look at this log entry!
Results 1 to 3 of 3

Thread: look at this log entry!

  1. #1
    Senior Member
    Join Date
    Feb 2002
    Posts
    518

    look at this log entry!

    This guy dont give up
    Time, Event, Intruder, Count
    3/20/2003 7:38:02 AM, HTTP_Windows_Executable, ns.hakoden.co.jp, 17
    3/20/2003 7:37:56 AM, HTTP_Windows_Executable, ns.hakoden.co.jp, 17
    3/20/2003 7:38:13 AM, HTTP_Windows_Executable, ns.hakoden.co.jp, 25
    3/20/2003 7:38:23 AM, HTTP_IIS_Hex_Evasion, ns.hakoden.co.jp, 32
    3/20/2003 7:37:34 AM, HTTP_Windows_Executable, ns.hakoden.co.jp, 34
    3/20/2003 7:37:40 AM, HTTP_Windows_Executable, ns.hakoden.co.jp, 35
    3/20/2003 7:37:27 AM, HTTP_Windows_Executable, ns.hakoden.co.jp, 37
    3/20/2003 7:38:23 AM, HTTP_IIS_Percent_Evasion, ns.hakoden.co.jp, 45
    3/20/2003 7:38:24 AM, HTTP_Windows_Executable, ns.hakoden.co.jp, 49
    3/20/2003 7:38:23 AM, HTTP_IIS_UTF8_Evasion, ns.hakoden.co.jp, 92
    3/20/2003 7:38:23 AM, HTTP_IIS_Double_Eval_Evasion, ns.hakoden.co.jp, 122
    3/20/2003 7:38:24 AM, HTTP_Windows_Executable, ns.hakoden.co.jp, 168

    However when entering his IP into a whois search I get:
    Query the APNIC Whois DatabaseNeed help?
    General search help
    Help tracking spam and hacking
    % [whois.apnic.net node-1]
    % How to use this server http://www.apnic.net/db/
    % Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

    inetnum: 210.226.0.0 - 210.231.255.255
    netname: JPNIC-NET-JP
    descr: Japan Network Information Center
    country: JP
    admin-c: JNIC1-AP
    tech-c: JNIC1-AP
    remarks: JPNIC Allocation Block
    remarks: Authoritative information regarding assignments and
    remarks: allocations made from within this block can also be
    remarks: queried at whois.nic.ad.jp. To obtain an English
    remarks: output query whois -h whois.nic.ad.jp x.x.x.x/e
    mnt-by: MAINT-JPNIC
    changed: apnic-ftp@nic.ad.jp 19991208
    status: ALLOCATED PORTABLE
    source: APNIC

    role: Japan Network Information Center
    address: Kokusai-Kougyou-Kanda Bldg 6F, 2-3-4 Uchi-Kanda
    address: Chiyoda-ku, Tokyo 101-0047, Japan
    country: JP
    phone: +81-3-5297-2311
    fax-no: +81-3-5297-2312
    e-mail: hostmaster@nic.ad.jp
    admin-c: SN108-AP
    tech-c: KS218-AP
    nic-hdl: JNIC1-AP
    mnt-by: MAINT-JPNIC
    changed: apnic-ftp@nic.ad.jp 19990629
    changed: hostmaster@apnic.net 20011011
    changed: ip-staff@nic.ad.jp 20021018
    source: APNIC

    inetnum: 210.229.161.72 - 210.229.161.79
    netname: HAKODEN-NET
    descr: HAKODATE ELECTRONICS CO,Inc
    country: JP
    admin-c: YF390JP
    tech-c: TI1379JP
    remarks: This information has been partially mirrored by APNIC from
    remarks: JPNIC. To obtain more specific information, please use the
    remarks: JPNIC whois server at whois.nic.ad.jp. (This defaults to
    remarks: Japanese output, use the /e switch for English output)
    changed: apnic-ftp@nic.ad.jp 19981124
    remarks: This information has been partially mirrored by APNIC from
    remarks: JPNIC. To obtain more specific information, please use the
    remarks: JPNIC whois server at whois.nic.ad.jp. (This defaults to
    remarks: Japanese output, use the /e switch for English output)
    changed: apnic-ftp@nic.ad.jp 20030319
    source: JPNIC


    Bold: Object type.
    Underlined: Primary key(s).
    Hyperlinks: Searchable Attributes.

    Obviously this is in japan, some privately owned IP. What can I do about this since I dont speak japanese??
    Remember -
    The ark was built by amatures...
    The Titanic was built by professionals.

  2. #2
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,324
    Send it to them in english anyways. You might be surprised. Much like in North America where you take a 2nd language in High School and have basics, the same goes on in other places in the world but in this case it's English that is often taught (English is often viewed as the language of business).
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage

  3. #3
    Senior Member
    Join Date
    Feb 2002
    Posts
    518
    Guess I will then, this guy is pounding away at me. LOL all in vain, but just the high counts makes it more thana casual scan. The sad thing - this is just a private www, ftp, and MUD server. lol nothing major.
    ah well thanks as always Ms.
    Remember -
    The ark was built by amatures...
    The Titanic was built by professionals.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •