Re: [spamtools] Tracking a DDOS

2003-01-22 Thread william

Interestingly enough, its also devided between hosting & access.
And I remember well another early ISP, where the same happened - Digex

I wonder if there is a pattern here for the future ...

On Wed, 22 Jan 2003, joe mcguckin wrote:

> 
> 
> Speaking of early networks: I see where Epoch was broken up and sold
> recently.
> 
> 
> 
> On 1/21/03 1:48 PM, "Avi Freedman" <[EMAIL PROTECTED]> wrote:
> 
> > 
> > In article <[EMAIL PROTECTED]> [EMAIL PROTECTED] wrote:
> > 
> > : So did you aquire those "assets" from clearblue or where the appliedtheory's
> > : assets kindof devided between fastnet and clearblue? And if undertand it
> > : correctly apliedtheory name & domain are still with clearblue/navisite?
> > : If so is it the same for CRL?
> > 
> > : I'm primarily just curious in terms of finding out what happened to
> > : earliest companies that made internet - CRL being one of the first
> > : commercial isp...
> > 
> > FastNet purchased the access business from AppliedTheory, and Clearblue
> > got the hosting. 
> > 
> > In terms of abuse, [EMAIL PROTECTED] can be used for fastnet and
> > appliedtheory space also.  I just supped with Mr. Abuse @netaxs
> > last Saturday night, and he can resolve or forward internally
> > anything for appliedtheory/fastnet/netaxs/etc customers.
> > 
> > Thanks,
> > 
> > Avi
> > 




Re: [spamtools] Tracking a DDOS

2003-01-22 Thread joe mcguckin


Speaking of early networks: I see where Epoch was broken up and sold
recently.



On 1/21/03 1:48 PM, "Avi Freedman" <[EMAIL PROTECTED]> wrote:

> 
> In article <[EMAIL PROTECTED]> [EMAIL PROTECTED] wrote:
> 
> : So did you aquire those "assets" from clearblue or where the appliedtheory's
> : assets kindof devided between fastnet and clearblue? And if undertand it
> : correctly apliedtheory name & domain are still with clearblue/navisite?
> : If so is it the same for CRL?
> 
> : I'm primarily just curious in terms of finding out what happened to
> : earliest companies that made internet - CRL being one of the first
> : commercial isp...
> 
> FastNet purchased the access business from AppliedTheory, and Clearblue
> got the hosting. 
> 
> In terms of abuse, [EMAIL PROTECTED] can be used for fastnet and
> appliedtheory space also.  I just supped with Mr. Abuse @netaxs
> last Saturday night, and he can resolve or forward internally
> anything for appliedtheory/fastnet/netaxs/etc customers.
> 
> Thanks,
> 
> Avi
> 




Re: [spamtools] Tracking a DDOS

2003-01-21 Thread Avi Freedman

In article <[EMAIL PROTECTED]> [EMAIL PROTECTED] wrote:

: So did you aquire those "assets" from clearblue or where the appliedtheory's
: assets kindof devided between fastnet and clearblue? And if undertand it 
: correctly apliedtheory name & domain are still with clearblue/navisite?
: If so is it the same for CRL? 

: I'm primarily just curious in terms of finding out what happened to 
: earliest companies that made internet - CRL being one of the first 
: commercial isp...

FastNet purchased the access business from AppliedTheory, and Clearblue
got the hosting.  

In terms of abuse, [EMAIL PROTECTED] can be used for fastnet and 
appliedtheory space also.  I just supped with Mr. Abuse @netaxs
last Saturday night, and he can resolve or forward internally
anything for appliedtheory/fastnet/netaxs/etc customers.

Thanks,

Avi




Re: [spamtools] Tracking a DDOS

2003-01-20 Thread william

So did you aquire those "assets" from clearblue or where the appliedtheory's
assets kindof devided between fastnet and clearblue? And if undertand it 
correctly apliedtheory name & domain are still with clearblue/navisite?
If so is it the same for CRL? 

I'm primarily just curious in terms of finding out what happened to 
earliest companies that made internet - CRL being one of the first 
commercial isp...

On Mon, 20 Jan 2003, Matt McGuirl wrote:

> Fastnet acquired some of AppliedTheory's assets at one point in mid to
> late 2002.
> 
> Matt





Re: [spamtools] Tracking a DDOS

2003-01-19 Thread Kevin Day

At 10:00 PM 1/19/2003, John Payne wrote:


--On Sunday, January 19, 2003 05:35:07 PM -0800 "[EMAIL PROTECTED]" 
<[EMAIL PROTECTED]> wrote:


'n confused. I thought AppliedTheory (was CRL) was bought by Clearblue
which later aquired part in Navisite and later had Navisite aquire
most of Clearblue (sounds weird, I know). Now appliedtheory.com goes to
navisite, so I assumed appliedtheory was aquired as part of clearblue,
(if it wasn't why the website going there)? So is its history:

crl->appliedtheory->clearblue->navisite->fastnet



Not sure of the full history, but http://www.fast.net/news/files/060302-pr.pdf



As a Clearblue customer, I can confirm that all the Applied Theory stuff 
seems to be gone now from the support pages. (The same functionality is 
there, but the appliedtheory.com URL's have all been changed to 
clearblue.com names)

Some of the stuff looks pretty cool - being able to monitor from a website 
your rack's temperatures, voltages, the datacenter's UPS and generator 
statuses, etc... Unfortunately it's all "coming soon"(unless you're in 
Syracuse), and has been for at least 6 months. Applied Theory was also 
supposed to be doing port, application and server monitoring, which seems 
to overlap with what Navisite offers, so that may have something to do with 
its departure.





Re: [spamtools] Tracking a DDOS

2003-01-19 Thread John Payne

--On Sunday, January 19, 2003 05:35:07 PM -0800 "[EMAIL PROTECTED]" 
<[EMAIL PROTECTED]> wrote:


'n confused. I thought AppliedTheory (was CRL) was bought by Clearblue
which later aquired part in Navisite and later had Navisite aquire
most of Clearblue (sounds weird, I know). Now appliedtheory.com goes to
navisite, so I assumed appliedtheory was aquired as part of clearblue,
(if it wasn't why the website going there)? So is its history:

crl->appliedtheory->clearblue->navisite->fastnet



Not sure of the full history, but 
http://www.fast.net/news/files/060302-pr.pdf





Re: [spamtools] Tracking a DDOS

2003-01-19 Thread william

'n confused. I thought AppliedTheory (was CRL) was bought by Clearblue 
which later aquired part in Navisite and later had Navisite aquire 
most of Clearblue (sounds weird, I know). Now appliedtheory.com goes to 
navisite, so I assumed appliedtheory was aquired as part of clearblue, 
(if it wasn't why the website going there)? So is its history:

crl->appliedtheory->clearblue->navisite->fastnet
 
> Fastnet is a publicly owned company that recently went on a buying spree 
> and purchased (among others) Applied Theory and Earthstation NetAXS.






Re: [spamtools] Tracking a DDOS

2003-01-19 Thread John Payne

--On Sunday, January 19, 2003 05:35:13 PM -0800 Roger Marquis 
<[EMAIL PROTECTED]> wrote:

Since fast.net/iuinc.com has not replied to our email or phone calls
we're looking for anyone with information on this company, its
owners or operators, and any history of network or SMTP abuse.  All
help will be appreciated and kept confidential.



Fastnet is a publicly owned company that recently went on a buying spree 
and purchased (among others) Applied Theory and Earthstation NetAXS.

You should be able to find contacts from NetAXS (unless Tony has moved 
on...)



Tracking a DDOS

2003-01-19 Thread Roger Marquis

One of our clients sustained a severe SMTP DDOS attack on New Years'
Day.  The DDOS was caused by a bulk mailing which had forged their
domain name in the return address.  The attack was staged over
several days from dial-up lines at fast.net (Bethlehem, PA).  We
contacted fast.net shortly after the massmail began but it continued
unabated for two additional days.  Some of the source IPs were
eventually listed by MAPS and Wirehub and they're still listed to
this date.

5 minutes after our call to fast.net's support desk we tracked a
portscan from one of their netblocks (206.245.164.0-206.245.164.255,
Internet Unlimited, at nearly the same address in Bethlehem, PA).
A quick check of the reverse DNS revealed nearly exclusive use by
porn, throw-away, and otherwise spam domains.

Though we're still tabulating damages and collecting evidence it
appears the DDOS was hosted by and allowed to continue unabated by
fast.net (aka iuinc.com) after they had knowledge of the problem,
knowledge of its source, and knowledge of its effects.

Since fast.net/iuinc.com has not replied to our email or phone calls
we're looking for anyone with information on this company, its
owners or operators, and any history of network or SMTP abuse.  All
help will be appreciated and kept confidential.

Thanks in advance,
-- 
Roger Marquis
Roble Systems Consulting
http://www.roble.com/