Security Incidents mailing list archives
Re: Portscanning from 211.42.135.14
From: Bill Hayes <bhayes () UNLNOTES UNL EDU>
Date: Mon, 14 Aug 2000 13:41:09 -0500
You might want to take a good look at Sam Spade. (www.samspade.org). It's got on-line and downloadable tools. I especially like the Windows-based offering. It's freeware and works on 9x, NT, and 2k platforms. Using Sam Spade, I found out that your port scanning came from a Korean site. The Korean whois site (http://ipwhois.nic.or.kr/) revealed the following information (Not knowing how to read Korean characters, I guessed and tried the left-hand pane when I used the Korean whois site. ): [ENGLISH] Network Name: SHELLBNET IP Address: 211.42.135.0 - 211.42.135.255 Connect ISP Name: KOLNET Connect Date: 2000.02.18 Registration Date: 20000221 [ Organization Information ] Organization ID: ORG100731 Name: SHELLBINET CO. LTD. State: SEOUL Address: 5F 158-27 TONGGYO-DONG MAPO-GU Zipcode: 121-200 [ Admin Contact Information ] Name: PANWON KIM Org Name: SHELLBINET CO. LTD. State: SEOUL Address: 5F 158-27 TONGGYO-DONG MAPO-GU Zipcode: 121-200 Phone: +82-2-240-7759 Fax: +82-2-240-7759 E-Mail: kolnet () hitel net [ Technical Contact Information ] Name: PANWON KIM Org Name: SHELLBINET CO. LTD. State: SEOUL Address: 5F 158-27 TONGGYO-DONG MAPO-GU Zipcode: 121-200 Phone: +82-2-240-7759 Fax: +82-2-240-7759 E-Mail: kolnet () hitel net William Hayes, Computer Specialist, Communications & Information Technology Network Security Consultant, Information Services Networking & Ops Center University of Nebraska Lincoln, 201 Miller Hall, Lincoln NE 68583-0713 E-mail: whayes1 () unl edu
Current thread:
- Portscanning from 211.42.135.14 Ben Ostrowsky (Aug 14)
- Re: Portscanning from 211.42.135.14 Max Gribov (Aug 15)
- Re: Portscanning from 211.42.135.14 Patrick Oonk (Aug 15)
- <Possible follow-ups>
- Re: Portscanning from 211.42.135.14 玉造 光緒 (Aug 15)
- Re: Portscanning from 211.42.135.14 Bill Hayes (Aug 15)
- Re: Portscanning from 211.42.135.14 Bill Royds (Aug 18)