• Follow us on Twitter @buckeyeplanet and @bp_recruiting, like us on Facebook! Enjoy a post or article, recommend it to others! BP is only as strong as its community, and we only promote by word of mouth, so share away!
  • Consider registering! Fewer and higher quality ads, no emails you don't want, access to all the forums, download game torrents, private messages, polls, Sportsbook, etc. Even if you just want to lurk, there are a lot of good reasons to register!
Clarity;930993; said:
Would also love to know who the hell is at the following IP, they'd make the list for Vick's new and improved Bad Newz Sleazebag-fighting league.



That goes on and on for like three days. They'll never be successful, I'm a stickler about ridiculous account names and passwords (I think the one for root is 63 characters long, for example) -- but if it's the thought that counts, then they have a shiv and garbage can lid with their name written on it.

[FONT=arial,verdana,helvetica]
Search results for: 60.28.206.110
[/FONT]

OrgName: Asia Pacific Network Information Centre
OrgID: APNIC
Address: PO Box 2131
City: Milton
StateProv: QLD
PostalCode: 4064
Country: AU

ReferralServer: whois://whois.apnic.net

NetRange: 60.0.0.0 - 60.255.255.255
CIDR: 60.0.0.0/8
NetName: APNIC-60
NetHandle: NET-60-0-0-0-1
Parent:
NetType: Allocated to APNIC
NameServer: NS1.APNIC.NET
NameServer: NS3.APNIC.NET
NameServer: NS4.APNIC.NET
NameServer: NS-SEC.RIPE.NET
NameServer: TINNIE.ARIN.NET
Comment: This IP address range is not registered in the ARIN database.
Comment: For details, refer to the APNIC Whois Database via
Comment: WHOIS.APNIC.NET or [link removed] apnic.net/apnic-bin/whois2.pl
Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment: for the Asia Pacific region. APNIC does not operate networks
Comment: using this IP address range and is not able to investigate
Comment: spam or abuse reports relating to these addresses. For more
Comment: help, refer to [link removed]apnic.net/info/faq/abuse
RegDate: 2003-04-06
Updated: 2005-05-20

OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3100
OrgTechEmail: [email protected]

# ARIN WHOIS database, last updated 2007-09-15 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.​



Of course, using a different ip lookup I get different infoz...

IP address: 60.28.206.110 IP country:
cn.png
China IP address state: Tianjin IP address city: Tianjin IP latitude: 39.142200 IP longitude: 117.176697 ISP: CNCGROUP Tianjin province network Organization: Yiouwangluo Limited company
A third lookup site confirms china

IP Address Lookup: 60.28.206.110

(guessed) Chongqing, CHINA

 
Last edited:
Upvote 0
You should probably ban all the Asia Pacific and RIPE net blocks at the firewall level.

This is what I use on the firewalls at work, and it cuts spam email by about 60% and brute force crack attempts by half.

iptables -A FORWARD -p ALL -i eth1 -s 25.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 43.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 53.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 57.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 58.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 59.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 60.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 61.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 62.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 80.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 81.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 82.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 83.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 84.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 85.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 86.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 87.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 88.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 89.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 121.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 123.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 124.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 125.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 148.201.0.0/16 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 148.202.0.0/15 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 148.204.0.0/14 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 148.208.0.0/12 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 148.224.0.0/12 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 148.240.0.0/13 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 148.248.0.0/15 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 148.250.0.0/16 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 193.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 200.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 201.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 202.0.0.0/7 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 203.95.192.0/19 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 203.133.1.0/19 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 207.248.0.0/15 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 210.0.0.0/7 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 213.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 216.241.14.0/19 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 217.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 218.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 219.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 220.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 221.0.0.0/8 -j REJECT
iptables -A FORWARD -p ALL -i eth1 -s 222.0.0.0/8 -j REJECT
 
Upvote 0
Thump;931848; said:
BTW, IAB said last week that he doesn't listen to Stern on his computer b/c it hogs too much bandwidth!

What a puss.

:lol: I do from time to time, but he gets all judgemental and stuff when I do it since I am the Sys Admin here. We have a shit-load of people around our office streaming all kinds of shit here, so not that it really matters.
 
Upvote 0
Big Papa;931856; said:
:lol: I do from time to time, but he gets all judgemental and stuff when I do it since I am the Sys Admin here. We have a shit-load of people around our office streaming all kinds of shit here, so not that it really matters.

Yeah, I figured so much. Please tell him to start listening to Stern and quit listening to Violent Femmes.
 
Upvote 0
Back
Top