[nsp-sec] AS 14065 / 10796

[Gabriel Iovino]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I am assuming AS 14065 and AS 10796 are the same. Do we have a
representative here?

[mail server]
whois -h whois.cymru.com 75.180.132.227
AS      | IP               | AS Name
14065   | 75.180.132.227   | ADELPHIA-AS2 - Road Runner HoldCo LLC

[compromised box?]
whois -h whois.cymru.com 24.106.117.243
AS      | IP               | AS Name
10796   | 24.106.117.243   | SCRR-10796 - Road Runner HoldCo LLC

abuse@ appears to be down:

> Reporting-MTA: dns; polaris.ren-isac.net
> X-Postfix-Queue-ID: 7B521455A6
> X-Postfix-Sender: rfc822; giovino at ren-isac.net
> Arrival-Date: Thu, 28 Feb 2013 16:47:21 -0500 (EST)
> 
> Final-Recipient: rfc822; abuse at rr.com
> Original-Recipient: rfc822;abuse at rr.com
> Action: failed
> Status: 4.4.1
> Diagnostic-Code: X-Postfix; connect to
>     cdptpa-postmx01.mail.rr.com[75.180.132.227]:25: Connection timed out

If you are here, can I pass something your way?

If 14065 / 10796 is not here, do we know anyone there?

Gabe

- --
Gabriel Iovino
Principal Security Engineer, REN-ISAC
http://www.ren-isac.net
24x7 Watch Desk +1(317)278-6630
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)

iEYEARECAAYFAlE3TBwACgkQwqygxIz+pTvWfwCgjIgZSsbnV7WEVMzgfODWDNmg
PmAAoLH1LQnMuAp3KJnc6sOPsXM5B7KM
=cswg
-----END PGP SIGNATURE-----