[Snort-users] Anyone know what this is?

Robert E. Leever bel1 at ...358...
Wed Nov 29 13:07:53 EST 2000


hi 

these are obviously crafted packets. using the term crafted
loosely.  Do you have port 21536 open?  I would guess that there's
a new trojan using these ports and this guy is looking for some.



RIPE reports:

212.2.215.113
% Rights restricted by copyright. See http://www.ripe.net/ripencc/pub-services/db/copyright.html
inetnum:     212.2.192.0 - 212.2.223.255

netname:     TR-ANTNET-980814
descr:       Provider Local Registry
country:     TR
admin-c:     AK944-RIPE
tech-c:      MT918-RIPE
status:      ALLOCATED PA
remarks:     auto-ncc: object modified automatically at 20000303
remarks:     auto-ncc: for details, contact billing at ...880...
remarks:     auto-ncc: prev-mnt-lower: AS8706-MNT
notify:      ataman at ...881...
mnt-by:      RIPE-NCC-HM-MNT
mnt-lower:   RIPE-NCC-HM-MNT
changed:     hostmaster at ...880... 19980814
changed:     hostmaster at ...880... 19990817
changed:     hostmaster at ...880... 20000303
source:      RIPE


person:      Ataman Kabaran
address:     Atac Bilgisayar Hiz. San. ve Tic. Ltd. Sti.
address:     Fevzi Cakmak Cad.
address:     No 67/C
address:     ANTALYA
address:     TURKEY


I guess you could write to or send email to him and ask him what the heck
are you doing?  or to the ISP.  Good luck.  (c:

b;)




More information about the Snort-users mailing list