On Thu, 30 Oct 2003 18:25:36 +0000
Richard Urwin <[EMAIL PROTECTED]> wrote:

> > And what a surprise, KorNET, the biggest wankers of 'em all.... but still,
> > I have many many more, and not only from KorNEt but also knows
> > spammer-ridden ISP's like China Net.
> 
> In my experience, china9988 gives up after about six months. I got my mail 
> server up around March and I was getting two or three attempts a day from him 
> and his mates. Now I very rarely see one.
> 
> Why worry? If your server is tied down tight those attempts are already 
> bouncing as hard as you could make them with IP rejections.
> 
> -- 
> Richard Urwin

Umm, six months of attempted abuse... naah, I don't like it one bit, and an nmap
of his IP revealed the following:

TCP/IP fingerprint:
SInfo(V=3.00%P=i586-mandrake-linux-gnu%D=10/30%Time=3FA161A4%O=113%C=1)

Oh lookie lookie ... our spammer is using MDK! It's not that he tried, but that
he might succeed one day, and another thing is he's trying. KorNet don't give a
shit about abuse reports via spamcop either. I just don't trust them one bit,
and would rather not even give them a chance to try. I get many users on my
webserver, mainly for dcgui rpm's, but the fact that some off these users may
also use KorNet doesn't worry me. An ISP with such a bad name should not be used
;-)

BTW, found something in connection to this:
http://www.sbslinks.com/Ipaddress.htm (just click cancell when it asks for
username / password a couple of times and you'll get huge (+- 3.5MB html files
with all the data)

Greetings
Ralph
--
http://axljab.homelinux.org/
"...the software said Win95 or better, so I installed Linux"

Attachment: pgp00000.pgp
Description: PGP signature

Reply via email to