XML Notepad silently contacting RIPE

XML Notepad silently contacting RIPE

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
XML Notepad silently contacting RIPE Eric Miller 01-29-2008
Posted by Eric Miller on January 29, 2008, 11:05 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I have nVidia Active Armor firewall NIC. I am using XML 2007 to edit xml
files and I was notified by the firewall it was connecting to the internet
to this location:

OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL

ReferralServer: whois://whois.ripe.net:43

NetRange: 84.0.0.0 - 84.255.255.255
CIDR: 84.0.0.0/8
NetName: 84-RIPE
NetHandle: NET-84-0-0-0-1
Parent:
NetType: Allocated to RIPE NCC
NameServer: NS-PRI.RIPE.NET
NameServer: SEC1.APNIC.NET
NameServer: SEC3.APNIC.NET
NameServer: SUNIC.SUNET.SE
NameServer: TINNIE.ARIN.NET
NameServer: NS3.NIC.FR
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at http://www.ripe.net/whois
RegDate: 2003-11-17
Updated: 2004-03-16

Who are this people and why is XML 2007 contacting them?




Posted by S. Pidgorny on January 30, 2008, 4:17 am
If you were  Registered and logged in, you could reply and use other advanced thread options
RIPE is European IP assignmen/management authority and they have nothing to
do with XML Notepad - a subblock is delegated to someone else, use RIPE
whois server for details (alternatively, use http://whois.sc)

The next logical step in your investigation will be identifying what exactly
is sent.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

>I have nVidia Active Armor firewall NIC. I am using XML 2007 to edit xml
> files and I was notified by the firewall it was connecting to the internet
> to this location:
>
> OrgName: RIPE Network Coordination Centre
> OrgID: RIPE
> Address: P.O. Box 10096
> City: Amsterdam
> StateProv:
> PostalCode: 1001EB
> Country: NL
>
> ReferralServer: whois://whois.ripe.net:43
>
> NetRange: 84.0.0.0 - 84.255.255.255
> CIDR: 84.0.0.0/8
> NetName: 84-RIPE
> NetHandle: NET-84-0-0-0-1
> Parent:
> NetType: Allocated to RIPE NCC
> NameServer: NS-PRI.RIPE.NET
> NameServer: SEC1.APNIC.NET
> NameServer: SEC3.APNIC.NET
> NameServer: SUNIC.SUNET.SE
> NameServer: TINNIE.ARIN.NET
> NameServer: NS3.NIC.FR
> Comment: These addresses have been further assigned to users in
> Comment: the RIPE NCC region. Contact information can be found in
> Comment: the RIPE database at http://www.ripe.net/whois
> RegDate: 2003-11-17
> Updated: 2004-03-16
>
> Who are this people and why is XML 2007 contacting them?
>
>
>



Similar ThreadsPosted
Blocking software from contacting servers October 14, 2005, 12:52 pm
Virtual PC 2007 (SP1) silently installs vulnerable MSXML6 May 16, 2008, 1:52 pm

The site map in XML format XML site map

Contact Us | Privacy Policy