Hi,
I have noticed over the past few weeks that if go to the KRNIC site to use their WHOIS service I often receive a TCP FIN scan from 202.30.50.120. Looking up that IP address puts it within the 202.30.50.0 - 202.30.51.255 address range assigned to Network Name : KRNIC-NET Org Name : NIDA
I have reported this a number times to KRNIC asking if it is a result of some service that they provide but have yet to receive any response from them.
Has anyone else noticed this occurring and/or can offer an explanation?