It should look for 192.168.1.90 which is the Rockwell PLC which controls it...we double checked everything.... they can see all relevant devices on their iPads via FactoryTalk Viewpoint.... Going to ask their IT guy to block IP and see if it affects anything....this is waste water plant....poop has to flow
On Mon, Nov 30, 2020, 1:06 PM Ken Hohhof <[email protected]> wrote: > Looks like 239.0.0.0/8 is reserved for administratively scoped multicast, > in other words it should not cross administrative boundaries and is > probably not globally routable. Maybe it’s looking for its local > controller. > > > > https://tools.ietf.org/html/rfc2365 > > > > > > *From:* AF <[email protected]> *On Behalf Of *Chuck McCown via AF > *Sent:* Monday, November 30, 2020 1:53 PM > *To:* 'AnimalFarm Microwave Users Group' <[email protected]> > *Cc:* Chuck McCown <[email protected]> > *Subject:* Re: [AFMUG] Smart wireshark dudes > > > > My first reaction is that the VFD microcontroller got PWND by someone. > Kinda like the Iraqi centrifuges and our government. > > > > *From:* AF [mailto:[email protected] <[email protected]>] *On > Behalf Of *Jaime Solorza > *Sent:* Monday, November 30, 2020 12:43 PM > *To:* AnimalFarm Microwave Users Group <[email protected]> > *Subject:* [AFMUG] Smart wireshark dudes > > > > Running wireshark on a SCADA network and I am detecting a VFD using CIP > trying to hit IP 239.192.128.229... > > I tried looking it up ....says Asis Pacific... > > Can someone give me more information on this IP? > > Thanks > -- > AF mailing list > [email protected] > http://af.afmug.com/mailman/listinfo/af_af.afmug.com >
-- AF mailing list [email protected] http://af.afmug.com/mailman/listinfo/af_af.afmug.com
