Security Incidents mailing list archives

portscan from *.sabiz.co.kr


From: peterb () SCALA-RND COM (Balazs, Peter)
Date: Thu, 1 Apr 1999 07:26:02 +0100


Hi!
I have encountered continuous portscan activity from 210.205.111.47.
Accoding to nslookup, it belongs to sabiz.sabiz.co.kr

Some of my friends found the same.
What can be done against it?
Thanks in advance.

PeterB

Mar 31 08:09:33 rpg scanlogd: 210.205.111.47 to **** ports 80, 23, 143, 110,
111, 53, 31337, 2766, ..., fSrpauxy, TOS 00, TTL 47 @08:09:33
Mar 31 08:09:34 rpg ipop3d[16800]: connect from 210.205.111.47
Mar 31 08:09:34 rpg in.ftpd[16803]: refused connect from 210.205.111.47

and so on...


Current thread: