[SpamCop.net - protecting the internet through technology]

[SpamCop-List] Re: Strange IP Shenanigans

Peter J. Ross ross at ross.orq
Mon Feb 7 03:14:46 EST 2005


Berny wrote:

<snip traceroute>

> what is the meaning of the crap after #21

If by "crap" you mean those hops that only resolve to a numeric IP, it 
probably means there's no rDNS (Reverse-DNS) configured for them.

> and does this mean sprintlink is upstream? 

W-a-y upstream.

> (funny how everything points to china too)

Some of us wouldn't exactly consider that to be funny...

> And moreover, how does that whole last IP-range not resolve to anybody at
> all? 

See above re: no rDNS.

> APNIC shows nothing according to SC. And with latencies of almost a
> second on the last half dozen hops, their clients must be really patient 
> and desperate for their enlargement/cialis/medz.

Spammers can be rather patient people -- they don't have much choice, we 
chased a lot of them offshore several years ago.
 
> and more wierdness here:

<snip traceroute #2>

> 29  * * *

> what's with line 29?

Some routers are apparently setup not to respond to ICMP messages.

<snip traceroute #3>
 
> more of those lines with "* * *"

See above.

> and is savvis the upstream for china telecom?

So it would appear, but they're a backbone provider and probably too far up 
the food chain to bother (at least at this point).

--
PJR


More information about the SpamCop-List mailing list