218.236.197.144

While I half way hibernating on the sofa, I suddenly woke up.. and sensed something bad had happened. Below were the alert warning I get from Norton Personal Firewall.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Rule "Default Block NetBus Trojan horse" blocked (218.236.197.144,NetBus(12345))
Inbound TCP connection
Local address,service is (YOUR-96E107B735(218.111.xxx.xxx),NetBus(12345))
Remote address,service is (218.236.197.144,1687)
Process name is "N/A"
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

who the fuck!??? asshole!! Then this sifu ahfeifei ask me to try tracking the server down. By the "nslookup" command, below were the result. WTF? so, this is useless.. cant find server name... *grrrrr*

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Compaq_Owner>nslookup 218.236.197.144
DNS request timed out.
timeout was 2 seconds.
*** Can't find server name for address 10.0.0.2: Timed out
Server: cns3.tm.net.my
Address: 202.188.0.133

*** cns3.tm.net.my can't find 218.236.197.144: Non-existent domain

C:\Documents and Settings\Compaq_Owner>nslookup 218.236.197.1
DNS request timed out.
timeout was 2 seconds.
*** Can't find server name for address 10.0.0.2: Timed out
Server: cns3.tm.net.my
Address: 202.188.0.133

*** cns3.tm.net.my can't find 218.236.197.1: Non-existent domain
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -


Next, I tried the "tracert" command. mehlan[R1] ?? still the same ? host unreachable? hmmphh.....


- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
C:\Documents and Settings\Compaq_Owner>tracert 218.236.197.144

Tracing route to 218.236.197.144 over a maximum of 30 hops

1 Destination host unreachable.

Trace complete.

C:\Documents and Settings\Compaq_Owner>tracert 218.236.197.1

Tracing route to 218.236.197.1 over a maximum of 30 hops

1 1674 ms 1452 ms 1234 ms 219.93.218.177
2 1013 ms 780 ms 999 ms 219.93.216.133
3 764 ms 1045 ms 968 ms 219.93.155.29
4 827 ms 999 ms 890 ms brf-odsy01-srp1-0.tm.net.my [210.187.135.1]
5 1312 ms 1280 ms 1278 ms 210.187.142.1
6 1233 ms 1374 ms 1546 ms vlan150-brf-sw04.tm.net.my [219.93.175.115]
7 1670 ms 1530 ms 1452 ms 210.187.129.171
8 2029 ms 2062 ms 1983 ms POS1-1.IG3.SAC1.ALTER.NET [157.130.210.181]
9 1592 ms 1452 ms 1531 ms 0.so-0-1-0.XR2.SAC1.ALTER.NET [152.63.54.126]
10 1623 ms 1812 ms 1812 ms POS7-0.IG2.SAC1.ALTER.NET [152.63.54.117]
11 2249 ms 2327 ms 1826 ms epnetworks-gw.customer.alter.net [157.130.214.130]
12 1654 ms 1452 ms 1437 ms 211.115.200.233
13 1510 ms 1749 ms 1843 ms 211.239.208.238
14 1811 ms 2030 ms 2154 ms 203.231.89.110
15 1842 ms 2233 ms 1968 ms 211.215.91.123
16 1264 ms 1483 ms 1265 ms 218.236.197.1

Trace complete.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -


Then , the VisualTracker service retun the result. It shows the destination is from Korea.



inetnum : 218.234.0.0 - 218.239.255.255
netname : HANANET
description : Hanaro Telecom Co.
Kukje Electronics Cneter Bldg. 1445-3 Seocho-Song Seocho-Ku
country : KR

Well, fyi, I've used NetBus YEARS AGO... hello?? anybody home? NetBus ?? you're fucking nuts of what ? anyway... I really wish I can curse you to hell, but I'm KIND enough.. so, may you have a better life, and fuck off! bastard!

Reference :

[R1] "mehlan" - which carry the similiar meaning with "wtf" , direct translation - "what dick?"