Security Incidents mailing list archives

Re: Portscanning from 211.42.135.14


From: Bill Hayes <bhayes () UNLNOTES UNL EDU>
Date: Mon, 14 Aug 2000 13:41:09 -0500

You might want to take a good look at Sam Spade. (www.samspade.org).  It's
got on-line and downloadable  tools. I especially like the Windows-based
offering. It's freeware and works on 9x, NT, and 2k platforms.

Using Sam Spade, I found out that your port scanning came from a Korean
site. The Korean whois site (http://ipwhois.nic.or.kr/) revealed the
following information (Not knowing how to read Korean characters, I guessed
and tried the left-hand pane when I used the Korean whois site. ):

[ENGLISH]

Network Name: SHELLBNET

IP Address: 211.42.135.0 - 211.42.135.255
Connect ISP Name: KOLNET
Connect Date: 2000.02.18
Registration Date: 20000221

[ Organization Information ]
Organization ID: ORG100731
Name: SHELLBINET CO. LTD.
State: SEOUL
Address: 5F 158-27 TONGGYO-DONG MAPO-GU
Zipcode: 121-200

[ Admin Contact Information ]
Name: PANWON KIM
Org Name: SHELLBINET CO. LTD.
State: SEOUL
Address: 5F 158-27 TONGGYO-DONG MAPO-GU
Zipcode: 121-200
Phone: +82-2-240-7759
Fax: +82-2-240-7759
E-Mail: kolnet () hitel net

[ Technical Contact Information ]
Name: PANWON KIM
Org Name: SHELLBINET CO. LTD.
State: SEOUL
Address: 5F 158-27 TONGGYO-DONG MAPO-GU
Zipcode: 121-200
Phone: +82-2-240-7759
Fax: +82-2-240-7759
E-Mail: kolnet () hitel net


William Hayes, Computer Specialist, Communications & Information Technology
Network Security Consultant, Information Services Networking & Ops Center
University of Nebraska Lincoln,   201 Miller Hall, Lincoln NE 68583-0713
E-mail: whayes1 () unl edu


Current thread: