Home page logo
/

nanog logo nanog mailing list archives

Re: Prefix hijacking by Michael Lindsay via Internap
From: Adrian <choprboy () dakotacom net>
Date: Sat, 20 Aug 2011 20:16:02 -0700

On Saturday 20 August 2011 19:49, Suresh Ramasubramanian wrote:
Just as interesting is that those prefixes are certainly on spamhaus.

This should turn out very interesting indeed - maybe RIPE NCC should
just reclaim those prefixes till their ownership is resolved.  If
ever.

On Sun, Aug 21, 2011 at 7:43 AM, Adrian <choprboy () dakotacom net> wrote:
Hmmmm, interesting......


He contacted me privately and stated he always uses Tor. I explained how that 
lends even less credibility than a questionable/forged transfer authority in 
business discussions... He claims he will be posting from his office Monday 
morning.

The good credibility: There does appear to be a Denis Spirin in ?the Ukraine? 
who is a IT consultant. There is also a Denis Spirin who appears to be a 
director at a Russian venture capitalist... unknown if they have any 
connection.

The bad credibility: Posting thru Tor via GMail. The "link-telecom.net" domain 
appears to have no services or presence other than a MX record to GMail. The 
same "noc () link-telecom net" address he controls is also the registered 
contact on all the IP blocks in Spamhaus and allegedly hijacked... why not 
just contact Internap directly?

Adrian



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault