Reply to thread

Message

<blockquote data-quote="imhotep" data-source="post: 24608228" data-attributes="member: 562115">Strange....Assume your device is 192.168.1.3 (LiteonTe_[last bit of ethernet address overwritten!] )... but not giving the full picture makes it hard.<img src="/styles/default/xenforo/smilies/default/sorry.gif"&nbsp; class="smilie" loading="lazy" alt=":sorry:" title="Sorry&nbsp; &nbsp; :sorry:" data-shortname=":sorry:" />nslookups on these gives,&nbsp; &nbsp; 31.62.64.1&nbsp; &nbsp; public-gprs301248.centertel.pl.&nbsp; &nbsp; 31.62.98.40&nbsp; &nbsp; public-gprs309991.centertel.pl.whois gives...$ whois centertel.pl[Querying whois.dns.pl][whois.dns.pl]&nbsp;DOMAIN NAME:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; centertel.pl registrant type:&nbsp; &nbsp; &nbsp;&nbsp; organization nameservers:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; ns1.corpnet.pl. [80.50.50.100][2a01:1700:2:1::3264] &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; ns2.corpnet.pl. [80.50.50.150][2a01:1700:3:2::3296] &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; ns3.corpnet.pl. [80.50.50.200][2a01:1700:2:3::32c8] &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; ns4.corpnet.pl. [80.50.50.180][2a01:1700:3:4::32b4] created:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 1996.04.01 13:00:00 last modified:&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 2016.03.21 15:47:28 renewal date:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 2020.12.31 13:00:00 &nbsp;no option &nbsp;dnssec:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Unsigned &nbsp;REGISTRAR: AZ.pl Sp. z o.o.ul. Zbożowa 470-653 SzczecinPolska/Poland+48.914243780<a href="mailto:domena@az.pl">domena@az.pl</a> &nbsp;AND...$ whois 31.62.98.40[Querying whois.ripe.net][whois.ripe.net]% This is the RIPE Database query service.% The objects are in RPSL format.%% The RIPE Database is subject to Terms and Conditions.% See <a href="https://protect-au.mimecast.com/s/6Ow3C81Zj6tqVPxnsnJM99?domain=ripe.net" target="_blank">https://protect-au.mimecast.com/s/6Ow3C81Zj6tqVPxnsnJM99?domain=ripe.net</a>% Note: this output has been filtered.%&nbsp; &nbsp; &nbsp;&nbsp; To receive output for a database update, use the &quot;-B&quot; flag.% Information related to '31.62.0.0 - 31.62.127.255'% Abuse contact for '31.62.0.0 - 31.62.127.255' is 'cert.opl@orange.com'inetnum:&nbsp; &nbsp; &nbsp; &nbsp; 31.62.0.0 - 31.62.127.255netname:&nbsp; &nbsp; &nbsp; &nbsp; PL-IDEA-MOBILEdescr:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Orange Mobilecountry:&nbsp; &nbsp; &nbsp; &nbsp; PLadmin-c:&nbsp; &nbsp; &nbsp; &nbsp; OPHTtech-c:&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; OPHTstatus:&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; ASSIGNED PAmnt-by:&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; AS12743-MNTcreated:&nbsp; &nbsp; &nbsp; &nbsp; 2011-09-30T12:13:00Zlast-modified:&nbsp; 2016-04-18T09:58:53Zsource:&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; RIPEremarks:&nbsp; &nbsp; &nbsp; &nbsp; ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - !remarks:&nbsp; &nbsp; &nbsp; &nbsp; Please send spam and abuse notification only toremarks:&nbsp; &nbsp; &nbsp; &nbsp; <a href="mailto:cert.opl@orange.com">cert.opl@orange.com</a>remarks:&nbsp; &nbsp; &nbsp; &nbsp; ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - !role:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; OPL - Hostmasteraddress:&nbsp; &nbsp; &nbsp; &nbsp; Orange Polska S.A.address:&nbsp; &nbsp; &nbsp; &nbsp; Al. Jerozolimskie 160address:&nbsp; &nbsp; &nbsp; &nbsp; 02-326 Warszawaaddress:&nbsp; &nbsp; &nbsp; &nbsp; Polandphone:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; +48 800 120810phone:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; +48 801 600006phone:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; +48 22 5039000fax-no:&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; +48 22 6225182org:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ORG-PT1-RIPEadmin-c:&nbsp; &nbsp; &nbsp; &nbsp; AD13130-RIPEadmin-c:&nbsp; &nbsp; &nbsp; &nbsp; EHD2-RIPEtech-c:&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; KP21-RIPEabuse-mailbox:&nbsp; <a href="mailto:cert.opl@orange.com">cert.opl@orange.com</a>nic-hdl:&nbsp; &nbsp; &nbsp; &nbsp; OPHTmnt-by:&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; TPNETcreated:&nbsp; &nbsp; &nbsp; &nbsp; 2014-03-26T08:23:42Zlast-modified:&nbsp; 2016-10-04T12:22:55Zsource:&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; RIPE # Filtered% Information related to '31.62.64.0/18AS43447'route:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 31.62.64.0/18descr:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; PTK CENTERTEL MOBILE data servicesorigin:&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; AS43447mnt-by:&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; AS12743-MNTcreated:&nbsp; &nbsp; &nbsp; &nbsp; 2011-09-30T12:24:41Zlast-modified:&nbsp; 2011-09-30T12:24:41Zsource:&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; RIPE% This query was served by the RIPE Database Query Service version 1.94(BLAARKOP)So it's &quot;Polish Orange&quot;. I'd say it's more likely that you are using a peer to peer network &amp;/or a VPN and that it's &quot;leaking&quot; arps.Or could a phone on the network or any of a number of other things, like the provider network leaking an arp - JuniperN is likely JuniperNetworks so that could be your provider's router (depends what the topology is) leaking to your side.Or it could be even a case of possible Arp cache poisoning. Anything is possible with M$hit &amp; Windoze.<img src="/styles/default/xenforo/smilies/default/yes.gif"&nbsp; class="smilie" loading="lazy" alt=":yes:" title="Yes&nbsp; &nbsp; :yes:" data-shortname=":yes:" /></blockquote>

[QUOTE="imhotep, post: 24608228, member: 562115"] Strange.... Assume your device is 192.168.1.3 (LiteonTe_[last bit of ethernet address overwritten!] )... but not giving the full picture makes it hard.:sorry: nslookups on these gives, 31.62.64.1 public-gprs301248.centertel.pl. 31.62.98.40 public-gprs309991.centertel.pl. whois gives... $ whois centertel.pl [Querying whois.dns.pl] [whois.dns.pl] DOMAIN NAME: centertel.pl registrant type: organization nameservers: ns1.corpnet.pl. [80.50.50.100][2a01:1700:2:1::3264] ns2.corpnet.pl. [80.50.50.150][2a01:1700:3:2::3296] ns3.corpnet.pl. [80.50.50.200][2a01:1700:2:3::32c8] ns4.corpnet.pl. [80.50.50.180][2a01:1700:3:4::32b4] created: 1996.04.01 13:00:00 last modified: 2016.03.21 15:47:28 renewal date: 2020.12.31 13:00:00 no option dnssec: Unsigned REGISTRAR: AZ.pl Sp. z o.o. ul. Zbożowa 4 70-653 Szczecin Polska/Poland +48.914243780 [email]domena@az.pl[/email] AND... $ whois 31.62.98.40 [Querying whois.ripe.net] [whois.ripe.net] % This is the RIPE Database query service. % The objects are in RPSL format. % % The RIPE Database is subject to Terms and Conditions. % See [url]https://protect-au.mimecast.com/s/6Ow3C81Zj6tqVPxnsnJM99?domain=ripe.net[/url] % Note: this output has been filtered. % To receive output for a database update, use the "-B" flag. % Information related to '31.62.0.0 - 31.62.127.255' % Abuse contact for '31.62.0.0 - 31.62.127.255' is 'cert.opl@orange.com' inetnum: 31.62.0.0 - 31.62.127.255 netname: PL-IDEA-MOBILE descr: Orange Mobile country: PL admin-c: OPHT tech-c: OPHT status: ASSIGNED PA mnt-by: AS12743-MNT created: 2011-09-30T12:13:00Z last-modified: 2016-04-18T09:58:53Z source: RIPE remarks: ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! remarks: Please send spam and abuse notification only to remarks: [email]cert.opl@orange.com[/email] remarks: ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! role: OPL - Hostmaster address: Orange Polska S.A. address: Al. Jerozolimskie 160 address: 02-326 Warszawa address: Poland phone: +48 800 120810 phone: +48 801 600006 phone: +48 22 5039000 fax-no: +48 22 6225182 org: ORG-PT1-RIPE admin-c: AD13130-RIPE admin-c: EHD2-RIPE tech-c: KP21-RIPE abuse-mailbox: [email]cert.opl@orange.com[/email] nic-hdl: OPHT mnt-by: TPNET created: 2014-03-26T08:23:42Z last-modified: 2016-10-04T12:22:55Z source: RIPE # Filtered % Information related to '31.62.64.0/18AS43447' route: 31.62.64.0/18 descr: PTK CENTERTEL MOBILE data services origin: AS43447 mnt-by: AS12743-MNT created: 2011-09-30T12:24:41Z last-modified: 2011-09-30T12:24:41Z source: RIPE % This query was served by the RIPE Database Query Service version 1.94 (BLAARKOP) So it's "Polish Orange". I'd say it's more likely that you are using a peer to peer network &/or a VPN and that it's "leaking" arps. Or could a phone on the network or any of a number of other things, like the provider network leaking an arp - JuniperN is likely JuniperNetworks so that could be your provider's router (depends what the topology is) leaking to your side. Or it could be even a case of possible Arp cache poisoning. Anything is possible with M$hit & Windoze.:yes: [/QUOTE]

Verification

Hathara warak wissa keeyada? (Hathara wadi karanna 20)

Search

Latest ads

Reply to thread