To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ---------- You can look up the IP address in BGP to see what AS is adveristing the IP space. One of many looking glasses provide this functionality if you don't have a full BGP table yourself:
http://www.nanog.org/lookingglass.html >From there, you can see it belongs to AS7018. A whois will tell you who AS7018 is: $ whois as7018 OrgName: AT&T WorldNet Services OrgID: ATTW Address: AT&T Address: 200 S. LAUREL AVE. City: MIDDLETOWN StateProv: NJ PostalCode: 07748 Country: US ASNumber: 7018 ASName: ATT-INTERNET4 ASHandle: AS7018 Comment: <snip> --Paul -----Original Message----- From: Radoslav 'bodik' Bodo [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 07, 2006 2:34 PM To: [email protected] Subject: Re: [botnets] web remote inclulde path To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ---------- Rob Thomas wrote: >Hi, Bodik. > >] * irc.ridernet.org:6667 >] * 12.205.151.144:6667 > >Have you reported this to the anti-abuse folks at AS7018 AT&T? We've >found them to be pretty responsive to such things. This one might >take them a bit longer because it is a customer (SWIP'd) netblock. > >Let me know if you need help making contacts there. > > i'm wondering how you find out that IP range belongs to AT&T even to someone you call AS7018 ? at ripe.net there is noted: status: ALLOCATED UNSPECIFIED in other words any advice is welcome ;] bodik _______________________________________________ botnets mailing list To report a botnet PRIVATELY please email: [EMAIL PROTECTED] http://www.whitestar.linuxbox.org/mailman/listinfo/botnets _______________________________________________ botnets mailing list To report a botnet PRIVATELY please email: [EMAIL PROTECTED] http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
