Hacker News Reader

Comment by geofft | Hacker News Reader

What is your evidence that the vulnerability testing was done by someone supported by your tax dollars, instead of by a computer that was part of a botnet controlled by your government's cyberenemies?

View on HN

Its probably just scans from zmap. Complaining about zmap scans is about on the level of complaining about ssllabs.com scanning your box.

https://zmap.io/

It could be a student in the dorms who discovered metasploit though. Or someone in the computer lab who has a tool that doesn't need root. (or who rooted the lab computer)

Here is a check for the IP for freakattack.com:

http://www.tcpiputils.com/browse/ip-address/141.212.122.194

Edit: They have been on that list for a while, so either the staff at the University is incompetent or they don't care; what was your point again?

This is why reverse DNS exists. http://researchscan450.eecs.umich.edu/

You are actually correct that you were scanned by an official, funded project at the University of Michigan. The research team specializes in "internet-wide measurement", meaning they scan for vulnerabilities on a regular basis in order to get a sort of "Internet health report".

Nonetheless, if this bothers you, visiting the IP that scanned you gives you instructions for opting out: http://141.212.122.194

He asked about why UMichigan is inaccessible from your network. How do you know it was a supported student activity and not either a malicious student, or a machine on the UMichigan network that's been compromised?

Have you reported the activity against your home network to UMichigan?

Reply on news.ycombinator.com