- NANOG - lists.nanog.org

route-views now present at NSPIXPII
by David Meyer 27 Jun '03

27 Jun '03

Greetings, route-views (AS6447) is pleased to announce our presence at NSPIXPII (202.249.2.166), courtesy of Akira Kato and WIDE. The route-views project operates BGP route collectors that provide global routing data to both operator and research communities. Our web pages (http://www.routeviews.org/) can provide further background on the route-views project, the services we provide, and some of the research that has been based on the data collected. route-views is interested in local BGP peering (non-multi-hop, or so-called) with all of the ASes present at NSPIXPII. Those who would like more information or are willing to provide their view of the global routing table, please contact us at help(a)routeviews.org. Note that we do not announce any prefixes or use any received prefixes to route traffic; this is purely a data collection effort and looking glass-like operational tool (via telnet to a cisco-like user interface). Thanks, The route-views staff

1 0

Re: Don't call registry off the map?
by Steven M. Bellovin 27 Jun '03

27 Jun '03

In message <20030627165622.GA13781(a)semihuman.com>, Chris Woodfield writes: > > >Making a telemarketing call to a cellphone is already illegal. I think it's= > under the=20 >same law that forbids junk faxes. It's a different law, but yes, both are illegal. Of course, my home fax machine got a junk fax just two days ago. Last time that happened, I filed a formal complaint with the FCC. See http://www.junkfax.org for more information. --Steve Bellovin, http://www.research.att.com/~smb (me) http://www.wilyhacker.com (2nd edition of "Firewalls" book)

1 0

Re: Don't call registry off the map?
by Steven M. Bellovin 27 Jun '03

27 Jun '03

In message <sefc0fbf.012(a)gwsmtp.ohsu.edu>, "Tim Rand" writes: > > >I was able to earlier today, but the response was VERY slow. Their = >server is probably pretty busy.... > I got through to the Web site earlier, but I haven't received the confirmation emails. I'm pretty certain there's no spam filter in the way, either -- I guess the mail server is even more overloaded than the Web server... --Steve Bellovin, http://www.research.att.com/~smb (me) http://www.wilyhacker.com (2nd edition of "Firewalls" book)

3 2

Re: [Don't call registry off the map?]
by Joshua Sahala 27 Jun '03

27 Jun '03

i can get to it, but it is quite slow. (on it's way to being slashdotted perhaps?!?!) wonder if it has anything to to with the fact that it is running iis5.0 must be a large rush of people all hurrying to get their names/numbers on another government list... /joshua Patrick <patrick(a)stealthgeeks.net> wrote: > > > Can anyone reach www.donotcall.gov? Seems to be off the map... > > I guess this is just the publics way of inviting the DMA(Direct Marketing > Association) to re-evaulate their assertions that the majority of the > populace enjoys receiving telemarketing calls... > > /\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\ > Patrick Greenwell > Asking the wrong questions is the leading cause of wrong answers > \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ > "Walk with me through the Universe, And along the way see how all of us are Connected. Feast the eyes of your Soul, On the Love that abounds. In all places at once, seemingly endless, Like your own existence." - Stephen Hawking -

2 1

Don't call registry off the map?
by Patrick 27 Jun '03

27 Jun '03

Can anyone reach www.donotcall.gov? Seems to be off the map... I guess this is just the publics way of inviting the DMA(Direct Marketing Association) to re-evaulate their assertions that the majority of the populace enjoys receiving telemarketing calls... /\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\ Patrick Greenwell Asking the wrong questions is the leading cause of wrong answers \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/

6 6

Re: Don't call registry off the map?
by Tim Rand 27 Jun '03

27 Jun '03

I was able to earlier today, but the response was VERY slow. Their server is probably pretty busy.... Tim Rand Network Engineer OHSU Information Technology Group ph: 503.418.1045 fx: 503.494.7143 >>> Patrick <patrick(a)stealthgeeks.net> 06/27/03 09:26AM >>> Can anyone reach www.donotcall.gov? Seems to be off the map... I guess this is just the publics way of inviting the DMA(Direct Marketing Association) to re-evaulate their assertions that the majority of the populace enjoys receiving telemarketing calls... /\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\ Patrick Greenwell Asking the wrong questions is the leading cause of wrong answers \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/

1 0

Re: Country of Origin for Malicious Attacks
by sgorman1＠gmu.edu 27 Jun '03

27 Jun '03

damn the Los Alamos people are efficient the paper for anyone intersted - http://arxiv.org/abs/cond-mat/0306002 ----- Original Message ----- From: Peter Galbavy <peter.galbavy(a)knowtion.net> Date: Friday, June 27, 2003 7:22 am Subject: Re: Country of Origin for Malicious Attacks > > Jamie Reid wrote: > > I'd be interested in knowing how linking aggregated attack > > information to country of > > origin is actually valuable relative to our ability to respond > to it. > > It mostly salves the prejudices of those who want to see certain other > countries as the enemy. My view, as most of this stuff advertises > US based > 'products and services' (generous description), it should really > be a case > of 'follow the money' as per previous thread. > > Peter > > >

1 0

Re: Country of Origin for Malicious Attacks
by sgorman1＠gmu.edu 27 Jun '03

27 Jun '03

"I'd be interested in knowing how linking aggregated attack information to country of origin is actually valuable relative to our ability to respond to it." The simulations we have been running are at the AS level, but country level information is useful for running some of the scenarios we are interested in. Currently we have been starting attacks on the AS graph from randomly selected networks, but thought it would be interesting to start attacks from frequent bad actors. The country level part comes in since we are doing this from an economic/policy perspective. If you are going to invest money in cybersecurity what are the most important networks to protect. If there needs to be cross country cooperation, which countries are the most important to get to sign on. Still not sure how effective of a way this is to look at the problem, but it is one of the scenarios we are running through along with market forces, best practices, insurance, liability etc etc. If anyone is intersted we'll be posting the general approach and models on the xxx.lanl.gov site in the next day or so. I can post the link if folks are intersted, any feedback would be greatly appreciated. thanks, sean

1 0

The Cidr Report
by cidr-report＠potaroo.net 27 Jun '03

27 Jun '03

This report has been generated at Fri Jun 27 21:07:01 2003 AEST. The report analyses the BGP Routing Table of the Route-Views router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as6447 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 20-06-03 139461 99183 21-06-03 16181 33004 22-06-03 139382 99687 23-06-03 139587 99904 24-06-03 139325 99906 25-06-03 140938 100648 26-06-03 139466 99744 27-06-03 139252 99443 AS Summary 15572 Number of ASes in routing system 6036 Number of ASes announcing only one prefix 2367 Largest number of prefixes announced by an AS AS705 : ALTERNET-AS UUNET Technologies, Inc. 73223936 Largest address span announced by an AS (/32s) AS568 : SUMNET-AS DISO-UNRRA Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 27Jun03 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 139250 99943 39307 28.2% All ASes AS15290 1873 206 1667 89.0% ATTCA-15290 AT&T Canada Telecom Services Company AS705 2367 1308 1059 44.7% ALTERNET-AS UUNET Technologies, Inc. AS7132 835 237 598 71.6% SBIS-AS SBC Internet Services - Southwest AS18566 604 8 596 98.7% COVAD Covad Communications AS4716 1281 727 554 43.2% POWEREDCOM POWEREDCOM, Inc. AS3908 1807 1260 547 30.3% SUPERNETASBLK SuperNet, Inc. AS11305 549 81 468 85.2% INTERLAND-NET1 Interland Incorporated AS690 1614 1170 444 27.5% MERIT-AS-27 Merit Network Inc. AS701 1526 1090 436 28.6% ALTERNET-AS UUNET Technologies, Inc. AS7018 1364 947 417 30.6% ATT-INTERNET4 AT&T WorldNet Services AS189 685 316 369 53.9% GENUITY-AS189 Genuity AS4323 602 236 366 60.8% TW-COMM Time Warner Communications, Inc. AS3215 569 228 341 59.9% AS3215 France Telecom Transpac AS1221 1120 782 338 30.2% ASN-TELSTRA Telstra Pty Ltd AS1239 973 687 286 29.4% SPRINTLINK Sprint AS6198 476 207 269 56.5% BATI-MIA BellSouth Network Solutions, Inc AS7046 1345 1101 244 18.1% UUNET-CUSTOMER UUNET Technologies, Inc. AS3356 604 362 242 40.1% LEVEL3 Level 3 Communications, LLC AS27364 320 89 231 72.2% ACS-INTERNET Armstrong Cable Services AS6197 521 303 218 41.8% BATI-ATL BellSouth Network Solutions, Inc AS7843 630 421 209 33.2% ADELPHIA-AS Adelphia Corp. AS4755 433 227 206 47.6% VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System AS17676 250 49 201 80.4% GIGAINFRA XTAGE CORPORATION AS2386 410 225 185 45.1% INS-AS AT&T Data Communications Services AS4355 405 222 183 45.2% ERMS-EARTHLNK EARTHLINK, INC AS376 381 211 170 44.6% RISQ-AS Reseau Interordinateurs Scientique Quebecois (RISQ) AS209 629 462 167 26.6% ASN-QWEST Qwest AS2548 906 739 167 18.4% ALGX-ATCW-AS Allegiance Telecom Companies Worldwide AS6140 285 122 163 57.2% IMPSAT-USA ImpSat AS20115 460 298 162 35.2% CHARTER-NET-HKY-NC Charter Communications Total 25824 14321 11503 44.5% Top 30 total Possible Bogus Routes 5.5.5.0/24 AS1239 SPRINTLINK Sprint 24.119.0.0/16 AS11492 CABLEONE CABLE ONE 24.183.185.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.183.186.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.183.187.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.183.188.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.183.189.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.183.191.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.199.0.0/18 AS20001 ROADRUNNER-WEST HoldCo LLC - Road Runner 24.199.32.0/22 AS1668 AOL-PRIMEHOST GNN Hosting Service 24.223.128.0/17 AS11060 NEO-RR-COM Time Warner Cable Northeast Ohio 39.0.0.0/8 AS4554 EP0-BLK-ASNBLOCK-4 Exchange Point Blocks 61.12.32.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 61.12.34.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 63.0.0.0/8 AS226 LOS-NETTOS-AS Los Nettos 64.30.64.0/19 AS14900 USLEC-CORP-1 USLEC Corp. 65.6.145.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.6.146.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.6.147.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.6.150.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.6.151.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 66.41.192.0/18 AS13367 ATT-BBND-B AT&T Broadband 66.207.54.80/29 AS2548 ALGX-ATCW-AS Allegiance Telecom Companies Worldwide 67.45.23.120/29 AS2548 ALGX-ATCW-AS Allegiance Telecom Companies Worldwide 67.45.53.192/29 AS2548 ALGX-ATCW-AS Allegiance Telecom Companies Worldwide 69.60.128.0/20 AS23131 STARLAN Starlan Communications Inc. 82.129.128.0/17 AS24835 RAYA-AS RAYA Telecom - Egypt 132.0.0.0/10 AS568 SUMNET-AS DISO-UNRRA 137.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 138.136.0.0/13 AS568 SUMNET-AS DISO-UNRRA 140.240.0.0/13 AS1 GNTY-1 Genuity 158.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 165.212.0.0/16 AS7424 USANET USA.Net 166.16.0.0/16 AS7132 SBIS-AS SBC Internet Services - Southwest 171.64.0.0/10 AS1 GNTY-1 Genuity 192.43.230.0/24 AS4738 SAARDNET-AS South Australian Academic Research and Development Network 192.44.0.0/19 AS702 ALTERNET-AS UUNET Technologies, Inc. 192.83.14.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.16.0/20 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.25.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.32.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.64.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.96.0/22 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.100.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.119.135.0/24 AS270 PSCNI-AS National Aeronautics and Space Administration 192.124.252.0/22 AS680 AS680 DFN-IP service G-WiN 192.135.50.0/24 AS7018 ATT-INTERNET4 AT&T WorldNet Services 192.136.79.0/24 AS719 AS719 LANLINK autonomous system 192.136.80.0/24 AS719 AS719 LANLINK autonomous system 192.136.84.0/24 AS719 AS719 LANLINK autonomous system 192.136.85.0/24 AS719 AS719 LANLINK autonomous system 192.153.136.0/21 AS568 SUMNET-AS DISO-UNRRA 192.153.144.0/21 AS568 SUMNET-AS DISO-UNRRA 192.168.4.0/24 AS21166 AS21166 SatGate autonomous system 192.172.0.0/19 AS568 SUMNET-AS DISO-UNRRA 192.188.208.0/20 AS568 SUMNET-AS DISO-UNRRA 192.243.32.0/23 AS2044 PALIN-AS Palin Aquisitions Inc. 198.23.26.0/24 AS4390 BELLATLANTIC-COM Bell Atlantic, Inc. 198.97.72.0/21 AS568 SUMNET-AS DISO-UNRRA 198.97.80.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.88.0/24 AS89 NUSC-CSTLNET-AS Naval Underwater Systems Center 198.97.192.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.240.0/20 AS568 SUMNET-AS DISO-UNRRA 198.98.8.0/21 AS3701 NERONET Oregon Joint Graduate Schools of Engineering 198.101.4.0/22 AS568 SUMNET-AS DISO-UNRRA 198.136.32.0/20 AS19329 MCNET Martin County Board of County Commissioners 198.144.32.0/19 AS3998 CITY-NET CityNet, Inc. 198.161.87.0/24 AS6539 GROUPTLCOM GT Group Telecom Services Corp. 198.161.165.0/24 AS852 ASN852 Telus Advanced Communications 198.161.200.0/24 AS6539 GROUPTLCOM GT Group Telecom Services Corp. 198.163.155.0/24 AS684 MBNET-AS Manitoba Regional Network 198.167.0.0/16 AS7456 INTERHOP Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ATTCA-15290 AT&T Canada Telecom Services Company 198.168.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL SaskTel 198.232.133.0/24 AS23075 SKOTOS-AS Skotos Tech, Inc 199.10.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.60.0.0/20 AS271 BCNET-AS University of British Columbia 199.79.32.0/20 AS3701 NERONET Oregon Joint Graduate Schools of Engineering 199.84.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 199.114.0.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.0.0/21 AS568 SUMNET-AS DISO-UNRRA 199.114.128.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.140.0/24 AS3544 ITSDN-U7 DISA/UNRRA 199.120.32.0/19 AS16582 NEXTLEVELINTERNET NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.123.16.0/20 AS568 SUMNET-AS DISO-UNRRA 199.123.80.0/21 AS568 SUMNET-AS DISO-UNRRA 199.189.32.0/19 AS7332 IQUEST-AS IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 202.3.144.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.145.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.146.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.147.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.148.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.149.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.150.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.151.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.152.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.153.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.154.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.155.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.156.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.157.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.158.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.159.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.4.252.0/22 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.4.255.0/24 AS4799 UNSPECIFIED Ji Tong Communications Co., Ltd. 202.6.96.0/24 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.6.97.0/24 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.6.99.0/24 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.10.72.0/21 AS9716 AUSTAR-AS-AP Austar Entertainement 202.44.112.0/20 AS17458 CWNETDG-IO-AP Cable and Wireless 202.122.76.0/24 AS17553 TIMELESS-AP System Integration provider 202.130.224.0/20 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.130.240.0/21 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.130.248.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 202.130.252.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 202.136.254.0/23 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.136.254.0/24 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.140.230.0/23 AS9466 UUNET-JP-AP UUNET Japan Limited 202.140.232.0/23 AS9466 UUNET-JP-AP UUNET Japan Limited 202.140.234.0/24 AS9466 UUNET-JP-AP UUNET Japan Limited 202.140.235.0/24 AS9466 UUNET-JP-AP UUNET Japan Limited 202.142.130.0/23 AS17820 DIL-AP DIRECT INTERNET LTD. 202.142.132.0/22 AS17820 DIL-AP DIRECT INTERNET LTD. 202.143.48.0/21 AS4795 INDOSAT2-ID-AP INDOSATNET-ASN 202.143.56.0/21 AS4795 INDOSAT2-ID-AP INDOSATNET-ASN 202.161.0.0/19 AS10097 FLOWCOM flow communications level 2 541 kent st sydney nsw 2000 202.161.0.0/21 AS4634 -No Whois Entry- 202.161.8.0/21 AS4634 -No Whois Entry- 202.164.192.0/19 AS7599 IPXC-AS-AP IP Exchange 202.165.0.0/19 AS9443 INTERNETPRIMUS-AS-AP Primus Telecommunications 202.173.32.0/19 AS9671 APNIC-AS-3-BLOCK Asia Pacific Network Information Centre 203.12.222.64/26 AS4802 WANTREE-AS-AP Wantree Development 203.12.222.192/26 AS4802 WANTREE-AS-AP Wantree Development 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.76.128.0/24 AS9729 IS-AP iAdvantage Limited 203.76.224.0/24 AS9549 COMDEK-ISP-AS-AP Comdek ISP 203.78.125.0/24 AS17653 PCM-HK-AP Pacific Century Matrix 203.84.192.0/19 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 203.84.192.0/20 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 203.84.208.0/20 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 203.86.2.0/23 AS4058 APNIC-4058 Asia Pacific Network Information Centre 203.90.192.0/20 AS9658 ETPI-IDS-AS-AP Eastern Telecoms Phils., Inc. 203.135.99.0/24 AS2687 IBM-MMD-AS IBM 203.135.224.0/19 AS4058 APNIC-4058 Asia Pacific Network Information Centre 204.19.224.0/19 AS816 UUNET-AS4 UUNET Technologies, Inc. 204.29.189.0/24 AS11755 WAYMARKCOMM Waymark Internet Services, Inc. 204.52.232.0/24 AS7177 DFWNET DFW Internet Services, Inc. 204.89.225.0/24 AS2495 KANREN Kansas Research and Education Network 204.154.240.0/21 AS11572 MEDIACOM Mediacom,llc / RidgeNet 204.194.110.0/23 AS10588 ICSNET Intelligent Computer Solutions, Inc 205.150.0.0/15 AS701 ALTERNET-AS UUNET Technologies, Inc. 205.151.0.0/19 AS816 UUNET-AS4 UUNET Technologies, Inc. 206.41.32.0/19 AS14824 NEWSOUTH NewSouth Communications Corp. 206.81.187.0/24 AS19194 JOVITA Sentris Network LLC 206.82.64.0/18 AS7029 ALLTELNET Alltel Information Services, Inc. 206.108.34.0/24 AS852 ASN852 Telus Advanced Communications 206.108.35.0/24 AS852 ASN852 Telus Advanced Communications 206.126.0.0/19 AS5750 FLEXNET-HAWAII FlexNet Inc. 206.167.57.0/24 AS376 RISQ-AS Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ATTCA-15290 AT&T Canada Telecom Services Company 206.191.96.0/19 AS15290 ATTCA-15290 AT&T Canada Telecom Services Company 206.251.69.0/24 AS27429 TIL Telesat International Ltd. 207.47.39.0/24 AS816 UUNET-AS4 UUNET Technologies, Inc. 207.92.0.0/14 AS2551 ICG ICG NetAhead, Inc. 207.162.192.0/19 AS4589 EASYNET Easynet Group Plc 207.231.96.0/19 AS11194 NUNETPA NuNet Inc 208.65.232.0/23 AS701 ALTERNET-AS UUNET Technologies, Inc. 208.81.187.0/24 AS19194 JOVITA Sentris Network LLC 208.104.103.0/24 AS1239 SPRINTLINK Sprint 209.104.198.0/24 AS6137 SISNA SISNA, Inc. 209.104.199.0/24 AS6137 SISNA SISNA, Inc. 209.104.218.0/24 AS6137 SISNA SISNA, Inc. 209.104.219.0/24 AS6137 SISNA SISNA, Inc. 209.104.252.0/22 AS12030 PACIFIC-ONLINE-PON Pacific Online Services 209.108.0.0/14 AS2551 ICG ICG NetAhead, Inc. 209.151.128.0/19 AS816 UUNET-AS4 UUNET Technologies, Inc. 209.160.73.0/24 AS13415 LUMIX Lumix Communications, Inc. 209.160.209.0/24 AS13415 LUMIX Lumix Communications, Inc. 209.169.219.0/24 AS189 GENUITY-AS189 Genuity 209.169.223.0/24 AS189 GENUITY-AS189 Genuity 209.172.0.0/18 AS7770 TRITON Triton Technologies, Inc. 209.213.32.0/19 AS10629 INTERPAC Inter-Pacific Network Services 209.213.50.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.51.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.55.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.56.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.160.0/19 AS4355 ERMS-EARTHLNK EARTHLINK, INC 209.222.137.0/24 AS27429 TIL Telesat International Ltd. 209.240.96.0/19 AS10815 KCNET KCnet, Inc. 209.251.0.0/19 AS11036 SISCOM SISCOM, Inc 209.251.64.0/19 AS10266 NETWAY-AS MDC, Inc. 210.4.20.0/22 AS10095 -No Whois Entry- 210.4.60.0/24 AS10095 -No Whois Entry- 210.4.61.0/24 AS10095 -No Whois Entry- 211.27.156.0/24 AS9768 PUBNET1-AS KT 211.27.156.192/26 AS9768 PUBNET1-AS KT 216.18.224.0/21 AS11458 IMBRIS IMBRIS, INC. 216.18.224.0/22 AS11458 IMBRIS IMBRIS, INC. 216.18.228.0/22 AS11458 IMBRIS IMBRIS, INC. 216.19.244.192/27 AS2548 ALGX-ATCW-AS Allegiance Telecom Companies Worldwide 216.47.32.0/19 AS11304 SPLUS Solutions Plus Inc. 216.96.128.0/18 AS7018 ATT-INTERNET4 AT&T WorldNet Services 216.115.178.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.179.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.182.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.183.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.184.0/23 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.186.0/23 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.186.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.189.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.190.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.191.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.153.0.0/17 AS6203 ISDN-NET ISDN-Net Inc. 216.211.177.0/24 AS14473 KNET KNet, Inc. 216.226.108.0/22 AS3602 SPRINT-CA-AS Sprint Canada Inc. 216.226.176.0/20 AS11109 STATE-OF-ALABAMA-ISD State of Alabama, Information Services Division Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Re: Country of Origin for Malicious Attacks
by Jamie Reid 27 Jun '03

27 Jun '03

I've found that country of origin is less relevant than route/subnet and ASN, as there is a link between the address and the people in a position to actually respond to the problem. I'd be interested in knowing how linking aggregated attack information to country of origin is actually valuable relative to our ability to respond to it. Cheers, -j -- Jamie.Reid, CISSP, jamie.reid(a)mbs.gov.on.ca Senior Security Specialist, Information Protection Centre Corporate Security, MBS 416 327 2324

3 2