[Full-Disclosure] TCP Port 42 port scans?

Scot Bryhan dsbryhan at chartermi.net
Fri Dec 17 14:39:17 GMT 2004


hello,

CAIDA, the Cooperative Association for Internet Data Analysis -
(www.caida.org), also has a machine [that is actually located in arin.net's
IP space - "skitter.arin.net", IP address: 192.149.252.8] that was "used to
map the internet" according to hostmaster at arin.net .

damn thing fell in love with my PC's IP back in late May and early June...

hostmaster at arin.net told me that - "The box will be looked at to ensure it
isn't improperly bombarding your network with pings. Feel free to filter out
192.149.252.8 if you so desire."

Scot

----- Original Message ----- 
From: "Michael Scheidell" <scheidell at secnap.net>
To: "James Lay" <jlay at ameriben.com>; "Full-Disclosure (E-mail)"
<full-disclosure at lists.netsys.com>
Sent: Monday, December 13, 2004 8:34 PM
Subject: RE: [Full-Disclosure] TCP Port 42 port scans? What the heck over...


> hmm well, pdx.edu has a computer scanning the world, hit hundreds of other
hosts
>
> http://www.mynetwatchman.com/LID.asp?ip=131.252.116.141
>
>
> http://www.dshield.org/ipinfo.php?ip=131.252.116.141
>
>
> maybe you call them and ask?
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html




Full-Disclosure is hosted and sponsored by Secunia.