Re: What a strange route (The DoD inside)!

"Jean-Marc Soumet" <[email protected]> Tue, 04 Apr 2006 12:16:26 -0700
Newsgroups gmane.comp.security.incidents
Message-ID <[email protected]>
Pieter de Boer wrote:
> dave wrote:
>
>> 11  26.26.26.xx (26.26.26.xx)  4.462 ms  3.674 ms  3.644 ms
>> 12  26.26.26.xxx (26.26.26.xxx)  5.055 ms  3.834 ms  3.797 ms
>> 13  26.26.26.xxx (26.26.26.xxx)  5.112 ms  3.541 ms  3.816 ms
>>     DoD Network Information Center <- Why?
>>
> Sometimes people just assign themselves some IP address space, not via 
> RIPE/ARIN/APNIC/etc, but just picking a address randomly. The range 
> 26.26.26.xx looks like such an 'assignment'.
>
> Of course, it's bad habit to just pick a random address and use it 
> inside your network, but it happens a lot, especially with rcf1918 
> space. It also happens a lot that those addresses can be seen by 
> tracerouting..
>
> Hope this clears things up a bit,
> Pieter
>
>
As Pieter said this ISP must be using DOD IP addresses on their internal 
network. Unless they have a special link that transmits data directly 
from Italy to Columbus, Ohio and back to Italy, in 1ms round trip. ^_^
I don't think this could be associated with Dave's incident.

Regards,

Jean-Marc
_____________________
Jean-Marc Soumet
Information Security Analyst
National Semiconductor
+1-408-721-2131