[as112-ops] uceb.org "A" queries on AS112

[Vesselin Kolev]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

We can confirm the noticed increase of "A" RR queries to 
blackholes.uceb.org (AS112 node operated by Sofia University; AS path: 
... 5421 112).

~  Regards
~     Vesselin Kolev - VK1242-RIPE

Daniel Suchy wrote:
| Hello,
| I noticed interesting increase of A queries pointing to our AS112 node
| (located at NIX.CZ, Prague) since last week.
| I tried to find out cause, and discovered, that both nameservers of
| domain "uceb.org" have glue records pointing to IP addresses used for
| AS112 (blackhole-1.iana.org and blackhole-2.iana.org):
|
| ; <<>> DiG 9.5.0-P1 <<>> @a0.org.afilias-nst.info. uceb.org
| ; (2 servers found)
| ;; AUTHORITY SECTION:
| uceb.org.        86400    IN    NS    ns1.uceb.org.
| uceb.org.        86400    IN    NS    ns2.uceb.org.
| ;; ADDITIONAL SECTION:
| ns1.uceb.org.        86400    IN    A    192.175.48.6
| ns2.uceb.org.        86400    IN    A    192.175.48.42
|
| Incoming A queries are for "ns1.uceb.org" and "ns2.uceb.org". Our
| statistics are on http://as112.nix.cz/cgi-bin/bindgraph.cgi for reference.
|
| I found, that uceb.org was some spam blacklist in the past, but it isn't
| running now. Last change in the domain was on 12-Jul-2008 according to
| the whois informations.
|
| I think this is not normal behavior.
|
| With regards,
| Daniel
|

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org
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=SPjG
-----END PGP SIGNATURE-----