Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We are getting many fake account and spam attempts from IP addresses originating from ChinaNet.com. How can I discover all of their IP blocks? I viewed a report from 2001 that mentioned they did not protect against abuse.

http://www.dolphinwave.org/spam/CHINANET-GD.txt

share|improve this question

closed as not constructive by joeqwerty, MDMarra, Ward, mrdenny Nov 21 '11 at 18:56

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

    
What IP blocks belong to ChinaNet cannot be supported by facts, references, and requires opinionated discussion? Really now ... –  Kaz Nov 25 '13 at 1:47
    
Everything you need to know is in this file: ftp://ftp.apnic.net/apnic/stats/apnic/delegated-apnic-extended-latest Find all ipvr ranges where the country is CN. Each one gives you the base addresses plus number of addresses. I use a script to turn this into iptables rules. The script has a list of whitelisted countries; all else is blocked from contacting port 25. –  Kaz Nov 25 '13 at 2:07
    
^Of course, should be "Find all ipv4 entries", not ipvr. –  Kaz Nov 25 '13 at 2:14
add comment

2 Answers 2

First, any report from 2001 is worth slightly less than the paper on which it is printed. It's 10 year old data.

Second, You are reaching for the wrong solution: You should implement real heuristic-based spam filtering, not just block IP ranges because you feel like it.

Third, If you really want to do do this then AS numbers are your fiends.
Chinanet is AS23650. This page has all sorts of interesting BGP info, including all of their IPv4 and IPv6 prefixes (as seen by Hurricane Electric's infrastructure).

share|improve this answer
add comment

There are many services out there than can provide this information. The one I would recommend is from MaxMind.

http://www.maxmind.com/app/isp

share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.