SCOUG-HELP Mailing List Archives

<< Previous Message << >> Next Message >>

Date:	Fri, 25 Jan 2008 11:25:24 -0800
From:	"Mark D. Overholser" <os2@markoverholser.com >
Reply-To:	scoug-help@scoug.com
To:	scoug-help@scoug.com
Subject:	SCOUG-Help: Unwanted Visitors

Content Type: text/plain

J R FOX wrote:
> BetterWhoIS was just mentioned here recently, but I'm
> now reminded that they are not the reference most
> often likely to be useful for me, because they don't
> resolve dotted addresses. I just got four of these in
> less than 12 hours, in my firewall logs. (Most of the
> time, the logs are pretty quiet.)
>
> 01/24/2008 11:11:10.384 - Possible Port Scan -
> Source:222.186.12.197
>
> Same source. Yeah, I know there is a *very good*
> chance it is borrowed, forged, hijacked, zombied --
> whatever you call it. Still, is there anything better
> than the ARNIC database I could use to look these
> things up ?
>
>
> Jordan
>

ARIN Whois :
<http://ws.arin.net/whois/?queryinput=222.186.12.197>

Said IP 222.186.12.197 is assigned to APNIC.

APNIC whois :
<http://wq.apnic.net/apnic-bin/whois.pl>

Said IP 222.186.12.197 is assigned to:

===================================================================
inetnum: 222.184.0.0 - 222.191.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-JS
mnt-routes: MAINT-CHINANET-JS
remarks: This object can only modify by APNIC hostmaster
remarks: If you wish to modify this object details please
remarks: send email to hostmaster@apnic.net with your
remarks: organisation account name in the subject line.
changed: hm-changed@apnic.net 20040223
status: ALLOCATED PORTABLE
source: APNIC

role: CHINANET JIANGSU
address: No.268,Hanzhong Road,Nanjing 210029
country: CN
phone: +86-25-6588783
fax-no: +86-25-6588740
e-mail: ip@jsinfo.net
trouble: send anti-spam reports to spam@jsinfo.net
trouble: send abuse reports to abuse@jsinfo.net
trouble: times in GMT+8
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
remarks: www.jsinfo.net
notify: ip@jsinfo.net
mnt-by: MAINT-CHINANET-JS
changed: dns@ptt.js.cn 20020530
changed: ip@jsinfo.net 20021213
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

===================================================================

Chinese "script kiddies"???

MarkO

=====================================================

To unsubscribe from this list, send an email message
to "steward@scoug.com". In the body of the message,
put the command "unsubscribe scoug-help".

For problems, contact the list owner at
"postmaster@scoug.com".

=====================================================

Return to [ 25 | January | 2008 ]

SCOUG, Warp Expo West, and Warpfest are trademarks of the Southern California OS/2 User Group. OS/2, Workplace Shell, and IBM are registered trademarks of International Business Machines Corporation. All other trademarks remain the property of their respective owners.