|
|
| Author |
Message |
myndwarrp
Can't Stop Posting
Joined: 27 Jan 2004
Posts: 637
|
 Posted: 04/06/06 - 14:54 Post subject: Whats up with my ports being scanned?
|
|
|
Yesterday my firewall caught Haliburton scanning my ports. I didnt save any info, but today, I got these:
29.186.10.48
OrgName: DoD Network Information Center
OrgID: DNIC
Address: 3990 E. Broad Street
City: Columbus
StateProv: OH
PostalCode: 43218
Country: US
NetRange: 29.0.0.0 - 29.255.255.255
CIDR: 29.0.0.0/8
NetName: MILX25-TEMP
NetHandle: NET-29-0-0-0-1
Parent:
NetType: Direct Allocation
Comment: Defense Information Systems Agency
Comment: Washington, DC 20305-2000 US
RegDate:
Updated: 2002-10-07
OrgTechHandle: MIL-HSTMST-ARIN
OrgTechName: Network DoD
OrgTechPhone: +1-800-365-3642
OrgTechEmail: HOSTMASTER@nic.mil
45.98.136.190
OrgName: Interop Show Network
OrgID: ISN-4
Address: 795 Folsom St
Address: Lvl 6
City: San Francisco
StateProv: CA
PostalCode: 94107
Country: US
NetRange: 45.0.0.0 - 45.255.255.255
CIDR: 45.0.0.0/8
NetName: SHOWNETA
NetHandle: NET-45-0-0-0-1
Parent:
NetType: Direct Assignment
NameServer: DNS.INTEROP.NET
NameServer: SOLARIS.CC.VT.EDU
Comment:
RegDate: 1991-09-09
Updated: 2003-03-06
RTechHandle: GHO4-ARIN
RTechName: Horne, Geoff
RTechPhone: +1-650-483-0998
RTechEmail: horne@interop.net
OrgTechHandle: GEV-ARIN
OrgTechName: Evans, Glenn
OrgTechPhone: +1-415-905-2300
OrgTechEmail: glenn@interop.net
52.212.163.69
OrgName: E.I. du Pont de Nemours and Co., Inc.
OrgID: EDPDNC
Address: E.I. du Pont de Nemours and Co., Inc.
Address: 1007 market Street
City: Wilmington
StateProv: DE
PostalCode: 19893
Country: US
NetRange: 52.0.0.0 - 52.255.255.255
CIDR: 52.0.0.0/8
NetName: DUPONT1
NetHandle: NET-52-0-0-0-1
Parent:
NetType: Direct Assignment
NameServer: APOLLO.LVS.DUPONT.COM
NameServer: DNSAUTH1.SYS.GTEI.NET
NameServer: DNSAUTH2.SYS.GTEI.NET
NameServer: DNSAUTH3.SYS.GTEI.NET
Comment:
RegDate: 1991-12-19
Updated: 2001-04-12
RTechHandle: MAW3-ARIN
RTechName: Woodlief, Margaret A.
RTechPhone: +1-540-949-2999
RTechEmail: cg_qip_support@csc.email.dupont.com
Any advice would be appreciated 
|
|
|
Back to top
|
|
|
|
 |
Thenger
Can't Stop Posting
Joined: 17 Oct 2002
Posts: 715
|
|
Posted: 04/06/06 - 15:02 Post subject:
|
|
|
|
Looking for kiddy porn your computer... Realpoor most likey leaked your views and they are on to you!
|
|
|
Back to top
|
|
|
|
|
khrath
Guest
|
|
Posted: 04/06/06 - 15:08 Post subject:
|
|
|
drop whatever you are doing and start running!
it doesn't matter where, just get as far away as you can, they are coming, this is all I can say!!!!
|
|
|
Back to top
|
|
|
|
|
myndwarrp
Can't Stop Posting
Joined: 27 Jan 2004
Posts: 637
|
|
Posted: 04/06/06 - 15:31 Post subject:
|
|
|
|
bah
|
|
|
Back to top
|
|
|
|
|
Occulis
RealPoor Jedi
Joined: 11 Oct 2002
Posts: 13293
Location: Moral Relativity Central
|
|
Posted: 04/06/06 - 15:41 Post subject:
|
|
|
Did you recently start monitoring port scans, or did you recently notice these particular scanners?
My view on port scanning is: If you're connected to the net, expect to be scanned.
|
|
|
Back to top
|
|
|
|
|
Leilu
Sir Postalot
Joined: 12 Nov 2002
Posts: 1164
|
|
Posted: 04/06/06 - 15:48 Post subject:
|
|
|
|
I usually get my port scanned 2 or 3 times a week. Hah.
|
|
|
Back to top
|
|
|
|
|
Ishmael
RealPoor Guru
Joined: 03 Jun 2005
Posts: 4446
Location: The US of A
|
|
Posted: 04/06/06 - 15:50 Post subject:
|
|
|
You think f*****g 14 y/o's should be legal.
This does not surprise me.
|
|
|
Back to top
|
|
|
|
|
sinrakin
RealPoor Master of Posts
Joined: 11 Oct 2002
Posts: 7044
|
|
Posted: 04/06/06 - 15:59 Post subject:
|
|
|
| Leilu wrote: | | I usually get my port scanned 2 or 3 times a week. Hah. |
Not by Haliburton I hope.
|
|
|
Back to top
|
|
|
|
|
Occulis
RealPoor Jedi
Joined: 11 Oct 2002
Posts: 13293
Location: Moral Relativity Central
|
|
Posted: 04/06/06 - 16:01 Post subject:
|
|
|
| Leilu wrote: | | I usually get my port scanned 2 or 3 times a week. Hah. |
Nice. Do you have to wash afterward?
|
|
|
Back to top
|
|
|
|
|
Yellow Journalist
RealPoor Sensei
Joined: 20 Oct 2002
Posts: 1973
|
|
Posted: 04/06/06 - 16:03 Post subject:
|
|
|
| Occulis wrote: | | Nice. Do you have to wash afterward? |
|
|
|
Back to top
|
|
|
|
|
Leilu
Sir Postalot
Joined: 12 Nov 2002
Posts: 1164
|
|
Posted: 04/06/06 - 16:24 Post subject:
|
|
|
|
Yeah, I usually scan for viruses...
|
|
|
Back to top
|
|
|
|
|
myndwarrp
Can't Stop Posting
Joined: 27 Jan 2004
Posts: 637
|
|
Posted: 04/06/06 - 17:14 Post subject:
|
|
|
| Ishmael wrote: | You think f*****g 14 y/o's should be legal.
This does not surprise me. |
Dont misquote me Ish. My opinion on this is conditional.
And since when does my view of the law determine my personal habits? My God I have stated before I dont even have normal pr0n on my computer much less anything illegal.
Last edited by myndwarrp on 04/06/06 - 17:16; edited 1 time in total
|
|
|
Back to top
|
|
|
|
|
myndwarrp
Can't Stop Posting
Joined: 27 Jan 2004
Posts: 637
|
|
Posted: 04/06/06 - 17:15 Post subject:
|
|
|
| Occulis wrote: | Did you recently start monitoring port scans, or did you recently notice these particular scanners?
My view on port scanning is: If you're connected to the net, expect to be scanned. |
Nah I just started backtracing my scans. The way my home is set up my ports they are scanning are invisible, but still. Maybe its normal I dunno. I just thought it was odd. I posted this question on a tech board and have been told it's fairly common so I am worrying less.
|
|
|
Back to top
|
|
|
|
|
Thenger
Can't Stop Posting
Joined: 17 Oct 2002
Posts: 715
|
|
Posted: 04/06/06 - 17:17 Post subject:
|
|
|
|
You said it yourself, you don't have normal porn on your computer. But if you go and stream the media to your computer, is that another story? 14 years are not legal!!! They are coming after you!!!
|
|
|
Back to top
|
|
|
|
|
Manuva
Banned
Joined: 12 Oct 2002
Posts: 2536
|
|
Posted: 04/06/06 - 17:18 Post subject:
|
|
|
|
it's skynet
|
|
|
Back to top
|
|
|
|
|
motherface
RealPoor Guru
Joined: 12 Mar 2003
Posts: 3407
|
|
Posted: 04/07/06 - 00:28 Post subject:
|
|
|
| Code: | # head /var/log/secure
Apr 3 01:58:01 lunix sshd[15963]: User root from 147.45.33.149 not allowed because not listed in AllowUsers
Apr 3 01:58:01 lunix sshd[15963]: error: Could not get shadow information for NOUSER
Apr 3 01:58:01 lunix sshd[15963]: Failed password for invalid user root from 147.45.33.149 port 33424 ssh2
Apr 3 01:58:06 lunix sshd[15965]: User root from 147.45.33.149 not allowed because not listed in AllowUsers
Apr 3 01:58:06 lunix sshd[15965]: error: Could not get shadow information for NOUSER
Apr 3 01:58:06 lunix sshd[15965]: Failed password for invalid user root from 147.45.33.149 port 33482 ssh2
...
# grep -i -c "invalid user" /var/log/secure
5672
# zgrep -i -c "invalid user" /var/log/secure.1.gz
35549
|
This logfile gets rolled over every week. 
|
|
|
Back to top
|
|
|
|
|
|
|
