Re: [cobalt-users] Help wanted tracking down IP 211.115.219.57

["Arsalan Mahmud" <arsalan@xxxxxxxxxxxx>]

211.115.219.57 (Unresolved)

Rights restricted by copyright. See http://www.apnic.net/db/dbcopyright.html


Owner:
KRNIC


Address:
Korea Network Information Center


Country:
KR


Administrative Contact:
Weon Kim (hostmaster@xxxxxxxxx)
Korea Network Information Center (KRNIC)
**************** Important Notice **********************
KRNIC is the National Internet Registry.
If you want to find detail assignment information
about above IP address, please use "http://whois.nic.or.kr";
*****************************************************
Narajongkeum B/D 14F, 1328-3, Seocho-dong, Seocho-Ku
Seoul, 137-070, Republic of Korea
Phone: +82-2-2186-4500
Fax: +82-2-2186-4496


Technical Contact:
Seung-Min Lee (hostmaster@xxxxxxxxx)
Korea Network Information Center (KRNIC)
**************** Important Notice **********************
KRNIC is the National Internet Registry
If you want to find detail assignment information
about above IP address, please use "http://whois.nic.or.kr";
*****************************************************
Narajongkeum B/D 14F, 1328-3, Seocho-dong, Seocho-Ku
Seoul, 137-070, Republic of Korea
Phone: +82-2-2186-4500
Fax: +82-2-2186-4496


Information Source:
Asia Pacific Network Information Center




----- Original Message -----
From: <johnm@xxxxxxxxxxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Tuesday, February 27, 2001 1:53 PM
Subject: [cobalt-users] Help wanted tracking down IP 211.115.219.57


> Hi there,
>
> About three or four times a day my RAQ4 reports 'attackalerts' since I had
> PortSentry installed on the system  Normally I can find the owner of the
> IP address and then report the attempt to 'abuse' and 'postmaster' at
> where-ever.
>
> Lastnight  the RAQ reported the following  (via Portsentry) :-
>
> Active System Attack Alerts
> =-=-=-=-=-=-=-=-=-=-=-=-=-=
> Feb 26 23:04:27 ns portsentry[758]: attackalert: SYN/Normal scan from
> host: 211.115.219.57/211.115.219.57 to TCP port: 111
> Feb 26 23:04:27 ns portsentry[758]: attackalert: Host 211.115.219.57 has
> been blocked via wrappers with string: "ALL: 211.115.219.57"
>
> As I say, I can normally find the owner of the IP address using Sam Spade
> but this one has me beaten.  Can anyone point me in the right direction so
> that I can find out who this IP address belongs to?
>
> Cheers
>
> John
>
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>
>
>