I was checking my logs and it appears someone came from a 192.x.x.x address.  How is this possible?  I might check with Slicehost too.  I’m assuming someone internally browsed to the local machine…which would be my main server.

I certainly don’t have a problem with it…but if it came from an outside source I would be concerned because I thought 192.x.x.x addresses were non-routable.

Any of you network guys have an idea?

thanks

The 10/8, 172.16/12, and 192.168/16 prefixes are private.  So depending on the 20-bit block, you may be seeing a valid ip here.

That said, packets can be spoofed to have the wrong destination.  They won’t get a response (or even a persistent connection), because it won’t route the other way - but they can make as many requests as they want.  Also, if you’re checking on the php side, those headers can be faked.

Well, I didn’t want to give the address out just in case but it wasn’t a 192.168 address.  I just thought all 192.x.x.x were private. 

They did get a response back (200) and moved on so I’m not going to worry too much.  Hacking my site will get you some nice pretty CI code but that’s about it.  LOL