Newsgroup: it.comp.sicurezza.windows
Titolo: Messaggio da ZA

Zone Alarm mi ha segnalato 4 tentativi di accesso nel giro di 5 minuti
dall'indirizzo 64.132.35.248;
lo stesso programma mi ha dato le seguenti info; per favore, qualcuno puņ
aiutarmi a decifrare ? (anche per l'inglese). Grazie
"Reverse DNS Lookup of 64.132.35.248
The computer name ("domain name") identified for this IP address is:
ip248.calebtech.com
(Note: if you see "Unavailable", instead of a computer name, that means no
reverse DNS entry was found for this IP address, and so the domain name
could not be identified.)
Whois Lookup of 64.132.35.248
The following information was obtained from the "whois" database for the
registry with which 
ip248.calebtech.com
 is registered. This gives
administrative and contact information about 
ip248.calebtech.com
.
If no domain name was identified, or if it was not possible to determine
which registry the IP address is registered under, and for certain foreign
domains that are not currently supported, the information below was obtained
from the ARIN whois database. In that case, the information is not about the
specific computer at 64.132.35.248. The information in that case is
administrative and contact information for the "upstream provider" that
administers a block of IP addresses, of which 64.132.35.248 is only one.
Particularly in the case of ARIN database results, the whois information
below includes administrative information about a group of IP addresses that
are all administered together. They may be administered together because the
computers are all owned by the same person or organization, but they may not
be. For example, an ISP may administer a large block of IP addresses
together, but the ISP doesn't own all, or even most, of the computers on its
network.
Please do not assume the people named in this report are the ones who are
responsible for the alert you saw. However, if you are getting repeated
alerts from IP addresses in the same IP block, this is a good place to find
out who administers the network. If you have identified malicious or highly
suspicious activity and have ruled out configuration errors, bugs, and other
benign causes, you may wish to contact a network administrator to notify him
or her.
 Time Warner Telecom IDD (NETBLK-NETBLK-TWTC-NETBLK-1) NETBLK-TWTC-NETBLK-1
         64.132.0.0 - 64.132.191.255
Caleb Technologies (NETBLK-TWTC-AUSU-C-CALEBTE-1) TWTC-AUSU-C-CALEBTE-1
       64.132.35.128 - 64.132.35.255
To single out one record, look it up with "!xxx", where xxx is the
handle, shown in parenthesis following the name, which comes first.
The ARIN Registration Services Host contains ONLY Internet
Network Information: Networks, ASN's, and related POC's.
Please use the whois server at 
rs.internic.net
 for DOMAIN related
Information and 
whois.nic.mil
 for NIPRNET Information.
Time Warner Telecom IDD (NETBLK-NETBLK-TWTC-NETBLK-1)
   3235 Intertech Drive, Suite 600
   Brookfield, WI 53045
   US
   Netname: NETBLK-TWTC-NETBLK-1
   Netblock: 64.132.0.0 - 64.132.191.255
   Maintainer: TWTC
   Coordinator:
      Helding, Gregory  (GH189-ARIN)  
gr...@twtelecom.net
 
414-908-9040
 (FAX) 
414-908-9001
   Domain System inverse mapping provided by:
 
INS1.MILW.TWTELECOM.NET
 216.136.95.3
 
INS1.IPLT.TWTELECOM.NET
 216.136.95.19
 
INS1.DLFW.TWTELECOM.NET
 216.136.95.83
   ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
   Record last updated on 22-May-2001.
   Database last updated on 2-Aug-2001 23:12:13 EDT.
The ARIN Registration Services Host contains ONLY Internet
Network Information: Networks, ASN's, and related POC's.
Please use the whois server at 
rs.internic.net
 for DOMAIN related
Information and 
whois.nic.mil
 for NIPRNET Information.
Caleb Technologies (NETBLK-TWTC-AUSU-C-CALEBTE-1)
   9130 Jollyville Rd
   Austin, TX 78759
   US
   Netname: TWTC-AUSU-C-CALEBTE-1
   Netblock: 64.132.35.128 - 64.132.35.255
   Coordinator:
      Time Warner Telecom  (HOS8-ORG-ARIN)  
hostm...@twtelecom.net
 
800-898-6473
   Record last updated on 23-Nov-2000.
   Database last updated on 2-Aug-2001 23:12:13 EDT.
The ARIN Registration Services Host contains ONLY Internet
Network Information: Networks, ASN's, and related POC's.
Please use the whois server at 
rs.internic.net
 for DOMAIN related
Information and 
whois.nic.mil
 for NIPRNET Information.

aiutarmi a decifrare ? (anche per l'inglese). Grazie
Ti rispondo io prima che qualcuno ti affetti come un ananas matura...
Cosa cazzo usi a fare ZA se non lo conosci? Ne hai veramente bisogno?
Se si, allora impara ad usarlo...

 puņ aiutarmi a decifrare ? 
So che la cosa puo' sembrarti una cattiveria, ma postare tutto il log non
serve.
Primo: queste cose capitano tutti i giorni (e non c'e' da preoccuparsi)
Secondo: Se tutti postassero qui i log di ZA sto NG sarebbe invivibile.
Terzo: Se non leggi la documentazione o l'help dei programmi che scarichi
non possiamo farlo noi per te.
-- 
           ~~ ICQ#: 8761263 ~~ 
http://www.delymyth.net/
 ~~
            E-Mail Addy: DElyMyth [at] delymyth [dot] net
           => FREE! Hardware Anti-Virus!!! - /dev/brain <=
GnuPG Fingerprint: F6D3 E002 C55A 0B58 7BD4  70CE A69B CCFC 741D 3099

 aiutarmi a decifrare ? (anche per l'inglese). Grazie
La prossima volta invece di postare questi malloppi inutili scrivi
all'indirizzo e-mail indicato.. e butta via quella porcheria di ZA.
-- 
Pierluigi De Rosa (
tho...@durin.khazad-dum.net
).
<<      LINUX: the choice of a GNU generation     >>
<<   For my real address... ask the Balrog.       >>
* Sostenete la Lega per la Soppressione dei Troll *

 dall'indirizzo 64.132.35.248;
Il mio sito (2° link della firma) contiene il Zone-Alarm Mini-HOWTO.
Comunque ti anticipo che nella maggior parte dei casi quelli sono
semplici tentativi di accesso probabilmente "automatici", nel senso che
sono compiuti da macchine configurate un po' ad minchiam, per esempio un
server web con IIS che quando ci vai con il browser prova a connettersi
a te per sapere il tuo nome Netbios, oppure che crede che il tuo
computer sia un router... quasi sempre si possono ignorare senza
problemi, e di solito il consiglio migliore e' disattivare la
finestrella di allarme di ZA.
-- 
Abrogato l'art. 21 della Costituzione Italiana:
 
http://punto-informatico.it/petizione.asp
SecurFaq             : 
http://members.nbci.com/gouldukat/
Biancorossi Siamo Noi: 
http://www.tifonet.it/free/ancona/