- NANOG - lists.nanog.org

Re: zotob - blocking tcp/445
by Scott Weeks 15 Aug '05

15 Aug '05

----- Original Message Follows ----- From: Saku Ytti <saku+nanog(a)ytti.fi> To: nanog list <nanog(a)merit.edu> Subject: Re: zotob - blocking tcp/445 Date: Mon, 15 Aug 2005 22:22:10 +0300 > On (2005-08-15 18:51 +0000), surfer(a)mauigateway.com wrote: > > > NetBIOS was never meant to be a WAN protocol, so no > > problem in blocking it. > > I'm not nearly confident enough to decide on behalf of > almost billion other people how they should benefit from > the Internet and how not to. I'm not talking about a billion people doing the same thing. It's your network, so you don't have to block. Or, it's your network, so you can. Or, it's Gadi's network, so he can (or not). Or, it's "several different big ISP's" networks, so they can block (or not). "to stop the spread of the worm they now block tcp/445." It does work. I know. I've done it. It makes some networks better netizens as they don't have the money or resources to control the outbreaks and it's a simple way to keep worms from attacking the rest of us. Do what you want it's your network. http://www.faqs.org/rfcs/rfc1001.html 5. OVERVIEW OF NetBIOS NetBIOS was designed for use by groups of PCs, sharing a broadcast medium. Old argument, apologies for feeding. scott

1 0

zotob - blocking tcp/445
by Gadi Evron 15 Aug '05

15 Aug '05

I heard from several different big ISP's that to stop the spread of the worm they now block tcp/445. I suppose it works. Gadi.

1 0

RE: drone armies C&C report - July/2005
by Hannigan, Martin 15 Aug '05

15 Aug '05

[ SNIP ] > Below is a periodic public report from the drone armies / botnets > research and mitigation mailing list. > For this report it should be noted that we base our analysis > on the data > we have accumulated from various sources. > > According to our incomplete analysis of information we have Serious question. Is this self promotion of IL CERT? -M<

1 0

drone armies C&C report - July/2005
by Gadi Evron 15 Aug '05

15 Aug '05

Below is a periodic public report from the drone armies / botnets research and mitigation mailing list. For this report it should be noted that we base our analysis on the data we have accumulated from various sources. According to our incomplete analysis of information we have thus far, we now publish our regular reports, with some additional information. As of this month, any responsible party that wishes to receive information about botnet C&C's in their net space can contact us and be added to our notification list. This month's survey is of 3629 unique domain with port or IP with port suspect C&Cs. This list is extracted from the BBL which currently has a historical base of 4464 reported C&Cs. Of the suspect C&Cs surveyed, 920 reported as Open, 3115 reported as closed and 393 issued resets to the survey instrument. Of the C&Cs listed by domain name, 2080 are mitigated via remapping. 276 ASNs report one or more open C&Cs. ASNs with 10 or more unresolved and open suspect C&Cs: ASNumber Responsible Party Count Open/Unresolved 21840 SAGONET-TPA - Sago Networks 53 34 30058 FDCSERVERS - FDCservers.net LL 65 32 30083 SERVER4YOU - Server4You Inc. 41 28 12832 LYCOS-EUROPE Lycos Europe GmbH 31 27 23522 CIT-FOONET - CREATIVE INTERNET 25 23 174 COGENT Cogent/PSI 45 23 13680 AS13680 Hostway Corporation Ta 22 22 6461 MFNX MFN - Metromedia Fiber Ne 23 18 27595 ATRIVO-AS - Atrivo 27 16 15083 INFOLINK-MIA-US - Infolink Inf 19 15 4766 KIXS-AS-KR Korea Telecom 41 15 8560 SCHLUND-AS Schlund + Partner A 28 14 27645 ASN-NA-MSG-01 - Managed Soluti 19 12 13237 LAMBDANET-AS European Backbone 15 12 1113 TUGNET Technische Universitaet 12 11 13301 UNITEDCOLO-AS Autonomous Syste 16 11 6939 HURRICANE - Hurricane Electric 12 10 16265 LEASEWEB LEASEWEB AS 13 10 21698 NEBRIX-CA - Nebrix Communicati 25 10 Top 10 ASNs by total count: ASNumber Responsible Party Count Open/Unresolved 14742 INTERNAP-BLOCK-4 - Internap Ne 118 1 14744 INTERNAP-BLOCK-4 - Internap Ne 118 1 25761 STAMINUS-COMM - Staminus Commu 69 25 10913 INTERNAP-BLK - Internap Networ 67 1 30058 FDCSERVERS - FDCservers.net LL 65 32 21840 SAGONET-TPA - Sago Networks 53 34 174 COGENT Cogent/PSI 45 23 4766 KIXS-AS-KR Korea Telecom 41 15 30083 SERVER4YOU - Server4You Inc. 41 28 3356 LEVEL3 Level 3 Communications 37 2 ASNs with 0ne or more open C&Cs: ASNumber Responsible Party 81 CONCERT - MCNC Center of Commu 174 COGENT Cogent/PSI 237 MERIT-AS-14 - Merit Network In 701 ALTERNET-AS - UUNET Technologi 790 EUNETFI EUnet Finland 813 UUNET-AS1 - UUNET Technologies 1113 TUGNET Technische Universitaet 1221 ASN-TELSTRA Telstra Pty Ltd 1239 SPRINTLINK - Sprint 1267 ASN-INFOSTRADA Infostrada S.p. 1659 ERX-TANET-ASN1 Tiawan Academic 1668 AOL-ATDN - AOL Transit Data Ne 1784 GNAPS - Global NAPs Networks 1785 USLEC-ASN-1785 - USLEC Corp. 1955 HBONE-AS HUNGARNET 2042 ERX-JARING Malaysian institute 2108 CARNET-AS Croatian Academic an 2119 TELENOR-NEXTEL Telenor Interne 2501 JPNIC-ASBLOCK-AP JPNIC 2514 JPNIC-ASBLOCK-AP JPNIC 2527 JPNIC-ASBLOCK-AP JPNIC 2828 XO-AS15 - XO Communications 2856 BT-UK-AS BTnet UK Regional net 2907 ERX-SINET-AS National Center f 2914 VERIO - Verio Inc. 3064 AFFINITY-FTL - Affinity Intern 3215 AS3215 France Telecom Transpac 3246 TDCSONG TDC Song 3248 SIL-AT SILVER:SERVER GmbH 3265 XS4ALL-NL XS4ALL 3292 TDC TDC Data Networks 3301 TELIANET-SWEDEN TeliaNet Swede 3307 BANETELE-NORWAY BaneTele AS (f 3313 INET-AS I.NET S.p.A. 3344 KEWLIO-DOT-NET Kewlio.net Limi 3352 TELEFONICA-DATA-ESPANA Interne 3356 LEVEL3 Level 3 Communications 3462 HINET Data Communication Busin 3491 BTN-ASN - Beyond The Network A 3561 SAVVIS - Savvis 3701 NERONET - Oregon Joint Graduat 3758 ERX-SINGNET SingNet 3786 ERX-DACOMNET DACOM Corporation 3801 MISNET - Mikrotec Internet Ser 4134 CHINANET-BACKBONE No.31 Jin-ro 4230 Embratel 4436 AS-NLAYER - nLayer Communicati 4589 EASYNET Easynet Group Plc 4618 INET-TH-AS Internet Thailand C 4628 ASN-PACIFIC-INTERNET-IX Pacifi 4637 REACH Reach Network Border AS 4645 ASN-HKNET-AP HKNet Co. Ltd 4670 HYUNDAI-KR Shinbiro 4713 OCN NTT Communications Corpora 4732 DION KDDI CORPORATION 4766 KIXS-AS-KR Korea Telecom 4780 SEEDNET Digital United Inc. 4812 CHINANET-SH-AP China Telecom ( 4837 CHINA169-BACKBONE CNCGROUP Chi 5089 NTL NTL Group Limited 5381 POWTECH-AS PowerTech Informati 5390 EURONET Wanadoo Nederland BV G 5417 DEMON-NL Demon Netherlands Th 5462 CABLEINET Telewest Broadband 5486 Euronet Digital Communications 5522 OMNITEL PLC OMNITEL 5617 TPNET Polish Telecom's commerc 5783 KCSOS-NET - Kern County Superi 6058 NWT-AS - Internet North 6079 RCN-AS - RCN Corporation 6128 CABLE-NET-1 - Cablevision Syst 6197 BATI-ATL - BellSouth Network S 6295 WHIDBEY1 - Whidbey Internet Se 6327 SHAW - Shaw Communications Inc 6380 BELLSOUTH-NET-BLK - BellSouth. 6383 BELLSOUTH-NET-BLK - BellSouth. 6385 BELLSOUTH-NET-BLK - BellSouth. 6388 BELLSOUTH-NET-BLK - BellSouth. 6412 KW Gulfnet International 6453 GLOBEINTERNET Teleglobe Americ 6461 MFNX MFN - Metromedia Fiber Ne 6467 ESPIRECOMM - e.spire Communica 6711 HUNGARNET-SZEGED Szeged Univer 6805 TDDE-ASN1 Telefonica Deutschla 6939 HURRICANE - Hurricane Electric 7011 FRONTIER-AND-CITIZENS - Electr 7015 CCCH-AS2 - Comcast Cable Commu 7018 ATT-INTERNET4 - AT&T WorldNet 7132 SBIS-AS - SBC Internet Service 7303 Telecom Argentina S.A. 7701 CAIRNSNET-AS-AP CairnsNet Pty 7893 BELLSOUTH-NET-BLK2 - Bellsouth 8001 NET-ACCESS-CORP - Net Access C 8047 GCI - GCI Communications Inc. 8120 BESTWEB - BestWeb Corporation 8151 Uninet S.A. de C.V. 8176 NETSCAPE-ASN - Netscape 8220 COLT COLT Telecommunications 8326 PL-BYDMAN-EDU Educational User 8342 RTCOMM-AS RTComm.RU Autonomous 8362 NordNet Autonomous System 8434 TELENOR-SE Telenor AB 8551 BEZEQ-INTERNATIONAL-AS Bezeqin 8560 SCHLUND-AS Schlund + Partner A 8642 B2 B2 Bredband AB (publ) 8732 COMCOR-AS AS for Moscow Teleco 8736 GNS Grapes Network Services 8752 ASVT-NETWORK RusSDO Autonomous 8943 JUMP Jump Networks Ltd. 8968 Albacom Autonomous System 8972 INTERGENIA-ASN intergenia auto 8992 TELERING-AT tele.ring Telekom 9044 SOLNET SolNet Internet Solutio 9105 TISCALI-UK Tiscali UK 9116 Goldenlines main autonomous sy 9121 TTNET TTnet Autonomous System 9277 THRUNET-AS-KR THRUNET 9317 ITISNET-AS Inha University 9318 HANARO-AS HANARO Telecom 9768 PUBNET1-AS KT 9800 UNICOM CHINA UNICOM 9803 JINGXUN Beijing Jingxun Public 9806 BJENET Beijing Educational Inf 9811 BJGY srit corp. beijing. 9848 GNGAS GNG Networks 9919 NCIC-TW New Century InfoComm T 9924 TFN-TW Taiwan Fixed Network T 10212 GUANGTONGNET-AP China Guangzho 10481 Prima S.A. 10602 TDL - THE DIAMOND LANE 10913 INTERNAP-BLK - Internap Networ 11191 ELITE-NET - Elite.Net 11290 RAPIDUS - COGECO Cable Canada 11305 INTERLAND-NET1 - Interland Inc 11351 RR-NYSREGION-ASN-01 - Road Run 11388 MAXIM - Interland 11426 SCRR-11426 - Road Runner 11814 IGS-GTA - Information Gateway 12322 PROXAD AS for Proxad ISP 12352 WINEASY WinEasy Autonomous Sys 12363 DADA S.p.a. 12578 APOLLO-AS LATTELEKOM-APOLLO 12634 SCARLET Autonomous System for 12695 DINET-AS Digital Network JSC 12832 LYCOS-EUROPE Lycos Europe GmbH 12843 TELEMAXX TelemaxX Telekommunik 12859 NL-BIT BIT BV 12867 ONLINE-BG BULGARIA ONLINE 12874 FASTWEB Fastweb Autonomous Sys 12880 DCI-AS DCI Autonomous System 13213 UK2NET-AS UK-2 Ltd Autonomous 13237 LAMBDANET-AS European Backbone 13272 STARMAN Starman Internet AS 13301 UNITEDCOLO-AS Autonomous Syste 13571 VIDEOTRON-LTEE - Videotron lte 13609 CHOICEONECOM - Choice One Comm 13680 AS13680 Hostway Corporation Ta 13726 VISION-I-SYSTEMS-ASN - Vision 13749 EVERYONES-INTERNET - Everyones 13768 PEER1 - Peer 1 Network Inc. 14501 CIHOST - C I Host 14562 SHAW-COMMUNICATIONS - Shaw Com 14742 INTERNAP-BLOCK-4 - Internap Ne 14744 INTERNAP-BLOCK-4 - Internap Ne 15083 INFOLINK-MIA-US - Infolink Inf 15149 EZZI-101-BGP - EZZI.net 15440 AS15440 MicroLink Lietuva Auto 15542 ZEELANDNET ZeelandNet BV 15589 AS15589 Eutelia S.p.A. Backbon 15694 ATMAN ATMAN Autonomous System 15703 TRUESERVER-AS TrueServer BV AS 15857 DIALOG-AS DIALOG-NET Autonomuo 16150 PORT80 Port80 AB Sweden 16265 LEASEWEB LEASEWEB AS 16276 OVH OVH 16526 BIRCH-TELECOM - Birch Telecom 16557 RE-STAFFORD - R. E. Stafford I 16629 Compania de Telecomunicaciones 17054 SLC-EXPEDIENT - e-xpedient 17184 ATL-CBEYOND - CBEYOND COMMUNIC 17444 NWT-AS-AP AS number for New Wo 17506 JPNIC-JP-ASN-BLOCK Japan Netwo 17557 PKTELECOM-AS-AP Pakistan Telec 17676 JPNIC-JP-ASN-BLOCK Japan Netwo 17964 DXTNET Beijing Dian-Xin-Tong N 17974 TELKOMNET-AS2-AP PT TELEKOMUNI 18474 AENEAS-CWUS - Aeneas Internet 18847 NETFIRE - NetFire.com 19262 VZGNI-TRANSIT - Verizon Intern 19444 CHARTER-STL - CHARTER COMMUNIC 19864 O1COMM - O1 COMMUNICATIONS 20001 ROADRUNNER-WEST - Road Runner 20013 CYRUSONE - CYRUS ONE 20115 CHARTER-NET-HKY-NC - Charter C 20141 EDELTACOM-SUW-300 - e^deltacom 20183 VERICENTER - VeriCenter Inc. 20473 NETTRANS - NetTransactions LL 20495 WEDARE We Dare BV Autonomous S 20580 Telecom Italia Network 20804 ASN-TELENERGO EXATEL S.A. Auto 20932 SIG SIG - IP-MAN.NET 21195 DGCSYSTEMS DGC Systems AB Auto 21285 DKOM Telekom Austria Applicati 21502 ASN-NUMERICABLE NUMERICABLE is 21698 NEBRIX-CA - Nebrix Communicati 21788 NOC - Network Operations Cente 21840 SAGONET-TPA - Sago Networks 21844 THEPLANET-AS - THE PLANET 21889 RAPIDSYSTEMS - Rapid Systems C 22659 LIQUIDIX - LIQUID COMMUNICATIO 22685 QUICKPACKET - Plusweb Communic 22773 CCINET-2 - Cox Communications 22822 LLNW - Limelight Networks LLC 22909 DNEO-OSP1 - Comcast Cable Comm 22927 Telefonica de Argentina 22935 WAYNE-BOCES - Wayne Finger-Lak 23183 SWIFTSYSTEMS - SWIFT SYSTEMS 23201 Telecel S.A. 23352 SERVER-CENTRAL-CHI - Server Ce 23393 ISPRIME - ISPrime Inc. 23522 CIT-FOONET - CREATIVE INTERNET 23670 SECURE-AS Oz Servers Data Cen 23980 YOUNGNAM-UNIV-AS-AP YOUNGNAM U 24607 LENET "Lietuvos energija" JSC 24730 ASN-NETHOLDING Autonomous Syst 24953 ASN-CARRIER66 carrier66.net Ne 25504 CRONON-AS Cronon AG 25525 REASONNET-AS Reasonnet LTD 25653 PEGASUS - Pegasus Web Technolo 25700 SWIFTDESK - SWIFTDESK VENTURE 25761 STAMINUS-COMM - Staminus Commu 25973 MZIMA - Mzima Networks Inc. 26053 DREAMNET-C-S-I - DreamNet Comm 26496 PAH-INC - Go Daddy Software I 27524 NETSENTRY - Net Sentry Corp 27595 ATRIVO-AS - Atrivo 27645 ASN-NA-MSG-01 - Managed Soluti 28677 AMEN AMEN Network 28716 EPLANET-AS ePLANET SPA 28753 NETDIRECT AS NETDIRECT Frankfu 29055 PRODIGY-AS Prodigy ASN 29131 RAPIDSWITCH-AS RapidSwitch Ltd 29415 EUROWAN-ASN OVANET - EuroWan d 29550 EUROCONNEX-AS Euroconnex Netwo 29737 WOW-INTERNET - WideOpenWest LL 29748 CARPATHIA-HOSTING - Carpathia 29759 OXFORD-INDUSTRIES - Oxford Ind 30058 FDCSERVERS - FDCservers.net LL 30083 SERVER4YOU - Server4You Inc. 30099 SB-2 - ServerBeach 30315 EVERYONES-INTERNET2 - Everyone 30407 VELCOM - Rcp.net 30736 EASYSPEEDY-NETWORK Easyspeedy 30943 UTRANSIT-AS Utransit Internati 31034 ARUBA-ASN Aruba.it Network 31042 SERBIA-BROADBAND-AS Serbia Bro 31159 NETCATHOST-AS NetcatHosting 31216 BSOCOM BSO Communication Netwo 31400 AS31400 AS31400.NET BACKBONE 31669 ITSS-AS IT - SOLID SOLUTIONS 31800 DALNET - DALnet 31898 NAMEI - Name Intelligence Inc 31932 AFS-KC - American Fiber System 32097 WII-KC - WholeSale Internet 32666 CWRU-AS-1 - Case Western Reser 32748 STEADFAST - NoZone Inc. 32751 NUCLEARFALLOUT-SEA - Nuclearfa 32788 XILOGIX-ASN - Xilogix LLC 33438 EASYNEWS - Easynews Inc. 33569 ALLHOSTSHOP - ALLHOSTSHOP.COM 33657 DNEO-OSP7 - Comcast Cable Comm 34021 MULTI-VISP Multi-vISP Network 34465 BENESOL-AS Belgian Network Sol 34549 LAXIN-AS Laxin IT-Services Gmb 35921 IFCI-US - InternetFCI LLC * We would gladly like to establish a trusted relationship with these and any organizations to help them in the future. * By previous requests here is an explanation of what "ASN" is, by Joe St Sauver: http://darkwing.uoregon.edu/~joe/one-pager-asn.pdf The Trojan horses most used in botnets: 1. Korgobot. 2. SpyBot. 3. Optix Pro. 4. rBot. 5. Other SpyBot variants and strains (AgoBot, PhatBot, actual SDbots, etc.). This report is unchanged. Credit for gathering the data and compiling the statistics from our group efforts should go to the Statistics Project lead: Prof. Randal Vaughn <Randy_Vaughn(a)baylor.edu> -- Gadi Evron, Israeli Government CERT Manager, Tehila, Ministry of Finance. gadi(a)CERT.gov.il Office: +972-2-5317890 Fax: +972-2-5317801 The opinions, views, facts or anything else expressed in this email message are not necessarily those of the Israeli Government.

1 0

DSL Network Design Question
by surfer＠mauigateway.com 15 Aug '05

15 Aug '05

I am going to be cutting over about 75,000 DSL lines from one core network to another. Does anyone have recommendations on subnet and DHCP scope size? If I make them /23s I have to do about 145 subents. If I make them /22s I only have to do about 73. Being mainly an always on eyeball network I don't see any problems with making big subnets (/22). <flameproof undies == on> suggestions, recommendations, advice? scott

7 11

MS05-039 Worm in the wild
by Fergie (Paul Ferguson) 14 Aug '05

14 Aug '05

>From the SANS Internet Storm Center: [snip] Starting around 11:30 UTC, we've received several reports on a new worm variant that makes use of MS05-039 to spread. If you're not patched yet, this is your last call. F-Secure named the critter "Zotob.A",http://www.f-secure.com/weblog/ We've also received a submission of a binary called "pnpsrv.exe", which is recognized by ClamAV as Trojan.Spybot-123. Another reader has contributed evidence that a successful exploit by Zotob.A (or variant) The worm will download the main payload from the infecting machine. Once a machine is infected, it will become an ftp server itself. It will scan for open port 445/tcp. Once it finds a system with port 445 listening, it will try to use the PnP exploit to download and execute the main payload via ftp. Important facts so far: - Patch MS05-039 will protect you - Windows XP SP2 and Windows 2003 can not be exploited by this worm, as the worm does not use a valid logon. - Blocking port 445 will protect you (but watch for internal infected systems) - The FTP server does not run on port 21. It appears to pick a random high port. [snip] http://isc.sans.org/diary.php?date=2005-08-14 - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

con ed manhole issue
by Wallace Keith 13 Aug '05

13 Aug '05

is anyone aware of a possible Con Ed manhole fire in NY that may be affecting fiber connectivity? Seems to have started early am Saturday. looking for details as to Where/when? . Keith Wallace kwallace(a)pcconnection.com

1 0

speaking of lynn...
by Gadi Evron 13 Aug '05

13 Aug '05

Cisco flaw presentation spreads across the Web FBI Investigation... New copies of Michael Lynn's presentation on the Cisco router operating system flaw are springing up faster than the lawyers can take them down Cisco's lawyers are sending out cease-and-desist notices to Web sites that have published a controversial presentation by ex-Internet Security Systems (ISS) employee Michael Lynn that exposes the potential dangers of a flaw in the network giant's router operating system.The presentation, which was due to be given by Lynn at the Defcon conference in Las Vegas last week, was cancelled after legal threats from Cisco and ISS. The parties resolved the matter on Thursday last week. -- I guess that answers the question of the lgality of the matter? Gadi.

4 3

botnet reporting by AS - what about you?
by Gadi Evron 13 Aug '05

13 Aug '05

Hello. The drone armies research and mitigation mailing list is moving its reporting mechanism to the next level. If you have updated contact information for any of the below AS owners, please contact me _off-list_. Thanks, Gadi. 3MENATWORK - 3menatwork.com AAPT AAPT Limited ABACUS-NET-AS - Abacus America ACTCOM ACTCOM - Active Communi ADELPHIA-AS2 - Adelphia AFFINITY-FTL - Affinity Intern AFRINIC African Network Inform AIRBAND-PHOENIX - airBand Comm AITNET - Advanced Internet Tec Albacom Autonomous System Alestra ALICE Alice Networks ALLHOSTSHOP - ALLHOSTSHOP.COM ALTERNET-AS - UUNET Technologi AMEN AMEN Network AMIS-NET AMIS.NET Autonomous S AMNET-AU-AP Amnet IT Services AOL-ATDN - AOL Transit Data Ne APOL-AS Asia Pacific On-line S ARAGON DE CABLE ARUBA-ASN Aruba.it Network AS R Cable y Telecomunicacione AS12593 ISP UkrCom AS13680 Hostway Corporation Ta AS15440 MicroLink Lietuva Auto AS15589 Eutelia S.p.A. Backbon AS31400 AS31400.NET BACKBONE AS3215 France Telecom Transpac AS702 MCI EMEA - Commercial IP ASGARR GARR Italian academic a ASKONKUK KONKUK UNIVERSITY AS-LLIX - Liberty Lake Interne ASN852 - Telus Advanced Commun ASN-ATLANET Atlanet Autonomous ASN-BDDSL Bulldog Communicatio ASN-BNS Blixernetservices S.r. ASN-CARRIER66 carrier66.net Ne ASN-CATCHCOM Catch Communicati ASN-FOUR-U 4u-Networks Limited ASN-HKNET-AP HKNet Co. Ltd ASN-IBSNAZ TELECOM ITALIA ASN-INFOSTRADA Infostrada S.p. ASN-INNERHOST - Interland AS-NLAYER - nLayer Communicati ASN-LOUDPACKET - LoudPacket In ASN-NA-MSG-01 - Managed Soluti ASN-NERIM Nerim -- xDSL Intern ASN-NETHOLDING Autonomous Syst ASN-PACIFIC-INTERNET-IX Pacifi ASN-QWEST - Qwest ASN-TELENERGO EXATEL S.A. Auto ASN-TELSTRA Telstra Pty Ltd ASN-THEPLANET - ThePlanet.com ASVT-NETWORK RusSDO Autonomous Athens University of Economics ATHOME-BENELUX-BV AtHome Benel ATL-CBEYOND - CBEYOND COMMUNIC ATMAN ATMAN Autonomous System ATMLINK - ATMLINK ATRIVO-AS - Atrivo ATT-INTERNET3 - AT&T WorldNet ATT-INTERNET4 - AT&T WorldNet AUGUST-ASN - August Associates AUNA_TELECOM-AS AUNA Autonomou B2 B2 Bredband AB (publ) BACOM - Bell Advanced Communic BAKINTER-AS Bakinternet ISP A BANETELE-NORWAY BaneTele AS (f BATI-ATL - BellSouth Network S BATI-MIA - BellSouth Network S BELLSOUTH-NET-BLK - BellSouth. BELLSOUTH-NET-BLK2 - Bellsouth BENESOL-AS Belgian Network Sol BEN-LOMAND-TEL - Ben Lomand Te BESTWEB - BestWeb Corporation BEZEQ-INTERNATIONAL-AS Bezeqin BJGY srit corp. beijing. BSOCOM BSO Communication Netwo BTN-ASN - Beyond The Network A BT-UK-AS BTnet UK Regional net BURSTFIRE-EU Burstfire Network CABLECOM Cablecom GmbH CABLEINET Telewest Broadband CABLE-NET-1 - Cablevision Syst CABLEVISION S.A. CAIRNSNET-AS-AP CairnsNet Pty CARI - California Regional Int CARNET-AS Croatian Academic an CARPATHIA-HOSTING - Carpathia CASEMAISP-AS N.V. Casema CBCZ CZECHBONE AS CCCH-AS2 - Comcast Cable Commu CCCH-AS4 - Comcast Cable Commu CCINET-2 - Cox Communications CESNET2 Czech National Researc CHARTER-16787 - Charter Commun CHARTER-NET-HKY-NC - Charter C CHARTER-STL - CHARTER COMMUNIC CHINA169-BACKBONE CNCGROUP Chi CHINANET-BACKBONE No.31 Jin-ro CHOICEONECOM - Choice One Comm CHONBUK-AS Chonbuk National Un CIT-FOONET - CREATIVE INTERNET CLAREMONT - The Claremont Coll CMNET-GD Guangdong Mobile Comm CNUNET-AS-KR Chungnam National COGENT Cogent/PSI COLT COLT Telecommunications COMCOR-AS AS for Moscow Teleco Compania de Telecomunicaciones Computer Service Teleinformáti CONNECTPLUS-AP Singapore Telec COULOMB-AS AS for Coulomb CRNC - CRNC CRNET CHINA RAILWAY Internet(C CRONON-AS Cronon AG CTIHK-AS-AP City Telecom (H.K. CWRU-AS-1 - Case Western Reser CYBERCITY Cybercity A/S DACOM-PUBNETPLUS-AS-KR DACOM P DADA S.p.a. DALNET - DALnet DATA393 - Data393 Inc. DATAPIPE - DataPipe DATATELECOM Data Telecom Auton DCI-AS DCI Autonomous System DEMON-NL Demon Netherlands Th DFN-IP service G-WiN DGCSYSTEMS DGC Systems AB Auto DIALOG-AS DIALOG-NET Autonomuo DIGITAL-FOREST-NW - digital.fo DINET-AS Digital Network JSC DION KDDI CORPORATION DISNW1 - State Of Arkansas De DKOM Telekom Austria Applicati DLA-ASNBLOCK-AS - DoD Network DLS-LITH - DLS Computer Servic DNEO-OSP1 - Comcast Cable Comm DNEO-OSP4 - Comcast Cable Comm DNEO-OSP7 - Comcast Cable Comm DOCKNET - dock.net DOMENESHOP Domeneshop AS DONOBI - Donobi Inc. DREAMNET-C-S-I - DreamNet Comm DTAG Deutsche Telekom AG DXTNET Beijing Dian-Xin-Tong N EASEFUL-HK Easeful Strategic L EASYNET Easynet Group Plc EASYNEWS - Easynews Inc. EDELTACOM-SUW-300 - e^deltacom ELENDER-AS ELENDER-AS ELITE-NET - Elite.Net ELIX - Electric Lightwave Inc ELNK-CHARTER-CONN - Earthlink Embratel ENERGIS-AS Energis UK ENERGIT-AS ENERG.IT SpA Enertel N.V. ENTERNET-LIBERCOM-AS Enternet EPLANET-AS ePLANET SPA ERMS-EARTHLNK - EARTHLINK INC ERX-DACOMNET DACOM Corporation ERX-JARING Malaysian institute ERX-SINET-AS National Center f ERX-SINGNET SingNet ERX-TANET-ASN1 Tiawan Academic ESPIRECOMM - e.spire Communica ETHRN - Ethr.Net LLC EUNETFI EUnet Finland EUROCONNEX-AS Euroconnex Netwo Euronet Digital Communications EURONET Wanadoo Nederland BV G EUROWAN-ASN OVANET - EuroWan d EVERYONES-INTERNET - Everyones EVERYONES-INTERNET2 - Everyone EZZI-101-BGP - EZZI.net FASTIT-AS fast IT GmbH Duesse FASTSERVERS - FastServers In FASTWEB Fastweb Autonomous Sys FDCSERVERS - FDCservers.net LL FDNCOM - FDN.com FHNET Beijing Feihua Communica FIVE-COLLEGES-AS - Five Colleg FORTISUSA - Fortis Communicati FORTIX-WEST - FORTIX LLC FREEDOMTOSURF Freedom To Surf FRONTIER-AND-CITIZENS - Electr FR-RENATER Reseau National de FR-U-STRASBOURG FR FUSE-NET - Cincinnati Bell Tel GCI - GCI Communications Inc. GEORGIA-TECH - Georgia Institu GLOBEINTERNET Teleglobe Americ Globix Corporation GNAPS - Global NAPs Networks GNS Grapes Network Services Goldenlines main autonomous sy GOTANET Gotanet-Leissner Swed GROUPTLCOM - GT Group Telecom GVTCINTERNET - Guadalupe Valle HANARO-AS HANARO Telecom HANINTERNET-AS HaninterNetwork HBONE-AS HUNGARNET HCCNET HCCnet Autonomous Syste HINET Data Communication Busin HKTIMS-AP PCCW Limited HOPONE-DCA - HopOne Internet C HP-DIGITAL-33 - Hewlett-Packar HUNGARNET-SZEGED Szeged Univer HURRICANE - Hurricane Electric HYUNDAI-KR Shinbiro I-55-INTERNET-SERVICES-INC - I IDAQ-AS iDAQ AS IEUNET Esat Net backbone AS Nu IFCI-US - InternetFCI LLC IGLOU - IgLou Internet Service IGS-GTA - Information Gateway IHETSDATANET - Indiana Higher IMPSAT-USA - ImpSat INCUBATEC-AS incubatec GmbH - INDEX Autonomous System INDRA - Indra's Net Inc. INET-AS I.NET S.p.A. INET-TH-AS Internet Thailand C INFOLINK-MIA-US - Infolink Inf INFORELAY - InfoRelay Online S INKTOMI-LAWSON - Inktomi Corpo INODE inode Telekommunikations INREACH-AS - InReach Internet INTERGENIA-ASN intergenia auto INTERLAND-NET1 - Interland Inc INTERNAP-BLK - Internap Networ INTERNAP-BLK3 - Internap Netwo INTERNAP-BLK5 - Internap Netwo INTERNAP-BLOCK-4 - Internap Ne INTERNET5-NET Internet5 AB INTERNET-CG Internet Crna Gora INTERNETPRIMUS-AS-AP Primus Te INTERNET-SOLUTIONS-GROUP - Int INTERSTARCOMM - InterStar Comm IPWORLDNET - IPWorld Networks IPX-SERVER IPX Server GmbH ISP4P ISP4P IT Services ISPRIME - ISPrime Inc. IT-PARTNERS - I. T. Partners ITSS-AS IT - SOLID SOLUTIONS JANET The JANET IP Service JINGXUN Beijing Jingxun Public JPNIC-ASBLOCK-AP JPNIC JPNIC-JP-ASN-BLOCK Japan Netwo JPNIC-NET-JP-AS-BLOCK Japan Ne JUMP Jump Networks Ltd. KAIST-DAEJEON-AS-KR Korea Adva KCSOS-NET - Kern County Superi KEWLIO-DOT-NET Kewlio.net Limi KEYWEB-AS Keyweb AG KINX-AS KINX Inc. KIXS-AS-KR Korea Telecom Knipp Medien und Kommunikation KNU-AS Kyungpook National Univ KOLNET-AS-KR Korea Telecom Hit KPN KPN Internet Backbone AS KRLINE-AS KrLine Internet Serv KRNIC-AS-KR Korea Network Info KW Gulfnet International LACOE - Los Angeles County Off LAMBDANET-AS European Backbone LAXIN-AS Laxin IT-Services Gmb LEASEWEB LEASEWEB AS LEHIGH - Lehigh University LENET "Lietuvos energija" JSC LEVEL3 Level 3 Communications LH - Lighthouse Communications LIDERO Lidero Network AB LIQUIDIX - LIQUID COMMUNICATIO LIQUID-WEB-INC - Liquid Web LLNW - Limelight Networks LLC LOMBARDIACOM Elitel Autonomous LYCOS-EUROPE Lycos Europe GmbH Manquehuenet MAXIM - Interland MEGAPATH-US - MegaPath Network MERIT-AS-14 - Merit Network In MFNX MFN - Metromedia Fiber Ne MISNET - Mikrotec Internet Ser MOG-NET - Michigan Online Grou MPX-AS Microplex PTY LTD MULTI-VISP Multi-vISP Network MZIMA - Mzima Networks Inc. NA NAMEI - Name Intelligence Inc NCIC-TW New Century InfoComm T NCTU-TW National Chiao Tung Un NCU-TW National Central Univer NDCHOST - Network Data Center NEBRIX-CA - Nebrix Communicati NERONET - Oregon Joint Graduat NET-ACCESS-CORP - Net Access C NETCATHOST-AS NetcatHosting NETDIRECT AS NETDIRECT Frankfu NETFIRE - NetFire.com NETNATION - NetNation Communic NETSCAPE-ASN - Netscape NETSENTRY - Net Sentry Corp NETSONIC NETTRANS - NetTransactions LL NetVision Ltd. NEWSKIES-NETWORKS - New Skies NILDRAM NILDRAM UK Peering NLB-ASN - Norwood Light Broadb NL-BIT BIT BV NL-IO Autonomous System for In No Whois Connection NOC - Network Operations Cente NONAME NordNet Autonomous System NSS S.A. NTL NTL Group Limited NTUA National Technical Univer NTU-TW National Taiwan Univers NUCLEARFALLOUT-SEA - Nuclearfa NUVOX - NuVox Communications NWT-AS - Internet North NWT-AS-AP AS number for New Wo NXS Nxs Internet BV O1COMM - O1 COMMUNICATIONS OARNET-AS-1 - OARnet OCHOTA Ochota Campus Network OCN NTT Communications Corpora ODN JAPAN TELECOM CO. LTD. OMNITEL PLC OMNITEL ONLINE-BG BULGARIA ONLINE OPENFACE - Openface Inc. OVERSEE-DOT-NET - Oversee.net OVH OVH PAH-INC - Go Daddy Software I PDXNET - Portland State Univer PEER1 - Peer 1 Network Inc. PEGASUS - Pegasus Web Technolo PERFTECH-SLOVENIA-AS Perftech PERSONALNET-HU-AS Personalnet PKTELECOM-AS-AP Pakistan Telec PL-BYDMAN-EDU Educational User PLUSNET Plusnet Technologies L PORT80 Port80 AB Sweden POWTECH-AS PowerTech Informati Prima S.A. PRISM-AS Intellicenter PROBENETWORKS-AS Probe Network PRODIGY-AS Prodigy ASN PROXAD AS for Proxad ISP PUBNET1-AS KT PURDUE - Purdue University QualityNet AS number QUICKPACKET - Plusweb Communic RACKSPACE - Rackspace.com RAPIDSWITCH-AS RapidSwitch Ltd RAPIDUS - COGECO Cable Canada RCN-AS - RCN Corporation RDSNET Romania Data Systems S. REACH Reach Network Border AS REDIRIS RedIRIS Autonomous Sys REFLEX-AS Reflex Internet RE-STAFFORD - R. E. Stafford I RISQ-AS - Reseau Interordinate ROADRUNNER-MNPLS - Road Runner ROGERS-CABLE - Rogers Cable In RR-CINCINNATI-ASN-01 - Road Ru RR-NYSREGION-ASN-01 - Road Run RTCOMM-AS RTComm.RU Autonomous RUSTON - Cox Internet Services SAGONET-TPA - Sago Networks SAVVIS - Savvis SB-2 - ServerBeach SBIS-AS - SBC Internet Service SCARLET Autonomous System for SCARLET Scarlet Belgium SCHLUND-AS Schlund + Partner A SCRR-11426 - Road Runner SCRR-11427 - Road Runner SCRR-11707 - Road Runner SCRR-12271 - Road Runner SCRR-13343 - Road Runner SCRR-8052 - Road Runner SCV-AS-AP SCV Broadband Access SECURE-AS Oz Servers Data Cen SEEDNET Digital United Inc. SEKTORNET Sektornet DK Minist SERBIA-BROADBAND-AS Serbia Bro SERVER4YOU - Server4You Inc. SERVERBEACH - ServerBeach SERVER-CENTRAL-CHI - Server Ce SEVEN-AUTONOMOUS-SYSTEM SEVEN SHAW - Shaw Communications Inc SHAW-COMMUNICATIONS - Shaw Com SIG SIG - IP-MAN.NET SIL-AT SILVER:SERVER GmbH SINET-SK-AS SOFTITUS s.r.o. Po SIOL-NET SiOL Internet d.o.o. SKG_NW-AS-KR SK Global co. Lt SKYTURN-AS Groupe Ecritel Fran SLC-EXPEDIENT - e-xpedient SONOFON_AS SONOFON (Autonomous SONOMA - Sonoma Interconnect SPCS - Sprint Personal Communi SPRINT-CA-AS - Sprint Canada I SPRINTLINK - Sprint SSERV-AS Server-Service GmbH STAMINUS-COMM - Staminus Commu STARMAN Starman Internet AS STRATO Strato AG STSN-SLC-UT-US - STSN GENERAL SUNET SUNET Swedish University SUNRISE sunrise (TDC Switzerla SUNYSB - SUNY at Stony Brook SUREWEST-20172 - SureWest Broa SWIFTDESK - SWIFTDESK VENTURE SWIFTSYSTEMS - SWIFT SYSTEMS SYNAPSE Good Communications Co TAMPA2-TWC-5 - Time Warner Com TCNET-AS Telecom Centre Joint TDC TDC Data Networks TDCSONG TDC Song TDL - THE DIAMOND LANE TEAMTECH - Team Technologies Telecel S.A. Telecom Argentina S.A. Telecom Italia Network Telecomunicacoes da Bahia S.A. TELECOMUNICACOES DE SAO PAULO Telefonica de Argentina TELEFONICA-DATA-ESPANA Interne TELEMAXX TelemaxX Telekommunik TELENOR-NEXTEL Telenor Interne TELERING-AT tele.ring Telekom TELESC - Telecomunicacoes de S TELIANET-SWEDEN TeliaNet Swede TELKOMNET-AS2-AP PT TELEKOMUNI TERA-BYTE - Tera-byte Online S TFN-TW Taiwan Fixed Network T The JPCINET Autonomous System THEPLANET-AS - THE PLANET THRUNET-AS-KR THRUNET TIERZERO-AS11509 - Tierzero TISCALI-BACKBONE Tiscali Intl TISCALIDK Tiscali Denmark Auto TISCALI-NO Tiscali Norway TISCALI-UK Tiscali UK TOWERSTREAM - Towerstream TPNET Polish Telecom's commerc TRIERA Triera Internet TRUESERVER-AS TrueServer BV AS TTNET TTnet Autonomous System TUGNET Technische Universitaet TV Cable S.A. TVNET-HUNGARY TVNET Autonomus TWTC - Time Warner Telecom UCB - University of California UCONN-ARIN - University of Con UK2NET-AS UK-2 Ltd Autonomous UMDNET - University of Marylan UMN-AGS-NET-AS - University of Uninet S.A. de C.V. UNINETT UNINETT The Norwegian UNITEDCOLO-AS Autonomous Syste University of Salzburg UNL-AS - University of Nebrask UPC UPC Distribution Services UPENN-CIS - University of Penn USINTERNET - US Internet Corp USLEC-CORP-1 - USLEC Corp. UTAH - University of Utah UTORONTO-AS - University of To UTRANSIT-AS Utransit Internati UUNET-AS1 - UUNET Technologies VDI - Virtual Development INC VELCOM - Rcp.net VERICENTER - VeriCenter Inc. VERIO - Verio Inc. VERSATEL Versatel routing poli VIDEOTRON-LTEE - Videotron lte VIRTUALXS-AS VirtualXS Interne VISION-I-SYSTEMS-ASN - Vision VISIONNET - Vision Net Inc. VSNL-AS Videsh Sanchar Nigam L VTR BANDA ANCHA S.A. VZGNI-TRANSIT - Verizon Intern WA-K20 - Washington State K-20 WAN - Worldcom Advance Network WANTREE-AS-AP Wantree Developm WAYNE-BOCES - Wayne Finger-Lak WBSSC - Wolf Block Schorr an WEBHOSTPLUS-INC - WebHostPlus WEDARE We Dare BV Autonomous S WESTHOST - WestHost WEST-NET-WEST - Utah Education WHIDBEY1 - Whidbey Internet Se WII-KC - WholeSale Internet WINEASY WinEasy Autonomous Sys WISCNET1-AS - University of Wi WOLFPAWSERVICES - Wolfpaw Serv WOW-INTERNET - WideOpenWest LL WOW-INTERNET-ILL - WideOpenWes WVNET - West Virginia Network XILOGIX-ASN - Xilogix LLC XLON-TECHNOLOGIES - XLON Techn XO-AS15 - XO Communications XS4ALL-NL XS4ALL ZEELANDNET ZeelandNet BV

5 6

Re: speaking of lynn...
by Robert Bonomi 13 Aug '05

13 Aug '05

> From owner-nanog(a)merit.edu Fri Aug 12 22:11:34 2005 > Date: Sat, 13 Aug 2005 06:08:22 +0200 > From: Gadi Evron <ge(a)linuxbox.org> > To: nanog list <nanog(a)merit.edu> > Subject: speaking of lynn... > > [[.. munch ..]] > > Cisco's lawyers are sending out cease-and-desist notices to Web sites > that have published a controversial presentation by ex-Internet Security > Systems (ISS) employee .... > > -- > > I guess that answers the question of the lgality of the matter? "Not exactly." <wry grin> That tells us what Cicso is 'claiming'. In *any* legal dispute, that which one party 'claims' to be true is not necessarily the same thing as the actual 'facts of the matter'.

1 0