22 Feb
2014
22 Feb
'14
5:21 p.m.
Now this guy appears every 60 sec., and he obviously knows what he's
doing. Anyone else seeing him? How does he do it?
Sat Feb 22 14:12:57 2014 - tun0 recv:
IP: len 74 169.228.66.251->192.168.1.149 ihl 20 ttl 50 prot IP
IP: len 54 67.185.10.74->44.135.160.40 ihl 20 ttl 46 DF prot UDP
UDP: len 34 48465->6781 Data 26
0000 CQ AMPR! CQ AMPR! CQ AMPR!
Sat Feb 22 14:12:57 2014 - tun0 recv:
IP: len 74 169.228.66.251->192.168.1.149 ihl 20 ttl 50 prot IP
IP: len 54 67.185.10.74->44.135.160.40 ihl 20 ttl 46 DF prot UDP
UDP: len 34 48465->6781 Data 26
0000 CQ AMPR! CQ AMPR! CQ AMPR!
(encap) 67.185.10.74->44.135.160.40 DF UDP
CQ AMPR! CQ AMPR! CQ AMPR!
Sat Feb 22 14:12:57 2014 - tun0 sent:
IP: len 56 192.168.1.149->67.185.10.74 ihl 20 ttl 254 prot ICMP
ICMP: type Unreachable code Port
Returned IP: len 54 67.185.10.74->44.135.160.40 ihl 20 ttl 46 DF prot UDP
UDP: len 34 48465->6781 Data 26
jerome - ve7ass
------
22 Feb
22 Feb
5:29 p.m.
n1uro@n1uro.ampr.org:/uronode$ host 67.185.10.74
Host name information for 67.185.10.74:
Hostname: c-67-185-10-74.hsd1.wa.comcast.net
Aliases:
Address(es): 67.185.10.74
n1uro@n1uro.ampr.org:/uronode$
My guess is it's another windows box in washington state that's been
told windows natively does IP protocol 4.
Of course it's only a guess.... the hostname however isn't.
On Sat, 2014-02-22 at 14:21 -0800, Jerome Schatten wrote:
(Please trim inclusions from previous messages)
_______________________________________________
Now this guy appears every 60 sec., and he obviously knows what he's
doing. Anyone else seeing him? How does he do it?
Sat Feb 22 14:12:57 2014 - tun0 recv:
IP: len 74 169.228.66.251->192.168.1.149 ihl 20 ttl 50 prot IP
IP: len 54 67.185.10.74->44.135.160.40 ihl 20 ttl 46 DF prot UDP
UDP: len 34 48465->6781 Data 26
0000 CQ AMPR! CQ AMPR! CQ AMPR!
Sat Feb 22 14:12:57 2014 - tun0 recv:
IP: len 74 169.228.66.251->192.168.1.149 ihl 20 ttl 50 prot IP
IP: len 54 67.185.10.74->44.135.160.40 ihl 20 ttl 46 DF prot UDP
UDP: len 34 48465->6781 Data 26
0000 CQ AMPR! CQ AMPR! CQ AMPR!
(encap) 67.185.10.74->44.135.160.40 DF UDP
CQ AMPR! CQ AMPR! CQ AMPR!
Sat Feb 22 14:12:57 2014 - tun0 sent:
IP: len 56 192.168.1.149->67.185.10.74 ihl 20 ttl 254 prot ICMP
ICMP: type Unreachable code Port
Returned IP: len 54 67.185.10.74->44.135.160.40 ihl 20 ttl 46 DF prot UDP
UDP: len 34 48465->6781 Data 26
jerome - ve7ass
------
_________________________________________
44Net mailing list
44Net(a)hamradio.ucsd.edu
http://hamradio.ucsd.edu/mailman/listinfo/44net
--
73 de Brian Rogers - N1URO
email: <n1uro(a)n1uro.ampr.org>
Web: http://www.n1uro.net/
Ampr1: http://n1uro.ampr.org/
Ampr2: http://nos.n1uro.ampr.org
Linux Amateur Radio Services
axMail-Fax & URONode
AmprNet coordinator for:
Connecticut, Delaware, Maine,
Maryland, Massachusetts,
New Hampshire, Pennsylvania,
Rhode Island, and Vermont.
23 Feb
23 Feb
5:26 a.m.
It's not really interloping if you're interconnected. Just saying...
On Sat, Feb 22, 2014 at 2:29 PM, Brian <n1uro(a)n1uro.ampr.org> wrote:
(Please trim inclusions from previous messages)
_______________________________________________
n1uro@n1uro.ampr.org:/uronode$ host 67.185.10.74
Host name information for 67.185.10.74:
Hostname: c-67-185-10-74.hsd1.wa.comcast.net
Aliases:
Address(es): 67.185.10.74
n1uro@n1uro.ampr.org:/uronode$
My guess is it's another windows box in washington state that's been
told windows natively does IP protocol 4.
Of course it's only a guess.... the hostname however isn't.
On Sat, 2014-02-22 at 14:21 -0800, Jerome Schatten wrote:
(Please trim inclusions from previous messages)
_______________________________________________
Now this guy appears every 60 sec., and he obviously knows what he's
doing. Anyone else seeing him? How does he do it?
Sat Feb 22 14:12:57 2014 - tun0 recv:
IP: len 74 169.228.66.251->192.168.1.149 ihl 20 ttl 50 prot IP
IP: len 54 67.185.10.74->44.135.160.40 ihl 20 ttl 46 DF prot UDP
UDP: len 34 48465->6781 Data 26
0000 CQ AMPR! CQ AMPR! CQ AMPR!
Sat Feb 22 14:12:57 2014 - tun0 recv:
IP: len 74 169.228.66.251->192.168.1.149 ihl 20 ttl 50 prot IP
IP: len 54 67.185.10.74->44.135.160.40 ihl 20 ttl 46 DF prot UDP
UDP: len 34 48465->6781 Data 26
0000 CQ AMPR! CQ AMPR! CQ AMPR!
(encap) 67.185.10.74->44.135.160.40 DF UDP
CQ AMPR! CQ AMPR! CQ AMPR!
Sat Feb 22 14:12:57 2014 - tun0 sent:
IP: len 56 192.168.1.149->67.185.10.74 ihl 20 ttl 254 prot ICMP
ICMP: type Unreachable code Port
Returned IP: len 54 67.185.10.74->44.135.160.40 ihl 20 ttl 46 DF prot UDP
UDP: len 34 48465->6781 Data 26
jerome - ve7ass
------
_________________________________________
44Net mailing list
44Net(a)hamradio.ucsd.edu
http://hamradio.ucsd.edu/mailman/listinfo/44net
--
73 de Brian Rogers - N1URO
email: <n1uro(a)n1uro.ampr.org>
Web: http://www.n1uro.net/
Ampr1: http://n1uro.ampr.org/
Ampr2: http://nos.n1uro.ampr.org
Linux Amateur Radio Services
axMail-Fax & URONode
AmprNet coordinator for:
Connecticut, Delaware, Maine,
Maryland, Massachusetts,
New Hampshire, Pennsylvania,
Rhode Island, and Vermont.
_________________________________________
44Net mailing list
44Net(a)hamradio.ucsd.edu
http://hamradio.ucsd.edu/mailman/listinfo/44net
3924
days inactive
3925
days old
2 comments
3 participants
participants (3)
-
Brian -
Don Fanning -
Jerome Schatten