North American Network Operators Group Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical Re: Tools for LARTing large nets of compromised boxen?
On Thu, 20 Apr 2006, Michael Loftis wrote: It's not an actual tool for doing the whole job, but you could use "bulk mode" on whois.cymru.com to turn your list of IPs [and timestamps?] into a a list of "AS | IP | Timestamp | AS Name". Send a help request to the whois.cymru.com whois server for instructions. Once you have that, you could pretty easily split it by AS#, grab email addresses from whois records for the AS#'s, and email each AS#'s data to their ASN POCs. You could also post a URL to the full output from your cymru whois here, and someone would likely forward the data to nsp-sec. ---------------------------------------------------------------------- Jon Lewis | I route Senior Network Engineer | therefore you are Atlantic Net | _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
|