Incident 02-14-02 04:22am

snort2html.plx:

Feb 14 04:22:12 - snort [1:0:0] TCP to 111 sunrpc 
  Source IP: 210.117.6.205   Source port: 2221 
Source host: 210.117.6.205
  Target IP: 12.82.128.108   Target port: 111   Proto: TCP 
Target host: 108.seattle-01-02rs.wa.dial-access.att.net


snort:

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/14-04:22:12.176527 210.117.6.205:2221 -> 12.82.128.108:111
TCP TTL:51 TOS:0x0 ID:37122 IpLen:20 DgmLen:60 DF
******S* Seq: 0xC89347DB  Ack: 0x0  Win: 0x7D78  TcpLen: 40
TCP Options (5) => MSS: 1460 SackOK TS: 1820180 0 NOP WS: 0 

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+


BW whois 2.9 by Bill Weinman (http://whois.bw.org/)
© 1999-2001 William E. Weinman 

Request: 210.117.6.205
connecting to whois.arin.net [192.149.252.34:43] ...
connecting to WHOIS.APNIC.NET [202.12.29.13:43] ... 

% Rights restricted by copyright. See http://www.apnic.net/db/dbcopyright.html
% (whois7.apnic.net) 

inetnum:     210.116.0.0 - 210.123.255.255
netname:     KRNIC-KR
descr:       KRNIC
descr:       Korea Network Information Center
country:     KR
admin-c:     HM127-AP
tech-c:      HM127-AP
remarks:     ******************************************
remarks:     KRNIC is the National Internet Registry
remarks:     in Korea under APNIC. If you would like to
remarks:     find assignment information in detail
remarks:     please refer to the KRNIC Whois DB
remarks:     http://whois.nic.or.kr/english/index.html
remarks:     ******************************************


# ENGLISH 

IP Address         : 210.117.0.0-210.117.63.255
Network Name       : THRUNET
Connect ISP Name   : THRUNET
Connect Date       : 19990218
Registration Date  : 20000606 
[ Organization Information ]
Orgnization ID     : ORG51222
Org Name           : Thrunet Co.,Ltd
State              : SEOUL
Address            : 1338-5 Seocho-2dong Seocho-ku
Zip Code           : 137-072 
[ Admin Contact Information]
Name               : Myungsun Noh
Org Name           : Thrunet Co.,Ltd
State              : SEOUL
Address            : 1338-5 Seocho-2dong, Seocho-ku
Zip Code           : 137-072
Phone              : +82-2-3488-8495
Fax                : +82-2-3488-8777
E-Mail             : abuse@thrunet.com 
[ Technical Contact Information ]
Name               : Myungsun Noh
Org Name           : Thrunet Co.,Ltd
State              : SEOUL
Address            : 1338-5 Seocho-2dong, Seocho-ku
Zip Code           : 137-072
Phone              : +82-2-3488-8495
Fax                : +82-2-3488-8777
E-Mail             : abuse@thrunet.com