Security Incidents mailing list archives
R: What a strange route (The DoD inside)!
From: "Sebastian \"En3pY\" Zdrojewski" <en3py () itvc net>
Date: Wed, 5 Apr 2006 07:50:39 +0200
Fastweb is known to use IP addresses over their private networks without really caring of the IANA specs. In past they used an IP class that has been assigned to a north-african country, so I am not surprised at all of what I am seeing here. Sincerely En3pY -- Sebastian `En3pY` Zdrojewski ############################## # URL: http://www.en3py.net/ # # E-Mail: en3py () itvc net # ############################## -----Messaggio originale----- Da: Jean-Marc Soumet [mailto:Jean-Marc.Soumet () nsc com] Inviato: martedì 4 aprile 2006 21.16 A: Pieter de Boer Cc: dave; incidents () securityfocus com Oggetto: Re: What a strange route (The DoD inside)! Pieter de Boer wrote:
dave wrote:11 26.26.26.xx (26.26.26.xx) 4.462 ms 3.674 ms 3.644 ms 12 26.26.26.xxx (26.26.26.xxx) 5.055 ms 3.834 ms 3.797 ms 13 26.26.26.xxx (26.26.26.xxx) 5.112 ms 3.541 ms 3.816 ms DoD Network Information Center <- Why?Sometimes people just assign themselves some IP address space, not via RIPE/ARIN/APNIC/etc, but just picking a address randomly. The range 26.26.26.xx looks like such an 'assignment'. Of course, it's bad habit to just pick a random address and use it inside your network, but it happens a lot, especially with rcf1918 space. It also happens a lot that those addresses can be seen by tracerouting.. Hope this clears things up a bit, Pieter
As Pieter said this ISP must be using DOD IP addresses on their internal network. Unless they have a special link that transmits data directly from Italy to Columbus, Ohio and back to Italy, in 1ms round trip. ^_^ I don't think this could be associated with Dave's incident. Regards, Jean-Marc _____________________ Jean-Marc Soumet Information Security Analyst National Semiconductor +1-408-721-2131 -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.385 / Virus Database: 268.3.5/300 - Release Date: 03/04/2006 -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.385 / Virus Database: 268.3.5/300 - Release Date: 03/04/2006
Current thread:
- What a strange route (The DoD inside)! dave (Apr 02)
- Re: What a strange route (The DoD inside)! Pieter de Boer (Apr 03)
- Re: What a strange route (The DoD inside)! Jean-Marc Soumet (Apr 04)
- R: What a strange route (The DoD inside)! Sebastian "En3pY" Zdrojewski (Apr 05)
- Re: What a strange route (The DoD inside)! Jean-Marc Soumet (Apr 04)
- Re: What a strange route (The DoD inside)! ascii (Apr 03)
- <Possible follow-ups>
- Re: What a strange route (The DoD inside)! Bob Radvanovsky (Apr 03)
- Re: What a strange route (The DoD inside)! Valdis . Kletnieks (Apr 03)
- Re: What a strange route (The DoD inside)! Pieter de Boer (Apr 03)