[Gllug] Login attempts from unspecified

[Sharon Kimble]

On Monday 20 Sep 2004 21:21, Henrik Morsing wrote:
> Hi,
> I got the below in my auth.log (hundreds of lines). The IP address seems
> to not really belong to anyone. RIPE says "ALLOCATED UNSPECIFIED".
>
> Can I do anything?
>
> Sep 20 15:30:16 bsd sshd[10173]: Illegal user boss from 211.196.5.237
> Sep 20 15:30:21 bsd sshd[10178]: Illegal user sysop from 211.196.5.237
> Sep 20 15:30:26 bsd sshd[10181]: Illegal user qsvr from 211.196.5.237
> Sep 20 15:30:31 bsd sshd[10183]: Illegal user intel from 211.196.5.237
> Sep 20 15:30:36 bsd sshd[10185]: Illegal user dni from 211.196.5.237
> Sep 20 15:30:41 bsd sshd[10187]: Illegal user fal from 211.196.5.237
> Sep 20 15:30:46 bsd sshd[10189]: Illegal user mail from 211.196.5.237
> Sep 20 15:31:07 bsd sshd[10197]: Illegal user postmaster from
> 211.196.5.237

gwhois 211.196.5.237
Process query: '211.196.5.237'
Query recognized as IP.
Querying whois.nic.or.kr:43 with whois.

�����(www.nic.or.kr) f��Whois ��ϴ�

query: 211.196.5.237

# ENGLISH

KRNIC is not a ISP but a National Internet Registry similar to APNIC.
The followings are information of the organization that is using the IPv4 
address.

IPv4 Address       : 211.196.5.0-211.196.5.255
Network Name       : KORNET-INFRA000001
Connect ISP Name   : KORNET
Connect Date       : 20031129
Registration Date  : 20031209

[ Organization Information ]
Organization ID    : ORG1600
Org Name           : Korea Telecom
State              : GYUNGGI
Address            : 206 Jungja-dong, Bundang-gu, Sungnam city, Gyunggi-do, 
Korea, 463-711
Zip Code           : 463-711

[ Admin Contact Information]
Name               : IP Administrator
Org Name           : Korea Telecom
State              : GYUNGGI
Address            : 206 Jungja-dong, Bundang-gu, Sungnam city, Gyunggi-do, 
Korea, 463-711
Zip Code           : 463-711
Phone              : +82-2-3674-5708
Fax                : +82-2-747-8701
E-Mail             : ip at ns.kornet.net

[ Technical Contact Information ]
Name               : IP Manager
Org Name           : Korea Telecom
State              : GYUNGGI
Address            : 206 Jungja-dong, Bundang-gu, Sungnam city, Gyunggi-do, 
Korea, 463-711
Zip Code           : 463-711
Phone              : +82-2-3674-5708
Fax                : +82-2-747-8701
E-Mail             : ip at ns.kornet.net

--------------------------------------------------------------------------------

If the above contacts are not reachable, please see the following ISP contacts
for further information or network abuse.

[ ISP IPv4 Admin Contact Information ]
Name               : IP Administrator
Phone              : +82-2-3674-5708
Fax                : +82-2-747-8701
E-Mail             : ip at ns.kornet.net

[ ISP IPv4 Tech Contact Information ]
Name               : IP Manager
Phone              : +82-2-3674-5708
Fax                : +82-2-747-8701
E-Mail             : ip at ns.kornet.net

[ ISP Network Abuse Contact Information ]
Name               : Network Abuse
Phone              : +82-2-3675-1499
Fax                : +82-2-747-8701
E-Mail             : abuse at kornet.net

# KOREAN

KRNIC:  ����ڿ; ���Դϴ�
vȸ��IPv4����� d�Ʒ�4ϴ�

IPv4 ��         : 211.196.5.0-211.196.5.255
�� �      : KORNET-INFRA000001
�ISP�        : KORNET
ISP ᳯ¥       : 20031129
�系 ��    : 20031209

[ IPv4 � � d ]
��ȣ       : ORG1600
��            : ���
                   õ�            : �
��              : �д籸 d� 206 ���e-Biz���

[ �� � � d ]
�               : IP�Ұ�
��            : KORNET
õ�            : �
��              : �д籸 d� 206 ���e-Biz���
�ȭ ȣ          : +82-2-3674-5708
Fax                : +82-2-747-8701
�� ��         : ip at ns.kornet.net

[ �� �� � d ]
�               : IP�Ҵ��
��            : KORNET
õ�            : �
��              : �д籸 d� 206 ���e-Biz���
��ȣ          : 463-711
�ȭ ȣ          : +82-2-3674-5708
Fax                : +82-2-747-8701
�� ��         : ip at ns.kornet.net

--------------------------------------------------------------------------------

�'� IPv4���� d ùٸ� � ��
                       Ʒ� ���ISP �����ñ�ٶϴ�

[ �SP� IPv4��� d ]
�               : IP�Ұ�
�ȭ ȣ          : +82-2-3674-5708
Fax                : +82-2-747-8701
�� ��         : ip at ns.kornet.net

[ �SP� IPv4��� d ]
�               : IP�Ҵ��
�ȭ ȣ          : +82-2-3674-5708
Fax                : +82-2-747-8701
�� ��         : ip at ns.kornet.net

[ �SP� Network Abuse �� d ]
�               : �/�ŷ�
�ȭ ȣ          : +82-2-3675-1499
Fax                : +82-2-747-8701
�� ��         : abuse at kornet.net

- KRNIC Whois Service -

Sharon.
-- 
 22:29:20 up 8 days, 12:27,  2 users,  load average: 1.66, 1.44, 1.33
Linux is like a wigwam, no windows, no gates, apache inside.
Fedora Core 2, KDE 3.3.0, OpenOffice 1.1.2
Registered Linux user 334501
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug