Re: [cobalt-users] IPs related to hackers

[flash22@xxxxxxx]

On Sat, 10 Feb 2001, Gerald Waugh wrote:

> I tracked down some of these

Remember, APNIC is a seperate registration authority, when you lookup an
IP and it says Asia Pacific Information Center, it's not owned by them, it
just means you have to go look it up there...Same for KRNIC..
Also you need to fullow block delegations, the upstream isp's like quest
really aren't helpfull if the address belongs to some customer...

> ALL: 63.237.170.8  Qwest Communications (NETBLK-NET-QWEST-BLKS2) NET-QWEST-BLKS2
Delegated to: Virtx (calif) /24


> ALL: 210.91.84.111  Korea Network Information Center 210.90.0.0 - 210.91.255.255
210.91.84.0 /24 Venture Business Support Center (korea)

> 63.64.0.0 - 63.127..255.2
> ALL: 211.60.130.4  *** Could not find this one ***
211.60.130.0-211.60.130.63 Image tech (korea) 

> ALL: 203.186.139.115 Asia Pacific Network Information Center
203.186.128.0 /23
"Internet Service Provider in Hong Kong" (Nice company name ;)
--
> ALL: 63.112.195.196 UUNET Technologies, Inc. (NETBLK-UUNET63) UUNET63
You didn't recurse this one, it's subnetted to 'Prestige Cable TV' in GA

> ALL: 210.220.162.26  Korea Network Information Center

KRNIC is like APNIC, you gave to go there to finish looking up...
(use something like whois 210.220.162.26@xxxxxxxxxxxxxxx)

210.220.162.0-210.220.162.255 Org Name: HANARO Telecom
(This is kinda fun cause the records are in korean ;)

> ALL: 63.144.88.3  Qwest Communications (NETBLK-NET-QWEST-BLKS-2)
> NET-QWEST-BLKS-2
Delegated to clueless admin @ Cartrer Communication  (class c)
(scottlav30@xxxxxxxxxxx)


> ALL: 166.82.46.13  CTC Internet Services  (DR5-ORG-ARIN)  noc@vnet.
Out of date, it's now: Vnet Internet Access, Inc., NC

> ALL: 61.9.26.51  Makati 1227 Philippines
??: SPNIC says ' Mosaic Communications, Inc' , PH - richip@xxxxxxxxxx

> ALL: 216.52.186.200 InterNAP Network Services (NETBLK-PNAP-8-98) PNAP-8-98
Really delegated to: Bozell Kamstra (/23) 

> ALL: 211.250.160.252   *** Could not find this one ***
211.250.160.160-211.250.160.255 'jeonggok elementary school' kr

> ALL: 63.148.43.107 Qwest Communications (NETBLK-NET-QWEST-BLKS-2)
delegated to: ADSTREAM ONLINE (NJ) 

---
ps: remember folks, hosts.deny won't do squat for bind ;0

gsh