 ms 1187 ms 211.103.56.2 ---------------------------------------------------------------------------- ---------- Brett J. Carpenter --------------------------------------------- This message was sent using Voicenet WebMail. http://www.voicenet.com/webmail/ - [To unsubscribe, send mail to [EMAIL PROTECTED] with "unsubscribe firewalls" in the body of the message.] - [To unsubscribe, send mail to [EMAIL PROTECTED] with "unsubscribe firewalls" in the body of the message.]
