Tor abuse FAQs

Thu Jun 25 17:34:22 UTC 2009

On Thu, Jun 25, 2009 at 10:32 PM, Steve Pirk<orion at pirk.com> wrote:
> On a related note, I posted a question about ipv6 a while back and the
> ticket I also opened is gertting bounced around with no one saying "yes,
> this is my space".
>
> My ipv6 skills are seriously lacking... Can anyone shed light on how to find
> out "where" a certain IP is coming from? This device on a _very_ large pipe
> is becoming quite a pain.

Hurricane Electric.  Probably a tunnel from their tunnelbroker free v6 service.

$ whois 2001:470:f15d:fe1d:33f:ad43:1:fa4

OrgName:    Hurricane Electric, Inc.
OrgID:      HURC
Address:    760 Mission Court
City:       Fremont
StateProv:  CA
PostalCode: 94539
Country:    US

NetRange:   2001:0470:0000:0000:0000:0000:0000:0000 -
2001:0470:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF
CIDR:       2001:0470:0000:0000:0000:0000:0000:0000/32
NetName:    HURRICANE-IPV6
NetHandle:  NET6-2001-470-1
Parent:     NET6-2001-400-0
NetType:    Direct Allocation
NameServer: NS1.HE.NET
NameServer: NS2.HE.NET
NameServer: NS3.HE.NET
NameServer: NS4.HE.NET
NameServer: NS5.HE.NET
Comment:
RegDate:    2001-03-22
Updated:    2008-06-18

RAbuseHandle: ABUSE1036-ARIN
RAbuseName:   Abuse Department
RAbusePhone:  +1-510-580-4100
RAbuseEmail:  abuse at he.net

RNOCHandle: ZH17-ARIN
RNOCName:   Hurricane Electric
RNOCPhone:  +1-510-580-4100
RNOCEmail:  hostmaster at he.net

RTechHandle: ZH17-ARIN
RTechName:   Hurricane Electric
RTechPhone:  +1-510-580-4100
RTechEmail:  hostmaster at he.net

OrgAbuseHandle: ABUSE1036-ARIN
OrgAbuseName:   Abuse Department
OrgAbusePhone:  +1-510-580-4100
OrgAbuseEmail:  abuse at he.net

OrgTechHandle: ZH17-ARIN
OrgTechName:   Hurricane Electric
OrgTechPhone:  +1-510-580-4100
OrgTechEmail:  hostmaster at he.net

# ARIN WHOIS database, last updated 2009-06-24 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.