🚀 go-pugleaf

In article <ZYUEsBAjKcC5EwOG@soundbyte.force9.co.uk>, Russell Jepson
<russell@no-spam.sb-solutions.co.uk> writes

>whilst downloading a large file last week I was alerted by atguard that
>an inbound UDP packet from 212,159,70,49,pc-anywhere-status which I
>blocked.

Sounds like someone was trolling to see if you were running PC-Anywhere
(a remote control and file transfer program for PCs)

>was this an attempt to break in, and if so is there any way to trace the
>culprit if it happens again

http://www.demon.net/external/ntools.html and use the Generic Whois
utility.  I've done it for you:

wi "212.159.70.49"
This tool tries to make a best-guess at the right 'Whois Server' for the
domain you are trying to look up. It covers a number of whois servers,
but there are probably plenty more that it doesn't know. This tool ONLY
handles Domain and RIPE lookups - you may need to refer to other lookup
services for different or more specific information. 

whois -h whois.ripe.net. 212.159.70.49

% Rights restricted by copyright. See http://www.ripe.net/ripencc/pub-
services/db/copyright.html

inetnum:     212.159.70.0 - 212.159.70.255
netname:     PLUSNET-ACCESS
descr:       Plusnet Dynamic IP Pool 07
country:     GB
admin-c:     HM1521-RIPE
tech-c:      SM1251-RIPE
status:      ASSIGNED PA
notify:      sean@plus.net.uk
changed:     sean@plus.net.uk 19991019
source:      RIPE

route:       212.159.64.0/18
descr:       PlusNet Technologies Ltd
origin:      AS6871
mnt-by:      BTNET-MNT
changed:     Dimitri.Voutsinas@bt.net 19991122
source:      RIPE

person:      Force9 Hostmaster
address:     Force9 Internet
address:     Internet House
address:     8 Furnival Road
address:     Victoria Quays
address:     Sheffield, S4 7YA
address:     UK
phone:       +44 114 22 00000
fax-no:      +44 114 22 000 88
e-mail:      hostmaster@force9.net
nic-hdl:     HM1521-RIPE
notify:      smentz@force9.net
changed:     smentz@force9.net 19981001
source:      RIPE

person:      Sean mentz
address:     Force 9
address:     Internet House, Furnival Square
address:     Navigation Wharf
address:     Sheffield S4 7YA
address:     UK
phone:       +44 114 220 0000
fax-no:      +44 114 220 0088
e-mail:      smentz@force9.net
nic-hdl:     SM1251-RIPE
notify:      smentz@force9.net
changed:     nick@force9.net 19980604
source:      RIPE

Looks like a Plus Net dialup.

A polite mail to abuse@plus.net.uk, with a cut'n'pasted copy of the
AtGuard log, might be in order.

-- 
Mike Tomlinson
mike@jasper.org.uk