//flex table opened by JP

Click to See Complete Forum and Search --> : incoming traffic blocked at Ghost PC 213.243.161.123,my IP different


jarauta4
08-23-2002, 12:59 PM
Somehow I got disconnected a few minutes ago when I tried to post,my IP for this new session
is different from what it says below but don't let it confuse,anyhow,here's what I wrote while
the previous IP was good :

How come some IP-addresses being blocked by my software firewall don't go
along with my true IP which is 213.243.169.55 ?.
I do get assigned this IP 213.243.161.123 often,though,but WHY DOES it
appear as a destination+mycomp in my block list NOW :

2002/08/23 16:31:42 GMT +0300: 3Com EtherLink 10..[0002][No matching rule]
Blocking incoming TCP:
src=213.243.177.156, dst=213.243.161.123, sport=2552, dport=80.
2002/08/23 16:31:46 GMT +0300: 3Com EtherLink 10..[0002][No matching rule]
Blocking incoming TCP:
src=213.243.177.156, dst=213.243.161.123, sport=2552, dport=80.

2002/08/23 16:36:34 GMT +0300: 3Com EtherLink 10..[0002][No matching rule]
Blocking incoming TCP:
src=202.100.17.22, dst=213.243.161.123, sport=1348, dport=111.

2002/08/23 16:36:36 GMT +0300: 3Com EtherLink 10..[0002][Ref# 112]
Blocking incoming TCP:
src=202.100.17.22, dst=213.243.169.55, sport=3325, dport=111.

2002/08/23 17:16:13 GMT +0300:3Com
EtherLink 10..[0002][No matching rule]
Blocking incoming TCP:
src=213.176.89.223, dst=213.243.161.123, sport=4902, dport=80.

dst=213.243.161.123=cs161123.pp.htv.fi= ... ghost IP/COMP ... or what

dst=213.243.169.55 =cs169055.pp.htv.fi=mycomp

Do I have to be worried,has a Trojan or something hi-jacked my win98 machine
or what ?.Virus scans and spyware scans didn't detect anything.Everything
works allright except this IP switching thing.What is it ?.

This is my IP during this net session : 213.243.169.55

Here's info copied out of Winipcfg :

Windows 98 IP Configuration

Host Name . . . . . . . . . : JARIRAUT.pp.htv.fi
DNS Servers . . . . . . . . : 213.243.153.11
212.90.64.52
Node Type . . . . . . . . . : Broadcast
NetBIOS Scope ID. . . . . . :
IP Routing Enabled. . . . . : No
WINS Proxy Enabled. . . . . : No
NetBIOS Resolution Uses DNS : No

Ethernet adapter :

Description . . . . . . . . : PPP Adapter.
Physical Address. . . . . . : 44-45-53-54-00-00
DHCP Enabled. . . . . . . . : Yes
IP Address. . . . . . . . . : 0.0.0.0
Subnet Mask . . . . . . . . : 0.0.0.0
Default Gateway . . . . . . :
DHCP Server . . . . . . . . : 255.255.255.255
Primary WINS Server . . . . :
Secondary WINS Server . . . :
Lease Obtained. . . . . . . :
Lease Expires . . . . . . . :

Ethernet adapter :

Description . . . . . . . . : 3Com EtherLink PCI
Physical Address. . . . . . : 00-04-75-82-3C-F1
DHCP Enabled. . . . . . . . : Yes
IP Address. . . . . . . . . : 213.243.169.55
Subnet Mask . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . : 213.243.169.1
DHCP Server . . . . . . . . : 212.90.64.100
Primary WINS Server . . . . :
Secondary WINS Server . . . :
Lease Obtained. . . . . . . : 08 22 02 14:24:06
Lease Expires . . . . . . . : 08 22 02 19:24:06

One single PC,no shared connections.