With all the viruses bouncing around, I recently acquired a firewall called Sygate Pro. This is the first time I've had a firewall, so I don't know anything about them. But the past week or so I've been trying to figure out some things and I checked "security log" and evidently I've had several intrusions. Each incident includes the IP address, and security type (major or minor). Well I looked at one of the "major" security instrusions and did something called a back trace of the IP address (I have no idea what I'm doing) and this is the response I get:
OrgName: Microsoft Corp OrgID: MSFT Address: City: StateProv: WA PostalCode: 98052 Country: US
NetRange: 207.68.128.0 - 207.68.207.255 CIDR: 207.68.128.0/18, 207.68.192.0/20 NetName: MICROSOFT-CORP-MSN-BLK NetHandle: NET-207-68-128-0-1
Parent: NET-207-0-0-0-0 NetType: Direct Allocation NameServer: DNS1.CP.MSFT.NET NameServer: DNS2.CP.MSFT.NET NameServer: DNS1.TK.MSFT.NET NameServer: DNS1.DC.MSFT.NET NameServer: DNS1.SJ.MSFT.NET
Comment:
RegDate: 1996-03-26 Updated: 2003-01-15 TechHandle: ZM39-ARIN TechName: Microsoft TechPhone: +1-425-936-4200 TechEmail: [email protected]
OrgAbuseHandle: ABUSE231-ARIN OrgAbuseName: Abuse OrgAbusePhone: +1-425-882-8080 OrgAbuseEmail: [email protected]
OrgNOCHandle: ZM23-ARIN OrgNOCName: Microsoft Corporation OrgNOCPhone: +1-425-882-8080 OrgNOCEmail: [email protected]
OrgTechHandle: MSFTP-ARIN OrgTechName: MSFT-POC OrgTechPhone: +1-425-882-8080 OrgTechEmail: [email protected]
Okay now my stupid question. I notice that one of these handles (10-4 good buddy) is abuse. Is Microsoft investigating me for abuse or something? What does this mean? I've seen this several times and I don't have a clue what's going on so anyone who knows anything I would appreciate letting me in on it.
Middle Age Man may not know diddly about IP addresses, but he does know how to program a VCR and he knows where his warranties are.