Authorisation failure NAT STATUS

[breese]

I have version 6.6.4 WinGate
I have started seeing a lot of this type of info

09/11/13 16:57:48 Authorisation failure: NAT STATUS: firewall block: TCP src 61.228.17.57:1621 dst 99.141.xxx.163:80

09/11/13 16:57:51 Authorisation failure: NAT STATUS: firewall block: TCP src 61.228.17.57:1621 dst 99.141.xxx.163:80

09/11/13 16:57:52 Authorisation failure: NAT STATUS: firewall block: TCP src 61.228.17.57:1169 dst 99.141.xxx.163:80

09/11/13 16:57:55 Authorisation failure: NAT STATUS: firewall block: TCP src 61.228.17.57:1169 dst 99.141.xxx.163:80

Seeing it is comming from outside my network, how is it showing up as a Nat Status?
Is there something more happening I am not seeing?
thanks

[adrien]

is 99.141.xxx.163 your external IP?

It looks like someone is trying to connect back to you on port 80 and being blocked by WinGate. This is fairly common.

[breese]

Yes that is my IP address
Connect back to my machine?
That remote IP is in another country and I have them flaged in Blackhole... Looked to be a Spammer.
There was a day my Wingate machine was under attack from them
I do not see anywhere that my local machines have tried to connect to them.
Guess it might be time to scan my systems?

[adrien]

Hi

we normally find any external IP we have gets scanned a lot and hit by people all over the world all the time.

It's just an every-day event. Nothing can really be done about it, as long as you're not running some service that's available externally that is able to be compromised.

So normally, minimise what's available, and make sure it's up-to-date

Adrien