Hacker News new | ask | show | jobs
by geofft 4128 days ago
What is your evidence that the vulnerability testing was done by someone supported by your tax dollars, instead of by a computer that was part of a botnet controlled by your government's cyberenemies?
2 comments

Its probably just scans from zmap. Complaining about zmap scans is about on the level of complaining about ssllabs.com scanning your box.

https://zmap.io/

It could be a student in the dorms who discovered metasploit though. Or someone in the computer lab who has a tool that doesn't need root. (or who rooted the lab computer)

Here is a check for the IP for freakattack.com:

http://www.tcpiputils.com/browse/ip-address/141.212.122.194

Edit: They have been on that list for a while, so either the staff at the University is incompetent or they don't care; what was your point again?

This is why reverse DNS exists. http://researchscan450.eecs.umich.edu/
You are actually correct that you were scanned by an official, funded project at the University of Michigan. The research team specializes in "internet-wide measurement", meaning they scan for vulnerabilities on a regular basis in order to get a sort of "Internet health report".

Nonetheless, if this bothers you, visiting the IP that scanned you gives you instructions for opting out: http://141.212.122.194

He asked about why UMichigan is inaccessible from your network. How do you know it was a supported student activity and not either a malicious student, or a machine on the UMichigan network that's been compromised?

Have you reported the activity against your home network to UMichigan?