Tollasessa paikassa sijaitsevalla koneella joku skannas portteja. Onko tollanen nyt ihan tavallista kun toi mesta (DoD Network Information Center) liittyy jotenkin jenkkien puolustusministeriöön...
Vai onko tohon joku järkevämpi selitys?
Vai onko tohon joku järkevämpi selitys?
Vastaukset 7
Vanhimmat
Jollain muulla sama hyökkääjä:
They're after me
I get a log from my broadband router providing me with all sorts of information regarding various suspicious contact that it stops from reaching my pc. Anyway, the past two days I've been getting a constant stream of this
UDP Packet - Source:7.12.12.16,13364 Destination: (My IP, port #). So, I looked up 7.12.12.16 to see who owned that IP. And, here's what I found:
OrgName: DoD Network Information Center
OrgID: DNIC
Address: 3990 E. Broad Street
City: Columbus
StateProv: OH
PostalCode: 43218
Country: US
NetRange: 7.0.0.0 - 7.255.255.255
CIDR: 7.0.0.0/8
NetName: DISANET7
NetHandle: NET-7-0-0-0-1
Parent:
NetType: Direct Allocation
Comment: Defense Information Systems Agency
Comment: DISA /D3
Comment: 11440 Isaac Newton Square
Comment: Reston, VA 22090-5087 US
RegDate: 1997-11-24
Updated: 1998-09-26
RTechHandle: MIL-HSTMST-ARIN
RTechName: Network DoD
RTechPhone: 1-800-365-3642
RTechEmail: **********@nic.mil
OrgTechHandle: MIL-HSTMST-ARIN
OrgTechName: Network DoD
OrgTechPhone: 1-800-365-3642
OrgTechEmail: **********@nic.mil
I presume this is the work of a hacker who's "stolen" an IP address, but it's more exciting to think that the Department of Defense is tracking my online movements.
Eikös toi ollut vanha wareputiikki, joka kaadettiin joku vuosi sitten, Drink or Die tai jotai
Hyökkääjän IP 7.12.12.16 kuuluu Yhdysvaltain puolustusministeriölle, täällä:
DoD Network Information Center
3990 East Broad Street Columbus,
Ohio 43216
United States
I too have been being scanned non stop from 7.12.12.16. This is indeed a Department of Defense ip, although it could be
spoofed or something. I doubt this is actual intentional activity from the DoD. It is more likely that someone has managed to
either spoof the ip or has actually managed to root a DoD computer for scanning purposes. Either way the DoD would probably
not be happy to have this activity happening through one of its ips. They own from 7.0.0.0 - 7.255.255.255. One possible
remedy would be to e-mail their abuse address, although I wasn’t able to find the specific abuse address this one did pop up
[email protected] as connected to the DoD whois results for 7.12.12.16. So perhaps someone out there who has made abuse
complaints before and is familiar with the process could report this activity from 7.12.12.16 to [email protected]
and hopefully bring it to their attention so it can be stopped.
http://www.pddoc.com/farnham/?p=168
ja jatkuu ja jatkuu.... 7.12.12.16...........
pitäisköhän jättää revisionistijutut ja lopettaa läpät stormfrontissa... taitaa olla jenkkien tarkkailussa ihr:t sun muut...
http://forums.sygate.com/vb/showthread.php?s=e63742ffbe9fdc8c92a0ebbf7be5172a&threadid=14766
Voi olla kyse IP spoofingista.
http://www.dshield.org/ipinfo.php?ip=7.12.12.16&Submit=Submit