Skip to content

Instantly share code, notes, and snippets.

@mtigas

mtigas/0.md

Last active October 6, 2019 03:46
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save mtigas/6158214 to your computer and use it in GitHub Desktop.
Save mtigas/6158214 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
0.md

Moved to http://www.propublica.org/nerds/item/is-the-u.s.-government-behind-torsploit

A new version of this report is located at ProPublica. Includes more detail and a comment from Susan Prosser, Vice President of Industry Relations at DomainTools, about the how the DomainTools "IP Explorer" tool gathers the "C block owner" value.

The new version mostly just adds information, but previous versions of this gist can still be seen at the "Revisions" button to the left. Earlier versions should be considered draft quality.

An earier version of this gist had the wrong IP address (65.222.202.53) and the gist has been updated. 65.222.202.53 was reported by @Baneki, and was widely disseminated on Twitter, but the original reverse-engineer dump by @vlad902 had actually reported the address as 65.222.202.54.

65.222.202.53 and 65.222.202.54 are both part of the same "unknown" IP address block that is not allocated any more specifically than UUNET/Verizon Business, and the WHOIS for both respond with the same data. None of the conclusions below have been affected.

Raw
01
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
SCIENCE APPLICATIONS INT UU-65-222-202-D4 (NET-65-222-202-0-1) 65.222.202.0 - 65.222.202.15
Old Dominion Internet UU-65-222-202-16-D1 (NET-65-222-202-16-1) 65.222.202.16 - 65.222.202.31
FTS2001/US Government UU-65-222-202-32 (NET-65-222-202-32-1) 65.222.202.32 - 65.222.202.47
[no block allocation? 65.222.202.48 - 65.222.202.55]
UNIVERSAL MACHINE CO OF POTTSTOWN INC UU-65-222-202-56-D3 (NET-65-222-202-56-1) 65.222.202.56 - 65.222.202.63
KITRON UU-65-222-202-64-D4 (NET-65-222-202-64-1) 65.222.202.64 - 65.222.202.79
MORNINGSIDE SPORTS FARM UU-65-222-202-80 (NET-65-222-202-80-1) 65.222.202.80 - 65.222.202.87
MetTel, Inc. UU-65-222-202-88 (NET-65-222-202-88-1) 65.222.202.88 - 65.222.202.95
GUIDESTAR UU-65-222-202-96-D11 (NET-65-222-202-96-1) 65.222.202.96 - 65.222.202.103
Walt Disney Company UU-65-222-202-104 (NET-65-222-202-104-1) 65.222.202.104 - 65.222.202.111
Dental Concepts UU-65-222-202-112 (NET-65-222-202-112-1) 65.222.202.112 - 65.222.202.127
GARP RESEARCH & SECURITIES UU-65-222-202-128-D1 (NET-65-222-202-128-1) 65.222.202.128 - 65.222.202.135
[no block allocation? 65.222.202.144 - 65.222.202.151]
CONSCIOUS SECURITY UU-65-222-202-152-D2 (NET-65-222-202-152-1) 65.222.202.152 - 65.222.202.159
Raw
1-53
$ whois 65.222.202.53
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.53"
#
# Use "?" to get help.
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.53?showDetails=true&showARIN=false&ext=netref2
#
NetRange: 65.192.0.0 - 65.223.255.255
CIDR: 65.192.0.0/11
OriginAS:
NetName: UUNET65
NetHandle: NET-65-192-0-0-1
Parent: NET-65-0-0-0-0
NetType: Direct Allocation
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2000-10-27
Updated: 2012-03-20
Ref: http://whois.arin.net/rest/net/NET-65-192-0-0-1
OrgName: MCI Communications Services, Inc. d/b/a Verizon Business
OrgId: MCICS
Address: 22001 Loudoun County Pkwy
City: Ashburn
StateProv: VA
PostalCode: 20147
Country: US
RegDate: 2006-05-30
Updated: 2011-11-30
Ref: http://whois.arin.net/rest/org/MCICS
OrgTechHandle: SWIPP-ARIN
OrgTechName: swipper
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@verizonbusiness.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP-ARIN
OrgNOCHandle: OA12-ARIN
OrgNOCName: UUnet Technologies, Inc., Technologies
OrgNOCPhone: +1-800-900-0241
OrgNOCEmail: help4u@verizonbusiness.com
OrgNOCRef: http://whois.arin.net/rest/poc/OA12-ARIN
OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-800-900-0241
OrgAbuseEmail: abuse-mail@verizonbusiness.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE3-ARIN
OrgTechHandle: JHU140-ARIN
OrgTechName: Huffines, Jody
OrgTechPhone: +1-703-886-6093
OrgTechEmail: Jody.Huffines@one.verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/JHU140-ARIN
OrgTechHandle: SWIPP9-ARIN
OrgTechName: SWIPPER
OrgTechPhone: +1-800-900-0241
OrgTechEmail: stephen.r.middleton@verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP9-ARIN
RTechHandle: OA12-ARIN
RTechName: UUnet Technologies, Inc., Technologies
RTechPhone: +1-800-900-0241
RTechEmail: help4u@verizonbusiness.com
RTechRef: http://whois.arin.net/rest/poc/OA12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
Raw
1-54
$ whois 65.222.202.54
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.54"
#
# Use "?" to get help.
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.54?showDetails=true&showARIN=false&ext=netref2
#
NetRange: 65.192.0.0 - 65.223.255.255
CIDR: 65.192.0.0/11
OriginAS:
NetName: UUNET65
NetHandle: NET-65-192-0-0-1
Parent: NET-65-0-0-0-0
NetType: Direct Allocation
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2000-10-27
Updated: 2012-03-20
Ref: http://whois.arin.net/rest/net/NET-65-192-0-0-1
OrgName: MCI Communications Services, Inc. d/b/a Verizon Business
OrgId: MCICS
Address: 22001 Loudoun County Pkwy
City: Ashburn
StateProv: VA
PostalCode: 20147
Country: US
RegDate: 2006-05-30
Updated: 2011-11-30
Ref: http://whois.arin.net/rest/org/MCICS
OrgTechHandle: SWIPP9-ARIN
OrgTechName: SWIPPER
OrgTechPhone: +1-800-900-0241
OrgTechEmail: stephen.r.middleton@verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP9-ARIN
OrgTechHandle: JHU140-ARIN
OrgTechName: Huffines, Jody
OrgTechPhone: +1-703-886-6093
OrgTechEmail: Jody.Huffines@one.verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/JHU140-ARIN
OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-800-900-0241
OrgAbuseEmail: abuse-mail@verizonbusiness.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE3-ARIN
OrgNOCHandle: OA12-ARIN
OrgNOCName: UUnet Technologies, Inc., Technologies
OrgNOCPhone: +1-800-900-0241
OrgNOCEmail: help4u@verizonbusiness.com
OrgNOCRef: http://whois.arin.net/rest/poc/OA12-ARIN
OrgTechHandle: SWIPP-ARIN
OrgTechName: swipper
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@verizonbusiness.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP-ARIN
RTechHandle: OA12-ARIN
RTechName: UUnet Technologies, Inc., Technologies
RTechPhone: +1-800-900-0241
RTechEmail: help4u@verizonbusiness.com
RTechRef: http://whois.arin.net/rest/poc/OA12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
Raw
10
$ whois 65.222.202.88
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.88"
#
# Use "?" to get help.
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.88?showDetails=true&showARIN=false&ext=netref2
#
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
MetTel, Inc. UU-65-222-202-88 (NET-65-222-202-88-1) 65.222.202.88 - 65.222.202.95
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
Raw
11
$ whois 65.222.202.96
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.96"
#
# Use "?" to get help.
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.96?showDetails=true&showARIN=false&ext=netref2
#
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
GUIDESTAR UU-65-222-202-96-D11 (NET-65-222-202-96-1) 65.222.202.96 - 65.222.202.103
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
Raw
12
$ whois 65.222.202.104
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.104"
#
# Use "?" to get help.
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.104?showDetails=true&showARIN=false&ext=netref2
#
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
Walt Disney Company UU-65-222-202-104 (NET-65-222-202-104-1) 65.222.202.104 - 65.222.202.111
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
Raw
13
$ whois 65.222.202.112
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.112"
#
# Use "?" to get help.
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.112?showDetails=true&showARIN=false&ext=netref2
#
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
Dental Concepts UU-65-222-202-112 (NET-65-222-202-112-1) 65.222.202.112 - 65.222.202.127
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
Raw
14
$ whois 65.222.202.128
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.128"
#
# Use "?" to get help.
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.128?showDetails=true&showARIN=false&ext=netref2
#
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
GARP RESEARCH & SECURITIES UU-65-222-202-128-D1 (NET-65-222-202-128-1) 65.222.202.128 - 65.222.202.135
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
Raw
15
$ whois 65.222.202.136
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.136"
#
# Use "?" to get help.
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.136?showDetails=true&showARIN=false&ext=netref2
#
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
ASSURED PACKAGING INC UU-65-222-202-136-D2 (NET-65-222-202-136-1) 65.222.202.136 - 65.222.202.143
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
Raw
16
$ whois 65.222.202.144
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.144"
#
# Use "?" to get help.
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.144?showDetails=true&showARIN=false&ext=netref2
#
NetRange: 65.192.0.0 - 65.223.255.255
CIDR: 65.192.0.0/11
OriginAS:
NetName: UUNET65
NetHandle: NET-65-192-0-0-1
Parent: NET-65-0-0-0-0
NetType: Direct Allocation
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2000-10-27
Updated: 2012-03-20
Ref: http://whois.arin.net/rest/net/NET-65-192-0-0-1
OrgName: MCI Communications Services, Inc. d/b/a Verizon Business
OrgId: MCICS
Address: 22001 Loudoun County Pkwy
City: Ashburn
StateProv: VA
PostalCode: 20147
Country: US
RegDate: 2006-05-30
Updated: 2011-11-30
Ref: http://whois.arin.net/rest/org/MCICS
OrgTechHandle: JHU140-ARIN
OrgTechName: Huffines, Jody
OrgTechPhone: +1-703-886-6093
OrgTechEmail: Jody.Huffines@one.verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/JHU140-ARIN
OrgNOCHandle: OA12-ARIN
OrgNOCName: UUnet Technologies, Inc., Technologies
OrgNOCPhone: +1-800-900-0241
OrgNOCEmail: help4u@verizonbusiness.com
OrgNOCRef: http://whois.arin.net/rest/poc/OA12-ARIN
OrgTechHandle: SWIPP-ARIN
OrgTechName: swipper
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@verizonbusiness.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP-ARIN
OrgTechHandle: SWIPP9-ARIN
OrgTechName: SWIPPER
OrgTechPhone: +1-800-900-0241
OrgTechEmail: stephen.r.middleton@verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP9-ARIN
OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-800-900-0241
OrgAbuseEmail: abuse-mail@verizonbusiness.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE3-ARIN
RTechHandle: OA12-ARIN
RTechName: UUnet Technologies, Inc., Technologies
RTechPhone: +1-800-900-0241
RTechEmail: help4u@verizonbusiness.com
RTechRef: http://whois.arin.net/rest/poc/OA12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
Raw
17
$ whois 65.222.202.151
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.151"
#
# Use "?" to get help.
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.151?showDetails=true&showARIN=false&ext=netref2
#
NetRange: 65.192.0.0 - 65.223.255.255
CIDR: 65.192.0.0/11
OriginAS:
NetName: UUNET65
NetHandle: NET-65-192-0-0-1
Parent: NET-65-0-0-0-0
NetType: Direct Allocation
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2000-10-27
Updated: 2012-03-20
Ref: http://whois.arin.net/rest/net/NET-65-192-0-0-1
OrgName: MCI Communications Services, Inc. d/b/a Verizon Business
OrgId: MCICS
Address: 22001 Loudoun County Pkwy
City: Ashburn
StateProv: VA
PostalCode: 20147
Country: US
RegDate: 2006-05-30
Updated: 2011-11-30
Ref: http://whois.arin.net/rest/org/MCICS
OrgTechHandle: JHU140-ARIN
OrgTechName: Huffines, Jody
OrgTechPhone: +1-703-886-6093
OrgTechEmail: Jody.Huffines@one.verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/JHU140-ARIN
OrgNOCHandle: OA12-ARIN
OrgNOCName: UUnet Technologies, Inc., Technologies
OrgNOCPhone: +1-800-900-0241
OrgNOCEmail: help4u@verizonbusiness.com
OrgNOCRef: http://whois.arin.net/rest/poc/OA12-ARIN
OrgTechHandle: SWIPP-ARIN
OrgTechName: swipper
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@verizonbusiness.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP-ARIN
OrgTechHandle: SWIPP9-ARIN
OrgTechName: SWIPPER
OrgTechPhone: +1-800-900-0241
OrgTechEmail: stephen.r.middleton@verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP9-ARIN
OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-800-900-0241
OrgAbuseEmail: abuse-mail@verizonbusiness.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE3-ARIN
RTechHandle: OA12-ARIN
RTechName: UUnet Technologies, Inc., Technologies
RTechPhone: +1-800-900-0241
RTechEmail: help4u@verizonbusiness.com
RTechRef: http://whois.arin.net/rest/poc/OA12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
Raw
18
$ whois 65.222.202.152
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.152"
#
# Use "?" to get help.
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.152?showDetails=true&showARIN=false&ext=netref2
#
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
CONSCIOUS SECURITY UU-65-222-202-152-D2 (NET-65-222-202-152-1) 65.222.202.152 - 65.222.202.159
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
Raw
19
$ whois 65.222.202.160
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.160"
#
# Use "?" to get help.
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.160?showDetails=true&showARIN=false&ext=netref2
#
NetRange: 65.192.0.0 - 65.223.255.255
CIDR: 65.192.0.0/11
OriginAS:
NetName: UUNET65
NetHandle: NET-65-192-0-0-1
Parent: NET-65-0-0-0-0
NetType: Direct Allocation
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2000-10-27
Updated: 2012-03-20
Ref: http://whois.arin.net/rest/net/NET-65-192-0-0-1
OrgName: MCI Communications Services, Inc. d/b/a Verizon Business
OrgId: MCICS
Address: 22001 Loudoun County Pkwy
City: Ashburn
StateProv: VA
PostalCode: 20147
Country: US
RegDate: 2006-05-30
Updated: 2011-11-30
Ref: http://whois.arin.net/rest/org/MCICS
OrgTechHandle: SWIPP-ARIN
OrgTechName: swipper
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@verizonbusiness.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP-ARIN
OrgTechHandle: SWIPP9-ARIN
OrgTechName: SWIPPER
OrgTechPhone: +1-800-900-0241
OrgTechEmail: stephen.r.middleton@verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP9-ARIN
OrgNOCHandle: OA12-ARIN
OrgNOCName: UUnet Technologies, Inc., Technologies
OrgNOCPhone: +1-800-900-0241
OrgNOCEmail: help4u@verizonbusiness.com
OrgNOCRef: http://whois.arin.net/rest/poc/OA12-ARIN
OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-800-900-0241
OrgAbuseEmail: abuse-mail@verizonbusiness.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE3-ARIN
OrgTechHandle: JHU140-ARIN
OrgTechName: Huffines, Jody
OrgTechPhone: +1-703-886-6093
OrgTechEmail: Jody.Huffines@one.verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/JHU140-ARIN
RTechHandle: OA12-ARIN
RTechName: UUnet Technologies, Inc., Technologies
RTechPhone: +1-800-900-0241
RTechEmail: help4u@verizonbusiness.com
RTechRef: http://whois.arin.net/rest/poc/OA12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
Raw
2
$ whois 65.222.202.0
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.0"
#
# Use "?" to get help.
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.0?showDetails=true&showARIN=false&ext=netref2
#
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
SCIENCE APPLICATIONS INT UU-65-222-202-D4 (NET-65-222-202-0-1) 65.222.202.0 - 65.222.202.15
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
Raw
20
$ whois 65.222.202.175
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.175"
#
# Use "?" to get help.
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.175?showDetails=true&showARIN=false&ext=netref2
#
NetRange: 65.192.0.0 - 65.223.255.255
CIDR: 65.192.0.0/11
OriginAS:
NetName: UUNET65
NetHandle: NET-65-192-0-0-1
Parent: NET-65-0-0-0-0
NetType: Direct Allocation
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2000-10-27
Updated: 2012-03-20
Ref: http://whois.arin.net/rest/net/NET-65-192-0-0-1
OrgName: MCI Communications Services, Inc. d/b/a Verizon Business
OrgId: MCICS
Address: 22001 Loudoun County Pkwy
City: Ashburn
StateProv: VA
PostalCode: 20147
Country: US
RegDate: 2006-05-30
Updated: 2011-11-30
Ref: http://whois.arin.net/rest/org/MCICS
OrgTechHandle: JHU140-ARIN
OrgTechName: Huffines, Jody
OrgTechPhone: +1-703-886-6093
OrgTechEmail: Jody.Huffines@one.verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/JHU140-ARIN
OrgNOCHandle: OA12-ARIN
OrgNOCName: UUnet Technologies, Inc., Technologies
OrgNOCPhone: +1-800-900-0241
OrgNOCEmail: help4u@verizonbusiness.com
OrgNOCRef: http://whois.arin.net/rest/poc/OA12-ARIN
OrgTechHandle: SWIPP-ARIN
OrgTechName: swipper
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@verizonbusiness.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP-ARIN
OrgTechHandle: SWIPP9-ARIN
OrgTechName: SWIPPER
OrgTechPhone: +1-800-900-0241
OrgTechEmail: stephen.r.middleton@verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP9-ARIN
OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-800-900-0241
OrgAbuseEmail: abuse-mail@verizonbusiness.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE3-ARIN
RTechHandle: OA12-ARIN
RTechName: UUnet Technologies, Inc., Technologies
RTechPhone: +1-800-900-0241
RTechEmail: help4u@verizonbusiness.com
RTechRef: http://whois.arin.net/rest/poc/OA12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
Raw
3
$ whois 65.222.202.16
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.16"
#
# Use "?" to get help.
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.16?showDetails=true&showARIN=false&ext=netref2
#
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
Old Dominion Internet UU-65-222-202-16-D1 (NET-65-222-202-16-1) 65.222.202.16 - 65.222.202.31
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
Raw
4
$ whois 65.222.202.32
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.32"
#
# Use "?" to get help.
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.32?showDetails=true&showARIN=false&ext=netref2
#
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
FTS2001/US Government UU-65-222-202-32 (NET-65-222-202-32-1) 65.222.202.32 - 65.222.202.47
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
Raw
5
$ whois 65.222.202.48
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.48"
#
# Use "?" to get help.
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.48?showDetails=true&showARIN=false&ext=netref2
#
NetRange: 65.192.0.0 - 65.223.255.255
CIDR: 65.192.0.0/11
OriginAS:
NetName: UUNET65
NetHandle: NET-65-192-0-0-1
Parent: NET-65-0-0-0-0
NetType: Direct Allocation
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2000-10-27
Updated: 2012-03-20
Ref: http://whois.arin.net/rest/net/NET-65-192-0-0-1
OrgName: MCI Communications Services, Inc. d/b/a Verizon Business
OrgId: MCICS
Address: 22001 Loudoun County Pkwy
City: Ashburn
StateProv: VA
PostalCode: 20147
Country: US
RegDate: 2006-05-30
Updated: 2011-11-30
Ref: http://whois.arin.net/rest/org/MCICS
OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-800-900-0241
OrgAbuseEmail: abuse-mail@verizonbusiness.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE3-ARIN
OrgTechHandle: SWIPP9-ARIN
OrgTechName: SWIPPER
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP9-ARIN
OrgTechHandle: SWIPP-ARIN
OrgTechName: swipper
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@verizonbusiness.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP-ARIN
OrgTechHandle: JHU140-ARIN
OrgTechName: Huffines, Jody
OrgTechPhone: +1-703-886-6093
OrgTechEmail: Jody.Huffines@one.verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/JHU140-ARIN
OrgNOCHandle: OA12-ARIN
OrgNOCName: UUnet Technologies, Inc., Technologies
OrgNOCPhone: +1-800-900-0241
OrgNOCEmail: help4u@verizonbusiness.com
OrgNOCRef: http://whois.arin.net/rest/poc/OA12-ARIN
RTechHandle: OA12-ARIN
RTechName: UUnet Technologies, Inc., Technologies
RTechPhone: +1-800-900-0241
RTechEmail: help4u@verizonbusiness.com
RTechRef: http://whois.arin.net/rest/poc/OA12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
Raw
6
$ whois 65.222.202.55
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.55"
#
# Use "?" to get help.
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.55?showDetails=true&showARIN=false&ext=netref2
#
NetRange: 65.192.0.0 - 65.223.255.255
CIDR: 65.192.0.0/11
OriginAS:
NetName: UUNET65
NetHandle: NET-65-192-0-0-1
Parent: NET-65-0-0-0-0
NetType: Direct Allocation
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2000-10-27
Updated: 2012-03-20
Ref: http://whois.arin.net/rest/net/NET-65-192-0-0-1
OrgName: MCI Communications Services, Inc. d/b/a Verizon Business
OrgId: MCICS
Address: 22001 Loudoun County Pkwy
City: Ashburn
StateProv: VA
PostalCode: 20147
Country: US
RegDate: 2006-05-30
Updated: 2011-11-30
Ref: http://whois.arin.net/rest/org/MCICS
OrgTechHandle: SWIPP-ARIN
OrgTechName: swipper
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@verizonbusiness.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP-ARIN
OrgTechHandle: SWIPP9-ARIN
OrgTechName: SWIPPER
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/SWIPP9-ARIN
OrgTechHandle: JHU140-ARIN
OrgTechName: Huffines, Jody
OrgTechPhone: +1-703-886-6093
OrgTechEmail: Jody.Huffines@one.verizon.com
OrgTechRef: http://whois.arin.net/rest/poc/JHU140-ARIN
OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-800-900-0241
OrgAbuseEmail: abuse-mail@verizonbusiness.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE3-ARIN
OrgNOCHandle: OA12-ARIN
OrgNOCName: UUnet Technologies, Inc., Technologies
OrgNOCPhone: +1-800-900-0241
OrgNOCEmail: help4u@verizonbusiness.com
OrgNOCRef: http://whois.arin.net/rest/poc/OA12-ARIN
RTechHandle: OA12-ARIN
RTechName: UUnet Technologies, Inc., Technologies
RTechPhone: +1-800-900-0241
RTechEmail: help4u@verizonbusiness.com
RTechRef: http://whois.arin.net/rest/poc/OA12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
Raw
7
$ whois 65.222.202.56
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.56"
#
# Use "?" to get help.
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.56?showDetails=true&showARIN=false&ext=netref2
#
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
UNIVERSAL MACHINE CO OF POTTSTOWN INC UU-65-222-202-56-D3 (NET-65-222-202-56-1) 65.222.202.56 - 65.222.202.63
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
Raw
8
$ whois 65.222.202.64
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.64"
#
# Use "?" to get help.
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.64?showDetails=true&showARIN=false&ext=netref2
#
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
KITRON UU-65-222-202-64-D4 (NET-65-222-202-64-1) 65.222.202.64 - 65.222.202.79
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
Raw
9
$ whois 65.222.202.80
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
#
# Query terms are ambiguous. The query is assumed to be:
# "n 65.222.202.80"
#
# Use "?" to get help.
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=65.222.202.80?showDetails=true&showARIN=false&ext=netref2
#
MCI Communications Services, Inc. d/b/a Verizon Business UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255
MORNINGSIDE SPORTS FARM UU-65-222-202-80 (NET-65-222-202-80-1) 65.222.202.80 - 65.222.202.87
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
@boite
Copy link

boite commented Aug 5, 2013

Interesting that there's two different locations reported for 65.222.202.53

Host script results:
|_hostmap-robtex: ERROR: Script execution failed (use -d to debug)
| asn-query: 
| BGP: 65.192.0.0/11 | Country: US
|   Origin AS: 701 - UUNET - MCI Communications Services, Inc. d/b/a Verizon Business
|_    Peer AS: 174 286 702 1299 2914 3257 3356 22822
| whois: Record found at whois.arin.net
| netrange: 65.192.0.0 - 65.223.255.255
| netname: UUNET65
| orgname: MCI Communications Services, Inc. d/b/a Verizon Business
| orgid: MCICS
| country: US stateprov: VA
| orgtechname: SWIPPER
|_orgtechemail: stephen.r.middleton@verizon.com
|_ip-geolocation-maxmind: ERROR: Script execution failed (use -d to debug)
| ip-geolocation-geobytes: 
|   latitude: 38.9048
|   longitude: -77.0354
|   city: Washington
|   region: District of Columbia
|_  country: United States
| ip-geolocation-geoplugin: 
| 65.222.202.53
|   coordinates (lat,lon): 38.969501,-77.386101
|_  state: Virginia, United States
|_traceroute-geolocation: ERROR: Script execution failed (use -d to debug)

@mtigas
Copy link
Author

mtigas commented Aug 5, 2013

ip-to-geo databases are always hit-or-miss. As far as I know, they tune their databases based on DNS and guesses from traceroutes (since if you traceroute to a server, you will often find a router like "core5.dfw1.rackspace.net" that gives you a hint as to what city and what ISP or datacenter the machine is located in).

http://www.geobytes.com/FAQ.htm

https://www.maxmind.com/en/city_accuracy

So, no surprise that the IP is in the Verizon Business Virginia range and geoip databases imply that region as well. I’m more intrigued at the numeric distance between the IP and SAIC / US Govt ranges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment