Last active

Embed URL

HTTPS clone URL

SSH clone URL

You can clone with HTTPS or SSH.

Download Gist
View 0.md

Moved to http://www.propublica.org/nerds/item/is-the-u.s.-government-behind-torsploit

A new version of this report is located at ProPublica. Includes more detail and a comment from Susan Prosser, Vice President of Industry Relations at DomainTools, about the how the DomainTools "IP Explorer" tool gathers the "C block owner" value.


The new version mostly just adds information, but previous versions of this gist can still be seen at the "Revisions" button to the left. Earlier versions should be considered draft quality.


An earier version of this gist had the wrong IP address (65.222.202.53) and the gist has been updated. 65.222.202.53 was reported by @Baneki, and was widely disseminated on Twitter, but the original reverse-engineer dump by @vlad902 had actually reported the address as 65.222.202.54.

65.222.202.53 and 65.222.202.54 are both part of the same "unknown" IP address block that is not allocated any more specifically than UUNET/Verizon Business, and the WHOIS for both respond with the same data. None of the conclusions below have been affected.

View 0.md
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
 
SCIENCE APPLICATIONS INT UU-65-222-202-D4 (NET-65-222-202-0-1) 65.222.202.0 - 65.222.202.15
Old Dominion Internet UU-65-222-202-16-D1 (NET-65-222-202-16-1) 65.222.202.16 - 65.222.202.31
FTS2001/US Government UU-65-222-202-32 (NET-65-222-202-32-1) 65.222.202.32 - 65.222.202.47
[no block allocation? 65.222.202.48 - 65.222.202.55]
UNIVERSAL MACHINE CO OF POTTSTOWN INC UU-65-222-202-56-D3 (NET-65-222-202-56-1) 65.222.202.56 - 65.222.202.63
KITRON UU-65-222-202-64-D4 (NET-65-222-202-64-1) 65.222.202.64 - 65.222.202.79
MORNINGSIDE SPORTS FARM UU-65-222-202-80 (NET-65-222-202-80-1) 65.222.202.80 - 65.222.202.87
MetTel, Inc. UU-65-222-202-88 (NET-65-222-202-88-1) 65.222.202.88 - 65.222.202.95
GUIDESTAR UU-65-222-202-96-D11 (NET-65-222-202-96-1) 65.222.202.96 - 65.222.202.103
Walt Disney Company UU-65-222-202-104 (NET-65-222-202-104-1) 65.222.202.104 - 65.222.202.111
Dental Concepts UU-65-222-202-112 (NET-65-222-202-112-1) 65.222.202.112 - 65.222.202.127
GARP RESEARCH & SECURITIES UU-65-222-202-128-D1 (NET-65-222-202-128-1) 65.222.202.128 - 65.222.202.135
[no block allocation? 65.222.202.144 - 65.222.202.151]
CONSCIOUS SECURITY UU-65-222-202-152-D2 (NET-65-222-202-152-1) 65.222.202.152 - 65.222.202.159
View 0.md
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84
$ whois 65.222.202.53
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
 
 
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.53"
#
# Use "?" to get help.
#
 
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.53?showDetails=true&showARIN=false&ext=netref2
#
 
NetRange: 65.192.0.0 - 65.223.255.255
CIDR: 65.192.0.0/11
OriginAS:
NetName: UUNET65
NetHandle: NET-65-192-0-0-1
Parent: NET-65-0-0-0-0
NetType: Direct Allocation
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2000-10-27
Updated: 2012-03-20
Ref: http://whois.arin.net/rest/net/NET-65-192-0-0-1
 
OrgName: MCI Communications Services, Inc. d/b/a Verizon Business
OrgId: MCICS
Address: 22001 Loudoun County Pkwy
City: Ashburn
StateProv: VA
PostalCode: 20147
Country: US
RegDate: 2006-05-30
Updated: 2011-11-30
Ref: http://whois.arin.net/rest/org/MCICS
 
OrgTechHandle: SWIPP-ARIN
OrgTechName: swipper
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@verizonbusiness.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP-ARIN
 
OrgNOCHandle: OA12-ARIN
OrgNOCName: UUnet Technologies, Inc., Technologies
OrgNOCPhone: +1-800-900-0241
OrgNOCEmail: help4u@verizonbusiness.com
OrgNOCRef: http://whois.arin.net/rest/poc/OA12-ARIN
 
OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-800-900-0241
OrgAbuseEmail: abuse-mail@verizonbusiness.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE3-ARIN
 
OrgTechHandle: JHU140-ARIN
OrgTechName: Huffines, Jody
OrgTechPhone: +1-703-886-6093
OrgTechEmail: Jody.Huffines@one.verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/JHU140-ARIN
 
OrgTechHandle: SWIPP9-ARIN
OrgTechName: SWIPPER
OrgTechPhone: +1-800-900-0241
OrgTechEmail: stephen.r.middleton@verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP9-ARIN
 
RTechHandle: OA12-ARIN
RTechName: UUnet Technologies, Inc., Technologies
RTechPhone: +1-800-900-0241
RTechEmail: help4u@verizonbusiness.com
RTechRef: http://whois.arin.net/rest/poc/OA12-ARIN
 
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
View 0.md
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85
$ whois 65.222.202.54
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
 
 
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.54"
#
# Use "?" to get help.
#
 
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.54?showDetails=true&showARIN=false&ext=netref2
#
 
NetRange: 65.192.0.0 - 65.223.255.255
CIDR: 65.192.0.0/11
OriginAS:
NetName: UUNET65
NetHandle: NET-65-192-0-0-1
Parent: NET-65-0-0-0-0
NetType: Direct Allocation
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2000-10-27
Updated: 2012-03-20
Ref: http://whois.arin.net/rest/net/NET-65-192-0-0-1
 
 
OrgName: MCI Communications Services, Inc. d/b/a Verizon Business
OrgId: MCICS
Address: 22001 Loudoun County Pkwy
City: Ashburn
StateProv: VA
PostalCode: 20147
Country: US
RegDate: 2006-05-30
Updated: 2011-11-30
Ref: http://whois.arin.net/rest/org/MCICS
 
OrgTechHandle: SWIPP9-ARIN
OrgTechName: SWIPPER
OrgTechPhone: +1-800-900-0241
OrgTechEmail: stephen.r.middleton@verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP9-ARIN
 
OrgTechHandle: JHU140-ARIN
OrgTechName: Huffines, Jody
OrgTechPhone: +1-703-886-6093
OrgTechEmail: Jody.Huffines@one.verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/JHU140-ARIN
 
OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-800-900-0241
OrgAbuseEmail: abuse-mail@verizonbusiness.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE3-ARIN
 
OrgNOCHandle: OA12-ARIN
OrgNOCName: UUnet Technologies, Inc., Technologies
OrgNOCPhone: +1-800-900-0241
OrgNOCEmail: help4u@verizonbusiness.com
OrgNOCRef: http://whois.arin.net/rest/poc/OA12-ARIN
 
OrgTechHandle: SWIPP-ARIN
OrgTechName: swipper
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@verizonbusiness.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP-ARIN
 
RTechHandle: OA12-ARIN
RTechName: UUnet Technologies, Inc., Technologies
RTechPhone: +1-800-900-0241
RTechEmail: help4u@verizonbusiness.com
RTechRef: http://whois.arin.net/rest/poc/OA12-ARIN
 
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
View 0.md
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
$ whois 65.222.202.88
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
 
 
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.88"
#
# Use "?" to get help.
#
 
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.88?showDetails=true&showARIN=false&ext=netref2
#
 
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
MetTel, Inc. UU-65-222-202-88 (NET-65-222-202-88-1) 65.222.202.88 - 65.222.202.95
 
 
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
View 0.md
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
$ whois 65.222.202.96
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
 
 
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.96"
#
# Use "?" to get help.
#
 
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.96?showDetails=true&showARIN=false&ext=netref2
#
 
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
GUIDESTAR UU-65-222-202-96-D11 (NET-65-222-202-96-1) 65.222.202.96 - 65.222.202.103
 
 
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
View 0.md
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
$ whois 65.222.202.104
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
 
 
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.104"
#
# Use "?" to get help.
#
 
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.104?showDetails=true&showARIN=false&ext=netref2
#
 
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
Walt Disney Company UU-65-222-202-104 (NET-65-222-202-104-1) 65.222.202.104 - 65.222.202.111
 
 
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
View 0.md
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
$ whois 65.222.202.112
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
 
 
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.112"
#
# Use "?" to get help.
#
 
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.112?showDetails=true&showARIN=false&ext=netref2
#
 
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
Dental Concepts UU-65-222-202-112 (NET-65-222-202-112-1) 65.222.202.112 - 65.222.202.127
 
 
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
View 0.md
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
$ whois 65.222.202.128
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
 
 
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.128"
#
# Use "?" to get help.
#
 
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.128?showDetails=true&showARIN=false&ext=netref2
#
 
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
GARP RESEARCH & SECURITIES UU-65-222-202-128-D1 (NET-65-222-202-128-1) 65.222.202.128 - 65.222.202.135
 
 
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
View 0.md
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
$ whois 65.222.202.136
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
 
 
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.136"
#
# Use "?" to get help.
#
 
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.136?showDetails=true&showARIN=false&ext=netref2
#
 
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
ASSURED PACKAGING INC UU-65-222-202-136-D2 (NET-65-222-202-136-1) 65.222.202.136 - 65.222.202.143
 
 
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
View 0.md
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85
$ whois 65.222.202.144
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
 
 
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.144"
#
# Use "?" to get help.
#
 
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.144?showDetails=true&showARIN=false&ext=netref2
#
 
NetRange: 65.192.0.0 - 65.223.255.255
CIDR: 65.192.0.0/11
OriginAS:
NetName: UUNET65
NetHandle: NET-65-192-0-0-1
Parent: NET-65-0-0-0-0
NetType: Direct Allocation
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2000-10-27
Updated: 2012-03-20
Ref: http://whois.arin.net/rest/net/NET-65-192-0-0-1
 
 
OrgName: MCI Communications Services, Inc. d/b/a Verizon Business
OrgId: MCICS
Address: 22001 Loudoun County Pkwy
City: Ashburn
StateProv: VA
PostalCode: 20147
Country: US
RegDate: 2006-05-30
Updated: 2011-11-30
Ref: http://whois.arin.net/rest/org/MCICS
 
OrgTechHandle: JHU140-ARIN
OrgTechName: Huffines, Jody
OrgTechPhone: +1-703-886-6093
OrgTechEmail: Jody.Huffines@one.verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/JHU140-ARIN
 
OrgNOCHandle: OA12-ARIN
OrgNOCName: UUnet Technologies, Inc., Technologies
OrgNOCPhone: +1-800-900-0241
OrgNOCEmail: help4u@verizonbusiness.com
OrgNOCRef: http://whois.arin.net/rest/poc/OA12-ARIN
 
OrgTechHandle: SWIPP-ARIN
OrgTechName: swipper
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@verizonbusiness.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP-ARIN
 
OrgTechHandle: SWIPP9-ARIN
OrgTechName: SWIPPER
OrgTechPhone: +1-800-900-0241
OrgTechEmail: stephen.r.middleton@verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP9-ARIN
 
OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-800-900-0241
OrgAbuseEmail: abuse-mail@verizonbusiness.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE3-ARIN
 
RTechHandle: OA12-ARIN
RTechName: UUnet Technologies, Inc., Technologies
RTechPhone: +1-800-900-0241
RTechEmail: help4u@verizonbusiness.com
RTechRef: http://whois.arin.net/rest/poc/OA12-ARIN
 
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
View 0.md
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85
$ whois 65.222.202.151
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
 
 
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.151"
#
# Use "?" to get help.
#
 
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.151?showDetails=true&showARIN=false&ext=netref2
#
 
NetRange: 65.192.0.0 - 65.223.255.255
CIDR: 65.192.0.0/11
OriginAS:
NetName: UUNET65
NetHandle: NET-65-192-0-0-1
Parent: NET-65-0-0-0-0
NetType: Direct Allocation
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2000-10-27
Updated: 2012-03-20
Ref: http://whois.arin.net/rest/net/NET-65-192-0-0-1
 
 
OrgName: MCI Communications Services, Inc. d/b/a Verizon Business
OrgId: MCICS
Address: 22001 Loudoun County Pkwy
City: Ashburn
StateProv: VA
PostalCode: 20147
Country: US
RegDate: 2006-05-30
Updated: 2011-11-30
Ref: http://whois.arin.net/rest/org/MCICS
 
OrgTechHandle: JHU140-ARIN
OrgTechName: Huffines, Jody
OrgTechPhone: +1-703-886-6093
OrgTechEmail: Jody.Huffines@one.verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/JHU140-ARIN
 
OrgNOCHandle: OA12-ARIN
OrgNOCName: UUnet Technologies, Inc., Technologies
OrgNOCPhone: +1-800-900-0241
OrgNOCEmail: help4u@verizonbusiness.com
OrgNOCRef: http://whois.arin.net/rest/poc/OA12-ARIN
 
OrgTechHandle: SWIPP-ARIN
OrgTechName: swipper
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@verizonbusiness.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP-ARIN
 
OrgTechHandle: SWIPP9-ARIN
OrgTechName: SWIPPER
OrgTechPhone: +1-800-900-0241
OrgTechEmail: stephen.r.middleton@verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP9-ARIN
 
OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-800-900-0241
OrgAbuseEmail: abuse-mail@verizonbusiness.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE3-ARIN
 
RTechHandle: OA12-ARIN
RTechName: UUnet Technologies, Inc., Technologies
RTechPhone: +1-800-900-0241
RTechEmail: help4u@verizonbusiness.com
RTechRef: http://whois.arin.net/rest/poc/OA12-ARIN
 
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
View 0.md
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
$ whois 65.222.202.152
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
 
 
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.152"
#
# Use "?" to get help.
#
 
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.152?showDetails=true&showARIN=false&ext=netref2
#
 
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
CONSCIOUS SECURITY UU-65-222-202-152-D2 (NET-65-222-202-152-1) 65.222.202.152 - 65.222.202.159
 
 
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
View 0.md
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84
$ whois 65.222.202.160
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
 
 
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.160"
#
# Use "?" to get help.
#
 
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.160?showDetails=true&showARIN=false&ext=netref2
#
 
NetRange: 65.192.0.0 - 65.223.255.255
CIDR: 65.192.0.0/11
OriginAS:
NetName: UUNET65
NetHandle: NET-65-192-0-0-1
Parent: NET-65-0-0-0-0
NetType: Direct Allocation
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2000-10-27
Updated: 2012-03-20
Ref: http://whois.arin.net/rest/net/NET-65-192-0-0-1
 
OrgName: MCI Communications Services, Inc. d/b/a Verizon Business
OrgId: MCICS
Address: 22001 Loudoun County Pkwy
City: Ashburn
StateProv: VA
PostalCode: 20147
Country: US
RegDate: 2006-05-30
Updated: 2011-11-30
Ref: http://whois.arin.net/rest/org/MCICS
 
OrgTechHandle: SWIPP-ARIN
OrgTechName: swipper
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@verizonbusiness.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP-ARIN
 
OrgTechHandle: SWIPP9-ARIN
OrgTechName: SWIPPER
OrgTechPhone: +1-800-900-0241
OrgTechEmail: stephen.r.middleton@verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP9-ARIN
 
OrgNOCHandle: OA12-ARIN
OrgNOCName: UUnet Technologies, Inc., Technologies
OrgNOCPhone: +1-800-900-0241
OrgNOCEmail: help4u@verizonbusiness.com
OrgNOCRef: http://whois.arin.net/rest/poc/OA12-ARIN
 
OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-800-900-0241
OrgAbuseEmail: abuse-mail@verizonbusiness.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE3-ARIN
 
OrgTechHandle: JHU140-ARIN
OrgTechName: Huffines, Jody
OrgTechPhone: +1-703-886-6093
OrgTechEmail: Jody.Huffines@one.verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/JHU140-ARIN
 
RTechHandle: OA12-ARIN
RTechName: UUnet Technologies, Inc., Technologies
RTechPhone: +1-800-900-0241
RTechEmail: help4u@verizonbusiness.com
RTechRef: http://whois.arin.net/rest/poc/OA12-ARIN
 
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
View 0.md
Raw
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
$ whois 65.222.202.0
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
 
 
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.0"
#
# Use "?" to get help.
#
 
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.0?showDetails=true&showARIN=false&ext=netref2
#
 
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
SCIENCE APPLICATIONS INT UU-65-222-202-D4 (NET-65-222-202-0-1) 65.222.202.0 - 65.222.202.15
 
 
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
View 0.md
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85
$ whois 65.222.202.175
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
 
 
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.175"
#
# Use "?" to get help.
#
 
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.175?showDetails=true&showARIN=false&ext=netref2
#
 
NetRange: 65.192.0.0 - 65.223.255.255
CIDR: 65.192.0.0/11
OriginAS:
NetName: UUNET65
NetHandle: NET-65-192-0-0-1
Parent: NET-65-0-0-0-0
NetType: Direct Allocation
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2000-10-27
Updated: 2012-03-20
Ref: http://whois.arin.net/rest/net/NET-65-192-0-0-1
 
 
OrgName: MCI Communications Services, Inc. d/b/a Verizon Business
OrgId: MCICS
Address: 22001 Loudoun County Pkwy
City: Ashburn
StateProv: VA
PostalCode: 20147
Country: US
RegDate: 2006-05-30
Updated: 2011-11-30
Ref: http://whois.arin.net/rest/org/MCICS
 
OrgTechHandle: JHU140-ARIN
OrgTechName: Huffines, Jody
OrgTechPhone: +1-703-886-6093
OrgTechEmail: Jody.Huffines@one.verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/JHU140-ARIN
 
OrgNOCHandle: OA12-ARIN
OrgNOCName: UUnet Technologies, Inc., Technologies
OrgNOCPhone: +1-800-900-0241
OrgNOCEmail: help4u@verizonbusiness.com
OrgNOCRef: http://whois.arin.net/rest/poc/OA12-ARIN
 
OrgTechHandle: SWIPP-ARIN
OrgTechName: swipper
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@verizonbusiness.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP-ARIN
 
OrgTechHandle: SWIPP9-ARIN
OrgTechName: SWIPPER
OrgTechPhone: +1-800-900-0241
OrgTechEmail: stephen.r.middleton@verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP9-ARIN
 
OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-800-900-0241
OrgAbuseEmail: abuse-mail@verizonbusiness.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE3-ARIN
 
RTechHandle: OA12-ARIN
RTechName: UUnet Technologies, Inc., Technologies
RTechPhone: +1-800-900-0241
RTechEmail: help4u@verizonbusiness.com
RTechRef: http://whois.arin.net/rest/poc/OA12-ARIN
 
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
View 0.md
Raw
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
$ whois 65.222.202.16
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
 
 
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.16"
#
# Use "?" to get help.
#
 
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.16?showDetails=true&showARIN=false&ext=netref2
#
 
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
Old Dominion Internet UU-65-222-202-16-D1 (NET-65-222-202-16-1) 65.222.202.16 - 65.222.202.31
 
 
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
View 0.md
Raw
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
$ whois 65.222.202.32
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
 
 
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.32"
#
# Use "?" to get help.
#
 
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.32?showDetails=true&showARIN=false&ext=netref2
#
 
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
FTS2001/US Government UU-65-222-202-32 (NET-65-222-202-32-1) 65.222.202.32 - 65.222.202.47
 
 
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
View 0.md
Raw
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84
$ whois 65.222.202.48
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
 
 
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.48"
#
# Use "?" to get help.
#
 
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.48?showDetails=true&showARIN=false&ext=netref2
#
 
NetRange: 65.192.0.0 - 65.223.255.255
CIDR: 65.192.0.0/11
OriginAS:
NetName: UUNET65
NetHandle: NET-65-192-0-0-1
Parent: NET-65-0-0-0-0
NetType: Direct Allocation
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2000-10-27
Updated: 2012-03-20
Ref: http://whois.arin.net/rest/net/NET-65-192-0-0-1
 
OrgName: MCI Communications Services, Inc. d/b/a Verizon Business
OrgId: MCICS
Address: 22001 Loudoun County Pkwy
City: Ashburn
StateProv: VA
PostalCode: 20147
Country: US
RegDate: 2006-05-30
Updated: 2011-11-30
Ref: http://whois.arin.net/rest/org/MCICS
 
OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-800-900-0241
OrgAbuseEmail: abuse-mail@verizonbusiness.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE3-ARIN
 
OrgTechHandle: SWIPP9-ARIN
OrgTechName: SWIPPER
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP9-ARIN
 
OrgTechHandle: SWIPP-ARIN
OrgTechName: swipper
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@verizonbusiness.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP-ARIN
 
OrgTechHandle: JHU140-ARIN
OrgTechName: Huffines, Jody
OrgTechPhone: +1-703-886-6093
OrgTechEmail: Jody.Huffines@one.verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/JHU140-ARIN
 
OrgNOCHandle: OA12-ARIN
OrgNOCName: UUnet Technologies, Inc., Technologies
OrgNOCPhone: +1-800-900-0241
OrgNOCEmail: help4u@verizonbusiness.com
OrgNOCRef: http://whois.arin.net/rest/poc/OA12-ARIN
 
RTechHandle: OA12-ARIN
RTechName: UUnet Technologies, Inc., Technologies
RTechPhone: +1-800-900-0241
RTechEmail: help4u@verizonbusiness.com
RTechRef: http://whois.arin.net/rest/poc/OA12-ARIN
 
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
View 0.md
Raw
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84
$ whois 65.222.202.55
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
 
 
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.55"
#
# Use "?" to get help.
#
 
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.55?showDetails=true&showARIN=false&ext=netref2
#
 
NetRange: 65.192.0.0 - 65.223.255.255
CIDR: 65.192.0.0/11
OriginAS:
NetName: UUNET65
NetHandle: NET-65-192-0-0-1
Parent: NET-65-0-0-0-0
NetType: Direct Allocation
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2000-10-27
Updated: 2012-03-20
Ref: http://whois.arin.net/rest/net/NET-65-192-0-0-1
 
OrgName: MCI Communications Services, Inc. d/b/a Verizon Business
OrgId: MCICS
Address: 22001 Loudoun County Pkwy
City: Ashburn
StateProv: VA
PostalCode: 20147
Country: US
RegDate: 2006-05-30
Updated: 2011-11-30
Ref: http://whois.arin.net/rest/org/MCICS
 
OrgTechHandle: SWIPP-ARIN
OrgTechName: swipper
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@verizonbusiness.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP-ARIN
 
OrgTechHandle: SWIPP9-ARIN
OrgTechName: SWIPPER
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP9-ARIN
 
OrgTechHandle: JHU140-ARIN
OrgTechName: Huffines, Jody
OrgTechPhone: +1-703-886-6093
OrgTechEmail: Jody.Huffines@one.verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/JHU140-ARIN
 
OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-800-900-0241
OrgAbuseEmail: abuse-mail@verizonbusiness.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE3-ARIN
 
OrgNOCHandle: OA12-ARIN
OrgNOCName: UUnet Technologies, Inc., Technologies
OrgNOCPhone: +1-800-900-0241
OrgNOCEmail: help4u@verizonbusiness.com
OrgNOCRef: http://whois.arin.net/rest/poc/OA12-ARIN
 
RTechHandle: OA12-ARIN
RTechName: UUnet Technologies, Inc., Technologies
RTechPhone: +1-800-900-0241
RTechEmail: help4u@verizonbusiness.com
RTechRef: http://whois.arin.net/rest/poc/OA12-ARIN
 
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
View 0.md
Raw
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
$ whois 65.222.202.56
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
 
 
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.56"
#
# Use "?" to get help.
#
 
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.56?showDetails=true&showARIN=false&ext=netref2
#
 
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
UNIVERSAL MACHINE CO OF POTTSTOWN INC UU-65-222-202-56-D3 (NET-65-222-202-56-1) 65.222.202.56 - 65.222.202.63
 
 
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
View 0.md
Raw
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
$ whois 65.222.202.64
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
 
 
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.64"
#
# Use "?" to get help.
#
 
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.64?showDetails=true&showARIN=false&ext=netref2
#
 
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
KITRON UU-65-222-202-64-D4 (NET-65-222-202-64-1) 65.222.202.64 - 65.222.202.79
 
 
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
View 0.md
Raw
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
$ whois 65.222.202.80
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
 
 
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.80"
#
# Use "?" to get help.
#
 
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.80?showDetails=true&showARIN=false&ext=netref2
#
 
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
MORNINGSIDE SPORTS FARM UU-65-222-202-80 (NET-65-222-202-80-1) 65.222.202.80 - 65.222.202.87
 
 
 
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

Interesting that there's two different locations reported for 65.222.202.53

Host script results:
|_hostmap-robtex: ERROR: Script execution failed (use -d to debug)
| asn-query: 
| BGP: 65.192.0.0/11 | Country: US
|   Origin AS: 701 - UUNET - MCI Communications Services, Inc. d/b/a Verizon Business
|_    Peer AS: 174 286 702 1299 2914 3257 3356 22822
| whois: Record found at whois.arin.net
| netrange: 65.192.0.0 - 65.223.255.255
| netname: UUNET65
| orgname: MCI Communications Services, Inc. d/b/a Verizon Business
| orgid: MCICS
| country: US stateprov: VA
| orgtechname: SWIPPER
|_orgtechemail: stephen.r.middleton@verizon.com
|_ip-geolocation-maxmind: ERROR: Script execution failed (use -d to debug)
| ip-geolocation-geobytes: 
|   latitude: 38.9048
|   longitude: -77.0354
|   city: Washington
|   region: District of Columbia
|_  country: United States
| ip-geolocation-geoplugin: 
| 65.222.202.53
|   coordinates (lat,lon): 38.969501,-77.386101
|_  state: Virginia, United States
|_traceroute-geolocation: ERROR: Script execution failed (use -d to debug)
Owner

ip-to-geo databases are always hit-or-miss. As far as I know, they tune their databases based on DNS and guesses from traceroutes (since if you traceroute to a server, you will often find a router like "core5.dfw1.rackspace.net" that gives you a hint as to what city and what ISP or datacenter the machine is located in).

http://www.geobytes.com/FAQ.htm

https://www.maxmind.com/en/city_accuracy

So, no surprise that the IP is in the Verizon Business Virginia range and geoip databases imply that region as well. I’m more intrigued at the numeric distance between the IP and SAIC / US Govt ranges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Something went wrong with that request. Please try again.