North American Network Operators Group|
Date Prev | Date Next |
Date Index |
Thread Index |
Author Index |
Re: NANOG Spam?
- From: William Allen Simpson
- Date: Sun Jul 09 22:16:37 2006
- Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:user-agent:mime-version:to:subject:references:in-reply-to:content-type:content-transfer-encoding; b=ORJTGRQlQ+mmf7qJU/pIplSo2tQ2Y5GwPeJShr7HKpNWd9At486UnJFYIDLQ+HmHy3zho7pywuHOOrnkhru3QdojUA6oDOv/JQzg2YGs2r1omuPLlTLarvt4jdv2q5h6zcM1QywTbPrYyUklX7ueo+qLO0NdPKvgIN7tt2pz4W8=
Christian Seitz <chris@xxxxxxxxxxxx> wrote:
In article <44AC3493.6010705@xxxxxxxxx> you wrote:
AS | IP | Registry | AS Name
6724 | 126.96.36.199 | ripencc | STRATO Strato AG
How did you resolve this? Is there something wrong with
my DNS or did you make a mistake resolving the adress?
oarwind.info A 188.8.131.52
inetnum: 184.108.40.206 - 220.127.116.11
descr: CHINANET Anhui province network
descr: Data Communication Division
descr: China Telecom
status: ALLOCATED PORTABLE
changed: hm-changed@xxxxxxxxx 20060322
At the time of resolution 3 days ago, multiple persons on this list
resolved it to Strato.de. h613092.serverkompetenz.net (18.104.22.168)
Apparently, it has since moved to China. That's the kind of thing that
happens while you took a long weekend.
Are you in a position to quarantine the German server? Or otherwise
aid in investigating the problem? Such as getting German law
enforcement to confiscate the server as compromised and containing
personal identity theft?