[136065] in North American Network Operators' Group
Re: APNIC description: "unknown"
daemon@ATHENA.MIT.EDU (Christopher Morrow)
Mon Jan 31 23:39:30 2011
In-Reply-To: <AANLkTik+5bKiUBiF4ucJuMf7KeOopyxp8r=b0_+MA2Tj@mail.gmail.com>
Date: Mon, 31 Jan 2011 23:33:36 -0500
From: Christopher Morrow <morrowc.lists@gmail.com>
To: Owen DeLong <owen@delong.com>
Cc: NANOG <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
curses arin-restful-output!
$ whois -h whois.afrinic.net 168.167.168.34
% This is the AfriNIC Whois server.
% Note: this output has been filtered.
% Information related to '168.167.0.0 - 168.167.255.255'
inetnum: 168.167.0.0 - 168.167.255.255
netname: BOTSNET
descr: Botswana Telecommunications Corporation
descr: Independance Avenue, Government Enclave
(the 41 block in the original email does just show as allocated to
AFRINIC only though)
-Chris
On Mon, Jan 31, 2011 at 11:29 PM, Christopher Morrow
<morrowc.lists@gmail.com> wrote:
> On Mon, Jan 31, 2011 at 11:14 PM, Owen DeLong <owen@delong.com> wrote:
>> Interesting... "The Leadig Provider in Dhaka" is using hijacked addresse=
s.
>
> .... botswana (not the same direct area. but one I happened to notice
> this same thing happening with this weekend)
>
> ;; QUESTION SECTION:
> ;bw. =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0IN =A0 =A0 =
=A0NS
>
> ;; ANSWER SECTION:
> bw. =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 86400 =A0 IN =A0 =A0 =A0NS =
=A0 =A0 =A0ns4.btc.bw.
> bw. =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 86400 =A0 IN =A0 =A0 =A0NS =
=A0 =A0 =A0rain.psg.com.
> bw. =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 86400 =A0 IN =A0 =A0 =A0NS =
=A0 =A0 =A0vpsm.btc.bw.
> bw. =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 86400 =A0 IN =A0 =A0 =A0NS =
=A0 =A0 =A0hippo.ru.ac.za.
> bw. =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 86400 =A0 IN =A0 =A0 =A0NS =
=A0 =A0 =A0bw.auth-servers.net.
> bw. =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 86400 =A0 IN =A0 =A0 =A0NS =
=A0 =A0 =A0ns1.btc.bw.
>
> ns4.btc.bw. =A0 =A0 =A0 =A0 =A0 =A0 32809 =A0 IN =A0 =A0 =A0A =A0 =A0 =A0=
168.167.253.20
> ns1.btc.bw. =A0 =A0 =A0 =A0 =A0 =A0 32735 =A0 IN =A0 =A0 =A0A =A0 =A0 =A0=
168.167.168.34
>
> NetRange: =A0 =A0 =A0 168.167.0.0 - 168.167.255.255
> CIDR: =A0 =A0 =A0 =A0 =A0 168.167.0.0/16
> OriginAS:
> NetName: =A0 =A0 =A0 =A0AFRINIC-168-167-0-0
> NetHandle: =A0 =A0 =A0NET-168-167-0-0-1
> Parent: =A0 =A0 =A0 =A0 NET-168-0-0-0-0
> NetType: =A0 =A0 =A0 =A0Transferred to AfriNIC
> Comment: =A0 =A0 =A0 =A0This IP address range is under AFRINIC responsibi=
lity.
> Comment: =A0 =A0 =A0 =A0Please see http://www.afrinic.net/ for further de=
tails,
> Comment: =A0 =A0 =A0 =A0or check the WHOIS server located at whois.afrini=
c.net.
> RegDate: =A0 =A0 =A0 =A02005-02-21
> Updated: =A0 =A0 =A0 =A02005-02-21
> Ref: =A0 =A0 =A0 =A0 =A0 =A0http://whois.arin.net/rest/net/NET-168-167-0-=
0-1
>
> OrgName: =A0 =A0 =A0 =A0African Network Information Center
> OrgId: =A0 =A0 =A0 =A0 =A0AFRINIC
> Address: =A0 =A0 =A0 =A0Level 11ABC
> Address: =A0 =A0 =A0 =A0Raffles Tower
> Address: =A0 =A0 =A0 =A0Lot 19, Cybercity
> City: =A0 =A0 =A0 =A0 =A0 Ebene
> StateProv:
> PostalCode:
> Country: =A0 =A0 =A0 =A0MU
> RegDate: =A0 =A0 =A0 =A02004-05-17
> Updated: =A0 =A0 =A0 =A02010-06-28
> Comment: =A0 =A0 =A0 =A0AfriNIC - http://www.afrinic.net
> Comment: =A0 =A0 =A0 =A0The African & Indian Ocean Internet Registry
>
> Seems like Afrinic has some records-keeping-issues...
>
> -chris
>
>> Owen
>>
>> On Jan 31, 2011, at 8:00 PM, Richard Barnes wrote:
>>
>>> Some times they're not so anonymous =A0:)
>>>
>>> 122.200.40.0/21 =A0 =A0 =A038272 =A0 =A0 >>UNKNOWN<<
>>>
>>> <http://122.200.40.5/>
>>>
>>> "Sonargaon Online Limited(SOL) is the leading Internet Service
>>> Provider in Dhaka"
>>>
>>> <http://122.200.40.5/pages/contact_us.htm>
>>>
>>> "
>>> 40/1, Rahman Plaza
>>>
>>> Shahid Faruk Road (4th Floor)
>>>
>>> Jatrabari, Dhaka
>>>
>>> Bangladesh
>>>
>>> Tel : 88-02-7553432
>>>
>>> E-mail : info@sonargaononline.net
>>> "
>>>
>>>
>>>
>>>
>>> On Mon, Jan 31, 2011 at 10:00 PM, Owen DeLong <owen@delong.com> wrote:
>>>>
>>>> On Jan 31, 2011, at 6:32 PM, Vovan wrote:
>>>>
>>>>> Hello,
>>>>>
>>>>> sorry for possibly trite question, but what does this ">>UNKNOWN<<" m=
ean? e.g.:
>>>>>
>>>>>> Network =A0 =A0 =A0 =A0 =A0 =A0Origin AS =A0Description
>>>>>> 41.222.79.0/24 =A0 =A0 =A0 36938 =A0 =A0 >>UNKNOWN<<
>>>>>
>>>>> quote from: http://thyme.rand.apnic.net/current/data-add-IANA
>>>>>
>>>>>
>>>>> Cheers,
>>>>>
>>>>> Vladimir
>>>>
>>>> It's an unallocated address being advertised by an unallocated AS numb=
er.
>>>>
>>>> Pretty hard to identify a contact for such a route, no?
>>>>
>>>> Owen
>>>>
>>>>
>>>>
>>
>>
>>
>
