-
look at this log entry!
This guy dont give up
Time, Event, Intruder, Count
3/20/2003 7:38:02 AM, HTTP_Windows_Executable, ns.hakoden.co.jp, 17
3/20/2003 7:37:56 AM, HTTP_Windows_Executable, ns.hakoden.co.jp, 17
3/20/2003 7:38:13 AM, HTTP_Windows_Executable, ns.hakoden.co.jp, 25
3/20/2003 7:38:23 AM, HTTP_IIS_Hex_Evasion, ns.hakoden.co.jp, 32
3/20/2003 7:37:34 AM, HTTP_Windows_Executable, ns.hakoden.co.jp, 34
3/20/2003 7:37:40 AM, HTTP_Windows_Executable, ns.hakoden.co.jp, 35
3/20/2003 7:37:27 AM, HTTP_Windows_Executable, ns.hakoden.co.jp, 37
3/20/2003 7:38:23 AM, HTTP_IIS_Percent_Evasion, ns.hakoden.co.jp, 45
3/20/2003 7:38:24 AM, HTTP_Windows_Executable, ns.hakoden.co.jp, 49
3/20/2003 7:38:23 AM, HTTP_IIS_UTF8_Evasion, ns.hakoden.co.jp, 92
3/20/2003 7:38:23 AM, HTTP_IIS_Double_Eval_Evasion, ns.hakoden.co.jp, 122
3/20/2003 7:38:24 AM, HTTP_Windows_Executable, ns.hakoden.co.jp, 168
However when entering his IP into a whois search I get:
Query the APNIC Whois DatabaseNeed help?
General search help
Help tracking spam and hacking
% [whois.apnic.net node-1]
% How to use this server http://www.apnic.net/db/
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 210.226.0.0 - 210.231.255.255
netname: JPNIC-NET-JP
descr: Japan Network Information Center
country: JP
admin-c: JNIC1-AP
tech-c: JNIC1-AP
remarks: JPNIC Allocation Block
remarks: Authoritative information regarding assignments and
remarks: allocations made from within this block can also be
remarks: queried at whois.nic.ad.jp. To obtain an English
remarks: output query whois -h whois.nic.ad.jp x.x.x.x/e
mnt-by: MAINT-JPNIC
changed: [email protected] 19991208
status: ALLOCATED PORTABLE
source: APNIC
role: Japan Network Information Center
address: Kokusai-Kougyou-Kanda Bldg 6F, 2-3-4 Uchi-Kanda
address: Chiyoda-ku, Tokyo 101-0047, Japan
country: JP
phone: +81-3-5297-2311
fax-no: +81-3-5297-2312
e-mail: [email protected]
admin-c: SN108-AP
tech-c: KS218-AP
nic-hdl: JNIC1-AP
mnt-by: MAINT-JPNIC
changed: [email protected] 19990629
changed: [email protected] 20011011
changed: [email protected] 20021018
source: APNIC
inetnum: 210.229.161.72 - 210.229.161.79
netname: HAKODEN-NET
descr: HAKODATE ELECTRONICS CO,Inc
country: JP
admin-c: YF390JP
tech-c: TI1379JP
remarks: This information has been partially mirrored by APNIC from
remarks: JPNIC. To obtain more specific information, please use the
remarks: JPNIC whois server at whois.nic.ad.jp. (This defaults to
remarks: Japanese output, use the /e switch for English output)
changed: [email protected] 19981124
remarks: This information has been partially mirrored by APNIC from
remarks: JPNIC. To obtain more specific information, please use the
remarks: JPNIC whois server at whois.nic.ad.jp. (This defaults to
remarks: Japanese output, use the /e switch for English output)
changed: [email protected] 20030319
source: JPNIC
Bold: Object type.
Underlined: Primary key(s).
Hyperlinks: Searchable Attributes.
Obviously this is in japan, some privately owned IP. What can I do about this since I dont speak japanese??
-
Send it to them in english anyways. You might be surprised. Much like in North America where you take a 2nd language in High School and have basics, the same goes on in other places in the world but in this case it's English that is often taught (English is often viewed as the language of business).
-
Guess I will then, this guy is pounding away at me. LOL all in vain, but just the high counts makes it more thana casual scan. The sad thing - this is just a private www, ftp, and MUD server. lol nothing major.
ah well thanks as always Ms.