Re: NANOG Spam?

• From: William Allen Simpson
• Date: Sun Jul 09 22:16:37 2006

• Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:user-agent:mime-version:to:subject:references:in-reply-to:content-type:content-transfer-encoding; b=ORJTGRQlQ+mmf7qJU/pIplSo2tQ2Y5GwPeJShr7HKpNWd9At486UnJFYIDLQ+HmHy3zho7pywuHOOrnkhru3QdojUA6oDOv/JQzg2YGs2r1omuPLlTLarvt4jdv2q5h6zcM1QywTbPrYyUklX7ueo+qLO0NdPKvgIN7tt2pz4W8=

In article <[email protected]> you wrote:

oarwind.info.
AS      | IP               | Registry | AS Name
6724    | 81.169.143.178   | ripencc  | STRATO Strato AG

How did you resolve this? Is there something wrong with
my DNS or did you make a mistake resolving the adress?

oarwind.info A 218.22.43.22

inetnum:      218.22.0.0 - 218.23.255.255
netname:      CHINANET-AH
country:      CN
descr:        CHINANET Anhui province network
descr:        Data Communication Division
descr:        China Telecom
admin-c:      CH93-AP
tech-c:       AT318-AP
status:       ALLOCATED PORTABLE
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CHINANET-AH
changed:      [email protected] 20060322
source:       APNIC

At the time of resolution 3 days ago, multiple persons on this list
resolved it to Strato.de.   h613092.serverkompetenz.net (81.169.143.178)

Apparently, it has since moved to China.  That's the kind of thing that
happens while you took a long weekend.

Are you in a position to quarantine the German server?  Or otherwise
aid in investigating the problem?  Such as getting German law
enforcement to confiscate the server as compromised and containing
personal identity theft?

• Follow-Ups:
  • Re: NANOG Spam? William Allen Simpson

• Prev by Date: Re: Cleaning up (was: NANOG Spam)?
• Next by Date: Re: NANOG Spam?
• Date Index
• Thread Index
• Author Index
• Historical