firewall attack? Network gurus

[Little6pack]

I was sitting here at my home computer when my firewall
blocked someting called a NEWTARE attack from this IP http://199.105.117.115/

What does newtare mean

 

[JoeNational]

Was it newtare or netware, if it was netware that is from Novell but was there an error message that you recieved or anything?

 

[Little6pack]

It was NEWTARE

Boy where have all the guru's gone?


199.105.117.115/
I am going to try a reverse lookup on this ip

 

[rx4mike]

Might not be an attack

I used to be a Assistant Network Admin at a local ISP. See if your IP address is close to the one that your Firewall blocked. If it is It could be a computer from your ISP checking to see if you're idle and would add you to a list to be disconnected for idle use. So to keep the phone lines untied up to allow others access at peak times. Or someone could have been trying to reconnect to a backdoor program on your computer.

Hope this helps you.

Mike

 

[Pressure-Less]

Littlesixsteve,
I did a tracer on the IP you gave and it originated in Boston.
Newtare is a Novell program and it looks like it can be used in an email and address book configuration. It is possible someone hacked someone elses system to attack other computers. This is the Network info on the IP and all the IP blocks assigned to it!

CERFnet NETBLK-CERFNET-CBLK2 (NET-199-105-0-0-1)
199.105.0.0 - 199.108.255.255
WorldPath Internet Services NETBLK-WORLDPATH-A (NET-199-105-112-0-1)
199.105.112.0 - 199.105.119.255

ARIN WHOIS database, last updated 2003-12-30 19:15
Enter ? for additional hints on searching ARIN's WHOIS database.
Here is a link also to Novell and it refering to Newtare fixes.
http://novell.unc.edu/docs/l-gen.htm

Good luck and thank goodness for firewalls.

Drew

 

[rx4mike]

huh?

I do this for a living and I could barely understand what you meant...lol

 

[Little6pack]

Thanks Guys!

Well at least my Macaffe firewall is working doing what it should be doing.

Awhile back my son had that dam KAZA & EULA on the computer.
I snuffed everything out with a spyware program & blew it all away. Over 300 spyware/addware was found..

The only thing it had trouble removing was the registry stuff.
I took care of those manualy.

Kaza & eula BE GONE!

 

[REDS HOT AIR]

if your using macafee just right click the attack in question and hit trace this event

my firewall has blocked 15,152 events this month

 

[REDS HOT AIR]

if your using macafee just right click the attack in question and hit trace this event

my firewall has blocked 15,152 events this month

 

[REDS HOT AIR]

if your using macafee just right click the attack in question and hit trace this event

my firewall has blocked 15,152 events this month

 

[REDS HOT AIR]

if your using macafee just right click the attack in question and hit trace this event

my firewall has blocked 15,152 events this month