To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
----------
Hi, Radoslav.
] i'm wondering how you find out that IP range belongs to AT&T even to
] someone you call AS7018 ?
It helps to query the correct RIR. ;)
] * irc.ridernet.org:6667
] * 12.205.151.144:6667
whois -h whois.arin.net 12.205.151.144
AT&T WorldNet Services ATT (NET-12-0-0-0-1)
12.0.0.0 - 12.255.255.255
Mediacom Communications Corp MEDIACOMCC-12-205-148-0-CEDAR-RAPIDS-IA
(NET-12-205-148-0-1)
12.205.148.0 - 12.205.151.255
The RIPE NCC would of course have no data on this IP, since it is
a direct allocation to a North American corporation, AT&T.
<http://www.iana.org/assignments/ipv4-address-space>
[ ... ]
012/8 Jun 95 AT&T Bell Laboratories
[ ... ]
You can also use the Team Cymru IP2ASN whois server for a view of
the origin ASN based on real-time updates from 50+ peers.
whois -h whois.cymru.com 12.205.151.144
AS | IP | AS Name
7018 | 12.205.151.144 | ATT-INTERNET4 - AT_T WorldNet
But who is AS7018? Why do I call them that? Well, that's the origin
ASN of this IP (see above), and is also in ARIN's whois data:
whois -h whois.arin.net 12.205.151.144
[ ... ]
OrgName: AT&T WorldNet Services
OrgID: ATTW
Address: AT&T
Address: 200 S. LAUREL AVE.
City: MIDDLETOWN
StateProv: NJ
PostalCode: 07748
Country: US
[ ... ]
So the IP 12.205.151.144, included in your initial note, is routed
by AS7018 AT&T and SWIP'd to Mediacom Communications.
Thanks,
Rob.
--
Rob Thomas
Team Cymru
http://www.cymru.com/
ASSERT(coffee != empty);
_______________________________________________
botnets mailing list
To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
