"Norton has prevented an intrusion attempt"

acidrain

acidrain

Executive Member
Joined
Jan 7, 2007
Messages
7,005
Reaction score
1,799
Location
At a computer
Got that message so i thought id check the IP and then whois it. The following showed up:

inetnum: 155.239.102.0 - 155.239.103.255
netname: IPNET-NAS-OBFN
descr: Telkom SA Limited
descr: Integrated Network Planning
descr: Private Bag X74
descr: Pretoria
descr: Gauteng
descr: 0001
country: ZA
admin-c: MST95-AFRINIC
tech-c: JDU24-AFRINIC
tech-c: PB455-AFRINIC
status: ASSIGNED PA
mnt-by: AFRINIC-HM-MNT
remarks: noc e-mail: <>, phone: +27-12-680-0224
remarks: abuse e-mail: <>, phone: +27-12-680-7561
mnt-domains: TELKOM-SA-IPNET-MNT
source: AFRINIC # Filtered
parent: 155.239.0.0 - 155.239.255.255

person: Markus Stoltz
address: Integrated Network Planning
address: Private Bag X74
address: Pretoria
address: Gauteng
address: 0001
address: ZA
phone: +27 12 680 7816
e-mail:
nic-hdl: MST95-AFRINIC
source: AFRINIC # Filtered

person: Pieter Bezuidenhout
address: Telkom SA Ltd SAIX
address: 151 Frans Conradie Ave
address: Parow
address: Western Cape
address: 7500
address: ZA
phone: +1 111 1111111
fax-no: +2721 9302789
e-mail:
e-mail:
nic-hdl: PB455-AFRINIC
remarks: Abuse complaints can be directed to
source: AFRINIC # Filtered

person: Johan Du Preez
address: NNOC
address: Oak Avenue
address: Centurion
address: Gauteng
address: 2000
address: ZA
phone: +1 012 6800067
e-mail:
nic-hdl: JDU24-AFRINIC
remarks: Administrative Contact only, please contact
remarks: for Abuse queries
source: AFRINIC # Filtered



Any ideas why they tried to gain access to me if that was this case. If not why was it considered an intrusion by norton.
 
acidrain said:
Got that message so i thought id check the IP and then whois it. The following showed up:

inetnum: 155.239.102.0 - 155.239.103.255
netname: IPNET-NAS-OBFN
descr: Telkom SA Limited
descr: Integrated Network Planning
descr: Private Bag X74
descr: Pretoria
descr: Gauteng
descr: 0001
country: ZA
admin-c: MST95-AFRINIC
tech-c: JDU24-AFRINIC
tech-c: PB455-AFRINIC
status: ASSIGNED PA
mnt-by: AFRINIC-HM-MNT
remarks: noc e-mail: <>, phone: +27-12-680-0224
remarks: abuse e-mail: <>, phone: +27-12-680-7561
mnt-domains: TELKOM-SA-IPNET-MNT
source: AFRINIC # Filtered
parent: 155.239.0.0 - 155.239.255.255

person: Markus Stoltz
address: Integrated Network Planning
address: Private Bag X74
address: Pretoria
address: Gauteng
address: 0001
address: ZA
phone: +27 12 680 7816
e-mail:
nic-hdl: MST95-AFRINIC
source: AFRINIC # Filtered

person: Pieter Bezuidenhout
address: Telkom SA Ltd SAIX
address: 151 Frans Conradie Ave
address: Parow
address: Western Cape
address: 7500
address: ZA
phone: +1 111 1111111
fax-no: +2721 9302789
e-mail:
e-mail:
nic-hdl: PB455-AFRINIC
remarks: Abuse complaints can be directed to
source: AFRINIC # Filtered

person: Johan Du Preez
address: NNOC
address: Oak Avenue
address: Centurion
address: Gauteng
address: 2000
address: ZA
phone: +1 012 6800067
e-mail:
nic-hdl: JDU24-AFRINIC
remarks: Administrative Contact only, please contact
remarks: for Abuse queries
source: AFRINIC # Filtered



Any ideas why they tried to gain access to me if that was this case. If not why was it considered an intrusion by norton.
Click to expand...

Whoohooo! Now theres deja vu for you !!
:D Ive got a file loaded with similar printouts from way back... Pieter Bezuidenhout features prominently.... You use IRC? :D


toady:D
 
acidrain said:
Got that message so i thought id check the IP and then whois it. The following showed up:

inetnum: 155.239.102.0 - 155.239.103.255
netname: IPNET-NAS-OBFN
descr: Telkom SA Limited
descr: Integrated Network Planning
descr: Private Bag X74
descr: Pretoria
descr: Gauteng
descr: 0001
country: ZA
admin-c: MST95-AFRINIC
tech-c: JDU24-AFRINIC
tech-c: PB455-AFRINIC
status: ASSIGNED PA
mnt-by: AFRINIC-HM-MNT
remarks: noc e-mail: <>, phone: +27-12-680-0224
remarks: abuse e-mail: <>, phone: +27-12-680-7561
mnt-domains: TELKOM-SA-IPNET-MNT
source: AFRINIC # Filtered
parent: 155.239.0.0 - 155.239.255.255

person: Markus Stoltz
address: Integrated Network Planning
address: Private Bag X74
address: Pretoria
address: Gauteng
address: 0001
address: ZA
phone: +27 12 680 7816
e-mail:
nic-hdl: MST95-AFRINIC
source: AFRINIC # Filtered

person: Pieter Bezuidenhout
address: Telkom SA Ltd SAIX
address: 151 Frans Conradie Ave
address: Parow
address: Western Cape
address: 7500
address: ZA
phone: +1 111 1111111
fax-no: +2721 9302789
e-mail:
e-mail:
nic-hdl: PB455-AFRINIC
remarks: Abuse complaints can be directed to
source: AFRINIC # Filtered

person: Johan Du Preez
address: NNOC
address: Oak Avenue
address: Centurion
address: Gauteng
address: 2000
address: ZA
phone: +1 012 6800067
e-mail:
nic-hdl: JDU24-AFRINIC
remarks: Administrative Contact only, please contact
remarks: for Abuse queries
source: AFRINIC # Filtered



Any ideas why they tried to gain access to me if that was this case. If not why was it considered an intrusion by norton.
Click to expand...

Those names are the admins of those IP blocks, theyve got nothing to do with that intrusion attempt. Rather email the logs to [email protected] if you want to do anything about it.
 
-toady- said:
Whoohooo! Now theres deja vu for you !!
:D Ive got a file loaded with similar printouts from way back... Pieter Bezuidenhout features prominently.... You use IRC? :D


toady:D
Click to expand...

Sometimes i use IRC but that is when im on my pc which is connected with MTN, not telkom.
 
acidrain said:
Sometimes i use IRC but that is when im on my pc which is connected with MTN, not telkom.
Click to expand...

>those names are the admins of those IP blocks, theyve got nothing to do with that intrusion attempt. Rather email the logs to [email protected] if you want to do anything about it.<


Strange - as I understood it Pieter Bezuidenhout was the Head of abuse@telkom which is pretty much the same thing as [email protected] ...pfttt...In my case the nicks had everything to do with the intrusion attempts.... my machine was zombied (still is) and at the time, 99% of the intrusions were from telecoms worldwide heh... neato... It is common knowledge that I have no love for the Beast or its minions.....

toady:D
 
Isn't this typically Norton. They try and frighten you into believing Norton has saved your PC. So you go out and buy it again. This may just be a random script written by kiddies with nothing better to do than scan insecure PCs.
 
-toady- said:
>those names are the admins of those IP blocks, theyve got nothing to do with that intrusion attempt. Rather email the logs to [email protected] if you want to do anything about it.<


Strange - as I understood it Pieter Bezuidenhout was the Head of abuse@telkom which is pretty much the same thing as [email protected] ...pfttt...In my case the nicks had everything to do with the intrusion attempts.... my machine was zombied (still is) and at the time, 99% of the intrusions were from telecoms worldwide heh... neato... It is common knowledge that I have no love for the Beast or its minions.....

toady:D
Click to expand...
I just did a lookup on my current IP and got the same contact details. I'm pretty sure I'm not Markus Stoltz, Johan Du Preez, or Pieter Bezuidenhout :D
 
bwana said:
I just did a lookup on my current IP and got the same contact details. I'm pretty sure I'm not Markus Stoltz, Johan Du Preez, or Pieter Bezuidenhout :D
Click to expand...

Bloody Hell!!! And all that time wasted making those wax effigies !!!!
Thanx Bwana :D

toady
 
Skeptik said:
Isn't this typically Norton. They try and frighten you into believing Norton has saved your PC. So you go out and buy it again. This may just be a random script written by kiddies with nothing better to do than scan insecure PCs.
Click to expand...

I concur ;)
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X