- NANOG - lists.nanog.org

Automated Abuse Reports
by Matt Corallo 08 Oct '19

08 Oct '19

How do people view the automated generation of abuse reports? I’ve seen lots of (understandable) moaning about large providers not handling abuse reports, and lots of (understandable) suggestions that ARIN test for the reachability of abuse contacts. On the flip side, I run a Tor exit node (as well as bridge nodes, which appear to be used exclusively by Chinese, Russian, and Iranian IPs, indicating Tor is, contrary to popular belief, used in large part for its intended purpose). Because people seem to include “you tried three to log in three times and got the password wrong” in their definition of abuse, I’ve had to provide bogus abuse contacts (and include actual abuse comments in the comments section). I’ve tried reaching out to other operators suggesting that they cut it out, as they are the reason many operators do not provide functional abuse contacts, usually with a response of “so stop attacking my serverz!!!1one”. Is it time to have ARIN add a “abuse contact available only after captcha” option? Matt

3 2

Re: Poor mans TAP
by John Kristoff 07 Oct '19

07 Oct '19

On Mon, 7 Oct 2019 14:16:31 +0000 Dovid Bender <dovid(a)telecurve.com> wrote: > Funds at my 9-5 are limited. Has anyone tried this and how well does > it work? We plan on mirroring about 800 megs of traffic at peak. > https://www.amazon.com/Dualcomm-1000Base-T-Ethernet-Regeneration-Network/dp… I don't know if it still works on modern switches, but many years ago I was able to have Cisco LAN switches configured such that a single L2 MAC address could be statically associated with multiple interfaces (i.e. router interface). This made it possible to duplicate all traffic to destined to one station to appear on two (maybe more?) ports. You might try this also if you have an unused and available switch. John

4 5

This DNS over HTTP thing
by Jay R. Ashworth 07 Oct '19

07 Oct '19

I've been embroiled in my first house-move in 28 years, and just got back to the table. I don't see any threads here about whatever this thing-which- appears-to-me-to-be-a-monstrosity; has it been discussed here and I missed it? Is there an official name for it I should be searching for? Is it in fact not a monstrosity, and I'm just not smart enough? :-) Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274

39 86

Poor mans TAP
by Dovid Bender 07 Oct '19

07 Oct '19

Hi, Funds at my 9-5 are limited. Has anyone tried this and how well does it work? We plan on mirroring about 800 megs of traffic at peak. https://www.amazon.com/Dualcomm-1000Base-T-Ethernet-Regeneration-Network/dp… TIA. Dovid

2 1

Equipment needed plea!
by James Laszko 07 Oct '19

07 Oct '19

Probably gonna get yelled at for this, but does anyone by chance have a Cisco N5548P-FAN module in the Atlanta area? We have a customer with critical infrastructure down and can’t find one anywhere! Any assistance would be appreciated. Thanks, James Laszko Mythos Technology Inc jamesl(a)mythostech.com

1 0

Clueful Abuse Contact at Tucows
by james jones 05 Oct '19

05 Oct '19

Looking for someone on the abuse team at Tucows. Major scam in progress via a domain registered through them. -James

1 0

hairpin attempts
by Randy Bush 05 Oct '19

05 Oct '19

for some months, our border routers log attempts to connect from the outside using a source address that is internal to my network. e.g. Oct 3 06:48:12 r0 7833: Oct 3 06:48:11.267: %FMANFP-6-IPACCESSLOGP: SIP0: fman_fp_image: list serial-in4 denied udp 147.28.0.223(3465) -> 147.28.0.222(53), 1 packet some days, we see a *lot* of this. anyone else seeing similar? randy

2 2

Weekly Routing Table Report
by cscora＠apnic.net 04 Oct '19

04 Oct '19

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 05 Oct, 2019 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 775762 Prefixes after maximum aggregation (per Origin AS): 297902 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 373665 Total ASes present in the Internet Routing Table: 65737 Prefixes per ASN: 11.80 Origin-only ASes present in the Internet Routing Table: 56544 Origin ASes announcing only one prefix: 24250 Transit ASes present in the Internet Routing Table: 9193 Transit-only ASes present in the Internet Routing Table: 274 Average AS path length visible in the Internet Routing Table: 4.5 Max AS path length visible: 43 Max AS path prepend of ASN ( 19955) 41 Prefixes from unregistered ASNs in the Routing Table: 28 Number of instances of unregistered ASNs: 36 Number of 32-bit ASNs allocated by the RIRs: 28938 Number of 32-bit ASNs visible in the Routing Table: 23673 Prefixes from 32-bit ASNs in the Routing Table: 108164 Number of bogon 32-bit ASNs visible in the Routing Table: 26 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 354 Number of addresses announced to Internet: 2837147776 Equivalent to 169 /8s, 27 /16s and 112 /24s Percentage of available address space announced: 76.6 Percentage of allocated address space announced: 76.6 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.4 Total number of prefixes smaller than registry allocations: 258239 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 208891 Total APNIC prefixes after maximum aggregation: 62374 APNIC Deaggregation factor: 3.35 Prefixes being announced from the APNIC address blocks: 203429 Unique aggregates announced from the APNIC address blocks: 85058 APNIC Region origin ASes present in the Internet Routing Table: 10102 APNIC Prefixes per ASN: 20.14 APNIC Region origin ASes announcing only one prefix: 2803 APNIC Region transit ASes present in the Internet Routing Table: 1498 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 25 Number of APNIC region 32-bit ASNs visible in the Routing Table: 5104 Number of APNIC addresses announced to Internet: 767379072 Equivalent to 45 /8s, 189 /16s and 70 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-141625 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 228287 Total ARIN prefixes after maximum aggregation: 106572 ARIN Deaggregation factor: 2.14 Prefixes being announced from the ARIN address blocks: 226575 Unique aggregates announced from the ARIN address blocks: 107903 ARIN Region origin ASes present in the Internet Routing Table: 18609 ARIN Prefixes per ASN: 12.18 ARIN Region origin ASes announcing only one prefix: 6902 ARIN Region transit ASes present in the Internet Routing Table: 1915 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 43 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2948 Number of ARIN addresses announced to Internet: 1068060544 Equivalent to 63 /8s, 169 /16s and 79 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 216767 Total RIPE prefixes after maximum aggregation: 101499 RIPE Deaggregation factor: 2.14 Prefixes being announced from the RIPE address blocks: 212920 Unique aggregates announced from the RIPE address blocks: 125969 RIPE Region origin ASes present in the Internet Routing Table: 26460 RIPE Prefixes per ASN: 8.05 RIPE Region origin ASes announcing only one prefix: 11708 RIPE Region transit ASes present in the Internet Routing Table: 3730 Average RIPE Region AS path length visible: 4.5 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 8508 Number of RIPE addresses announced to Internet: 721641344 Equivalent to 43 /8s, 3 /16s and 95 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 100239 Total LACNIC prefixes after maximum aggregation: 23100 LACNIC Deaggregation factor: 4.34 Prefixes being announced from the LACNIC address blocks: 101455 Unique aggregates announced from the LACNIC address blocks: 44848 LACNIC Region origin ASes present in the Internet Routing Table: 8942 LACNIC Prefixes per ASN: 11.35 LACNIC Region origin ASes announcing only one prefix: 2366 LACNIC Region transit ASes present in the Internet Routing Table: 1672 Average LACNIC Region AS path length visible: 5.3 Max LACNIC Region AS path length visible: 42 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 6495 Number of LACNIC addresses announced to Internet: 173840128 Equivalent to 10 /8s, 92 /16s and 151 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-270748 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 21549 Total AfriNIC prefixes after maximum aggregation: 4336 AfriNIC Deaggregation factor: 4.97 Prefixes being announced from the AfriNIC address blocks: 31029 Unique aggregates announced from the AfriNIC address blocks: 9578 AfriNIC Region origin ASes present in the Internet Routing Table: 1334 AfriNIC Prefixes per ASN: 23.26 AfriNIC Region origin ASes announcing only one prefix: 471 AfriNIC Region transit ASes present in the Internet Routing Table: 256 Average AfriNIC Region AS path length visible: 4.9 Max AfriNIC Region AS path length visible: 23 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 618 Number of AfriNIC addresses announced to Internet: 105913600 Equivalent to 6 /8s, 80 /16s and 29 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 4997 618 593 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 3243 1331 26 VIETEL-AS-AP Viettel Group, VN 45899 3065 1762 114 VNPT-AS-VN VNPT Corp, VN 9829 2735 1493 546 BSNL-NIB National Internet Backbone, IN 7713 2628 801 475 TELKOMNET-AS-AP PT Telekomunikasi Indon 9808 2606 9043 63 CMNET-GD Guangdong Mobile Communication 4766 2548 11121 763 KIXS-AS-KR Korea Telecom, KR 9498 2187 432 207 BBIL-AP BHARTI Airtel Ltd., IN 4755 2144 442 197 TATACOMM-AS TATA Communications formerl 9394 2060 4898 24 CTTNET China TieTong Telecommunications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7155 4058 280 27 VIASAT-SP-BACKBONE - ViaSat,Inc., US 11492 3655 238 687 CABLEONE - CABLE ONE, INC., US 22773 3470 2973 156 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 6327 3465 1324 93 SHAW - Shaw Communications Inc., CA 16509 3183 7138 1534 AMAZON-02 - Amazon.com, Inc., US 16625 2807 1476 2016 AKAMAI-AS - Akamai Technologies, Inc., 30036 2215 352 143 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 20115 2150 2770 524 CHARTER-20115 - Charter Communications, 18566 2078 405 104 MEGAPATH5-US - MegaPath Corporation, US 5650 2061 3073 1454 FRONTIER-FRTR - Frontier Communications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 5563 1615 142 UNI2-AS, ES 39891 4034 219 19 ALJAWWALSTC-AS, SA 8551 3041 379 46 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2750 482 1934 AKAMAI-ASN1, US 31334 2645 484 13 KABELDEUTSCHLAND-AS, DE 12389 2398 2231 689 ROSTELECOM-AS, RU 9121 2213 1692 18 TTNET, TR 34984 2157 350 539 TELLCOM-AS, TR 9009 1825 197 1005 M247, GB 13188 1604 100 47 TRIOLAN, UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6231 3349 587 Uninet S.A. de C.V., MX 10620 3359 534 459 Telmex Colombia S.A., CO 11830 2695 370 54 Instituto Costarricense de Electricidad 6503 1633 378 405 Axtel, S.A.B. de C.V., MX 7303 1477 1027 278 Telecom Argentina S.A., AR 28573 1171 2232 193 CLARO S.A., BR 6147 1092 379 40 Telefonica del Peru S.A.A., PE 13999 1068 488 250 Mega Cable, S.A. de C.V., MX 3816 1062 546 124 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 931 110 59 Alestra, S. de R.L. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1188 394 24 LINKdotNET-AS, EG 36992 983 1535 73 ETISALAT-MISR, EG 24835 969 610 24 RAYA-AS, EG 36903 868 438 95 MT-MPLS, MA 8452 649 1857 19 TE-AS TE-AS, EG 6713 626 1863 34 IAM-AS, MA 29571 528 68 11 ORANGE-COTE-IVOIRE, CI 15399 415 45 10 WANANCHI-, KE 37342 402 32 1 MOVITEL, MZ 23889 365 231 15 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6231 3349 587 Uninet S.A. de C.V., MX 12479 5563 1615 142 UNI2-AS, ES 7545 4997 618 593 TPG-INTERNET-AP TPG Telecom Limited, AU 7155 4058 280 27 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 4034 219 19 ALJAWWALSTC-AS, SA 11492 3655 238 687 CABLEONE - CABLE ONE, INC., US 22773 3470 2973 156 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 6327 3465 1324 93 SHAW - Shaw Communications Inc., CA 10620 3359 534 459 Telmex Colombia S.A., CO 7552 3243 1331 26 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 12479 5563 5421 UNI2-AS, ES 7545 4997 4404 TPG-INTERNET-AP TPG Telecom Limited, AU 7155 4058 4031 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 4034 4015 ALJAWWALSTC-AS, SA 6327 3465 3372 SHAW - Shaw Communications Inc., CA 22773 3470 3314 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 7552 3243 3217 VIETEL-AS-AP Viettel Group, VN 8551 3041 2995 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 3655 2968 CABLEONE - CABLE ONE, INC., US 45899 3065 2951 VNPT-AS-VN VNPT Corp, VN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 260984 UNALLOCATED 45.175.186.0/23 16735 ALGAR TELECOM S/A, BR 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65550 DOCUMENT 81.8.34.0/24 15924 BORUSANTELEKOM-AS, TR 65550 DOCUMENT 81.8.35.0/24 15924 BORUSANTELEKOM-AS, TR 65549 DOCUMENT 117.239.163.0/24 65544 UNKNOWN 64339 UNALLOCATED 143.0.108.0/22 18747 IFX18747 - IFX Corporation, US 64355 UNALLOCATED 156.40.196.0/24 30387 NIH-NET-NCCS - National Instit 496313 UNALLOCATED 161.170.122.0/24 22773 ASN-CXA-ALL-CCI-22773-RDC - Co 496313 UNALLOCATED 161.170.123.0/24 22773 ASN-CXA-ALL-CCI-22773-RDC - Co Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 27.126.156.0/22 55827 UNKNOWN 27.126.156.0/23 55827 UNKNOWN 27.126.158.0/23 55827 UNKNOWN 41.67.192.0/18 15964 CAMNET-AS, CM 41.67.192.0/24 15964 CAMNET-AS, CM 41.67.200.0/24 15964 CAMNET-AS, CM 41.67.201.0/24 15964 CAMNET-AS, CM 41.67.202.0/24 15964 CAMNET-AS, CM 41.67.203.0/24 15964 CAMNET-AS, CM Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:10 /9:11 /10:37 /11:100 /12:291 /13:574 /14:1148 /15:1922 /16:13222 /17:8096 /18:13959 /19:25671 /20:40397 /21:47340 /22:97053 /23:78360 /24:446466 /25:1105 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 4527 5563 UNI2-AS, ES 6327 3252 3465 SHAW - Shaw Communications Inc., CA 7155 3147 4058 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 2946 4034 ALJAWWALSTC-AS, SA 11492 2859 3655 CABLEONE - CABLE ONE, INC., US 22773 2696 3470 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 31334 2501 2645 KABELDEUTSCHLAND-AS, DE 8551 2500 3041 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11830 2042 2695 Instituto Costarricense de Electricidad y Telec 18566 1973 2078 MEGAPATH5-US - MegaPath Corporation, US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1593 2:1108 3:6 4:22 5:3020 6:49 7:1 8:1361 9:1 12:1798 13:422 14:2129 15:46 16:7 17:271 18:77 20:54 23:2943 24:2588 25:4 27:2474 31:2757 32:108 35:37 36:921 37:2995 38:1810 39:299 40:125 41:3396 42:644 43:2092 44:174 45:11283 46:3336 47:266 49:1457 50:1106 51:347 52:1063 54:260 55:683 56:6 57:48 58:2030 59:1123 60:606 61:2220 62:2047 63:1865 64:5013 65:2266 66:4785 67:2731 68:1217 69:3584 70:1392 71:673 72:2709 74:2684 75:1288 76:596 77:2564 78:2005 79:2320 80:1807 81:1530 82:1181 83:925 84:1176 85:2363 86:553 87:1596 88:1140 89:2576 90:233 91:6617 92:1432 93:2460 94:2603 95:3688 96:957 97:339 98:955 99:832 100:84 101:1094 102:669 103:22300 104:3635 105:296 106:827 107:1804 108:682 109:3544 110:1785 111:1999 112:1551 113:1401 114:1292 115:1808 116:1771 117:1958 118:2170 119:1658 120:1089 121:1055 122:2316 123:1851 124:1532 125:2016 128:1378 129:866 130:547 131:1828 132:762 133:227 134:1103 135:260 136:605 137:810 138:2110 139:958 140:651 141:898 142:793 143:1105 144:895 145:285 146:1423 147:886 148:1840 149:1005 150:828 151:1262 152:1407 153:360 154:4419 155:889 156:2650 157:1063 158:699 159:1936 160:1622 161:976 162:2997 163:852 164:1296 165:1186 166:523 167:1445 168:3549 169:485 170:4204 171:694 172:1738 173:2302 174:1035 175:996 176:2506 177:4073 178:2758 179:1431 180:2141 181:2371 182:2806 183:1155 184:2278 185:15436 186:3771 187:2538 188:3402 189:2080 190:8281 191:1471 192:10043 193:6768 194:5531 195:4203 196:3140 197:1810 198:6024 199:5942 200:7188 201:5203 202:10454 203:10244 204:4585 205:3081 206:3225 207:3266 208:3931 209:4305 210:3923 211:2045 212:3286 213:2964 214:1146 215:54 216:5870 217:2240 218:885 219:606 220:1925 221:972 222:1014 223:1392 End of report

1 0

FW: This DNS over HTTP thing
by Keith Medcalf 04 Oct '19

04 Oct '19

Masataka Ohta wrote: > >Livingood, Jason wrote: > >> The challenge of course is that in the absence of a silver bullet >> solution, that people working to combat all forms of childsorship >> exploitation are simultaneously trying several things, ranging from >> going to the source as you suggest and arresting people, to trying to >> interrupt the online tools that they may use or that might >> fund/support them, etc. > >The Internet was working very well to suppress child porn by >making video freely distributed, which made child porn industry >a lot less profitable. > >Freely distributed video also makes investigation of victims >easier. > >So, people who want to make money from child porn has been >trying to have censorship of various degree. > >In UK, they are very successful. Finally, someone with a modicum of common sense and proper reasoning. I salute you, sir! -- The fact that there's a Highway to Hell but only a Stairway to Heaven says a lot about anticipated traffic volume.

2 1

Spectrum DNS servers resolving my domain name to a loopback address.
by jake vdb 04 Oct '19

04 Oct '19

Hey, I posted this on r/networking and was advised to post on this list. The small company I work for has a niche SaaS app and for the past week Spectrum DNS servers have resolved the name to 127.0.0.54. I found a Spectrum user on reddit to confirm the problem: nslookup rightbridge.net dns-cac-lb-02.rr.com Non-authoritative answer: Name: rightbridge.net Address: 127.0.0.54 server 209.18.47.62 Default Server: dns-cac-lb-02.rr.com Address: 209.18.47.62 I have been trying for a week to get Spectrum tech support and Twitter support to help, but so far that's been an exercise in futility. As far as I'm aware, this only affects Spectrum. I have switched some users to Google's public DNS servers, but I can't reach all of them. Reddit has been some help troubleshooting; That is indeed interesting. What I notice is: > It replies to A requests with a 60 second TTL every single time, which is > a behavior normally expected of an authoritative server, yet it is marking > the replies as non-authoritative. I would expect non-authoritative servers > to have a decrementing TTL. > It responds with 0 records for NS, MX, AAAA, and A requests. Not NXDOMAIN > though. > It seems like a wildcard record that covers everything under your domain. > I see this behavior on both of the Spectrum resolvers that my cable modem > connection is offered via DHCP. I don't have this problem if I use my own > resolver (on a Spectrum connection). > I'm stumped. Despite my comment earlier about it being unlikely to be a > Spectrum problem, I now agree that it does appear to be something strange > on their side. Just to be sure, have you ever used Spectrum as a provider > for something related to this domain, where they hosted the domain or > anything? I'm not sure if they even offer that service, but want to ask > just to be sure. There is typically little reason to have a specific domain > singled out in your nameservers unless you host it. > The one guess I have is that they have gone out of their way to ban your > domain for some reason. Wildcard pointing all queries to it to localhost > would not be too unexpected of a way to ban a domain. Have you had any > trouble with malware infections, spam, or anything else you can think of > that might have lead someone to want to ban the domain? I don't believe Spectrum has even been a service provider for my employer. They do not offer service where our home office is located, and they have only used Rackspace for hosting in the 13 years they've been around. No malware, infections, spam (that I'm aware of). We are not registered on any Blacklists. I appreciate any help / advice, Jake

2 1