🚀 go-pugleaf

On Fri, 28 Apr 2000 17:56:03 +0100, Russell Jepson
<russell@no-spam.sb-solutions.co.uk> wrote:

>whilst downloading a large file last week I was alerted by atguard that
>an inbound UDP packet from 212,159,70,49,pc-anywhere-status which I
>blocked.
>
>was this an attempt to break in,

I've had similar connection attempts when connected to BTi.
Many of them are malicious, but some just appear to be
various programs on the lookout for other machines connected
to the same network. It looks to me as if that is what
happened here.

For example, when you made the original post, you were using
an IP address of 212.159.65.15 and the originator of the
probe was 212.159.70.49. See the similarity? If he was using
a netmask of 255.255.0.0, PC Anywhere would think your both
connected to the same network. Indeed, *any* program would
think your two machines (and many others) were connected.

At least, that's my understanding of it. I'm sure someone
will soon put me right if I've misunderstood.

>and if so is there any way to trace the culprit 

Dates, times and logs sent to abuse@plus.net.uk.

>if it happens again

It will.
-- 
You're reading this in a newsgroup because that's where I posted it.
That's where I'd like to read your reply too.   DON'T MAIL AND POST!

But, if you really want to reply by email, my reply-to *IS* valid ;)