Tor abuse FAQs

A friend sent me these links:

Btw -- several folks have raised the issue of Iran. Here's a blog
posting that may be of interest:

(My apologies if these have already been posted -- for assorted reasons
involving my email setup, I cannot easily see any NANOG posts until some
time tonight EDT.)

An official site on what the "group" is doing is at:

On a related note, I posted a question about ipv6 a while back and the ticket I also opened is gertting bounced around with no one saying "yes, this is my space".

My ipv6 skills are seriously lacking... Can anyone shed light on how to find out "where" a certain IP is coming from? This device on a _very_ large pipe is becoming quite a pain.

[egrep@pixel notes]$ host
Using domain server:
Aliases: has IPv6 address 2001:470:f15d:fe1d:33f:ad43:1:fa4

Hurricane Electric. Probably a tunnel from their tunnelbroker free v6 service.

$ whois 2001:470:f15d:fe1d:33f:ad43:1:fa4

OrgName: Hurricane Electric, Inc.
Address: 760 Mission Court
City: Fremont
StateProv: CA
PostalCode: 94539
Country: US

NetRange: 2001:0470:0000:0000:0000:0000:0000:0000 -
CIDR: 2001:0470:0000:0000:0000:0000:0000:0000/32
NetHandle: NET6-2001-470-1
Parent: NET6-2001-400-0
NetType: Direct Allocation
NameServer: NS1.HE.NET
NameServer: NS2.HE.NET
NameServer: NS3.HE.NET
NameServer: NS4.HE.NET
NameServer: NS5.HE.NET
RegDate: 2001-03-22
Updated: 2008-06-18

RAbuseHandle: ABUSE1036-ARIN
RAbuseName: Abuse Department
RAbusePhone: +1-510-580-4100

RNOCName: Hurricane Electric
RNOCPhone: +1-510-580-4100

RTechHandle: ZH17-ARIN
RTechName: Hurricane Electric
RTechPhone: +1-510-580-4100

OrgAbuseHandle: ABUSE1036-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-510-580-4100

OrgTechHandle: ZH17-ARIN
OrgTechName: Hurricane Electric
OrgTechPhone: +1-510-580-4100

# ARIN WHOIS database, last updated 2009-06-24 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

Doh! See, I said my skills were lacking. How lacking I had not realized. Duuuuh, use whois. What a dummy. Consider me educated list, I will crawl back into my cave :slight_smile:

Thanks to everyone who responded with how to confirm HE. Abuse to them was passed to a customer of HE. Customer says not their space. Oh, well, back to searching. Thanks!