Intrusion Attempt

[Bill in SD, CA]

Woke this A.M to a Zone Alarm message saying it had blocked access to my computer from IP 217.17.120.36 at port 58827.

A lookup gave the following. Anyone know this site?

OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: Singel 258
Address: 1016 AB
City: Amsterdam
StateProv:
PostalCode:
Country: NL

ReferralServer: whois://whois.ripe.net

NetRange: 217.0.0.0 - 217.255.255.255
CIDR: 217.0.0.0/8
NetName: 217-RIPE
NetHandle: NET-217-0-0-0-1
Parent:
NetType: Allocated to RIPE NCC
NameServer: NS.RIPE.NET
NameServer: NS3.NIC.FR
NameServer: SUNIC.SUNET.SE
NameServer: AUTH00.NS.UU.NET
NameServer: SEC1.APNIC.NET
NameServer: SEC3.APNIC.NET
NameServer: TINNIE.ARIN.NET
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at http://www.ripe.net/whois
RegDate: 2000-06-05
Updated: 2003-09-19

OrgTechHandle: RIPE-NCC-ARIN
OrgTechName: RIPE NCC Hostmaster
OrgTechPhone: +31 20 535 4444
OrgTechEmail: search-ripe-ncc-not-arin@ripe.net


Bill

[DoubleK]

Bill it is probably safe to surmise that any activity originating from the Netherlands, Korea , Taiwan and Germany amongst others are of a probing nature. There are plenty of utilities out there to ensure you are locked down, Retina scanner comes to mind, free to try at least.

I downloaded an all seeing eye type gaming browser the otherday and I think it wanted my CD Key for Bf1942. Smacktards dont have anything better to do then steal little kids CD Keys because they got caught cheating by punkbuster.

Sigh, I tried to contact the authorities in South Korea once, I think something was lost in the translation. Good luck.

[Optimus Prime]

Originally posted by DoubleK
Bill it is probably safe to surmise that any activity originating from the Netherlands, Korea , Taiwan and Germany amongst others...

Yeah, every other country apart from America of course .

[DoubleK]

Yeah, every other country apart from America of course .

Your taking my post out of context, please post something constructive like why people perform systematic port scans on home users or dont post anything at all. Thank you.

In the States here it is quite simple to send your intrusion logs among other things to the originating isp's abuse aprtment and have the issue looked into, not an easy task in other Countries to accomplish given language barriers or distaste for Americans as you aptly illustrate. Sorry, I know I took you out of context.

[Bill in SD, CA]

O ...............................kay.

Bill

its hard to really say where its coming from, that computer could be hacked and being used as the middle man.

[nomaxim]

I've seen a warning from ZA from RIPE before. Don't remember when, but it was at least a couple of months ago. Only happened once so I just chalked it up as random noise. I only get worried about these ZA warnings if I get a couple from the same source in a short period of time.

Then again I'm on AOL/cable and have a non-static IP.