Re: [CORE] Attack against postgresql.org ... - Mailing list pgsql-hackers

From Csaba Nagy
Subject Re: [CORE] Attack against postgresql.org ...
Date
Msg-id 1154101871.22367.179.camel@coppola.muc.ecircle.de
Whole thread Raw
In response to Re: [CORE] Attack against postgresql.org ...  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: [CORE] Attack against postgresql.org ...  ("D'Arcy J.M. Cain" <darcy@druid.net>)
Re: [CORE] Attack against postgresql.org ...  ("Marc G. Fournier" <scrappy@postgresql.org>)
List pgsql-hackers
On Fri, 2006-07-28 at 17:37, Tom Lane wrote:
> "Marc G. Fournier" <scrappy@postgresql.org> writes:
> > The attacking IP, from the logs, appears to be "87.230.6.96" ...
> 
> Perhaps a complaint to their ISP is in order --- RIPE suggests
> net-abuse@hosteurope.de

That looks 1 level too high, the immediate source seems to be
http://www.ehost.pl/onas.php

They could probably act faster and more at the source... down on the
page from the link above you can find abuse@ehost.pl for complaints.

Cheers,
Csaba.


$> nslookup 87.230.6.96
Server:         192.168.1.4
Address:        192.168.1.4#53
Non-authoritative answer:
96.6.230.87.in-addr.arpa        name = vpsdws.xip.pl.
Authoritative answers can be found from:
6.230.87.in-addr.arpa   nameserver = dns.hosteurope.de.
6.230.87.in-addr.arpa   nameserver = dns2.hosteurope.de.
dns.hosteurope.de       internet address = 80.237.128.156
dns2.hosteurope.de      internet address = 80.237.129.61



$> whois xip.pl
[Querying whois.dns.pl]
[whois.dns.pl]
% This is the NASK WHOIS Server.
% This server provides information only for PL domains.
% For more info please see http://www.dns.pl/english/whois.html
Domain object:
domain:       xip.pl
registrant's handle: dinz5du40 (CORPORATE)
nservers:     ns1.ehost.pl.[80.237.184.22]             ns2.ehost.pl.[83.149.119.142]
created:        2003.10.06
last modified:  2005.09.19
registrar: Dinfo Systemy Internetowe
ul. Mostowa 5
43-300 Bielsko-Biala
Polska/Poland
+48.33 8225471
biuro@dinfo.pl
option: the domain name has not option
Subscribers Contact object:
company:  eHost s.c.
organization: eHost.pl
street:   Cichockiego 13/6
city:     24-100 Pulawy
location: PL
handle: dinz5du40
phone:  +48.502533333
last modified: 2004.11.03
registrar: Dinfo Systemy Internetowe
ul. Mostowa 5
43-300 Bielsko-Biala
Polska/Poland
+48.33 8225471
biuro@dinfo.pl
Technical Contact:
company:  eHost s.c.
organization: eHost.pl
street:   Cichockiego 13/6
city:     24-100 Pulawy
location: PL
handle: dinz5du40
phone:  +48.502533333
last modified: 2004.11.03
registrar: Dinfo Systemy Internetowe
ul. Mostowa 5
43-300 Bielsko-Biala
Polska/Poland
+48.33 8225471
biuro@dinfo.pl





pgsql-hackers by date:

Previous
From: Alvaro Herrera
Date:
Subject: Re: The vacuum-ignore-vacuum patch
Next
From: Tom Lane
Date:
Subject: Re: The vacuum-ignore-vacuum patch