[geeks] Re: Whee - someone was knocking on my machine...

[Michael Thompson]

IP Address         : 210.180.128.0-210.180.223.255
Network Name       : PETINET
Connect Date       : 19990109
Registration Date  : 19990109

[ Organization Information ]
Orgnization ID     : ORG44972
Org Name           : Pusan Metropolitan City Office Of Education 
State              : PUSAN
Address            : 455-1 Yangjung 1-dong Pusanjin-gu
Zip Code           : 614-051

[ Admin Contact Information]
Name               : Jungryong Oh
Org Name           : Pusan Metropolitan City Office Of Euducation
State              : PUSAN
Address            : 455-1, Yangjung 1-dong, Pusanjin-gu, Pusan, Korea
Zip Code           : 614-051
Phone              : +82-51-866-7603
Fax                : +82-51-866-5570
E-Mail             : jroh at bluewave.pusan-o.ed.pusan.kr

[ Technical Contact Information ]
Name               : Jungryong Oh
Org Name           : Pusan Metropolitan City Office Of Euducation
State              : PUSAN
Address            : 455-1, Yangjung 1-dong, Pusanjin-gu, Pusan, Korea
Zip Code           : 614-051
Phone              : +82-51-866-7603
Fax                : +82-51-866-5570
E-Mail             : jroh at bluewave.pusan-o.ed.pusan.kr

>SOmeone from 210.180.153.137 was hitting my DMZ host,
>and I only noticed it because of the "noise" (snoop -a
>*again*!)...
>
>Who is that, I can't figure out the right incantation
>to divine that info (I am sure it is obvious, but
>nslookup didn't do it for me)...
>
>I was getting hit about twice a second with packets
>from there to my internal host (192.168.1.160) which
>snoop reported as PRINTER C port=4365 (port
>changed/incremented)
>
>WTF?
>
>I have diverted my DMZ function to point to another
>non-existant IP (...161)
>
>Ken
>
>=====
>Ken
>n2vip at yahoo.com


Michael Thompson
E-Mail: M_Thompson at IDS.net