Jump to content
The Unknown Ghosts

Intrusuin detection


UnDyingUK

Recommended Posts

My firewall picked up aqn attempted intrusion last night heres the details, anyone know whaqt this lot means, i did an IP search:

 

IP Tracker

 

 

Checking IP: 64.38.202.10

 

 

 

 

 

OrgName:CWIE, LLC

OrgID: CWIE

Address:1501 W. 17th Street

City:Tempe

StateProv:AZ

PostalCode: 85281

Country:US

 

NetRange:64.38.192.0 - 64.38.255.255

CIDR:64.38.192.0/18

Netname:CWIE-BLK-1

NetHandle:NET-64-38-192-0-1

Parent:NET-64-0-0-0-0

NetType:Direct Allocation

NameServer: NS1.CWIE.NET

NameServer: NS2.CWIE.NET

NameServer: NS3.CWIE.NET

NameServer: NS4.CWIE.NET

Comment:ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE

RegDate:2000-02-22

Updated:2002-08-20

 

TechHandle: RC622-ARIN

TechName:Cadwell, Ron

TechPhone:+1-602-248-4963

TechEmail:hostmaster@cavecreek.net

 

OrgTechHandle: IKM-ARIN

OrgTechName:McClarty, Ian K

OrgTechPhone:+1-480-449-7750

OrgTechEmail:ianm@cwie.net

 

 

This next bit is what my Firewall told me was used:

 

[217] Microsoft Multiple Application/OS GDI+ JPEG Processing Buffer Overflow Vulnerability attempt detected

Link to comment
Share on other sites

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
×
×
  • Create New...