Re: DDOS attack via as702 87.118.210.122

2010-10-26 Thread Jack Carrozzo
Whois is hard, let's go shopping:

ja...@anna ~ $ whois as701

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/asns;q=as701?showDetails=true
#

ASNumber:   701 - 705
ASName: UUNET
ASHandle:   AS701
RegDate:1990-08-03
Updated:2008-07-24
Ref:http://whois.arin.net/rest/asn/AS701

OrgName:MCI Communications Services, Inc. d/b/a Verizon Business
OrgId:  MCICS
Address:22001 Loudoun County Pkwy
City:   Ashburn
StateProv:  VA
PostalCode: 20147
Country:US
RegDate:2006-05-30
Updated:2009-12-07
Ref:http://whois.arin.net/rest/org/MCICS

OrgTechHandle: JHU140-ARIN
OrgTechName:   Huffines, Jody
OrgTechPhone:  +1-703-886-6093
OrgTechEmail:  jody.huffi...@verizonbusiness.com
OrgTechRef:http://whois.arin.net/rest/poc/JHU140-ARIN

OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName:   abuse
OrgAbusePhone:  +1-800-900-0241
OrgAbuseEmail:  abuse-m...@verizonbusiness.com
OrgAbuseRef:http://whois.arin.net/rest/poc/ABUSE3-ARIN

OrgNOCHandle: OA12-ARIN
OrgNOCName:   UUnet Technologies, Inc., Technologies
OrgNOCPhone:  +1-800-900-0241
OrgNOCEmail:  hel...@verizonbusiness.com
OrgNOCRef:http://whois.arin.net/rest/poc/OA12-ARIN

OrgTechHandle: SWIPP-ARIN
OrgTechName:   swipper
OrgTechPhone:  +1-800-900-0241
OrgTechEmail:  swip...@verizonbusiness.com
OrgTechRef:http://whois.arin.net/rest/poc/SWIPP-ARIN

-Jack Carrozzo

On Tue, Oct 26, 2010 at 7:51 AM, Serg Shubenkov s...@macomnet.net wrote:


 Hello, list.

 Please send me off-list abuse contact for as702.

 --
 Serg Shubenkov, MAcomnet, Internet Dept., Head of Inet Department
 phone: +7 495 7969392/9079, +7 916 5316625, mailto:s...@macomnet.net
 icq uin: 101964103, Skype: serg.v.shubenkov






Re: DDOS attack via as702 87.118.210.122

2010-10-26 Thread Adrian Chadd
On Tue, Oct 26, 2010, Cutler James R wrote:
 Jack,
 
 I agree that whois is hard. Please explain how you knew to query AS701 when 
 Serg asked about AS702.  

Brainfart. I understand why people confuse 701 with 702.

$ whois -h whois.ripe.net AS702

% Information related to 'AS702'

aut-num:AS702
as-name:AS702
descr:  Verizon Business EMEA - Commercial IP service provider in Europe

...



Adrian


 
 computer:~ me$ whois as702
 SNIP
 No match for AS702.
  Last update of whois database: Tue, 26 Oct 2010 13:47:47 UTC 
 
 Regards.
 
   Cutler
 
 On Oct 26, 2010, at 9:22 AM, Jack Carrozzo wrote:
 
  Whois is hard, let's go shopping:
  
  ja...@anna ~ $ whois as701
  
  SNIP/
  -Jack Carrozzo
  
  On Tue, Oct 26, 2010 at 7:51 AM, Serg Shubenkov s...@macomnet.net wrote:
  
  
  Hello, list.
  
  Please send me off-list abuse contact for as702.
  
  --
  Serg Shubenkov, MAcomnet, Internet Dept., Head of Inet Department
  phone: +7 495 7969392/9079, +7 916 5316625, mailto:s...@macomnet.net
  icq uin: 101964103, Skype: serg.v.shubenkov
  
  
  
  
 
 James R. Cutler
 james.cut...@consultant.com
 
 
 
 

-- 
- Xenion - http://www.xenion.com.au/ - VPS Hosting - Commercial Squid Support -
- $24/pm+GST entry-level VPSes w/ capped bandwidth charges available in WA -



Re: DDOS attack via as702 87.118.210.122

2010-10-26 Thread Tim Jackson
Whois really isn't that hard Maybe reading: ASNumber: 701 - 705 is though..

t...@shitbox:/var/log$ whois a 702 -h whois.arin.net
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/asns;q=702?showDetails=true
#

ASNumber:   701 - 705
ASName: UUNET
ASHandle:   AS701
RegDate:1990-08-03
Updated:2008-07-24
Ref:http://whois.arin.net/rest/asn/AS701

OrgName:MCI Communications Services, Inc. d/b/a Verizon Business
OrgId:  MCICS
Address:22001 Loudoun County Pkwy
City:   Ashburn
StateProv:  VA
PostalCode: 20147
Country:US
RegDate:2006-05-30
Updated:2009-12-07
Ref:http://whois.arin.net/rest/org/MCICS

OrgTechHandle: JHU140-ARIN
OrgTechName:   Huffines, Jody
OrgTechPhone:  +1-703-886-6093
OrgTechEmail:  jody.huffi...@verizonbusiness.com
OrgTechRef:http://whois.arin.net/rest/poc/JHU140-ARIN

OrgNOCHandle: OA12-ARIN
OrgNOCName:   UUnet Technologies, Inc., Technologies
OrgNOCPhone:  +1-800-900-0241
OrgNOCEmail:  hel...@verizonbusiness.com
OrgNOCRef:http://whois.arin.net/rest/poc/OA12-ARIN

OrgTechHandle: SWIPP-ARIN
OrgTechName:   swipper
OrgTechPhone:  +1-800-900-0241
OrgTechEmail:  swip...@verizonbusiness.com
OrgTechRef:http://whois.arin.net/rest/poc/SWIPP-ARIN

OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName:   abuse
OrgAbusePhone:  +1-800-900-0241
OrgAbuseEmail:  abuse-m...@verizonbusiness.com
OrgAbuseRef:http://whois.arin.net/rest/poc/ABUSE3-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#




On Tue, Oct 26, 2010 at 8:54 AM, Cutler James R
james.cut...@consultant.com wrote:
 Jack,

 I agree that whois is hard. Please explain how you knew to query AS701 when 
 Serg asked about AS702.

 computer:~ me$ whois as702
 SNIP
 No match for AS702.
 Last update of whois database: Tue, 26 Oct 2010 13:47:47 UTC 

 Regards.

        Cutler



Re: DDOS attack via as702 87.118.210.122

2010-10-26 Thread Jack Carrozzo
Well, I whois'd 702, got no match, said hm, I see 701 all over the place,
lemmy take a look and found:

ASNumber:   701 - 705
ASName: UUNET

etc. Sorry, it was left as an exercise to the reader - didn't mean to be
flippant.

-Jack CArrozzo

On Tue, Oct 26, 2010 at 10:07 AM, Adrian Chadd adr...@creative.net.auwrote:

 On Tue, Oct 26, 2010, Cutler James R wrote:
  Jack,
 
  I agree that whois is hard. Please explain how you knew to query AS701
 when Serg asked about AS702.

 Brainfart. I understand why people confuse 701 with 702.

 $ whois -h whois.ripe.net AS702

 % Information related to 'AS702'

 aut-num:AS702
 as-name:AS702
 descr:  Verizon Business EMEA - Commercial IP service provider in
 Europe

 ...



 Adrian


 
  computer:~ me$ whois as702
  SNIP
  No match for AS702.
   Last update of whois database: Tue, 26 Oct 2010 13:47:47 UTC 
 
  Regards.
 
Cutler
 
  On Oct 26, 2010, at 9:22 AM, Jack Carrozzo wrote:
 
   Whois is hard, let's go shopping:
  
   ja...@anna ~ $ whois as701
  
   SNIP/
   -Jack Carrozzo
  
   On Tue, Oct 26, 2010 at 7:51 AM, Serg Shubenkov s...@macomnet.net
 wrote:
  
  
   Hello, list.
  
   Please send me off-list abuse contact for as702.
  
   --
   Serg Shubenkov, MAcomnet, Internet Dept., Head of Inet Department
   phone: +7 495 7969392/9079, +7 916 5316625, mailto:s...@macomnet.net
   icq uin: 101964103, Skype: serg.v.shubenkov
  
  
  
  
 
  James R. Cutler
  james.cut...@consultant.com
 
 
 
 

 --
 - Xenion - http://www.xenion.com.au/ - VPS Hosting - Commercial Squid
 Support -
 - $24/pm+GST entry-level VPSes w/ capped bandwidth charges available in WA
 -




RE: DDOS attack via as702 87.118.210.122

2010-10-26 Thread Steve Adcock
Must admit I thought what Jack supplied said between AS 701 - 705 which is 
MCI/Verizon and correct?

ASNumber:   701 - 705
ASName: UUNET
ASHandle:   AS701
RegDate:1990-08-03
Updated:2008-07-24
Ref:http://whois.arin.net/rest/asn/AS701

If you done some manual work like a bit of ripe/cidr-report and used network 
tools for a whois you would get the answer.

Cheers

Steven

-Original Message-
From: Cutler James R [mailto:james.cut...@consultant.com] 
Sent: 26 October 2010 14:54
To: na...@merit.edu
Subject: Re: DDOS attack via as702 87.118.210.122

Jack,

I agree that whois is hard. Please explain how you knew to query AS701 when 
Serg asked about AS702.  

computer:~ me$ whois as702
SNIP
No match for AS702.
 Last update of whois database: Tue, 26 Oct 2010 13:47:47 UTC 

Regards.

Cutler

On Oct 26, 2010, at 9:22 AM, Jack Carrozzo wrote:

 Whois is hard, let's go shopping:
 
 ja...@anna ~ $ whois as701
 
 SNIP/
 -Jack Carrozzo
 
 On Tue, Oct 26, 2010 at 7:51 AM, Serg Shubenkov s...@macomnet.net wrote:
 
 
 Hello, list.
 
 Please send me off-list abuse contact for as702.
 
 --
 Serg Shubenkov, MAcomnet, Internet Dept., Head of Inet Department
 phone: +7 495 7969392/9079, +7 916 5316625, mailto:s...@macomnet.net
 icq uin: 101964103, Skype: serg.v.shubenkov
 
 
 
 

James R. Cutler
james.cut...@consultant.com





---BeginMessage---
Whois is hard, let's go shopping:

ja...@anna ~ $ whois as701

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/asns;q=as701?showDetails=true
#

ASNumber:   701 - 705
ASName: UUNET
ASHandle:   AS701
RegDate:1990-08-03
Updated:2008-07-24
Ref:http://whois.arin.net/rest/asn/AS701

OrgName:MCI Communications Services, Inc. d/b/a Verizon Business
OrgId:  MCICS
Address:22001 Loudoun County Pkwy
City:   Ashburn
StateProv:  VA
PostalCode: 20147
Country:US
RegDate:2006-05-30
Updated:2009-12-07
Ref:http://whois.arin.net/rest/org/MCICS

OrgTechHandle: JHU140-ARIN
OrgTechName:   Huffines, Jody
OrgTechPhone:  +1-703-886-6093
OrgTechEmail:  jody.huffi...@verizonbusiness.com
OrgTechRef:http://whois.arin.net/rest/poc/JHU140-ARIN

OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName:   abuse
OrgAbusePhone:  +1-800-900-0241
OrgAbuseEmail:  abuse-m...@verizonbusiness.com
OrgAbuseRef:http://whois.arin.net/rest/poc/ABUSE3-ARIN

OrgNOCHandle: OA12-ARIN
OrgNOCName:   UUnet Technologies, Inc., Technologies
OrgNOCPhone:  +1-800-900-0241
OrgNOCEmail:  hel...@verizonbusiness.com
OrgNOCRef:http://whois.arin.net/rest/poc/OA12-ARIN

OrgTechHandle: SWIPP-ARIN
OrgTechName:   swipper
OrgTechPhone:  +1-800-900-0241
OrgTechEmail:  swip...@verizonbusiness.com
OrgTechRef:http://whois.arin.net/rest/poc/SWIPP-ARIN

-Jack Carrozzo

On Tue, Oct 26, 2010 at 7:51 AM, Serg Shubenkov s...@macomnet.net wrote:


 Hello, list.

 Please send me off-list abuse contact for as702.

 --
 Serg Shubenkov, MAcomnet, Internet Dept., Head of Inet Department
 phone: +7 495 7969392/9079, +7 916 5316625, mailto:s...@macomnet.net
 icq uin: 101964103, Skype: serg.v.shubenkov




---End Message---


Re: DDOS attack via as702 87.118.210.122

2010-10-26 Thread Beavis
whois on 702(Verizon)

http://www.robtex.com/as/as702.html

goodluck.

On Tue, Oct 26, 2010 at 5:51 AM, Serg Shubenkov s...@macomnet.net wrote:

 Hello, list.

 Please send me off-list abuse contact for as702.

 --
 Serg Shubenkov, MAcomnet, Internet Dept., Head of Inet Department
 phone: +7 495 7969392/9079, +7 916 5316625, mailto:s...@macomnet.net
 icq uin: 101964103, Skype: serg.v.shubenkov







-- 
()  ascii ribbon campaign - against html e-mail
/\  www.asciiribbon.org   - against proprietary attachments



Re: DDOS attack via as702 87.118.210.122

2010-10-26 Thread James Hess
On Tue, Oct 26, 2010 at 9:12 AM, Jack Carrozzo j...@crepinc.com wrote:
 Well, I whois'd 702, got no match, said hm, I see 701 all over the place,
 lemmy take a look and found:

There is a match...  I think  WHOIS as702  is erroneous  WHOIS query syntax,
typing  asX  not being the way to search for an AS number.
See the full WHOIS help for the details about how to use all the flags,

Try searching for the number and use an 'a'  search type instead of
searching for 'as702'.

Try
telnet whois.arin.net nicname
Escape character is '^]'.
a 702

a 702 Gives a match...
as702  does not.
as701 does;   probably   because there is the ASHANDLE field
or something else in the record that matches that query other than the
AS number itself.


 ASNumber:       701 - 705
 ASName:         UUNET


--
-JH