I login to various password protected parts of one of my webservers using the work internet. Then some what I assume to be script kiddies started trying to find where I kept various admin tools by going to obvious and not so obvious addresses this webserver. So I got all paranoid and started going through the logs. It didn’t appear as though the script kiddies were getting in or had even found the correct address to the password protected parts of the server.

However I did find some IPs that did and I didn’t recognize them. They USA and Japan assigned IP addresses too. The script kiddies had been using proxies from the USA, France and Japan. However when I did an IP lookup these addresses came back as registered to Trend Micro.

All of the requests to my server gave those IPs 401 Unauthorized errors. So I did a test by navigating to a non existant page on my site with an address that I would notice in the server logs from the work internet. I found an IP from each IP range went to that page as well.

After some googling of the IP addresses I found other people had seen these IP ranges accessing pages that the public couldn’t and shouldn’t know about.

The IP ranges concerned where:

• 216.104.15.0/24
• 150.70.0.0/16

Most of these addresses don’t resolve to a hostname however I did find one that did: 150.70.66.183 resolved to sjdc-wtp-gs-maya6.sdi.trendnet.org but is registered to the Asia Pacific Network Information Centre. It also says that 150.0.0.0/8 is registered to APNIC too, however I’m not sure if it says that even though they have assigned/sold that address to Trend Micro.

As for why this happens I am not sure. Maybe it is a bot to find what customers employees are looking at, keyword grabber or something. I am pretty sure it wouldn’t my employer tracking my net usage as they surely would record that as my HTTP request went out the proxy in my building. However I haven’t checked if the work proxy is actually in the building…..

Not sure if this is a good thing or a bad thing, it will probably be quiet at night, and there is port 22 access from the company network, but I am probably going to have to start abusing caffeine again, not sure if my body will like that. I have managed to abstain from energy drinks for the last month or so, weaned of them by drinking coffee for the first time in my life. But coffee doesn’t agree with my guts, so I started to wean myself off coffee with Milo and Tea. Milo is full of fat though, and tea still has caffeine.

I wanted to go caffeine free, but doesn’t look like that is going to happen. Not if I want to be awake at work anyway.

I’ll be doing sanding and painting mostly by the sounds of things, with the occasional cutting out and welding in new sheets of steel. Luckily its sanding with an electric sander and painting with a spraygun.

So I start monday, damn its going to be hard getting up at 5am again… Also, everyone else I saw there was black, so I’m gonna be a white computer geek blinding everyone. Will have to take my iPod too cos they crank some gay RnB station there.

Its a 3month trial, that standard thing that Labour bought in so I’m going to keep looking for IT jobs in the meantime but if I don’t get one this job sounds pretty fun, and its nightshift.

I’m going to go help out my friend with her car, then I have to go to the hardware store, buy some self-taping metal screws and some flush-mount screw caps, then to Jaycar to get a master door lock actuator to try get my central locking working, get a car alarm from Dick Smiths to install once I actually get the central working, then run the rest of my sound cables, install the rear panels/speakers, cut out the right speaker whole in my door panel as well as the tweeter holes, then install the crossovers, the front speakers and the tweeters.

And maybe go to the movies considering its a Saturday night.

The sleeplyness should go away after about 24 hours without sleep.

Such simple things like creating a custom list are screwed!

For instance, when you want to create a column in a list, you can’t call it “Type” or “Name” because that column is already in use.  I am guessing by Sharepoints table for each list.  You think, if Microsoft was so “innovative” they would have called their columns something “sps_name” or “sps_type”.

Another thing that is just insanely stupid, is when creating a document library, you can’t call any of the folders in there “Forms” because “Forms” is already in the folder as a hidden item as it contains all the ASP pages that control the views for that document library.  Once again, you think they could have called the folder “sps_forms” or something.  Who’s going to name their folder “sps_forms”?

Looks like Sharepoint is another product that has just been bashed out without no thought whatsoever into what the customers needs are, and no ingenuity.

Fucking right on Microsoft… you fucking douchebags….

Though I have been informed I can get it now – supposedly the lines have been upgraded. But suddenly every broadband plan is a rip off! I am so sure they were cheaper before, it seems the unbundling has made things more expensive, though I think that was going to happen anyway – I think I remeber something about that.

Only dumb thing about being down here in Hamilton, I get to eat out every night, but I have no one to eat out with. Oh well. This is like a working holiday