[SpamCop-List] Re: Strange IP Shenanigans
Peter J. Ross
ross at ross.orq
Mon Feb 7 03:14:46 EST 2005
Berny wrote:
<snip traceroute>
> what is the meaning of the crap after #21
If by "crap" you mean those hops that only resolve to a numeric IP, it
probably means there's no rDNS (Reverse-DNS) configured for them.
> and does this mean sprintlink is upstream?
W-a-y upstream.
> (funny how everything points to china too)
Some of us wouldn't exactly consider that to be funny...
> And moreover, how does that whole last IP-range not resolve to anybody at
> all?
See above re: no rDNS.
> APNIC shows nothing according to SC. And with latencies of almost a
> second on the last half dozen hops, their clients must be really patient
> and desperate for their enlargement/cialis/medz.
Spammers can be rather patient people -- they don't have much choice, we
chased a lot of them offshore several years ago.
> and more wierdness here:
<snip traceroute #2>
> 29 * * *
> what's with line 29?
Some routers are apparently setup not to respond to ICMP messages.
<snip traceroute #3>
> more of those lines with "* * *"
See above.
> and is savvis the upstream for china telecom?
So it would appear, but they're a backbone provider and probably too far up
the food chain to bother (at least at this point).
--
PJR
More information about the SpamCop-List
mailing list