IP sniffing me??

[Arinna]

Can anyone help me figure this out?? For the past 4 months that Asgeroth Isles UO server has been running, I have noticed an IP that seems to connect/disconnect to me once every few hours it seems. I have no idea who or why, but I do have the log right here to look at.....
HotWhoIs results.
Target :80.212.147.217
Date:6/23/2004

Ping results:
Lowest Response: 157 ms.
Highest Response: 156 ms.
Average Response: 156.25 ms.

Total Number of Packets Sent: 4

Lost Packets: 0
Lost Packets: 0 %

% This is the RIPE Whois server.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See www.ripe.net/ripencc/pub-services/db/copyright.html

inetnum: 80.212.0.0 - 80.212.255.255
netname: NO-NEXTRA-ADSL-1
descr: Telenor Business Solution AS
country: NO
admin-c: SI217-RIPE
tech-c: TRR5-RIPE
tech-c: TBS-RIPE
status: ASSIGNED PA
remarks: - - - - - - - - - - - - - - - - - - - - - - - - - - - -
remarks: - - For abuse matters, mailto: [e-mail] - - -
remarks: - - - - - - - - - - - - - - - - - - - - - - - - - - - -
notify: [e-mail]
mnt-by: AS8210-MNT
mnt-lower: AS8210-MNT
mnt-routes: AS8210-MNT
changed: [e-mail] 20020102
changed: [e-mail] 20020325
changed: [e-mail] 20020814
changed: [e-mail] 20030401
source: RIPE

route: 80.212.128.0/17
descr: TELENOR-INTERNET
descr: Nextra, Postboks 393 - Skoyen, N-0212 Oslo, Norway
origin: AS2119
mnt-by: AS8210-MNT
changed: [e-mail] 20020214
source: RIPE

role: Telenor Routing Registry
address: Telenor Business Solutions AS
address: Snaroeyveien 30
address: N-1331 Fornebu
address: Norway
phone: [phone]
fax-no: [phone]
e-mail: [e-mail]
admin-c: HSO3-RIPE
tech-c: HSO3-RIPE
tech-c: TNA4-RIPE
tech-c: DF344-RIPE
tech-c: THK-RIPE
nic-hdl: TRR5-RIPE
notify: [e-mail]
mnt-by: AS8210-MNT
changed: [e-mail] 19990119
changed: [e-mail] 19991012
changed: [e-mail] 19991027
changed: [e-mail] 20000411
changed: [e-mail] 20000516
changed: [e-mail] 20020610
changed: [e-mail] 20020730
changed: [e-mail] 20020731
source: RIPE

role: TBS AS - Customer Internet Access
address: Telenor Business Solutions AS
address: N-1331 Fornebu
address: Norway
phone: [phone]
e-mail: [e-mail]
admin-c: RG737-RIPE
tech-c: EAO-RIPE
nic-hdl: TBS-RIPE
remarks: - - - - - - - - - - - - - - - - - - - - - - - - - - - -
remarks: - - Please send abuse reports to [e-mail] - -
remarks: - - - - - - - - - - - - - - - - - - - - - - - - - - - -
notify: [e-mail]
mnt-by: TNXHM-MNT
changed: [e-mail] 20021029
changed: [e-mail] 20030314
source: RIPE

person: Sigbjorn Isene
address: Telenor Networks AS
address: Snaroyveien 30
address: N-1331 Fornebu
address: Norway
phone: [phone]
e-mail: [e-mail]
nic-hdl: SI217-RIPE
mnt-by: AS8210-MNT
changed: [e-mail] 19980526
changed: [e-mail] 20011205
changed: [e-mail] 20030508
source: RIPE




% Kopibeskyttet, se www.norid.no/domenenavnbaser/whois/kopirett.html
% Rights restricted by copyright. See www.norid.no/domenenavnbaser/whois/kopirett.en.html

Domain Information

Domain Name................: online.no
Organization Handle........: TOA19O-NORID
Registrar Handle...........: REG88-NORID
Legal-c Handle.............: OMG17P-NORID
Tech-c Handle..............: TH1R-NORID
Zone-c Handle..............: TH1R-NORID
Bill-c Handle..............: TH1R-NORID
Nameserver Handle..........: NS1232H-NORID
Nameserver Handle..........: NS1231H-NORID

Additional information:
Created: 1999-11-15
Last updated: 2002-11-04

NORID Handle...............: TOA19O-NORID
Organization Name..........: Telenor Online AS
Organization Number........: 978626912
Post Address...............: Snarøyveien 30
Postal Code................: N-1331
Postal Area................: Fornebu
Country....................: Norway
Phone Number...............: [phone]
Fax Number.................:
Email Address..............: [e-mail]

Additional information:
Last update: 0000-00-00

Anyone care to guess???

[jim]

At first I figured it was uogateway pinging you to make sure you are active but other than that I couldn't guess.

[Wizul]

With all the ip spoofing and masquerading it's difficult to know if that was really the source or not. Best you can do is try to log what ip is doing what and report it to your ISP if/when it becomes a serious problem.

[jim]

If your information is correct (ip and such) so that UOG can ping the server, your 0% uptime will start to go up as soon as the next ping comes along.. about every 30 minutes or so. You will see this on your server console as a client 80.xx.xxx.xx connecting and then disconnecting. If UOG can't ping your server, your uptime will never go up, and that means you need to figure out why your IP isn't correct.

There are other similiar explainations on the board there but basically it is uogateway connecting and disconnecting (not pinging as this quote says but actually making a connection) to build a time-up profile on you.

mrfixit.servehttp.com/uogbb/viewtopic.php?t=2376&highlight=ping