[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [icann-eu] [ecdiscuss] Re: Horrible young sites



Harald and All,

First, is it normal to have such an whois info published:

Registrant:                                                                                                                        
 none                                                                                                                              
 N.J.                                                                                                                              
 N.J., N.J. 12345678                                                                                                               
 US                                                                                                                                
                                                                                                                                   
 Domain Name: YOUNGRUSSIAN.COM                                                                                                     
                                                                                                                                   
 Administrative Contact:                                                                                                           
    Menas, John  youngrussian@usa.net                                                                                              
    N.J.                                                                                                                           
    N.J., N.J. 12345678                                                                                                            
    US                                                                                                                             
    456-7895                                                                                                                       
                                                                                                                                   
 Technical Contact:                                                                                                                
    Menas, John  youngrussian@usa.net                                                                                              
    N.J.                                                                                                                           
    N.J., N.J. 12345678                                                                                                            
    US                                                                                                                             
    456-7895                                                                                                                       
                                                                                                                                   
 Billing Contact:                                                                                                                  
    Menas, John  youngrussian@usa.net                                                                                              
    N.J.                                                                                                                           
    N.J., N.J. 12345678                                                                                                            
    US                                                                                                                             
   456-7895                                                                                                                       


> So the right place to send complaints about this is to US police.

In such a case, nothing more than close the site can be expected.

First bis: Only for closing, how long will it take? The URL here has been
relayed to us lists and other organizations for a while now, the site is
still open, nobody as tools to perform anything and nobody is responsible.


second, when I tarceroute something strange happens:

traceroute to www.youngrussian.com (209.40.101.28), 30 hops max, 38 byte packets
 1  nic-gw ()  2.646 ms  1.606 ms  1.237 ms
 2  rocq-gw.inria.fr (192.93.1.100)  3.855 ms  2.201 ms  4.183 ms
 3  192.93.122.3 (192.93.122.3)  1.391 ms  1.966 ms  1.091 ms
 4  stlambert1.rerif.ft.net (193.48.53.225)  5.366 ms  10.586 ms  9.670 ms
 5  stamand1.rerif.ft.net (193.48.53.101)  4.637 ms  2.468 ms  2.213 ms
 6  nio-i.cssi.renater.fr (193.51.206.145)  3.372 ms  2.919 ms  5.225 ms
 7  193.51.206.30 (193.51.206.30)  3.433 ms  2.998 ms  2.940 ms
 8  P2-0.PASBB2.Paris.opentransit.net (193.251.128.65)  3.325 ms  5.297 ms  5.160 ms
 9  P0-3.NYKBB1.NewYork.opentransit.net (193.251.128.222)  970.471 ms  966.683 ms  970.271 ms
.....
18  covesoft-gw.customer.alter.net (157.130.43.22)  179.965 ms  167.369 ms  176.302 ms
19  209.40.101.28 (209.40.101.28)  168.411 ms  171.998 ms  170.066 ms

Have you noticed, 8 gateways in France, does it mean that the problem is
also french?




I would be happy to have real answers to those questions.

Olivier

le 18 Nov, Harald Alvestrand a écrit :
> At 01:00 18/11/2000 +0100, Olivier Guillard / AFNIC wrote:
> >all,
> >
> >the original message of which I forward a part here after
> >contained 5 URL of the same sort.
> >
> >The Afnic receive many complains like those every week,
> >we take time to answer.
> >
> >Here is include the content of the associated whois data
> >for the domain. Notice the quality of this information!
> >
> >Notice also how the person is complaining: "it looks to be
> >amazingly horrible (titles)". I suppose that for this person
> >the domain name is not only a sequence of characters!
> 
> his English is bad; it's a child porn site. I don't think he would mind the 
> domain name if it was a government-sanctioned education program for russians...
> 
> 
> >I wouldn't feel confortable to see this kind of problem
> >under .fr, and less with no one identifyed behind this kind
> >of publications.
> 
> You will get this problem often - this address was less well-faked than most.
> If he had taken care to invent something real-looking, the complainant 
> would just have wasted more time, and maybe the price of a postage stamp.
> 
> [tangential]
> But in cases of complaint, the answer is mostly to follow the packets....
> traceroute:
> 
> >17  208.46.126.178 (208.46.126.178)  148.627 ms wdc-edge-06.inet.qwest.net 
> >(205.171.24.118)  172.109 ms 208.46.126.174 (208.46.126.174)  139.263 ms
> >18  208.46.126.178 (208.46.126.178)  157.263 ms 208.46.126.174 
> >(208.46.126.174)  162.808 ms 208.46.126.182 (208.46.126.182)  158.028 ms
> >19  151.196.149.2 (151.196.149.2)  197.709 ms  440.535 ms  526.435 ms
> >20  209.40.101.28 (209.40.101.28)  190.260 ms 151.196.149.2 
> >(151.196.149.2)  208.892 ms
> 
> it's a qwest.net customer, probably US based.
> The address block according to whois@whois.arin.net is registered to:





> 
> Cove Software Systems Inc (NETBLK-COVE-NET-1)
>     PO Box 2264
>     Annapolis, MD 21401
>     US
> 
>     Netname: COVE-NET-1
>     Netblock: 209.40.96.0 - 209.40.127.255
> 
>     Coordinator:
>        Shevenell, Mike  (MS1417-ARIN)  mike@www.covesoft.com
>        410 268 0935
> 














> 
>                Harald
> Harald Tveit Alvestrand, alvestrand@cisco.com
> +47 41 44 29 94
> Personal email: Harald@Alvestrand.no




-- 
Olivier Guillard
---
||    A.F.N.I.C.
|| http://www.nic.fr
|| mailto:nic@nic.fr