Sunday, 5 August 2007

Blocking Türk Telekom's NTP abuse

For months on end the infamous turkish isp Türk Telekom has raped the european ntp pool.

Today Simon Arlott, on the timekeepers' mailinglist, came up with a simple way to look up the ip address space of Türk Telekom:
$ whois -i org ORG-TT3-RIPE -K
inetnum: 194.54.32.0 - 194.54.63.255
inetnum: 195.174.0.0 - 195.175.255.255
inetnum: 62.248.0.0 - 62.248.127.255
inetnum: 212.156.0.0 - 212.156.255.255
inetnum: 212.174.0.0 - 212.175.255.255
inetnum: 81.212.0.0 - 81.215.255.255
inetnum: 85.96.0.0 - 85.111.255.255
inetnum: 88.224.0.0 - 88.255.255.255
inetnum: 78.160.0.0 - 78.191.255.255
inet6num: 2a01:358::/32
In sorted cidr blocks that would be
  62.248.0.0/17
78.160.0.0/11
81.212.0.0/13
85.96.0.0/12
88.224.0.0/11
194.54.32.0/18
195.174.0.0/15
212.156.0.0/16
212.174.0.0/15
2a01:358::/32
Now blocked!

No comments: