They're not coming from RIPE That IP address is on Hetzner's netblock, so you could try contacting them OR the person / company the block is assigned to This mailing list is NOT the place to address your concerns - sorry Regards Michele -- Mr Michele Neylon Blacknight Solutions Hosting & Colocation, Brand Protection http://www.blacknight.com/ http://blog.blacknight.com/ http://mneylon.tel/ Intl. +353 (0) 59 9183072 Locall: 1850 929 929 Direct Dial: +353 (0)59 9183090 Fax. +353 (0) 1 4811 763 ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,Ireland Company No.: 370845 ________________________________________ From: anti-abuse-wg-admin@ripe.net [anti-abuse-wg-admin@ripe.net] On Behalf Of Bruce Fornes [dostaboy@bellsouth.net] Sent: 30 July 2009 12:31 To: anti-abuse-wg@ripe.net Subject: [anti-abuse-wg] Attack My home computer is being attacked by 78.47.186.165, 80. So far Symantec has stopped this illegal entry attempt. Following is the text from my Norton history: An intrusion attempt by 78.47.186.165 was blocked Application path \DEVICE\HARDDISKVOLUME1\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE Risk Name: HTTP Malicious Toolkit Variant Activity Attacking Computer: 78.47.186.165,80 Attacker URL: kb952069.in/eng.php?grp=15&trk=07292004728241237 Traffic Description: TCP-www-http I would appreciate if you stop these attacks coming through RIPE. Bruce Fornes Valdosta, GA USA