[77173] in North American Network Operators' Group
Re: panix.com hijacked
daemon@ATHENA.MIT.EDU (Richard Cox)
Sun Jan 16 00:08:42 2005
From: Richard Cox <Richard@Mandarin.com>
To: nanog@nanog.org
Reply-To: Richard@Mandarin.com
In-Reply-To: <20050116040546.GF526738@hiwaay.net>
Date: Sun, 16 Jan 2005 05:07:00 +0000
Errors-To: owner-nanog-outgoing@merit.edu
On Sat, 15 Jan 2005 22:05:47 -0600
"Chris Adams" <cmadams@hiwaay.net> wrote:
> I do know that we've had hosting customers that have had domains with
> melbourneit.com as the registrar that they were unable to ever transfer
> to another registrar (despite emails, faxes, and phone calls; IIRC one
> customer tried for most of a year to transfer a domain to another
> registrar or at least get the nameservers changed without success).
We have had a comparable experience and now, on checking the DNS for
the hijacked panix domain, I see name-servers similar to those I noted
on that previous occasion. Known under various names that infer a UK
connection, (such as Fibranet Services Ltd/freeparking.co.uk) but in
fact seem to be Activebytes Software of 2530 Channin Drive Wilmington
Delaware, with servers routed via Koallo Inc in Canada!
So far as we were able to determine, there was no actual UK presence.
ns1.ukdnsservers.co.uk has address 142.46.200.67
ns2.ukdnsservers.co.uk has address 207.61.90.196
ns3.ukdnsservers.co.uk has address 142.46.200.68
ns4.ukdnsservers.co.uk has address 207.61.90.197
MelbourneIT appear to have a U.S. Office near San Francisco:
2200 Powell Street, Sixth Floor, Suite 690, Emeryville CA 94608
which would be slightly more accessible for service of writs, etc ...
--
Richard Cox
