spammer from outer space? (routing error)
Jon Lewis
jlewis at lewis.org
Sat Aug 25 21:48:37 UTC 2007
On Sat, 25 Aug 2007, Peter Dambier wrote:
>
> I just caught this one:
>
> 2007-08-25 16:57:52 SMTP connection from [125.187.32.144]:45885 (TCP/IP
> connection count = 1)
> 2007-08-25 16:58:11 SMTP connection from [125.187.32.222]:52495 (TCP/IP
> connection count = 2)
> 2007-08-25 16:58:22 ident connection to 125.187.32.144 timed out
> 2007-08-25 16:58:25 no host name found for IP address 125.187.32.144
> OrgTechHandle: AWC12-ARIN
> OrgTechName: APNIC Whois Contact
> OrgTechPhone: +61 7 3858 3100
> OrgTechEmail: search-apnic-not-arin at apnic.net
>
> So I should never have seen a packet from them?
Because it's not ARIN IP space?
KRNIC is not an ISP but a National Internet Registry similar to APNIC.
The followings is organization information that is using the IPv4 address.
IPv4 Address : 125.187.32.0-125.187.47.255
Network Name : POWC-503
Connect ISP Name : Xpeed
Registration Date : 20051128
Publishes : Y
Whether or not you should accept email from Korean end-user IP space is
left as exercise for the reader.
----------------------------------------------------------------------
Jon Lewis | I route
Senior Network Engineer | therefore you are
Atlantic Net |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
More information about the NANOG
mailing list