tracking down some spam, I find that a. it originates from a .mil address, b. it’s a misconfigured proxy server, and c. the email addresses for the contacts don’t work.
Outstanding, as someone would say.
The host doesn’t seem to be reachable right now, so perhaps someone has secured it already.
Apparently, I’m not the only one troubled by this:
[IP] more on Tenet suggests limiting the Internet to approved users.:
A month ago today Gadi was looking for a contact at US .mil, this morning I had the same need, as a node in the nipr.mil playpen was a major player in a 100+ node ddos directed at a web blog customer we host — it had a high rate of fire, accounting for over 20% of the total POST methods.
Email to the DO was a waste of time, but I did find a useful contact.
One of the nodes used in today’s ddos against that customer blog appeard in a seperate multi-thousand ad insert (unpaid, naturally) attack on another of our customer blogs, accounting for about half of the total POST methods.
nipr.mil is where my unwelcome visitors seem to have come from, as well.