From owner-freebsd-chat Sat Apr 14 13:42:23 2001 Delivered-To: freebsd-chat@freebsd.org Received: from lariat.org (lariat.org [12.23.109.2]) by hub.freebsd.org (Postfix) with ESMTP id 2C8AD37B625 for ; Sat, 14 Apr 2001 13:42:14 -0700 (PDT) (envelope-from brett@lariat.org) Received: from mustang.lariat.org (IDENT:ppp0.lariat.org@lariat.org [12.23.109.2]) by lariat.org (8.9.3/8.9.3) with ESMTP id OAA04023; Sat, 14 Apr 2001 14:42:02 -0600 (MDT) Message-Id: <4.3.2.7.2.20010414142707.00e1ccb0@localhost> X-Sender: brett@localhost X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Sat, 14 Apr 2001 14:41:58 -0600 To: dan@langille.org From: Brett Glass Subject: Re: do you know thepayline? Cc: freebsd-chat@freebsd.org In-Reply-To: <200104141959.f3EJxce28755@ns1.unixathome.org> References: <4.3.2.7.2.20010414134614.04990d70@localhost> <36995.813376620364800.31018@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-chat@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org If you can read Hangul, you can find a lot of information at http://www.kornet.net. I can't, so I tried e-mailing complaints through abuse.net. No response. So, I went back to APNIC to see what I could find out about the netblocks where the spams originated. Here's what I got: whois -h whois.apnic.net 168.126.72.70 % Rights restricted by copyright. See http://www.apnic.net/db/dbcopyright.html inetnum: 168.126.0.0 - 168.126.255.255 netname: KORNET descr: Korea Telecom Research Center descr: Computer Network Section descr: 17 Umyun-dong, Seocho-gu descr: Seoul, 137-140 country: KR admin-c: JP119 tech-c: JP119 notify: dbmon@apnic.net changed: hostmaster@apnic.net 940420 source: APNIC person: Jaeyoung Park address: Korea Telecom Research Center address: Computer Network Section address: 17 Umyun-dong, Seocho-gu address: Seoul, 137-140 address: KR phone: +82-3-526-5233 e-mail: young@tao.kotel.co.kr nic-hdl: JP119 notify: dbmon@apnic.net mnt-by: MAINT-NULL changed: hostmaster@apnic.net 19940420 source: APNIC whois -h whois.apnic.net 211.217.77.46 % Rights restricted by copyright. See http://www.apnic.net/db/dbcopyright.html inetnum: 211.217.0.0 - 211.225.255.255 netname: KORNET descr: KOREA TELECOM descr: KOREA TELECOM Internet Operating Center country: KR admin-c: GP33-AP tech-c: WK44-AP mnt-by: MNT-KRNIC-AP changed: hostmaster@apnic.net 20000912 source: APNIC person: Gilsoon Park address: Central Data Communication O&M Office, address: 128 Yeong-Dong Jongro-Ku Seoul phone: +82-2-766-1407 fax-no: +82-2-766-6007 country: KR e-mail: gspark@rms.kornet.net nic-hdl: GP33-AP mnt-by: MNT-KRNIC-AP changed: hostmaster@nic.or.kr 20000830 source: APNIC person: Won Kang address: Central Data Communication O&M Office, 128 Yeong-Dong Jongro-Ku Seoul phone: +82-2-766-5902 fax-no: +82-2-766-5901 country: KR e-mail: kw627@soback.kornet.net nic-hdl: WK44-AP mnt-by: MNT-KRNIC-AP changed: hostmaster@nic.or.kr 20000830 source: APNIC whois -h whois.apnic.net 61.33.22.66 % Rights restricted by copyright. See http://www.apnic.net/db/dbcopyright.html inetnum: 61.33.22.0 - 61.33.22.127 netname: KOREASOFT4001607D descr: KOREASOFT country: KR admin-c: KL233-AP tech-c: DB50-AP notify: b4001607@users.bora.net mnt-by: MAINT-KR-DACOM changed: b4001607@users.bora.net 20010327 source: APNIC role: DACOM BORANET address: DACOM Bldg., 706-1, Yoeksam-dong, Kangnam-ku, Seoul phone: +82-2-6220-7755 fax-no: +82-2-6220-0312 e-mail: ipadm@nic.bora.net admin-c: SK91-AP tech-c: TH45-AP tech-c: CJS3-AP tech-c: PHS1-AP tech-c: WSH3-AP tech-c: HEK1-AP nic-hdl: DB50-AP remarks: IP address administrator group of NIC team, DACOM Corp. notify: ipadm@nic.bora.net mnt-by: MAINT-KR-DACOM changed: ipadm@nic.bora.net 20001106 source: APNIC person: Kilhoon Lee address: 823 21 Yuksam-1dong Kangnam-gu address: SEOUL Korea phone: +82-2-6240-3153 country: KR e-mail: b4001607@users.bora.net nic-hdl: KL233-AP mnt-by: MAINT-KR-DACOM changed: b4001607@users.bora.net 20010327 source: APNIC These WHOIS entries at least give some addresses for complaints, and if you follow up on the APNIC handles for the contacts you'll get more. I figure we'll have to block, though, so we're already preparing to enter the domains into our access_db files and the netblocks into our router. Spammers seem to be relying upon language barriers to make followups difficult. --Brett To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-chat" in the body of the message