[108579] in North American Network Operators' Group
Re: DDoS Attack in Progress.
daemon@ATHENA.MIT.EDU (Mehmet Akcin)
Fri Oct 10 14:58:38 2008
From: Mehmet Akcin <mehmet@icann.org>
To: Paul Ferguson <fergdawgster@gmail.com>, Beavis <pfunix@gmail.com>
Date: Fri, 10 Oct 2008 11:58:29 -0700
In-Reply-To: <6cd462c00810101155m2e631938gfc8bef96c02952bc@mail.gmail.com>
Cc: NANOG list <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
--B_3306484709_653987
Content-type: text/plain;
charset="US-ASCII"
Content-transfer-encoding: 7bit
Try,
NOC ITMC/NOC +902125209898 itmcistanbul@turktelekom.com.tr
Mehmet
From: Paul Ferguson <fergdawgster@gmail.com>
Date: Fri, 10 Oct 2008 11:55:41 -0700
To: Beavis <pfunix@gmail.com>
Cc: NANOG list <nanog@nanog.org>
Subject: Re: DDoS Attack in Progress.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Not surprising -- TurkTelekom has long been known to be a hotbed of
malicious activity, a known hoster for Russian/Ukrainian cyber criminals,
and perhaps one of the most botnetted ISPs on the planet:
http://itw.trendmicro-europe.com/index.php?id=64
- - ferg
On Fri, Oct 10, 2008 at 11:46 AM, Beavis <pfunix@gmail.com> wrote:
> Hi All,
>
> DoS attack in progress, any upstream info for these guys? their
> phone number doesn't respond.
>
> This is the RIPE Whois query server #1.
> % The objects are in RPSL format.
> %
> % Rights restricted by copyright.
> % See http://www.ripe.net/db/copyright.html
>
> % Note: This output has been filtered.
> % To receive output for a database update, use the "-B" flag.
>
> % Information related to '88.247.0.0 - 88.247.79.255'
>
> inetnum: 88.247.0.0 - 88.247.79.255
> netname: TurkTelekom
> descr: TT ADSL-alcatel static_ulus
> country: tr
> admin-c: TTBA1-RIPE
> tech-c: TTBA1-RIPE
> status: ASSIGNED PA "status:" definitions
> mnt-by: as9121-mnt
> source: RIPE # Filtered
>
> role: TT Administrative Contact Role
> address: Turk Telekom
> address: Bilisim Aglari Dairesi
> address: Aydinlikevler
> address: 06103 ANKARA
> phone: +90 312 313 1950
> fax-no: +90 312 313 1949
> e-mail: abuse@ttnet.net.tr
> admin-c: BADB3-RIPE
> tech-c: ZA66-RIPE
> tech-c: NO638-RIPE
> tech-c: SO351-RIPE
> nic-hdl: TTBA1-RIPE
> mnt-by: AS9121-MNT
> source: RIPE # Filtered
>
> % Information related to '88.247.0.0/17AS9121'
>
> route: 88.247.0.0/17
> descr: TurkTelecom
> origin: AS9121
> mnt-by: AS9121-MNT
> source: RIPE # Filtered
>
>
-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)
wj8DBQFI76Ucq1pz9mNUZTMRAiJoAJ9v5DTn5TZZtBwno+c4JB/zun0AeQCg7vqz
uS4eSff62RIus6Qi1foH8II=
=S4jc
-----END PGP SIGNATURE-----
--
"Fergie", a.k.a. Paul Ferguson
Engineering Architecture for the Internet
fergdawgster(at)gmail.com
ferg's tech blog: http://fergdawg.blogspot.com/
--B_3306484709_653987
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"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--B_3306484709_653987--
