Another origin IP

Mailman List Mirror (Read Only)
1

209.119.115.65

telnetd a mile a minute.......

to our DNS.

Check yours !

2

That's a customer off of Digex

mcserver.com

detel, Inc (MCSERVER-DOM)
   suite 332
   2490 Black Rock Tnpk
   fairfield, CT 06432

   Domain Name: MCSERVER.COM

   Administrative Contact, Technical Contact, Zone Contact:
      Weinberg, Ed (EW286) edw@DETEL.COM
      203-333-3675
   Billing Contact:
      Weinberg, Ed (EW286) edw@DETEL.COM
      203-333-3675

   Record last updated on 07-Jul-98.
   Record created on 30-Jul-97.
   Database last updated on 16-Nov-98 04:48:51 EST.

   Domain servers in listed order:

   NS1.DETEL.COM 209.119.115.65
   NS2.DETEL.COM 208.242.122.10

Detel, Inc. (DETEL-DOM)
   2490 Black Rock Trpk
   Fairfield, CT 06430

   Domain Name: DETEL.COM

   Administrative Contact, Technical Contact, Zone Contact:
      Weinberg, Ed (EW286) edw@DETEL.COM
      203-333-3675
   Billing Contact:
      Weinberg, Ed (EW286) edw@DETEL.COM
      203-333-3675

   Record last updated on 26-Jul-98.
   Record created on 27-Feb-96.
   Database last updated on 16-Nov-98 04:48:51 EST.

   Domain servers in listed order:

   NS1.DETEL.COM 209.119.115.65
   NS1.RESEARCH.TROY.NY.US 206.72.196.240
   NS2.DETEL.COM 208.242.122.10

Another name server compremised. I think I'm seeing a pattern here.

  Trying 209.119.115.65...
  Connected to 209.119.115.65.
  Escape character is '^]'.

  Red Hat Linux release 5.1 (Manhattan)

Same as register.com

  Currently I haven't seen this scan across my network.

  James