who is 204.38.199.233

[t'kron]

204.38.199.233 belongs to Michigan Universitys

204.38.199.233 has made over 1770 attempts to access my ports. today. The first port it tried to access my computer on port 8401 through 8449, then 3450 through 8509, then 8520 through 8569 then 8580 through 8629 then 8640 through 8689

well you get the idea, how do I find out who this turkey is that is trying to access my computer. and what can I do about it if some one is trying to hack into my computer.

 

[Rapmaster]

you can try reporting it to his/her ISP but I doubt much will really come it

The FBI certainly doesn't care and he hasn't really caused any damage

 

[Rapmaster]

that IP address BLOCK belongs belongs to both:

Name Merit Network Inc.
NIC Handle MICHNET199
Addresses 204.38.0.0 - 204.39.255.255
Address 4251 Plymouth Road, Suite C
Ann Arbor, MI 48105-2785
US

Admin Contact [email protected]



Changed 16-Mar-1999.

and

Name Northern Michigan University
NIC Handle MICH-89
Addresses 204.38.192.0 - 204.38.207.255
Address Academic Computing
Marquette, MI 49855
US

Admin Contact [email protected]



Changed 10-Jun-1998.

 

[Wargasm]

i assume you running zonealarm .
with tiny firewall , you can deny him as a rule and no more msg's and no more worries .
if you want i can do a port scan on you to check all ports ..
however this takes a whole day , say 10-11 hours .

 

[t'kron]

Yes I am running zone alarm.

Thanks for your offer Wargy, but I do not think I need that at this time.

 

[t'kron]

I sent email to both addresses provided by rapmaster. This is the response I got after sending it to a corrected Email address at [email protected]


This is an automated response to your recent complaint of network abuse via MichNet, regarding:

ping attack from your location

This incident will be tracked as Abuse Incident #5598. To help us
resolve the incident, please include the string "[abuse #5598]" in the subject line of any further mail about it. For example:

Subject: [abuse #5598] ping attack from your location

All abuse will be investigated according to MichNet's Acceptable Use Policy, which is available at:

http://www.merit.edu/michnet/polici...use.policy.html

If your complaint is regarding unsolicited email, please make sure you have included an offending message with complete headers. Also, spam from MichNet generally comes from customers of our customers, and it can sometimes take a couple of days to contact everyone involved and resolve these incidents. Please allow us time to work, and do *not* deluge us with every message you get. If you are being spammed, you are not alone, and the sheer volume of complaints can delay the process.

If your complaint is about active attacks or probes of your site, please provide as much relevant information from your system's logs as possible, particularly IP addresses and exact times, including your time zone.

If the nature of the abuse is such that you fear for your physical
safety, you should involve the proper authorities.

Thanks for taking the time to help us curtail network abuse.

The Merit Abuse Response Team