Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

a microsoft ip adress blocking a site?


  • Please log in to reply

#1
mjkkid

mjkkid

    New Member

  • Member
  • Pip
  • 6 posts
alright im having a very big problem here... i try to go to an msn group and upload pictures there but when i do the screen goes white and says page could not be found.. no other site does this.. after i close the window my norton internet security says someone is attempting to attack my computer.. this is what i get when i check the alert.. the following ip adress is attempting to intrude: 65.54.134.126 and the attacker is http netscape cookie monster attack.. i also figured out where it is coming from.. the ip adress if from microsoft in reding washington i checked for logs of these attacks and here is what i got..

Details: groups.msn.com(65.54.134.126) will be blocked further access to your machine for 30 minutes.
Click on the address to trace the attacker

Details: Attempted Intrusion "HTTP Netscape Cookie Monster" against your machine was detected and blocked
Intruder: groups.msn.com(65.54.134.126)(http(80))
Risk Level: Medium
Protocol: TCP
Attacked IP: localhost.
Attacked Port: 1194

Click on the address to trace the attacker

Details: Attempted Intrusion "HTTP Netscape Cookie Monster" against your machine was detected and blocked
Intruder: groups.msn.com(65.54.134.158)(http(80))
Risk Level: Medium
Protocol: TCP
Attacked IP: 0.0.0.0.
Attacked Port: 4390

Click on the address to trace the attacker

its starting to become a hassle because i need to get to that site.. can someone please help?

Edited by mjkkid, 22 June 2005 - 07:59 AM.

  • 0

Advertisements


#2
mjkkid

mjkkid

    New Member

  • Topic Starter
  • Member
  • Pip
  • 6 posts
well i figured out it was redmound not reding.. the ip adress is microsoft but its from http://groups.msn.com please im begging someone to help me im desperate and ive tried pretty much everything i could.. ive never faced a cookie monster attack and i don't know how to get rid of it the funny thing is that its an http netscape cookie monster attack and i don't even have netscape :tazz: please help.. do i need to make a hijack this log .. or and adawre se log?
  • 0

#3
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,671 posts
I found this:
http://securityrespo...ids/s20506.html

This signature detects an attempt to access the locally stored cookies on the victim system.

Affected:

Netscape Navigator 3.0.4
Netscape Navigator 4.0.6
Netscape Navigator 4.0.7


*admin thinks you should be using a newer version then one of the above, in which case there's nothing to worry about.

Regards,
  • 0

#4
mjkkid

mjkkid

    New Member

  • Topic Starter
  • Member
  • Pip
  • 6 posts
i dont even use netscape.. thats the problem i dont like it and i never downloaded any of those.. and last night i tried to download netscape 8.0 but when i went back to msn groups and tried to add an image i was attacked again i use internet explorer or msn nothing else...
  • 0

#5
mjkkid

mjkkid

    New Member

  • Topic Starter
  • Member
  • Pip
  • 6 posts
here are some details about the ip that is blocking me :

OrgID: MSFT
CustName: Microsoft Corp
Street: One Microsoft Way
City: Redmond
StateProv: WA
Country: US
PostalCode: 98052
RegDate: 1998-07-10
Updated: 2004-08-05
OrgAbuseHandle: ABUSE231-ARIN
OrgAbuseHandle: HOTMA-ARIN
OrgAbuseHandle: MSNAB-ARIN
OrgAdminHandle: MSFTP-ARIN
OrgNOCHandle: ZM23-ARIN
OrgTechHandle: MSFTP-ARIN


NetHandle: NET-65-52-0-0-1
OrgID: MSFT
Parent: NET-65-0-0-0-0
NetName: MICROSOFT-1BLK
NetRange: 65.52.0.0 - 65.55.255.255
NetType: assignment
RegDate: 2001-02-14
Updated: 2004-12-09
NameServer: NS1.MSFT.NET
NameServer: NS5.MSFT.NET
NameServer: NS2.MSFT.NET
NameServer: NS3.MSFT.NET
NameServer: NS4.MSFT.NET
TechHandle: ZM23-ARIN


TechHandle: ZM23-ARIN
TechName: Microsoft Corporation
TechPhone: +1-425-882-8080
TechEmail: noc@microsoft.com


OrgAbuseHandle: ABUSE231-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@hotmail.com


OrgTechHandle: MSFTP-ARIN
OrgTechName: MSFT-POC
OrgTechPhone: +1-425-882-8080
OrgTechEmail: iprrms@microsoft.com


OrgAdminHandle: MSFTP-ARIN
OrgAdminName: MSFT-POC
OrgAdminPhone: +1-425-882-8080
OrgAdminEmail: iprrms@microsoft.com


OrgNOCHandle: ZM23-ARIN
OrgNOCName: Microsoft Corporation
OrgNOCPhone: +1-425-882-8080
OrgNOCEmail: noc@microsoft.com

should i contact them by using one of the e-mails and ask them what is going on?
  • 0

#6
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,671 posts
They should know about it:
http://groups.msn.co...521989796947028

Regards,
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP