[geeks] Whee - someone was knocking on my machine...

[Chris Byrne]

Okay this is what I got for these folks


   Domain Name: KRNIC.NET
   Registrar: NETWORK SOLUTIONS, INC.
   Whois Server: whois.networksolutions.com
   Referral URL: http://www.networksolutions.com
   Name Server: NS.KREN.NE.KR
   Name Server: NS.KREONET.RE.KR
   Name Server: NS1.KRNIC.NET
   Name Server: NS2.KRNIC.NET
   Updated Date: 13-jun-2001

KRNIC is the Korean national registrar, sounds to me like this is j. random
user somewhere in korea

Chris Byrne

-----Original Message-----
From: geeks-admin at sunhelp.org [mailto:geeks-admin at sunhelp.org]On Behalf
Of Ken Hansen
Sent: Friday, October 19, 2001 16:35
To: geeks at sunhelp.org
Subject: [geeks] Whee - someone was knocking on my machine...


SOmeone from 210.180.153.137 was hitting my DMZ host,
and I only noticed it because of the "noise" (snoop -a
*again*!)...

Who is that, I can't figure out the right incantation
to divine that info (I am sure it is obvious, but
nslookup didn't do it for me)...

I was getting hit about twice a second with packets
from there to my internal host (192.168.1.160) which
snoop reported as PRINTER C port=4365 (port
changed/incremented)

WTF?

I have diverted my DMZ function to point to another
non-existant IP (...161)

Ken

=====
Ken
n2vip at yahoo.com

__________________________________________________
Do You Yahoo!?
Make a great connection at Yahoo! Personals.
http://personals.yahoo.com
_______________________________________________
GEEKS:  http://www.sunhelp.org/mailman/listinfo/geeks