Re: DDoS Attack in Progress.

["Paul Ferguson" <fergdawgster () gmail com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Not surprising -- TurkTelekom has long been known to be a hotbed of
malicious activity, a known hoster for Russian/Ukrainian cyber criminals,
and perhaps one of the most botnetted ISPs on  the planet:

http://itw.trendmicro-europe.com/index.php?id=64

- - ferg


On Fri, Oct 10, 2008 at 11:46 AM, Beavis <pfunix () gmail com> wrote:

> Hi All,
>
>  DoS attack in progress, any upstream info for these guys? their
> phone number doesn't respond.
>
>  This is the RIPE Whois query server #1.
> % The objects are in RPSL format.
> %
> % Rights restricted by copyright.
> % See http://www.ripe.net/db/copyright.html
>
> % Note: This output has been filtered.
> %       To receive output for a database update, use the "-B" flag.
>
> % Information related to '88.247.0.0 - 88.247.79.255'
>
> inetnum:         88.247.0.0 - 88.247.79.255
> netname:         TurkTelekom
> descr:           TT ADSL-alcatel static_ulus
> country:         tr
> admin-c:         TTBA1-RIPE
> tech-c:          TTBA1-RIPE
> status:          ASSIGNED PA "status:" definitions
> mnt-by:          as9121-mnt
> source:          RIPE # Filtered
>
> role:            TT Administrative Contact Role
> address:         Turk Telekom
> address:         Bilisim Aglari Dairesi
> address:         Aydinlikevler
> address:         06103 ANKARA
> phone:           +90 312 313 1950
> fax-no:          +90 312 313 1949
> e-mail:          abuse () ttnet net tr
> admin-c:         BADB3-RIPE
> tech-c:          ZA66-RIPE
> tech-c:          NO638-RIPE
> tech-c:          SO351-RIPE
> nic-hdl:         TTBA1-RIPE
> mnt-by:          AS9121-MNT
> source:          RIPE # Filtered
>
> % Information related to '88.247.0.0/17AS9121'
>
> route:           88.247.0.0/17
> descr:           TurkTelecom
> origin:          AS9121
> mnt-by:          AS9121-MNT
> source:          RIPE # Filtered

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)

wj8DBQFI76Ucq1pz9mNUZTMRAiJoAJ9v5DTn5TZZtBwno+c4JB/zun0AeQCg7vqz
uS4eSff62RIus6Qi1foH8II=
=S4jc
-----END PGP SIGNATURE-----



-- 
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawgster(at)gmail.com
 ferg's tech blog: http://fergdawg.blogspot.com/