A Pentagon Spammer

by Volker Weber

pentagonspammer.png

Of course this entry is poor nonsense. However, I find it interesting where this post originated from:

OrgName: The Defense Information Systems Agency
OrgID: DISA
Address: DISA/DSSO/JCLCC
Address: Room BF655A, The Pentagon
City: Washington
StateProv: DC
PostalCode: 20301
Country: US

NetRange: 198.25.0.0 - 198.26.255.255
CIDR: 198.25.0.0/16, 198.26.0.0/16
NetName: NETBLK-DISA-C
NetHandle: NET-198-25-0-0-1
Parent: NET-198-0-0-0-0
NetType: Direct Allocation
NameServer: AAA-KELLY.NIPR.MIL
NameServer: AAA-VAIHINGEN.NIPR.MIL
NameServer: AAA-WHEELER.NIPR.MIL
NameServer: AAA-VIENNA.NIPR.MIL
Comment:
RegDate: 1992-12-05
Updated: 2004-01-13

Comments

He visited me, too. Wonder what that's about..

Baumi, 2004-08-29

I have hits from 198.26.118.37 since the last apache log rotate:

wcs2-moffett.nipr.mil - - [04/Feb/2004:20:02:42 +0100] "GET / HTTP/1.0" 200 6342 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)"

After some google-ing I've found THAT. Looks like someone in *.nipr.mil is bored and writing spam scripts ;-)

Stefan Funke, 2004-08-29

you can make a bargain with that :-).Sue them for some billions

Thorsten Ebers, 2004-08-29

From a military network somewhere, not necessarily from within the Pentagon itself. DISA holds the registration for a lot of (if not all at some level) US DoD networks. NIPR isn't anything secret ir special, it's just the unclassified internet from DoD's point of view...one gets from a military network to the internet via NIPR. No biggie.

Most, if not all, hits coming from a workstation on a military network will come from a network that looks like that. My hits included (I'm a Domino admin somewhere in the DoD).

I'm amazed at the paranoia on the WhileSeated link. There's a lot of computers out there in the US DoD. Some are more secured than others. The spam is probably from a hijacked/zombie workstation used by someone who is going to websites that they shouldn't be. I've seen more than my share of infected workstations inside NIPR.

As for the regular hits, keep in mind that not everyone in the US government are part of this vast conspiracy to take away your rights. Some of us are just misusing government equipment for their own entertainment. :)

Scott, 2004-08-30

Thanks Scott, that concurs with my own view. I got hit with the same kind of nonsense post from a different workstation this morning. Looks like the comment spammers want to flood MT-Backlist with crap.

Time to raise the bar with a new line of defense.

Volker Weber, 2004-08-30

No problem. It seems easy for people to forget that the US government has literally millions of employees and that the vast majority of them don't have the time or inclination to spend their workdays trying to take citizens' rights away and further the agenda of the Vast Right Wing Conspiracy.

Most of us are regular people that go to work, do their job, go home, and collect a paycheck twice a month. Even those of us that are part of the War Machine. Some of us are even proud of the fact that we make our living serving our country and its people.

Scott, 2004-08-30

Old vowe.net archive pages

I explain difficult concepts in simple ways. For free, and for money. Clue procurement and bullshit detection.

vowe

Paypal vowe