Back

CZ.NIC-CSIRT

CZ.NIC-CSIRT is the internal security team of the CZ.NIC association and is responsible for resolving incidents within AS25192 and AS200070 and incidents affecting nameservers for the .CZ domain and 0.2.4.e164.arpa (ENUM).

Team CZ.NIC-CSIRT

The team is responsible for resolving incidents within AS25192 and incidents affecting nameservers for the .CZ and 0.2.4.e164.arpa domains, specifically:

  • a.ns.nic.cz. 194.0.12.1, 2001:678:f:0:0:0:0:1

  • b.ns.nic.cz. 194.0.13.1, 2001:678:10:0:0:0:0:1

  • c.ns.nic.cz. 194.0.14.1, 2001:678:11:0:0:0:0:1

  • d.ns.nic.cz. 193.29.206.1, 2001:678:1:0:0:0:0:1

  • f.ns.nic.cz. 193.171.255.48, 2001:628:453:420::48

The CZ.NIC Association is entitled, at its discretion, to cancel the delegation of a domain name if the domain name is used in such a way that national or international computer security is threatened, in particular by the distribution of malicious content (especially viruses, malware) through the domain name or services accessible through it, or the content of another service is impersonated (especially phishing), or the hardware accessible through the domain name is the control center of a network of interconnected hardware distributing malicious content (especially a botnet).

The CZ.NIC Association is entitled to cancel the delegation of a domain name for a period of up to 1 month, even repeatedly, but the CZ.NIC Association is not obliged to actively search for domain names that could meet the conditions specified in this provision.

The decision regarding the verification of the conditions for the cancellation of delegation and the procedure for canceling delegation shall be determined by CZ.NIC-CSIRT.

The procedure under this provision cannot be used to seek protection of the property rights of third parties, nor to intervene against the distribution of unsolicited mail (spam), if the conditions set out in the first sentence of this provision are not met.

Document according to RFC 2350

RFC 2350 (Request for Comments 2350) is an international standard that defines the profile structure of CSIRT (Computer Security Incident Response Team) security teams.

Incident reporting

When reporting an incident, please include:

  • basic contact information (name and organization, email, phone)

  • IP address and incident type

  • scan reports must include a portion of the log containing the attack records

  • spam or virus reports must include the complete unmodified header of the email that is considered spam or virus

  • phishing or pharming reports must include the URL and, if possible, the source page of the website

Contact

Quick contact

  • Phone: +420 910 101 010, +420 222 745 111

  • E-mail: csirt@nic.cz

Address

CZ.NIC, z. s. p. o., CSIRT Team Milešovská 1136/5,
130 00 Praha 3

PGP key

  • Public key: 1024D/971DA358 2008-06-18

  • Fingerprint: B6EB ACA2 D0BF 3FD9 D013 3358 10DD DA77 971D A358

  • User ID: CZ.NIC CSIRT csirt@nic.cz

  • Sub: 4096g/FFC4F9EE 2008-06-18

Working hours of CZ.NIC CSIRT Team

  • Monday - Friday, between 09:00 - 17:00

  • Time zone: GMT01/GMT02(DST)