Max-Planck-Institute Stuttgart - inetnum: 134.105.0.0 - 134.105.255.255
Hello All, Just received a Spam from (sebastien.ronteau@pbcards.dp.ua@134.105.185.144) and as I found out this IP belongs to Max-Planck-Institute Stuttgart. The only contact listed for this IP range listed in the Whois listing is netz@mpis.mpg.de which happens to be an invalid address: netz@mpis.mpg.de SMTP error from remote mail server after RCPT TO:<netz@mpis.mpg.de>: host mail.is.mpg.de [134.105.242.5]: 550 address netz@mpis.mpg.de is unknown or disabled Does anyone here has or knows a better network contact for Max-Planck-Institute Stuttgart? This case reminds me of my previous inquiry about a Network without contact, even an important institution such as Max-Planck-Institute Stuttgart. I certainly appreciate your assistance in this matter. Thank you, Reza Farzan rezaf@mindspring.com
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 10/05/2013 11:48, Reza Farzan wrote:
Does anyone here has or knows a better network contact for Max-Planck-Institute Stuttgart?
They appear to be connected via. DFN. Try contacting DFN CERT for assistance: http://www.dfn-cert.de/ Regards, James - -- James Davis 0300 999 2340 (+44 1235 822340) Senior CSIRT Member Lumen House, Library Avenue, Didcot, Oxfordshire, OX11 0SG -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iF4EAREIAAYFAlGM1AcACgkQjsS2Y6D6yLxWGQEA0RE4qPPYRx3BuIeo8/VR3akd nQsuBn3eXcMbBC7LsZgA/RVXIWkpSmaMS3zCTI/gtK6MgPJBmUKVB0ZQ70NYzwoZ =c9iO -----END PGP SIGNATURE----- Janet(UK) is a trading name of Jisc Collections and Janet Limited, a not-for-profit company which is registered in England under No. 2881024 and whose Registered Office is at Lumen House, Library Avenue, Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. 614944238
* Reza Farzan:
This case reminds me of my previous inquiry about a Network without contact, even an important institution such as Max-Planck-Institute Stuttgart.
"Max-Planck-Institute Stuttgart" is not a real organization. The organization is actually called "Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V.". This document even states that its subdivisons and sub-organizations usually aren't legal persons in their own right: <http://www.mpi-stuttgart.mpg.de/2327/imprint> <abuse@belwue.de> should be able to fix things pretty quickly. DFN-NOC probably as well. (If DFN-CERT actually felt responsible, surely there'd by an IRT object pointing to them.)
On 5/10/2013 2:48 AM, Reza Farzan wrote:
Hello All,
Just received a Spam from (sebastien.ronteau@pbcards.dp.ua@134.105.185.144) and as I found out this IP belongs to Max-Planck-Institute Stuttgart.
My IANA based look up gives methe following results for 134.105.185.144: --------------------- Waiting for Whois server Default - IANA ...WhoIs Session started: 10/05/13 13:53:22. +++++++++++++++ Contacting Whois proxy: whois.arin.net at 199.71.0.47 Connected: 10/05/13 13:53:22. +++++++++++++++ # # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/whois_tou.html # # # Query terms are ambiguous. The query is assumed to be: # "n 134.105.185.144" # # Use "?" to get help. # # # The following results may also be obtained via: # http://whois.arin.net/rest/nets;q=134.105.185.144?showDetails=true&showARIN=false&ext=netref2 # NetRange: 134.91.0.0 - 134.110.255.255 CIDR: 134.110.0.0/16, 134.108.0.0/15, 134.96.0.0/13, 134.104.0.0/14, 134.92.0.0/14, 134.91.0.0/16 OriginAS: NetName: RIPE-ERX-134-91-0-0 NetHandle: NET-134-91-0-0-1 Parent: NET-134-0-0-0-0 NetType: Early Registrations, Transferred to RIPE NCC Comment: These addresses have been further assigned to users in Comment: the RIPE NCC region. Contact information can be found in Comment: the RIPE database at http://www.ripe.net/whois RegDate: 2003-11-26 Updated: 2003-11-26 Ref: http://whois.arin.net/rest/net/NET-134-91-0-0-1 OrgName: RIPE Network Coordination Centre OrgId: RIPE Address: P.O. Box 10096 City: Amsterdam StateProv: PostalCode: 1001EB Country: NL RegDate: Updated: 2011-09-24 Ref: http://whois.arin.net/rest/org/RIPE ReferralServer: whois://whois.ripe.net:43 OrgTechHandle: RNO29-ARIN OrgTechName: RIPE NCC Operations OrgTechPhone: +31 20 535 4444 OrgTechEmail: hostmaster@ripe.net OrgTechRef: http://whois.arin.net/rest/poc/RNO29-ARIN OrgAbuseHandle: RNO29-ARIN OrgAbuseName: RIPE NCC Operations OrgAbusePhone: +31 20 535 4444 OrgAbuseEmail: hostmaster@ripe.net OrgAbuseRef: http://whois.arin.net/rest/poc/RNO29-ARIN # # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/whois_tou.html # Closing connection WhoIs Session Closed: 10/05/13 13:53:22. +++++++++++++++ --------------------- Arnold
The only contact listed for this IP range listed in the Whois listing isnetz@mpis.mpg.de <mailto:netz@mpis.mpg.de> which happens to be an invalid address:
netz@mpis.mpg.de
SMTP error from remote mail server after RCPT TO:<netz@mpis.mpg.de>:
host mail.is.mpg.de [134.105.242.5]: 550 address netz@mpis.mpg.de is unknown or disabled
Does anyone here has or knows a better network contact for Max-Planck-Institute Stuttgart?
This case reminds me of my previous inquiry about a Network without contact, even an important institution such as Max-Planck-Institute Stuttgart.
I certainly appreciate your assistance in this matter.
Thank you,
Reza Farzan _rezaf@mindspring.com <mailto:rezaf@mindspring.com> _
-- Fight Spam - report it with wxSR 0.6 ready for Vista & Win7 http://www.columbinehoney.net/wxSR.shtml
On 10.05.2013 12:48 PM, Reza Farzan wrote:
The only contact listed for this IP range listed in the Whois listing is netz@mpis.mpg.de which happens to be an invalid address:
netz@mpis.mpg.de
SMTP error from remote mail server after RCPT TO:<netz@mpis.mpg.de>:
host mail.is.mpg.de [134.105.242.5]: 550 address netz@mpis.mpg.de is unknown or disabled
Does anyone here has or knows a better network contact for Max-Planck-Institute Stuttgart?
I called them yesterday, the e-mail address (netz@mpis.mpg.de) was for some reasons offline and should work now, again and the got your e-mail over some other channels. And they will have a look at the RIPE-DB entries in the near future. Cheers, Tim
participants (5)
-
Arnold -
Florian Weimer -
James Davis -
Reza Farzan -
Tim Kleefass