Tor abuse FAQs

A friend sent me these links:

  https://www.torproject.org/faq.html.en#ExitPolicies
  https://www.torproject.org/faq-abuse.html.en
  https://www.torproject.org/eff/tor-legal-faq.html.en
  https://www.torproject.org/torusers.html.en

Btw -- several folks have raised the issue of Iran. Here's a blog
posting that may be of interest:

  https://blog.torproject.org/blog/measuring-tor-and-iran

(My apologies if these have already been posted -- for assorted reasons
involving my email setup, I cannot easily see any NANOG posts until some
time tonight EDT.)

An official site on what the "group" is doing is at:

http://nedanet.org/

On a related note, I posted a question about ipv6 a while back and the ticket I also opened is gertting bounced around with no one saying "yes, this is my space".

My ipv6 skills are seriously lacking... Can anyone shed light on how to find out "where" a certain IP is coming from? This device on a _very_ large pipe is becoming quite a pain.

[egrep@pixel notes]$ host gateway01.sikt.ir
Using domain server:
Name: 67.19.72.206
Address: 67.19.72.206#53
Aliases:

gateway01.sikt.ir has IPv6 address 2001:470:f15d:fe1d:33f:ad43:1:fa4

Hurricane Electric. Probably a tunnel from their tunnelbroker free v6 service.

$ whois 2001:470:f15d:fe1d:33f:ad43:1:fa4

OrgName: Hurricane Electric, Inc.
OrgID: HURC
Address: 760 Mission Court
City: Fremont
StateProv: CA
PostalCode: 94539
Country: US

NetRange: 2001:0470:0000:0000:0000:0000:0000:0000 -
2001:0470:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF
CIDR: 2001:0470:0000:0000:0000:0000:0000:0000/32
NetName: HURRICANE-IPV6
NetHandle: NET6-2001-470-1
Parent: NET6-2001-400-0
NetType: Direct Allocation
NameServer: NS1.HE.NET
NameServer: NS2.HE.NET
NameServer: NS3.HE.NET
NameServer: NS4.HE.NET
NameServer: NS5.HE.NET
Comment:
RegDate: 2001-03-22
Updated: 2008-06-18

RAbuseHandle: ABUSE1036-ARIN
RAbuseName: Abuse Department
RAbusePhone: +1-510-580-4100
RAbuseEmail: abuse@he.net

RNOCHandle: ZH17-ARIN
RNOCName: Hurricane Electric
RNOCPhone: +1-510-580-4100
RNOCEmail: hostmaster@he.net

RTechHandle: ZH17-ARIN
RTechName: Hurricane Electric
RTechPhone: +1-510-580-4100
RTechEmail: hostmaster@he.net

OrgAbuseHandle: ABUSE1036-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-510-580-4100
OrgAbuseEmail: abuse@he.net

OrgTechHandle: ZH17-ARIN
OrgTechName: Hurricane Electric
OrgTechPhone: +1-510-580-4100
OrgTechEmail: hostmaster@he.net

# ARIN WHOIS database, last updated 2009-06-24 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

Doh! See, I said my skills were lacking. How lacking I had not realized. Duuuuh, use whois. What a dummy. Consider me educated list, I will crawl back into my cave :slight_smile:

Thanks to everyone who responded with how to confirm HE. Abuse to them was passed to a customer of HE. Customer says not their space. Oh, well, back to searching. Thanks!