To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ---------- Tom wrote:
>To report a botnet PRIVATELY please email: [EMAIL PROTECTED] >---------- >At 11:34 PM +0100 3/7/06, Radoslav 'bodik' Bodo wrote: > > >>To report a botnet PRIVATELY please email: [EMAIL PROTECTED] >>---------- >>Rob Thomas wrote: >> >> >> >>>Hi, Bodik. >>> >>>] * irc.ridernet.org:6667 >>>] * 12.205.151.144:6667 >>> >>>Have you reported this to the anti-abuse folks at AS7018 AT&T? We've >>>found them to be pretty responsive to such things. This one might >>>take them a bit longer because it is a customer (SWIP'd) netblock. >>> >>>Let me know if you need help making contacts there. >>> >>> >>> >>> >>i'm wondering how you find out that IP range belongs to AT&T even to >>someone you call AS7018 ? >> >>at ripe.net there is noted: >>status: ALLOCATED UNSPECIFIED >> >>in other words any advice is welcome ;] >> >> > >$ whois 12.205.151.144 >AT&T WorldNet Services ATT (NET-12-0-0-0-1) > 12.0.0.0 - 12.255.255.255 >Mediacom Communications Corp MEDIACOMCC-12-205-148-0-CEDAR-RAPIDS-IA >(NET-12-205-148-0-1) > 12.205.148.0 - 12.205.151.255 > >contact is [EMAIL PROTECTED] or +1-919-319-8130 > >Tom > > Or you could do a "whois -a NET-12-205-148-0-1" and get more details on Mediacom which is an ATT customer, and get closer to the offending IP address. If my Auto Reporter encounters this ARIN insane way of delivering information, it extracts the NET-12-205-148-0-1 from the first whois, issues another one with the -a option and the NET field, which reveals even more information. CustName: Mediacom Communications Corp Address: 100 Crystal Run Road City: Middletown StateProv: NY PostalCode: 10941 Country: US RegDate: 2003-10-10 Updated: 2003-10-10 NetRange: 12.205.148.0 - 12.205.151.255 CIDR: 12.205.148.0/22 NetName: MEDIACOMCC-12-205-148-0-CEDAR-RAPIDS-IA NetHandle: NET-12-205-148-0-1 Parent: NET-12-0-0-0-1 NetType: Reassigned Comment: RegDate: 2003-10-10 Updated: 2003-10-10 < other stuff> John _______________________________________________ To report a botnet PRIVATELY please email: [EMAIL PROTECTED] All list and server information are public and available to law enforcement upon request. http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
