Re: spammer from outer space? (routing error)

[Jon Lewis <jlewis () lewis org>]

On Sat, 25 Aug 2007, Peter Dambier wrote:

> I just caught this one:
>
> 2007-08-25 16:57:52 SMTP connection from [125.187.32.144]:45885 (TCP/IP 
> connection count = 1)
> 2007-08-25 16:58:11 SMTP connection from [125.187.32.222]:52495 (TCP/IP 
> connection count = 2)
> 2007-08-25 16:58:22 ident connection to 125.187.32.144 timed out
> 2007-08-25 16:58:25 no host name found for IP address 125.187.32.144

> OrgTechHandle: AWC12-ARIN
> OrgTechName:   APNIC Whois Contact
> OrgTechPhone:  +61 7 3858 3100
> OrgTechEmail:  search-apnic-not-arin () apnic net
>
> So I should never have seen a packet from them?

Because it's not ARIN IP space?

KRNIC is not an ISP but a National Internet Registry similar to APNIC.
The followings is organization information that is using the IPv4 address.

IPv4 Address       : 125.187.32.0-125.187.47.255
Network Name       : POWC-503
Connect ISP Name   : Xpeed
Registration Date  : 20051128
Publishes          : Y

Whether or not you should accept email from Korean end-user IP space is 
left as exercise for the reader.

----------------------------------------------------------------------
 Jon Lewis                   |  I route
 Senior Network Engineer     |  therefore you are
 Atlantic Net                |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________