On Thursday 30 Oct 2003 7:14 pm, Ralph Slooten wrote:
> On Thu, 30 Oct 2003 18:25:36 +0000
>
> Richard Urwin <[EMAIL PROTECTED]> wrote:
> > > And what a surprise, KorNET, the biggest wankers of 'em all.... but
> > > still, I have many many more, and not only from KorNEt but also knows
> > > spammer-ridden ISP's like China Net.
> >
> > In my experience, china9988 gives up after about six months. I got my
> > mail server up around March and I was getting two or three attempts a day
> > from him and his mates. Now I very rarely see one.
> >
> > Why worry? If your server is tied down tight those attempts are already
> > bouncing as hard as you could make them with IP rejections.
> >
> > --
> > Richard Urwin
>
> Umm, six months of attempted abuse... naah, I don't like it one bit, and an
> nmap of his IP revealed the following:
>
> TCP/IP fingerprint:
> SInfo(V=3.00%P=i586-mandrake-linux-gnu%D=10/30%Time=3FA161A4%O=113%C=1)
>
> Oh lookie lookie ... our spammer is using MDK! It's not that he tried, but
> that he might succeed one day, and another thing is he's trying. KorNet
> don't give a shit about abuse reports via spamcop either. I just don't
> trust them one bit, and would rather not even give them a chance to try. I
> get many users on my webserver, mainly for dcgui rpm's, but the fact that
> some off these users may also use KorNet doesn't worry me. An ISP with such
> a bad name should not be used ;-)

Granted if you have a webserver up you've got enough ports open to start to 
get worried. I've only got SMTP open.

> BTW, found something in connection to this:
> http://www.sbslinks.com/Ipaddress.htm (just click cancell when it asks for
> username / password a couple of times and you'll get huge (+- 3.5MB html
> files with all the data)

I use http://www.iana.org/ipaddress/ip-addresses.htm

-- 
Richard Urwin

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to