Re: two port scans

["Ralf G. R. Bergs" <rabe () RWTH-Aachen DE>]

On Wed, 30 Aug 2000 10:00:44 +1100, Robert Collins wrote:

> I've seen two port scans this week.
> 208.5.42.164 scanning port 137
> 202.30.115.58 scanning port 109
>
> Both scanned my /25 net end to end
>
> I couldn't get anything useful from whois.

Then you probably haven't Tried Hard Enough(TM):

Access Orlando (NETBLK-SPRINT-D00528-1A)
   135 N. Magnola Ave., Suite D
   Orlando, FL 32801
   US

   Netname: SPRINT-D00528-1A
   Netblock: 208.5.40.0 - 208.5.43.255
   Maintainer: AXOR

   Coordinator:
      McGinn, Alan  (AM108-ARIN)  amcginn () AO NET
      4078951200

   Record last updated on 29-Jun-1999.
   Database last updated on 30-Aug-2000 06:14:31 EDT.




inetnum:     202.30.112.0 - 202.30.119.255
netname:     KYUNGSUNG-NET
descr:       Kyungsung University
descr:       110-1. Daeyeon-dong, Nam-gu,
descr:       Pusan
country:     KR
admin-c:     NH11-AP
tech-c:      JK36-AP
remarks:     university
changed:     hostmast () nic or kr 19981020
source:      APNIC

person:      NamSyx Her
address:     Kyungsung University
address:     110-1. Daeyeon-dong, Nam-gu,
address:     Pusan
phone:       +82 51 620 4592
fax-no:      +82 51 623 7803
e-mail:      nsh () star kyungsung ac kr
nic-hdl:     NH11-AP
mnt-by:      MAINT-NULL
changed:     hostmast () rs krnic net 19981020
source:      APNIC

person:      JiMee Kim
address:     Kyungsung University
address:     110-1. Daeyeon-dong, Nam-gu,
address:     Pusan
phone:       +82 51 620 4559
fax-no:      +82 51 623 7803
e-mail:      nsh () star kyungsung ac kr
nic-hdl:     JK36-AP
mnt-by:      MAINT-NULL
changed:     hostmast () rs krnic net 19981020
source:      APNIC

HTH,

Ralf


--
Sign the EU petition against SPAM:          L I N U X       .~.
http://www.politik-digital.de/spam/        The  Choice      /V\
                                            of a  GNU      /( )\
                                           Generation      ^^-^^