full-disclosure - Off Topic: Attachment

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20050912033609.GL2983@sentinelchicken.org>
Date: Mon Sep 12 04:10:23 2005
From: tim-security at sentinelchicken.org (Tim)
Subject: Off Topic: Attachment


> The IP shown belongs to your own ISP, so... Fake, or what?


I am not sure I see the same similarity.  Please provide details of what
you are talking about.  The ranges are very similar, but I see a
difference in the second octet (though I could be terribly wrong):


~> host fidmail.com; echo '-----'; whois `host fidmail.com | tail -1 | awk '{ print $3; }'`; echo '====='; host www.dhs.gov; echo '-----'; whois `host www.dhs.gov | tail -1 | awk '{ print $3; }'`;
fidmail.com             A       216.229.64.91
-----

OrgName:    Fidelity Communication International Inc. 
OrgID:      FIDN
Address:    64 N. Clark
City:       Sullivan
StateProv:  MO
PostalCode: 63080
Country:    US

NetRange:   216.229.64.0 - 216.229.95.255 
CIDR:       216.229.64.0/19 
NetName:    NETBLK-FIDN
NetHandle:  NET-216-229-64-0-1
Parent:     NET-216-0-0-0-0
NetType:    Direct Allocation
NameServer: SULLIVAN.FIDNET.COM
NameServer: ROLLA.FIDNET.COM
Comment:    ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate:    1999-06-03
Updated:    2003-08-11

OrgTechHandle: MD872-ARIN
OrgTechName:   Davis, Mike 
OrgTechPhone:  +1-573-468-1289
OrgTechEmail:  mike@...net.com

# ARIN WHOIS database, last updated 2005-09-11 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
=====
www.dhs.gov             CNAME   www.dhs.gov.edgesuite.net
www.dhs.gov.edgesuite.net       CNAME   a830.g.akamai.net
a830.g.akamai.net       A       216.254.95.72
a830.g.akamai.net       A       216.254.95.71
-----
Speakeasy Network SPEAKEASY-2 (NET-216-254-0-0-1) 
                                  216.254.0.0 - 216.254.127.255
Speakeasy Network POP SPEK-POP-NYC-0 (NET-216-254-95-0-1) 
                                  216.254.95.0 - 216.254.95.255

# ARIN WHOIS database, last updated 2005-09-11 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.