AnonKuwait: Claim of Gulnet’s security camera hack [My analysis: Half confirmed]

Because of my last post, I considered AnonKuwait incredited for whatever he claims until someone (Or I) confirm it directly.

If you read AnonKuwait’s last post, you’ll see that he claimed breaching Gulfnet’s security cameras:

Now it’s time for me to confirm whether his claim is authentic or not.

First thing I did was accessing the link directly… Times out.

Of course, first thing you do when you get breached is cut off communication until you fix it.

So I did a whois on the questioned IP Address (Copy\paste from whois under linux [BackTrack to be more specific… I have it running on a VM]):

% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the “-B” flag.

% Information related to ‘194.126.63.0 – 194.126.63.255’

inetnum: 194.126.63.0 – 194.126.63.255
netname: GULFSAT-GCC
descr: United Cable Company
country: kw
admin-c: IRO1-RIPE
tech-c: NO122-RIPE
remarks: rev-srv: uccmain.united-cable.com
remarks: rev-srv: S2.GULFSAT.COM
status: Assigned PA
mnt-by: gulfsat_communications-MNT
mnt-lower: gulfsat_communications-MNT
source: RIPE # Filtered
remarks: rev-srv attribute deprecated by RIPE NCC on 02/09/2009

role: IP Remote Operators
address: Gulfsat Communications, UCC NOC
phone: +965 3280770
admin-c: SJ1206-RIPE
tech-c: RS5184-RIPE
nic-hdl: IRO1-RIPE
mnt-by: Gulfsat_Communications-MNT
abuse-mailbox: npd@un.com.kw
abuse-mailbox: helpdesk@un.com.kw
source: RIPE # Filtered

role: NOC Operators
address: GulfSat Communications
phone: +965 3280770
admin-c: SJ1206-RIPE
tech-c: RS5184-RIPE
nic-hdl: NO122-RIPE
mnt-by: Gulfsat_Communications-MNT
abuse-mailbox: abuse@gulfsat.com
source: RIPE # Filtered

% Information related to ‘194.126.32.0/19AS25122’

route: 194.126.32.0/19
descr: Gulfsat Main Route
origin: AS25122
mnt-by: GULFSAT_COMMUNICATIONS-MNT
mnt-by: MNT-GSUHN-1
mnt-routes: MNT-GSUHN-1
mnt-routes: GULFSAT_COMMUNICATIONS-MNT
source: RIPE # Filtered

% Information related to ‘194.126.63.0/24AS3225’

route: 194.126.63.0/24
descr: GS – UCC – Route 63
origin: AS3225
mnt-by: GULFSAT_COMMUNICATIONS-MNT
mnt-routes: GULFSAT_COMMUNICATIONS-MNT
source: RIPE # Filtered

Hmmm, seems legit enough… Time to traceroute it:

If you see the highlighted part in yellow (Doesn’t show really, but they’re the 5th and 6th jump), you can see the timeout starts. Which could actually mean its really an IP Address that belongs to Gulfnet.

Due to losing credibility because of Qualitynet’s half-assed fake hack attempt, I will never take any word AnonKuwait claims without checking.
I’ve confirmed that the IP Address DOES belong to Gulfnet, but couldn’t confirm if the pictures were in fact taken from Gulfnet or the IP Address belongs to an internet security camera.

If you think I’m wrong (Technical-wise) or you can confirm\unconfirm things, please, enlighten me… I’m curious honestly whether or not his claims are real or fake.
If you can’t prove me wrong technically and just want to say something just because you believe in him blindly, GTFO (Didn’t fast yet xD)

9 thoughts on “AnonKuwait: Claim of Gulnet’s security camera hack [My analysis: Half confirmed]

  1. I was talking to one of the guys that install these cameras once and he told me each camera comes with a free ip address (in thailand i believe) so you could access them from anywhere anytime just because its cheaper that way
    but even if its cheaper.. we are talking about an internet company not an individual, shouldn’t be that hard configuring them to be local.
    but in the end i’m no expert

  2. few hours ago , Gulf net blocked anonkuwait website.
    I know it doesn’t prove anything, but at least he is getting their attention.

    1. Bat, can you send me an email with a screen cap? You commented without an emails so this is my only way of doing so

  3. اي هيدي بالفعل صحيحة هذه صورة غرفة الداتا سنتر والصورة حديثة
    شركة جلف نت كانو مؤردرين بعض سويتشات سيسكو وزملائي بشركة زاك وصولها ايلهم
    بس كيف هاض الزلمة دخل على الكامرا وعرف الاي بي ؟

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.