View previous topic :: View next topic |
Author |
Message |
T-shirt Rated XXX
Joined: 22 Aug 2003 Posts: 795 Location: Snohomish, WA USA
|
Posted: Mon, 14 Nov 2005 17:34:22 Post Subject: Oh! Noes, the gov't is trying to hack me! |
|
|
Interesting trace in my firewall log
OrgName: DoD Network Information Center
OrgID: DNIC
Address: 3990 E. Broad Street
City: Columbus
StateProv: OH
PostalCode: 43218
Country: US
NetRange: 214.0.0.0 - 214.255.255.255
CIDR: 214.0.0.0/8
NetName: DDN-NIC15
NetHandle: NET-214-0-0-0-1
Parent:
NetType: Direct Allocation
NameServer: AAA-VIENNA.NIPR.MIL
NameServer: AAA-KELLY.NIPR.MIL
NameServer: AAA-WHEELER.NIPR.MIL
NameServer: AAA-VAIHINGEN.NIPR.MIL
Comment: DoD Network Information Center
Comment: 3990 E. Broad Street
Comment: Columbus, OH 43218 US
RegDate: 1998-03-27
Updated: 2005-10-07
RTechHandle: MIL-HSTMST-ARIN
RTechName: Network DoD
RTechPhone: +1-800-365-3642
RTechEmail: HOSTMASTER@nic.mil
OrgTechHandle: MIL-HSTMST-ARIN
OrgTechName: Network DoD
OrgTechPhone: +1-800-365-3642
OrgTechEmail: HOSTMASTER@nic.mil
ARIN WHOIS database, last updated 2005-11-13 19:10
Enter ? for additional hints on searching ARIN's WHOIS database. |
|
Back to top |
|
|
Little Bruin
Boo Boo
Joined: 07 Apr 2003
Posts: 667
Location: Pic-A-Nic Basket |
|
|
BeerCheeze *hick*
Joined: 14 Jun 2003 Posts: 9285 Location: At the Bar
|
Posted: Mon, 14 Nov 2005 17:50:43 Post Subject: |
|
|
If the Gov was trying to hack you... you'd already be in jail. |
|
Back to top |
|
|
knight0334 Rated XXX
Joined: 22 Aug 2003 Posts: 2234 Location: Neither Here, Nor There
|
|
Back to top |
|
|
BeerCheeze *hick*
Joined: 14 Jun 2003 Posts: 9285 Location: At the Bar
|
|
Back to top |
|
|
thePMG Rated XXX
Joined: 24 Apr 2004 Posts: 393 Location: Germany
|
Posted: Mon, 14 Nov 2005 23:41:45 Post Subject: |
|
|
Did you happen to get what ports numbers they tried to connect to? I've seen a few other people talking about this.
EDIT: Check out this.
You may be getting hit by infected machines in the mil's netblock.
Or maybe thats what they want you to think... |
|
Back to top |
|
|
T-shirt Rated XXX
Joined: 22 Aug 2003 Posts: 795 Location: Snohomish, WA USA
|
Posted: Tue, 15 Nov 2005 04:14:17 Post Subject: |
|
|
thePMG wrote: | Did you happen to get what ports numbers they tried to connect to? I've seen a few other people talking about this.
|
A computer at IP Address 214.227.102.121 has attempted an unsolicited connection to UDP port 1029 on your computer.
It traced back to Arlington, VA
I'm sure someone just relayed through it.
well almost sure, there has been this black helicopter hovering around all day
I don't wory about the ones that are logged (means they were rejected) it's the ones you don't see that get you. |
|
Back to top |
|
|
BeerCheeze *hick*
Joined: 14 Jun 2003 Posts: 9285 Location: At the Bar
|
|
Back to top |
|
|
Little Bruin
Boo Boo
Joined: 07 Apr 2003
Posts: 667
Location: Pic-A-Nic Basket |
|
|
T-shirt Rated XXX
Joined: 22 Aug 2003 Posts: 795 Location: Snohomish, WA USA
|
Posted: Tue, 15 Nov 2005 13:48:53 Post Subject: |
|
|
Dr. EvilCheeze wrote: | Do you run ICQ? |
Nope!
I just happen to be watch the software firewall logs closely now, as I am beta testing a "network gateway server appliance" which is a router, AP, hardware firewall, 80gig HD and USB print server all in one small box (still very Beta!).
Just tracking what gets past it's firewall.
I Think this is the first .MIL address I've seen on my home network, but I have seen it before on some client's networks.
.MIL covers alot of machines, some on the outer fringes are not very secure. (I hope it security is better further in ) |
|
Back to top |
|
|
BeerCheeze *hick*
Joined: 14 Jun 2003 Posts: 9285 Location: At the Bar
|
|
Back to top |
|
|
mrweasel I can haz cheezbrgr?
Joined: 13 Jun 2005 Posts: 1444 Location: Pasadena, MD
|
Posted: Tue, 15 Nov 2005 15:51:56 Post Subject: |
|
|
Arlington, VA???
OH NOES! It's da Pentagon.....Everybody RUN!!!! _________________
|
|
Back to top |
|
|
|