That is what te portal is for and why every allocation should be in the portal with a
whois service behind it
Ruben - ON3RVH
On 16 Jan 2021, at 12:54, Rob PE1CHL via 44Net
<44net(a)mailman.ampr.org> wrote:
On 1/16/21 12:35 PM, Jann Traschewski via 44Net wrote:
On
16.01.2021 11:50, Rob PE1CHL via 44Net wrote:
And why is (s)he portscanning for SSH servers?
It is hacked and is looking for other targets.
I already notified Igor, 9A6NVI, to take it offline.
I was starting to suspect that. But still I think that people should register
their allocations in DNS (and have their own DNS servers only when the also
make the reverse working), because I see no way to find the owner of that
address right now.
The traffic was not even incoming directly, it arrived via an IPIP tunnel
(probably DB0FHN) and there is no tunnel route back to that address.
Rob
_________________________________________
44Net mailing list
44Net(a)mailman.ampr.org
https://mailman.ampr.org/mailman/listinfo/44net