North American Network Operators Group|
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical
Re: YAY! Re: Atrivo/Intercage: NO Upstream depeer
Thanks to the efforts of the people on this list, you've known Estdomains/Esthost was bad news for several weeks or more.
[root@control ~]# dig estdomains.com
; <<>> DiG 9.5.0-P2 <<>> estdomains.com ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2970 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0
;; QUESTION SECTION: ;estdomains.com. IN A
;; ANSWER SECTION: estdomains.com. 86400 IN A 126.96.36.199
inetnum: 188.8.131.52 - 184.108.40.206 netname: NL-ECATEL-20080829 descr: Ecatel LTD country: NL org: ORG-EL38-RIPE admin-c: RvE16-RIPE tech-c: RvE16-RIPE status: ALLOCATED PA mnt-by: RIPE-NCC-HM-MNT mnt-lower: ECATEL-MNT mnt-routes: ECATEL-MNT source: RIPE # Filtered
person: Reinier van Eeden address: Archangelkade 1-3 address: 1013 BE Amsterdam mnt-by: IQARUS-MNT e-mail: r.eeden@xxxxxxxxxxxxx phone: +31 64 607 11 12 nic-hdl: RvE16-RIPE source: RIPE # Filtered
The same guys were hosting several ROKSO spammers in 2006 allready. This smells badly!
Earlier this year they had also this one (also ROKSO)
The company that Reinier was with was called Icarus earlier, does that ring a bell? 3 of the top 10 ROKSO spammers were hosted there. This is more then just a normal shining.