XML Notepad silently contacting RIPE

[Eric Miller]

I have nVidia Active Armor firewall NIC. I am using XML 2007 to edit xml
files and I was notified by the firewall it was connecting to the internet
to this location:

OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL

ReferralServer: whois://whois.ripe.net:43

NetRange: 84.0.0.0 - 84.255.255.255
CIDR: 84.0.0.0/8
NetName: 84-RIPE
NetHandle: NET-84-0-0-0-1
Parent:
NetType: Allocated to RIPE NCC
NameServer: NS-PRI.RIPE.NET
NameServer: SEC1.APNIC.NET
NameServer: SEC3.APNIC.NET
NameServer: SUNIC.SUNET.SE
NameServer: TINNIE.ARIN.NET
NameServer: NS3.NIC.FR
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at http://www.ripe.net/whois
RegDate: 2003-11-17
Updated: 2004-03-16

Who are this people and why is XML 2007 contacting them?

 

[S. Pidgorny]

RIPE is European IP assignmen/management authority and they have nothing to
do with XML Notepad - a subblock is delegated to someone else, use RIPE
whois server for details (alternatively, use http://whois.sc)

The next logical step in your investigation will be identifying what exactly
is sent.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

"Eric Miller" <development@biblescholarsoftware.com> wrote in message
news:%23x7tiVvYIHA.4160@TK2MSFTNGP03.phx.gbl...
>I have nVidia Active Armor firewall NIC. I am using XML 2007 to edit xml
> files and I was notified by the firewall it was connecting to the internet
> to this location:
>
> OrgName: RIPE Network Coordination Centre
> OrgID: RIPE
> Address: P.O. Box 10096
> City: Amsterdam
> StateProv:
> PostalCode: 1001EB
> Country: NL
>
> ReferralServer: whois://whois.ripe.net:43
>
> NetRange: 84.0.0.0 - 84.255.255.255
> CIDR: 84.0.0.0/8
> NetName: 84-RIPE
> NetHandle: NET-84-0-0-0-1
> Parent:
> NetType: Allocated to RIPE NCC
> NameServer: NS-PRI.RIPE.NET
> NameServer: SEC1.APNIC.NET
> NameServer: SEC3.APNIC.NET
> NameServer: SUNIC.SUNET.SE
> NameServer: TINNIE.ARIN.NET
> NameServer: NS3.NIC.FR
> Comment: These addresses have been further assigned to users in
> Comment: the RIPE NCC region. Contact information can be found in
> Comment: the RIPE database at http://www.ripe.net/whois
> RegDate: 2003-11-17
> Updated: 2004-03-16
>
> Who are this people and why is XML 2007 contacting them?
>
>
>