Security Incidents mailing list archives
Re: Korea a classic ? was: IP blacklist
From: r.fulton () AUCKLAND AC NZ (Russell Fulton)
Date: Wed, 17 May 2000 10:37:43 +1200
On Tue, 16 May 2000 09:07:28 +0200 Jens Hektor <hektor () RZ RWTH-AACHEN DE> wrote:
So, you mean http://whois.nic.or.kr/ with all these nice little letters an ordinary European can't read or understand.
Hmmm... you used to be able to put a /e on the end of a query and get the english version of the text. That no longer seems to work :-( Apnic mirrors some of the information in KRNIC database but I suspect that krnic is now not bothering to keep an English version of their data at all so there is no point in APNIC mirroring it. Filling the IP adress into the query
field does not help either, so I had to use the domain name I found out. That worked with apnic, too, but there should be a netblock entry also, which is much easier, so I don't have to nslookup/traceroute and so on.
The problem is made worse by the lack of PTR records so you can't even get a domain name. -- I have been reduced to poking at the IMAP port on LINUX boxes and getting a domain name from the banner! Cheers, Russell.
Current thread:
- Re: Korea a classic ? was: IP blacklist Doglus Cho (May 15)
- Re: Korea a classic ? was: IP blacklist Jens Hektor (May 16)
- Re: Korea a classic ? was: IP blacklist Russell Fulton (May 16)
- Re: Korea a classic ? was: IP blacklist Jane DelFavero (May 18)
- Re: Korea a classic ? was: IP blacklist Russell Fulton (May 16)
- Strange logs and scans. Lic. Rodolfo Gonzalez Gonzalez (May 17)
- Re: Strange logs and scans. * * (May 19)
- While we're on viruses... Keith McCammon (May 19)
- <Possible follow-ups>
- Re: Korea a classic ? was: IP blacklist Doglus Cho (May 16)
- Re: Korea a classic ? was: IP blacklist Cho, Douglas (May 17)
- Re: Korea a classic ? was: IP blacklist Jens Hektor (May 16)