DDoS Attack in Progress.

Fri Oct 10 18:58:29 UTC 2008

Try,

NOC     ITMC/NOC     +902125209898      itmcistanbul at turktelekom.com.tr

Mehmet

From: Paul Ferguson <fergdawgster at gmail.com>
Date: Fri, 10 Oct 2008 11:55:41 -0700
To: Beavis <pfunix at gmail.com>
Cc: NANOG list <nanog at nanog.org>
Subject: Re: DDoS Attack in Progress.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Not surprising -- TurkTelekom has long been known to be a hotbed of
malicious activity, a known hoster for Russian/Ukrainian cyber criminals,
and perhaps one of the most botnetted ISPs on  the planet:

http://itw.trendmicro-europe.com/index.php?id=64

- - ferg

On Fri, Oct 10, 2008 at 11:46 AM, Beavis <pfunix at gmail.com> wrote:

> Hi All,
>
>  DoS attack in progress, any upstream info for these guys? their
> phone number doesn't respond.
>
>  This is the RIPE Whois query server #1.
> % The objects are in RPSL format.
> %
> % Rights restricted by copyright.
> % See http://www.ripe.net/db/copyright.html
>
> % Note: This output has been filtered.
> %       To receive output for a database update, use the "-B" flag.
>
> % Information related to '88.247.0.0 - 88.247.79.255'
>
> inetnum:         88.247.0.0 - 88.247.79.255
> netname:         TurkTelekom
> descr:           TT ADSL-alcatel static_ulus
> country:         tr
> admin-c:         TTBA1-RIPE
> tech-c:          TTBA1-RIPE
> status:          ASSIGNED PA "status:" definitions
> mnt-by:          as9121-mnt
> source:          RIPE # Filtered
>
> role:            TT Administrative Contact Role
> address:         Turk Telekom
> address:         Bilisim Aglari Dairesi
> address:         Aydinlikevler
> address:         06103 ANKARA
> phone:           +90 312 313 1950
> fax-no:          +90 312 313 1949
> e-mail:          abuse at ttnet.net.tr
> admin-c:         BADB3-RIPE
> tech-c:          ZA66-RIPE
> tech-c:          NO638-RIPE
> tech-c:          SO351-RIPE
> nic-hdl:         TTBA1-RIPE
> mnt-by:          AS9121-MNT
> source:          RIPE # Filtered
>
> % Information related to '88.247.0.0/17AS9121'
>
> route:           88.247.0.0/17
> descr:           TurkTelecom
> origin:          AS9121
> mnt-by:          AS9121-MNT
> source:          RIPE # Filtered
>
>

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)

wj8DBQFI76Ucq1pz9mNUZTMRAiJoAJ9v5DTn5TZZtBwno+c4JB/zun0AeQCg7vqz
uS4eSff62RIus6Qi1foH8II=
=S4jc
-----END PGP SIGNATURE-----

--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawgster(at)gmail.com
 ferg's tech blog: http://fergdawg.blogspot.com/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3392 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20081010/e8df01d6/attachment.bin>