Monthly Archives: February 2014

Well, as you might remember, having migrated all of the self-hosted websites to the Arizona host from the Rugby infrastructure (so there are no domains pointing to the static IP address here), I closed port 80 on the router.

That was a week ago.

This evening, just for a laugh, I opened port 80 on the router. You have to remember that there are no domains hosted in Rugby, so there can be nothing pointing to a domain inside the router.

As soon as I saved the new #open port 80# config on the router, the port 80 calls started appearing:

[LAN access from remote] from 123.125.71.13:20876 to 192.168.1.9:80 Thursday, Feb 27,2014 17:47:41
[LAN access from remote] from 220.181.108.99:33261 to 192.168.1.9:80 Thursday, Feb 27,2014 17:43:59
[LAN access from remote] from 116.83.69.235:48491 to 192.168.1.9:80 Thursday, Feb 27,2014 17:42:49
[LAN access from remote] from 186.93.250.149:60705 to 192.168.1.9:80 Thursday, Feb 27,2014 17:18:47
[LAN access from remote] from 186.93.250.149:60300 to 192.168.1.9:80 Thursday, Feb 27,2014 17:18:46
[LAN access from remote] from 186.93.250.149:60125 to 192.168.1.9:80 Thursday, Feb 27,2014 17:18:45
[LAN access from remote] from 186.93.250.149:59920 to 192.168.1.9:80 Thursday, Feb 27,2014 17:18:44
[LAN access from remote] from 186.93.250.149:59862 to 192.168.1.9:80 Thursday, Feb 27,2014 17:18:44
[LAN access from remote] from 179.60.148.11:34017 to 192.168.1.9:80 Thursday, Feb 27,2014 17:18:38
[LAN access from remote] from 220.181.108.78:15213 to 192.168.1.9:80 Thursday, Feb 27,2014 16:53:14
[LAN access from remote] from 123.125.71.17:54235 to 192.168.1.9:80 Thursday, Feb 27,2014 16:52:23
[LAN access from remote] from 179.60.148.11:55732 to 192.168.1.9:80 Thursday, Feb 27,2014 16:30:56
[LAN access from remote] from 220.181.108.100:50027 to 192.168.1.9:80 Thursday, Feb 27,2014 15:43:21
[LAN access from remote] from 123.125.71.17:16481 to 192.168.1.9:80 Thursday, Feb 27,2014 15:42:36
[LAN access from remote] from 123.125.71.45:53286 to 192.168.1.9:80 Thursday, Feb 27,2014 14:46:49
[LAN access from remote] from 220.181.108.117:14815 to 192.168.1.9:80 Thursday, Feb 27,2014 14:43:55
[LAN access from remote] from 123.125.71.45:30651 to 192.168.1.9:80 Thursday, Feb 27,2014 13:55:58
[LAN access from remote] from 220.181.108.90:51256 to 192.168.1.9:80 Thursday, Feb 27,2014 13:48:08

So, it’s safe to assume that all of these (and probably most of the historic)  port 80 calls are routing to the static IP address configured inside the router, not to any domain name.

Interesting.

The router log does, it seems, record some activity, but not all, even though all ports are now closed in the primary firewall.

The router log continues to show the MAC addresses of the devices that attach to it (chiefly my phone and laptops), it also records non-specific port activity, like this:

[DoS attack: FIN Scan] attack packets in last 20 sec from ip [77.247.179.176], Thursday, Feb 20,2014 05:33:54
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [77.247.179.176], Thursday, Feb 20,2014 05:31:10
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [77.247.179.176], Thursday, Feb 20,2014 05:29:46
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [77.247.179.176], Thursday, Feb 20,2014 05:27:13
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [77.247.179.176], Thursday, Feb 20,2014 05:25:42
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [77.247.179.176], Thursday, Feb 20,2014 05:24:15
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [77.247.179.176], Thursday, Feb 20,2014 05:22:21
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [77.247.179.176], Thursday, Feb 20,2014 05:21:59
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [77.247.179.176], Thursday, Feb 20,2014 05:20:23
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [77.247.179.176], Thursday, Feb 20,2014 05:17:53
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [77.247.179.176], Thursday, Feb 20,2014 05:16:09
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [77.247.179.176], Thursday, Feb 20,2014 05:14:54
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [77.247.179.176], Wednesday, Feb 19,2014 17:57:00

Someone in the Netherlands seems to be trying to bring my system down, but with no ports open, all that’s happening is my router is recording the external activity (and promptly ignoring it).

Interesting.

And, for reasons that I’ll go in to another time, I thought ‘Well, I’ve got half an hour, why not migrate those websites off the HP Server array, over to Arizona, and shut Port 80 on my router?’

So I did.

I took local copies of the five MySQL databases, created five new MySQL databases in Arizona, imported the appropriate copies of the local MySQL databases in to each of the appropriate new MySQL databases, FTPd the five .php environments to the five new webspaces, made myself a cup of tea, and then pointed the IP and NameServers for each of the five domain names from the HP Server address, over to the Arizona address.

Then I shut my local router to all internet traffic.

I’ll review the router log tonight; it’ll be interesting reading because I don’t know if it will record all failed attempts in the same way that it recorded all successful attempts.

I’ll also check the NAS access log (as it acts as DHCP server).

My internal LAN (NAS/DHCP server, plus HP Server A, and HP Server B) are all still accessible to me from within my network.

The downside of this is that I can’t perform remote admin on the NAS, HP Server A, or HP Server B, while I have all ports shut down on the router.

Well, I’ll keep an eye on the server log, and maybe I’ll open up just the one port I need for remote access.

We’ll see.

Not only is port 110 closed on the router, but the IP address 211.103.207.222 is banned for life by my secondary firewall.

And yet still the persistent Chinese bot continues its fruitless quest:

[LAN access from remote] from 211.103.207.222:33675 to 192.168.1.9:110 Monday, Feb 17,2014 21:31:21
[LAN access from remote] from 211.103.207.222:60791 to 192.168.1.9:110 Monday, Feb 17,2014 21:31:03
[LAN access from remote] from 211.103.207.222:59472 to 192.168.1.9:110 Monday, Feb 17,2014 21:30:45
[LAN access from remote] from 211.103.207.222:58087 to 192.168.1.9:110 Monday, Feb 17,2014 21:30:27
[LAN access from remote] from 211.103.207.222:56715 to 192.168.1.9:110 Monday, Feb 17,2014 21:30:09
[LAN access from remote] from 211.103.207.222:55448 to 192.168.1.9:110 Monday, Feb 17,2014 21:29:51
[LAN access from remote] from 211.103.207.222:41405 to 192.168.1.9:110 Monday, Feb 17,2014 21:29:33
[LAN access from remote] from 211.103.207.222:40052 to 192.168.1.9:110 Monday, Feb 17,2014 21:29:15
[LAN access from remote] from 211.103.207.222:38677 to 192.168.1.9:110 Monday, Feb 17,2014 21:28:56
[LAN access from remote] from 211.103.207.222:37488 to 192.168.1.9:110 Monday, Feb 17,2014 21:28:39
[LAN access from remote] from 211.103.207.222:36324 to 192.168.1.9:110 Monday, Feb 17,2014 21:28:19
[LAN access from remote] from 211.103.207.222:35050 to 192.168.1.9:110 Monday, Feb 17,2014 21:28:02
[LAN access from remote] from 211.103.207.222:33764 to 192.168.1.9:110 Monday, Feb 17,2014 21:27:43
[LAN access from remote] from 211.103.207.222:60648 to 192.168.1.9:110 Monday, Feb 17,2014 21:27:25
[LAN access from remote] from 211.103.207.222:59300 to 192.168.1.9:110 Monday, Feb 17,2014 21:27:08
[LAN access from remote] from 211.103.207.222:57975 to 192.168.1.9:110 Monday, Feb 17,2014 21:26:50
[LAN access from remote] from 211.103.207.222:56738 to 192.168.1.9:110 Monday, Feb 17,2014 21:26:32
[LAN access from remote] from 211.103.207.222:55391 to 192.168.1.9:110 Monday, Feb 17,2014 21:26:13
[LAN access from remote] from 211.103.207.222:54170 to 192.168.1.9:110 Monday, Feb 17,2014 21:25:55
[LAN access from remote] from 211.103.207.222:52828 to 192.168.1.9:110 Monday, Feb 17,2014 21:25:38
[LAN access from remote] from 211.103.207.222:51482 to 192.168.1.9:110 Monday, Feb 17,2014 21:25:19
[LAN access from remote] from 211.103.207.222:50091 to 192.168.1.9:110 Monday, Feb 17,2014 21:25:01
[LAN access from remote] from 211.103.207.222:33887 to 192.168.1.9:110 Monday, Feb 17,2014 21:24:25
[LAN access from remote] from 211.103.207.222:60858 to 192.168.1.9:110 Monday, Feb 17,2014 21:24:07
[LAN access from remote] from 211.103.207.222:59534 to 192.168.1.9:110 Monday, Feb 17,2014 21:23:49
[LAN access from remote] from 211.103.207.222:58181 to 192.168.1.9:110 Monday, Feb 17,2014 21:23:31
[LAN access from remote] from 211.103.207.222:56797 to 192.168.1.9:110 Monday, Feb 17,2014 21:23:13
[LAN access from remote] from 211.103.207.222:55423 to 192.168.1.9:110 Monday, Feb 17,2014 21:22:55
[LAN access from remote] from 211.103.207.222:54082 to 192.168.1.9:110 Monday, Feb 17,2014 21:22:37
[LAN access from remote] from 211.103.207.222:52689 to 192.168.1.9:110 Monday, Feb 17,2014 21:22:19
[LAN access from remote] from 211.103.207.222:51316 to 192.168.1.9:110 Monday, Feb 17,2014 21:22:01
[LAN access from remote] from 211.103.207.222:49968 to 192.168.1.9:110 Monday, Feb 17,2014 21:21:43
[LAN access from remote] from 211.103.207.222:48595 to 192.168.1.9:110 Monday, Feb 17,2014 21:21:25
[LAN access from remote] from 211.103.207.222:47238 to 192.168.1.9:110 Monday, Feb 17,2014 21:21:07
[LAN access from remote] from 211.103.207.222:45865 to 192.168.1.9:110 Monday, Feb 17,2014 21:20:49
[LAN access from remote] from 211.103.207.222:44537 to 192.168.1.9:110 Monday, Feb 17,2014 21:20:31
[LAN access from remote] from 211.103.207.222:43156 to 192.168.1.9:110 Monday, Feb 17,2014 21:20:13
[LAN access from remote] from 211.103.207.222:41796 to 192.168.1.9:110 Monday, Feb 17,2014 21:19:55
[LAN access from remote] from 211.103.207.222:50769 to 192.168.1.9:110 Monday, Feb 17,2014 21:19:37
[LAN access from remote] from 211.103.207.222:49395 to 192.168.1.9:110 Monday, Feb 17,2014 21:19:19
[LAN access from remote] from 211.103.207.222:48027 to 192.168.1.9:110 Monday, Feb 17,2014 21:19:01
[LAN access from remote] from 211.103.207.222:46673 to 192.168.1.9:110 Monday, Feb 17,2014 21:18:43
[LAN access from remote] from 211.103.207.222:45378 to 192.168.1.9:110 Monday, Feb 17,2014 21:18:25
[LAN access from remote] from 211.103.207.222:44025 to 192.168.1.9:110 Monday, Feb 17,2014 21:18:07
[LAN access from remote] from 211.103.207.222:42684 to 192.168.1.9:110 Monday, Feb 17,2014 21:17:49
[LAN access from remote] from 211.103.207.222:41370 to 192.168.1.9:110 Monday, Feb 17,2014 21:17:31
[LAN access from remote] from 211.103.207.222:40019 to 192.168.1.9:110 Monday, Feb 17,2014 21:17:13
[LAN access from remote] from 211.103.207.222:38658 to 192.168.1.9:110 Monday, Feb 17,2014 21:16:55
[LAN access from remote] from 211.103.207.222:37264 to 192.168.1.9:110 Monday, Feb 17,2014 21:16:37
[LAN access from remote] from 211.103.207.222:35889 to 192.168.1.9:110 Monday, Feb 17,2014 21:16:19
[LAN access from remote] from 211.103.207.222:34480 to 192.168.1.9:110 Monday, Feb 17,2014 21:16:01
[LAN access from remote] from 211.103.207.222:33076 to 192.168.1.9:110 Monday, Feb 17,2014 21:15:43
[LAN access from remote] from 211.103.207.222:59959 to 192.168.1.9:110 Monday, Feb 17,2014 21:15:25
[LAN access from remote] from 211.103.207.222:58566 to 192.168.1.9:110 Monday, Feb 17,2014 21:15:07
[LAN access from remote] from 211.103.207.222:57159 to 192.168.1.9:110 Monday, Feb 17,2014 21:14:49
[LAN access from remote] from 211.103.207.222:43635 to 192.168.1.9:110 Monday, Feb 17,2014 21:14:31
[LAN access from remote] from 211.103.207.222:42239 to 192.168.1.9:110 Monday, Feb 17,2014 21:14:13
[LAN access from remote] from 211.103.207.222:40809 to 192.168.1.9:110 Monday, Feb 17,2014 21:13:55
[LAN access from remote] from 211.103.207.222:39400 to 192.168.1.9:110 Monday, Feb 17,2014 21:13:37
[LAN access from remote] from 211.103.207.222:38019 to 192.168.1.9:110 Monday, Feb 17,2014 21:13:19
[LAN access from remote] from 211.103.207.222:36622 to 192.168.1.9:110 Monday, Feb 17,2014 21:13:01
[LAN access from remote] from 211.103.207.222:35229 to 192.168.1.9:110 Monday, Feb 17,2014 21:12:43
[LAN access from remote] from 211.103.207.222:33811 to 192.168.1.9:110 Monday, Feb 17,2014 21:12:25
[LAN access from remote] from 211.103.207.222:60685 to 192.168.1.9:110 Monday, Feb 17,2014 21:12:07
[LAN access from remote] from 211.103.207.222:59316 to 192.168.1.9:110 Monday, Feb 17,2014 21:11:49
[LAN access from remote] from 211.103.207.222:57924 to 192.168.1.9:110 Monday, Feb 17,2014 21:11:31
[LAN access from remote] from 211.103.207.222:56526 to 192.168.1.9:110 Monday, Feb 17,2014 21:11:13
[LAN access from remote] from 211.103.207.222:55178 to 192.168.1.9:110 Monday, Feb 17,2014 21:10:55
[LAN access from remote] from 211.103.207.222:53784 to 192.168.1.9:110 Monday, Feb 17,2014 21:10:37
[LAN access from remote] from 211.103.207.222:52393 to 192.168.1.9:110 Monday, Feb 17,2014 21:10:19
[LAN access from remote] from 211.103.207.222:51045 to 192.168.1.9:110 Monday, Feb 17,2014 21:10:01
[LAN access from remote] from 211.103.207.222:58591 to 192.168.1.9:110 Monday, Feb 17,2014 21:09:43
[LAN access from remote] from 211.103.207.222:57174 to 192.168.1.9:110 Monday, Feb 17,2014 21:09:25
[LAN access from remote] from 211.103.207.222:55767 to 192.168.1.9:110 Monday, Feb 17,2014 21:09:07
[LAN access from remote] from 211.103.207.222:54420 to 192.168.1.9:110 Monday, Feb 17,2014 21:08:49
[LAN access from remote] from 211.103.207.222:53041 to 192.168.1.9:110 Monday, Feb 17,2014 21:08:31
[LAN access from remote] from 211.103.207.222:51666 to 192.168.1.9:110 Monday, Feb 17,2014 21:08:13
[LAN access from remote] from 211.103.207.222:50309 to 192.168.1.9:110 Monday, Feb 17,2014 21:07:54
[LAN access from remote] from 211.103.207.222:48968 to 192.168.1.9:110 Monday, Feb 17,2014 21:07:37
[LAN access from remote] from 211.103.207.222:47604 to 192.168.1.9:110 Monday, Feb 17,2014 21:07:19
[LAN access from remote] from 211.103.207.222:46254 to 192.168.1.9:110 Monday, Feb 17,2014 21:07:01
[LAN access from remote] from 211.103.207.222:44881 to 192.168.1.9:110 Monday, Feb 17,2014 21:06:42
[LAN access from remote] from 211.103.207.222:43564 to 192.168.1.9:110 Monday, Feb 17,2014 21:06:25
[LAN access from remote] from 211.103.207.222:42200 to 192.168.1.9:110 Monday, Feb 17,2014 21:06:07
[LAN access from remote] from 211.103.207.222:40854 to 192.168.1.9:110 Monday, Feb 17,2014 21:05:48
[LAN access from remote] from 211.103.207.222:39489 to 192.168.1.9:110 Monday, Feb 17,2014 21:05:30
[LAN access from remote] from 211.103.207.222:38153 to 192.168.1.9:110 Monday, Feb 17,2014 21:05:13
[LAN access from remote] from 211.103.207.222:59627 to 192.168.1.9:110 Monday, Feb 17,2014 21:01:36
[LAN access from remote] from 211.103.207.222:58342 to 192.168.1.9:110 Monday, Feb 17,2014 21:01:18
[LAN access from remote] from 211.103.207.222:57123 to 192.168.1.9:110 Monday, Feb 17,2014 21:01:01
[LAN access from remote] from 211.103.207.222:55883 to 192.168.1.9:110 Monday, Feb 17,2014 21:00:42
[LAN access from remote] from 211.103.207.222:54677 to 192.168.1.9:110 Monday, Feb 17,2014 21:00:24
[LAN access from remote] from 211.103.207.222:53485 to 192.168.1.9:110 Monday, Feb 17,2014 21:00:06
[LAN access from remote] from 211.103.207.222:52303 to 192.168.1.9:110 Monday, Feb 17,2014 20:59:48
[LAN access from remote] from 211.103.207.222:34775 to 192.168.1.9:110 Monday, Feb 17,2014 20:58:54
[LAN access from remote] from 211.103.207.222:33640 to 192.168.1.9:110 Monday, Feb 17,2014 20:58:36
[LAN access from remote] from 211.103.207.222:60733 to 192.168.1.9:110 Monday, Feb 17,2014 20:58:18
[LAN access from remote] from 211.103.207.222:59616 to 192.168.1.9:110 Monday, Feb 17,2014 20:58:00
[LAN access from remote] from 211.103.207.222:58464 to 192.168.1.9:110 Monday, Feb 17,2014 20:57:42
[LAN access from remote] from 211.103.207.222:57320 to 192.168.1.9:110 Monday, Feb 17,2014 20:57:24
[LAN access from remote] from 211.103.207.222:56179 to 192.168.1.9:110 Monday, Feb 17,2014 20:57:06
[LAN access from remote] from 211.103.207.222:55097 to 192.168.1.9:110 Monday, Feb 17,2014 20:56:48
[LAN access from remote] from 211.103.207.222:53948 to 192.168.1.9:110 Monday, Feb 17,2014 20:56:30
[LAN access from remote] from 211.103.207.222:52802 to 192.168.1.9:110 Monday, Feb 17,2014 20:56:12
[LAN access from remote] from 211.103.207.222:51661 to 192.168.1.9:110 Monday, Feb 17,2014 20:55:54
[LAN access from remote] from 211.103.207.222:50587 to 192.168.1.9:110 Monday, Feb 17,2014 20:55:36
[LAN access from remote] from 211.103.207.222:49442 to 192.168.1.9:110 Monday, Feb 17,2014 20:55:18
[LAN access from remote] from 211.103.207.222:48260 to 192.168.1.9:110 Monday, Feb 17,2014 20:55:00
[LAN access from remote] from 211.103.207.222:60636 to 192.168.1.9:110 Monday, Feb 17,2014 20:54:42
[LAN access from remote] from 211.103.207.222:59409 to 192.168.1.9:110 Monday, Feb 17,2014 20:54:24
[LAN access from remote] from 211.103.207.222:58185 to 192.168.1.9:110 Monday, Feb 17,2014 20:54:06
[LAN access from remote] from 211.103.207.222:56955 to 192.168.1.9:110 Monday, Feb 17,2014 20:53:48
[LAN access from remote] from 211.103.207.222:55776 to 192.168.1.9:110 Monday, Feb 17,2014 20:53:30
[LAN access from remote] from 211.103.207.222:54564 to 192.168.1.9:110 Monday, Feb 17,2014 20:53:12
[LAN access from remote] from 211.103.207.222:53337 to 192.168.1.9:110 Monday, Feb 17,2014 20:52:54
[LAN access from remote] from 211.103.207.222:52173 to 192.168.1.9:110 Monday, Feb 17,2014 20:52:36
[LAN access from remote] from 211.103.207.222:50971 to 192.168.1.9:110 Monday, Feb 17,2014 20:52:18
[LAN access from remote] from 211.103.207.222:49761 to 192.168.1.9:110 Monday, Feb 17,2014 20:52:00
[LAN access from remote] from 211.103.207.222:48556 to 192.168.1.9:110 Monday, Feb 17,2014 20:51:42
[LAN access from remote] from 211.103.207.222:47396 to 192.168.1.9:110 Monday, Feb 17,2014 20:51:24
[LAN access from remote] from 211.103.207.222:46182 to 192.168.1.9:110 Monday, Feb 17,2014 20:51:06
[LAN access from remote] from 211.103.207.222:44981 to 192.168.1.9:110 Monday, Feb 17,2014 20:50:48
[LAN access from remote] from 211.103.207.222:43789 to 192.168.1.9:110 Monday, Feb 17,2014 20:50:30
[LAN access from remote] from 211.103.207.222:42620 to 192.168.1.9:110 Monday, Feb 17,2014 20:50:12
[LAN access from remote] from 211.103.207.222:41409 to 192.168.1.9:110 Monday, Feb 17,2014 20:49:54
[LAN access from remote] from 211.103.207.222:35791 to 192.168.1.9:110 Monday, Feb 17,2014 20:49:36
[LAN access from remote] from 211.103.207.222:34581 to 192.168.1.9:110 Monday, Feb 17,2014 20:49:17
[LAN access from remote] from 211.103.207.222:33422 to 192.168.1.9:110 Monday, Feb 17,2014 20:49:00
[LAN access from remote] from 211.103.207.222:60484 to 192.168.1.9:110 Monday, Feb 17,2014 20:48:42
[LAN access from remote] from 211.103.207.222:59303 to 192.168.1.9:110 Monday, Feb 17,2014 20:48:24
[LAN access from remote] from 211.103.207.222:56983 to 192.168.1.9:110 Monday, Feb 17,2014 20:47:48
[LAN access from remote] from 211.103.207.222:55629 to 192.168.1.9:110 Monday, Feb 17,2014 20:47:26
[LAN access from remote] from 211.103.207.222:54477 to 192.168.1.9:110 Monday, Feb 17,2014 20:47:08
[LAN access from remote] from 211.103.207.222:53307 to 192.168.1.9:110 Monday, Feb 17,2014 20:46:49
[LAN access from remote] from 211.103.207.222:52280 to 192.168.1.9:110 Monday, Feb 17,2014 20:46:32
[LAN access from remote] from 211.103.207.222:51107 to 192.168.1.9:110 Monday, Feb 17,2014 20:46:14
[LAN access from remote] from 211.103.207.222:49941 to 192.168.1.9:110 Monday, Feb 17,2014 20:45:55
[LAN access from remote] from 211.103.207.222:48791 to 192.168.1.9:110 Monday, Feb 17,2014 20:45:37
[LAN access from remote] from 211.103.207.222:47680 to 192.168.1.9:110 Monday, Feb 17,2014 20:45:20
[LAN access from remote] from 211.103.207.222:46535 to 192.168.1.9:110 Monday, Feb 17,2014 20:45:02
[LAN access from remote] from 211.103.207.222:45385 to 192.168.1.9:110 Monday, Feb 17,2014 20:44:43
[LAN access from remote] from 211.103.207.222:49881 to 192.168.1.9:110 Monday, Feb 17,2014 20:44:26
[LAN access from remote] from 211.103.207.222:48713 to 192.168.1.9:110 Monday, Feb 17,2014 20:44:08
[LAN access from remote] from 211.103.207.222:47611 to 192.168.1.9:110 Monday, Feb 17,2014 20:43:49
[LAN access from remote] from 211.103.207.222:46602 to 192.168.1.9:110 Monday, Feb 17,2014 20:43:31
[LAN access from remote] from 211.103.207.222:45703 to 192.168.1.9:110 Monday, Feb 17,2014 20:43:14
[LAN access from remote] from 211.103.207.222:44838 to 192.168.1.9:110 Monday, Feb 17,2014 20:42:55
[LAN access from remote] from 211.103.207.222:44079 to 192.168.1.9:110 Monday, Feb 17,2014 20:42:37
[LAN access from remote] from 211.103.207.222:43153 to 192.168.1.9:110 Monday, Feb 17,2014 20:42:19
[LAN access from remote] from 211.103.207.222:42567 to 192.168.1.9:110 Monday, Feb 17,2014 20:42:02
[LAN access from remote] from 211.103.207.222:41818 to 192.168.1.9:110 Monday, Feb 17,2014 20:41:43
[LAN access from remote] from 211.103.207.222:41118 to 192.168.1.9:110 Monday, Feb 17,2014 20:41:25
[LAN access from remote] from 211.103.207.222:40514 to 192.168.1.9:110 Monday, Feb 17,2014 20:41:08
[LAN access from remote] from 211.103.207.222:39904 to 192.168.1.9:110 Monday, Feb 17,2014 20:40:49
[LAN access from remote] from 211.103.207.222:39293 to 192.168.1.9:110 Monday, Feb 17,2014 20:40:31
[LAN access from remote] from 211.103.207.222:38717 to 192.168.1.9:110 Monday, Feb 17,2014 20:40:13
[LAN access from remote] from 211.103.207.222:38108 to 192.168.1.9:110 Monday, Feb 17,2014 20:39:55
[LAN access from remote] from 211.103.207.222:37747 to 192.168.1.9:110 Monday, Feb 17,2014 20:39:44
[LAN access from remote] from 211.103.207.222:60428 to 192.168.1.9:110 Monday, Feb 17,2014 20:39:37
[LAN access from remote] from 211.103.207.222:60284 to 192.168.1.9:110 Monday, Feb 17,2014 20:39:34
[LAN access from remote] from 211.103.207.222:60169 to 192.168.1.9:110 Monday, Feb 17,2014 20:39:31
[LAN access from remote] from 211.103.207.222:60082 to 192.168.1.9:110 Monday, Feb 17,2014 20:39:28
[LAN access from remote] from 211.103.207.222:59937 to 192.168.1.9:110 Monday, Feb 17,2014 20:39:25
[LAN access from remote] from 211.103.207.222:59834 to 192.168.1.9:110 Monday, Feb 17,2014 20:39:22
[LAN access from remote] from 211.103.207.222:59714 to 192.168.1.9:110 Monday, Feb 17,2014 20:39:20
[LAN access from remote] from 211.103.207.222:59579 to 192.168.1.9:110 Monday, Feb 17,2014 20:39:16
[LAN access from remote] from 211.103.207.222:59478 to 192.168.1.9:110 Monday, Feb 17,2014 20:39:13
[LAN access from remote] from 211.103.207.222:59326 to 192.168.1.9:110 Monday, Feb 17,2014 20:39:10
[LAN access from remote] from 211.103.207.222:59178 to 192.168.1.9:110 Monday, Feb 17,2014 20:39:07
[LAN access from remote] from 211.103.207.222:59101 to 192.168.1.9:110 Monday, Feb 17,2014 20:39:04
[LAN access from remote] from 211.103.207.222:58974 to 192.168.1.9:110 Monday, Feb 17,2014 20:39:01
[LAN access from remote] from 211.103.207.222:58840 to 192.168.1.9:110 Monday, Feb 17,2014 20:38:58
[LAN access from remote] from 211.103.207.222:58573 to 192.168.1.9:110 Monday, Feb 17,2014 20:38:51
[LAN access from remote] from 211.103.207.222:58270 to 192.168.1.9:110 Monday, Feb 17,2014 20:38:44
[LAN access from remote] from 211.103.207.222:58136 to 192.168.1.9:110 Monday, Feb 17,2014 20:38:41
[LAN access from remote] from 211.103.207.222:58047 to 192.168.1.9:110 Monday, Feb 17,2014 20:38:38
[LAN access from remote] from 211.103.207.222:57940 to 192.168.1.9:110 Monday, Feb 17,2014 20:38:35
[LAN access from remote] from 211.103.207.222:57860 to 192.168.1.9:110 Monday, Feb 17,2014 20:38:32
[LAN access from remote] from 211.103.207.222:57734 to 192.168.1.9:110 Monday, Feb 17,2014 20:38:29
[LAN access from remote] from 211.103.207.222:57589 to 192.168.1.9:110 Monday, Feb 17,2014 20:38:26
[LAN access from remote] from 211.103.207.222:57415 to 192.168.1.9:110 Monday, Feb 17,2014 20:38:23
[LAN access from remote] from 211.103.207.222:57270 to 192.168.1.9:110 Monday, Feb 17,2014 20:38:20
[LAN access from remote] from 211.103.207.222:57178 to 192.168.1.9:110 Monday, Feb 17,2014 20:38:17
[LAN access from remote] from 211.103.207.222:57101 to 192.168.1.9:110 Monday, Feb 17,2014 20:38:14
[LAN access from remote] from 211.103.207.222:56961 to 192.168.1.9:110 Monday, Feb 17,2014 20:38:11
[LAN access from remote] from 211.103.207.222:56885 to 192.168.1.9:110 Monday, Feb 17,2014 20:38:08
[LAN access from remote] from 211.103.207.222:56796 to 192.168.1.9:110 Monday, Feb 17,2014 20:38:05
[LAN access from remote] from 211.103.207.222:56722 to 192.168.1.9:110 Monday, Feb 17,2014 20:38:02
[LAN access from remote] from 211.103.207.222:56639 to 192.168.1.9:110 Monday, Feb 17,2014 20:37:59
[LAN access from remote] from 211.103.207.222:56549 to 192.168.1.9:110 Monday, Feb 17,2014 20:37:56
[LAN access from remote] from 211.103.207.222:56468 to 192.168.1.9:110 Monday, Feb 17,2014 20:37:53
[LAN access from remote] from 211.103.207.222:56381 to 192.168.1.9:110 Monday, Feb 17,2014 20:37:50
[LAN access from remote] from 211.103.207.222:56307 to 192.168.1.9:110 Monday, Feb 17,2014 20:37:47
[LAN access from remote] from 211.103.207.222:55799 to 192.168.1.9:110 Monday, Feb 17,2014 20:37:29
[LAN access from remote] from 211.103.207.222:55280 to 192.168.1.9:110 Monday, Feb 17,2014 20:37:11
[LAN access from remote] from 211.103.207.222:54782 to 192.168.1.9:110 Monday, Feb 17,2014 20:36:53
[LAN access from remote] from 211.103.207.222:54285 to 192.168.1.9:110 Monday, Feb 17,2014 20:36:35
[LAN access from remote] from 211.103.207.222:53756 to 192.168.1.9:110 Monday, Feb 17,2014 20:36:17
[LAN access from remote] from 211.103.207.222:53264 to 192.168.1.9:110 Monday, Feb 17,2014 20:35:59
[LAN access from remote] from 211.103.207.222:52761 to 192.168.1.9:110 Monday, Feb 17,2014 20:35:41
[LAN access from remote] from 211.103.207.222:52229 to 192.168.1.9:110 Monday, Feb 17,2014 20:35:23
[LAN access from remote] from 211.103.207.222:51736 to 192.168.1.9:110 Monday, Feb 17,2014 20:35:05
[LAN access from remote] from 211.103.207.222:51199 to 192.168.1.9:110 Monday, Feb 17,2014 20:34:47
[LAN access from remote] from 211.103.207.222:50452 to 192.168.1.9:110 Monday, Feb 17,2014 20:34:29
[LAN access from remote] from 211.103.207.222:49892 to 192.168.1.9:110 Monday, Feb 17,2014 20:34:11
[LAN access from remote] from 211.103.207.222:49313 to 192.168.1.9:110 Monday, Feb 17,2014 20:33:53
[LAN access from remote] from 211.103.207.222:48721 to 192.168.1.9:110 Monday, Feb 17,2014 20:33:35
[LAN access from remote] from 211.103.207.222:48139 to 192.168.1.9:110 Monday, Feb 17,2014 20:33:17
[LAN access from remote] from 211.103.207.222:47541 to 192.168.1.9:110 Monday, Feb 17,2014 20:32:59
[LAN access from remote] from 211.103.207.222:46933 to 192.168.1.9:110 Monday, Feb 17,2014 20:32:41
[LAN access from remote] from 211.103.207.222:46313 to 192.168.1.9:110 Monday, Feb 17,2014 20:32:23
[LAN access from remote] from 211.103.207.222:45712 to 192.168.1.9:110 Monday, Feb 17,2014 20:32:05
[LAN access from remote] from 211.103.207.222:45065 to 192.168.1.9:110 Monday, Feb 17,2014 20:31:47
[LAN access from remote] from 211.103.207.222:44396 to 192.168.1.9:110 Monday, Feb 17,2014 20:31:29
[LAN access from remote] from 211.103.207.222:43742 to 192.168.1.9:110 Monday, Feb 17,2014 20:31:11
[LAN access from remote] from 211.103.207.222:43077 to 192.168.1.9:110 Monday, Feb 17,2014 20:30:53
[LAN access from remote] from 211.103.207.222:42386 to 192.168.1.9:110 Monday, Feb 17,2014 20:30:35
[LAN access from remote] from 211.103.207.222:41682 to 192.168.1.9:110 Monday, Feb 17,2014 20:30:17
[LAN access from remote] from 211.103.207.222:40946 to 192.168.1.9:110 Monday, Feb 17,2014 20:29:59
[LAN access from remote] from 211.103.207.222:34903 to 192.168.1.9:110 Monday, Feb 17,2014 20:29:41
[LAN access from remote] from 211.103.207.222:34160 to 192.168.1.9:110 Monday, Feb 17,2014 20:29:23
[LAN access from remote] from 211.103.207.222:33397 to 192.168.1.9:110 Monday, Feb 17,2014 20:29:05
[LAN access from remote] from 211.103.207.222:60824 to 192.168.1.9:110 Monday, Feb 17,2014 20:28:47
[LAN access from remote] from 211.103.207.222:60039 to 192.168.1.9:110 Monday, Feb 17,2014 20:28:29
[LAN access from remote] from 211.103.207.222:59241 to 192.168.1.9:110 Monday, Feb 17,2014 20:28:11
[LAN access from remote] from 211.103.207.222:58438 to 192.168.1.9:110 Monday, Feb 17,2014 20:27:53
[LAN access from remote] from 211.103.207.222:57596 to 192.168.1.9:110 Monday, Feb 17,2014 20:27:35
[LAN access from remote] from 211.103.207.222:56771 to 192.168.1.9:110 Monday, Feb 17,2014 20:27:17
[LAN access from remote] from 211.103.207.222:55908 to 192.168.1.9:110 Monday, Feb 17,2014 20:26:59
[LAN access from remote] from 211.103.207.222:55053 to 192.168.1.9:110 Monday, Feb 17,2014 20:26:40
[LAN access from remote] from 211.103.207.222:54199 to 192.168.1.9:110 Monday, Feb 17,2014 20:26:23
[LAN access from remote] from 211.103.207.222:53309 to 192.168.1.9:110 Monday, Feb 17,2014 20:26:05
[LAN access from remote] from 211.103.207.222:52434 to 192.168.1.9:110 Monday, Feb 17,2014 20:25:46
[LAN access from remote] from 211.103.207.222:51566 to 192.168.1.9:110 Monday, Feb 17,2014 20:25:29
[LAN access from remote] from 211.103.207.222:50714 to 192.168.1.9:110 Monday, Feb 17,2014 20:25:11
[LAN access from remote] from 211.103.207.222:49808 to 192.168.1.9:110 Monday, Feb 17,2014 20:24:53
[LAN access from remote] from 211.103.207.222:58664 to 192.168.1.9:110 Monday, Feb 17,2014 20:24:34
[LAN access from remote] from 211.103.207.222:57763 to 192.168.1.9:110 Monday, Feb 17,2014 20:24:17
[LAN access from remote] from 211.103.207.222:56839 to 192.168.1.9:110 Monday, Feb 17,2014 20:23:59
[LAN access from remote] from 211.103.207.222:55887 to 192.168.1.9:110 Monday, Feb 17,2014 20:23:40
[LAN access from remote] from 211.103.207.222:54961 to 192.168.1.9:110 Monday, Feb 17,2014 20:23:22
[LAN access from remote] from 211.103.207.222:54094 to 192.168.1.9:110 Monday, Feb 17,2014 20:23:05
[LAN access from remote] from 211.103.207.222:53178 to 192.168.1.9:110 Monday, Feb 17,2014 20:22:47
[LAN access from remote] from 211.103.207.222:52259 to 192.168.1.9:110 Monday, Feb 17,2014 20:22:28
[LAN access from remote] from 211.103.207.222:51354 to 192.168.1.9:110 Monday, Feb 17,2014 20:22:11
[LAN access from remote] from 211.103.207.222:50453 to 192.168.1.9:110 Monday, Feb 17,2014 20:21:52
[LAN access from remote] from 211.103.207.222:49554 to 192.168.1.9:110 Monday, Feb 17,2014 20:21:34
[LAN access from remote] from 211.103.207.222:48700 to 192.168.1.9:110 Monday, Feb 17,2014 20:21:17
[LAN access from remote] from 211.103.207.222:47783 to 192.168.1.9:110 Monday, Feb 17,2014 20:20:58
[LAN access from remote] from 211.103.207.222:46856 to 192.168.1.9:110 Monday, Feb 17,2014 20:20:40
[LAN access from remote] from 211.103.207.222:45938 to 192.168.1.9:110 Monday, Feb 17,2014 20:20:22
[LAN access from remote] from 211.103.207.222:45120 to 192.168.1.9:110 Monday, Feb 17,2014 20:20:04
[LAN access from remote] from 211.103.207.222:44268 to 192.168.1.9:110 Monday, Feb 17,2014 20:19:46
[LAN access from remote] from 211.103.207.222:33580 to 192.168.1.9:110 Monday, Feb 17,2014 20:19:28
[LAN access from remote] from 211.103.207.222:60908 to 192.168.1.9:110 Monday, Feb 17,2014 20:19:10
[LAN access from remote] from 211.103.207.222:60006 to 192.168.1.9:110 Monday, Feb 17,2014 20:18:52
[LAN access from remote] from 211.103.207.222:59050 to 192.168.1.9:110 Monday, Feb 17,2014 20:18:34
[LAN access from remote] from 211.103.207.222:58114 to 192.168.1.9:110 Monday, Feb 17,2014 20:18:16
[LAN access from remote] from 211.103.207.222:57218 to 192.168.1.9:110 Monday, Feb 17,2014 20:17:58
[LAN access from remote] from 211.103.207.222:56337 to 192.168.1.9:110 Monday, Feb 17,2014 20:17:40
[LAN access from remote] from 211.103.207.222:55431 to 192.168.1.9:110 Monday, Feb 17,2014 20:17:22
[LAN access from remote] from 211.103.207.222:54491 to 192.168.1.9:110 Monday, Feb 17,2014 20:17:04

After thinking about it for at least a couple of weeks, I’ve decided that I’m going to migrate the port 80 environments off HP Server A on to my Arizona platform.

I’m going to leave port 80 open on the router.

I’m doing this because I want to see what will happen.

I have been assuming that the current port 80 traffic is coming in on a hosted domain (or coming in on all of the hosted domains), but the more I think about it the more uncertain I get.

I have no problem with port 80 traffic, obv.

I’m just intrigued about it.

I want to know more about it.

I want to know everything about it.

So one weekend early next month I’m going to migrate the websites from HP Server A to Arizona.

Then I’m going to pull up a chair and watch the port 80 traffic.

Just to see what happens.

Here’s a random thought that occurred to me, on my way to work this morning (VFR, if you’re interested).

What would happen to all those weird port calls if I shut port 80 on my firewall?

They would get bounced, obv.

They would probably get an ‘unreachable’ error.

But would they go away (in something like six months)?

I’m tempted to give it a shot.

Of course, I’d have to move the hosted domains to another location, but I’ve already proven (and documented here) how easy that is.

And it would take maybe 15 minutes to migrate the websites (and their databases) that I host to another place.

But what difference would there be, do you suppose, between my firewall/router logs now, and my firewall/router logs six months after I closed port 80?

I’m sufficiently intrigued as to be considering the idea.