North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: panix.com hijacked

  • From: Richard Cox
  • Date: Sun Jan 16 00:09:52 2005

On Sat, 15 Jan 2005 22:05:47 -0600
"Chris Adams" <[email protected]> wrote:

> I do know that we've had hosting customers that have had domains with
> melbourneit.com as the registrar that they were unable to ever transfer
> to another registrar (despite emails, faxes, and phone calls; IIRC one
> customer tried for most of a year to transfer a domain to another
> registrar or at least get the nameservers changed without success).

We have had a comparable experience and now, on checking the DNS for
the hijacked panix domain, I see name-servers similar to those I noted
on that previous occasion.  Known under various names that infer a UK
connection, (such as Fibranet Services Ltd/freeparking.co.uk) but in
fact seem to be Activebytes Software of 2530 Channin Drive Wilmington
Delaware, with servers routed via Koallo Inc in Canada!

So far as we were able to determine, there was no actual UK presence.

	ns1.ukdnsservers.co.uk has address 142.46.200.67
	ns2.ukdnsservers.co.uk has address 207.61.90.196
	ns3.ukdnsservers.co.uk has address 142.46.200.68
	ns4.ukdnsservers.co.uk has address 207.61.90.197

MelbourneIT appear to have a U.S. Office near San Francisco:
  2200 Powell Street, Sixth Floor, Suite 690, Emeryville CA 94608
which would be slightly more accessible for service of writs, etc ...

-- 
Richard Cox