[Snort-users] Anyone know what this is?
Robert E. Leever
bel1 at ...358...
Wed Nov 29 13:07:53 EST 2000
these are obviously crafted packets. using the term crafted
loosely. Do you have port 21536 open? I would guess that there's
a new trojan using these ports and this guy is looking for some.
% Rights restricted by copyright. See http://www.ripe.net/ripencc/pub-services/db/copyright.html
inetnum: 126.96.36.199 - 188.8.131.52
descr: Provider Local Registry
status: ALLOCATED PA
remarks: auto-ncc: object modified automatically at 20000303
remarks: auto-ncc: for details, contact billing at ...880...
remarks: auto-ncc: prev-mnt-lower: AS8706-MNT
notify: ataman at ...881...
changed: hostmaster at ...880... 19980814
changed: hostmaster at ...880... 19990817
changed: hostmaster at ...880... 20000303
person: Ataman Kabaran
address: Atac Bilgisayar Hiz. San. ve Tic. Ltd. Sti.
address: Fevzi Cakmak Cad.
address: No 67/C
I guess you could write to or send email to him and ask him what the heck
are you doing? or to the ISP. Good luck. (c:
More information about the Snort-users