[SpamCop-List] Re: nomaster for KRNIC spam

[Mike Easter]

Chris F. Willoughby wrote:
www.spamcop.net/sc?id=z851377116z32a805acad9bcedc3898812286f1b08cz
>
> Shouldn't this have gone to hostmaster at nic.or.kr instead of
> nomaster at devnull?

No, but there isn't really a /good/ notify, since apnic and krnic don't
know where it belongs.

In a way, it doesn't really matter because the IP is listed all over the
place as being a spamsource, hitting spamtraps, and looking like a
proxytrojan -- and the nomaster doesn't keep the IP from going into
spamcop's SCbl count.  I would notify thrunet and the ntt contacts
below.

There's a little bit of information at radb and cymru that sez ntt
and/or thrunet, so you could notify both of them.

whois -h whois.radb.net 61.253.29.45 ...
route:      61.253.0.0/16
descr:      Temporary regisitered customer object by NTT Korea
origin:     AS9277
notify:     korea-ip-gl at ntt.com
notify:     ops at ntt.net
mnt-by:     MAINT-VERIO-JP
changed:    takata at ntt.net 20040727
source:     VERIO

whois -h whois.cymru.com 61.253.29.45 ...
AS      | IP               | AS Name
9277    | 61.253.29.45     | THRUNET-AS-KR THRUNET

where as9277 is thrunet abuse at thrunet.com and ntt doesn't have a reg'd
abuse.net contact.


-- 
Mike Easter
kibitzer, not SC admin