June 2003 - Test - lists.nanog.org

Re: Don't call registry off the map?
by Steven M. Bellovin 27 Jun '03

27 Jun '03

In message <sefc0fbf.012(a)gwsmtp.ohsu.edu>, "Tim Rand" writes: > > >I was able to earlier today, but the response was VERY slow. Their = >server is probably pretty busy.... > I got through to the Web site earlier, but I haven't received the confirmation emails. I'm pretty certain there's no spam filter in the way, either -- I guess the mail server is even more overloaded than the Web server... --Steve Bellovin, http://www.research.att.com/~smb (me) http://www.wilyhacker.com (2nd edition of "Firewalls" book)

3 2

Re: [Don't call registry off the map?]
by Joshua Sahala 27 Jun '03

27 Jun '03

i can get to it, but it is quite slow. (on it's way to being slashdotted perhaps?!?!) wonder if it has anything to to with the fact that it is running iis5.0 must be a large rush of people all hurrying to get their names/numbers on another government list... /joshua Patrick <patrick(a)stealthgeeks.net> wrote: > > > Can anyone reach www.donotcall.gov? Seems to be off the map... > > I guess this is just the publics way of inviting the DMA(Direct Marketing > Association) to re-evaulate their assertions that the majority of the > populace enjoys receiving telemarketing calls... > > /\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\ > Patrick Greenwell > Asking the wrong questions is the leading cause of wrong answers > \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ > "Walk with me through the Universe, And along the way see how all of us are Connected. Feast the eyes of your Soul, On the Love that abounds. In all places at once, seemingly endless, Like your own existence." - Stephen Hawking -

2 1

Don't call registry off the map?
by Patrick 27 Jun '03

27 Jun '03

Can anyone reach www.donotcall.gov? Seems to be off the map... I guess this is just the publics way of inviting the DMA(Direct Marketing Association) to re-evaulate their assertions that the majority of the populace enjoys receiving telemarketing calls... /\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\ Patrick Greenwell Asking the wrong questions is the leading cause of wrong answers \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/

6 6

Re: Don't call registry off the map?
by Tim Rand 27 Jun '03

27 Jun '03

I was able to earlier today, but the response was VERY slow. Their server is probably pretty busy.... Tim Rand Network Engineer OHSU Information Technology Group ph: 503.418.1045 fx: 503.494.7143 >>> Patrick <patrick(a)stealthgeeks.net> 06/27/03 09:26AM >>> Can anyone reach www.donotcall.gov? Seems to be off the map... I guess this is just the publics way of inviting the DMA(Direct Marketing Association) to re-evaulate their assertions that the majority of the populace enjoys receiving telemarketing calls... /\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\ Patrick Greenwell Asking the wrong questions is the leading cause of wrong answers \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/

1 0

Re: Country of Origin for Malicious Attacks
by sgorman1＠gmu.edu 27 Jun '03

27 Jun '03

damn the Los Alamos people are efficient the paper for anyone intersted - http://arxiv.org/abs/cond-mat/0306002 ----- Original Message ----- From: Peter Galbavy <peter.galbavy(a)knowtion.net> Date: Friday, June 27, 2003 7:22 am Subject: Re: Country of Origin for Malicious Attacks > > Jamie Reid wrote: > > I'd be interested in knowing how linking aggregated attack > > information to country of > > origin is actually valuable relative to our ability to respond > to it. > > It mostly salves the prejudices of those who want to see certain other > countries as the enemy. My view, as most of this stuff advertises > US based > 'products and services' (generous description), it should really > be a case > of 'follow the money' as per previous thread. > > Peter > > >

1 0

Re: Country of Origin for Malicious Attacks
by sgorman1＠gmu.edu 27 Jun '03

27 Jun '03

"I'd be interested in knowing how linking aggregated attack information to country of origin is actually valuable relative to our ability to respond to it." The simulations we have been running are at the AS level, but country level information is useful for running some of the scenarios we are interested in. Currently we have been starting attacks on the AS graph from randomly selected networks, but thought it would be interesting to start attacks from frequent bad actors. The country level part comes in since we are doing this from an economic/policy perspective. If you are going to invest money in cybersecurity what are the most important networks to protect. If there needs to be cross country cooperation, which countries are the most important to get to sign on. Still not sure how effective of a way this is to look at the problem, but it is one of the scenarios we are running through along with market forces, best practices, insurance, liability etc etc. If anyone is intersted we'll be posting the general approach and models on the xxx.lanl.gov site in the next day or so. I can post the link if folks are intersted, any feedback would be greatly appreciated. thanks, sean

1 0

The Cidr Report
by cidr-report＠potaroo.net 27 Jun '03

27 Jun '03

This report has been generated at Fri Jun 27 21:07:01 2003 AEST. The report analyses the BGP Routing Table of the Route-Views router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as6447 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 20-06-03 139461 99183 21-06-03 16181 33004 22-06-03 139382 99687 23-06-03 139587 99904 24-06-03 139325 99906 25-06-03 140938 100648 26-06-03 139466 99744 27-06-03 139252 99443 AS Summary 15572 Number of ASes in routing system 6036 Number of ASes announcing only one prefix 2367 Largest number of prefixes announced by an AS AS705 : ALTERNET-AS UUNET Technologies, Inc. 73223936 Largest address span announced by an AS (/32s) AS568 : SUMNET-AS DISO-UNRRA Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 27Jun03 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 139250 99943 39307 28.2% All ASes AS15290 1873 206 1667 89.0% ATTCA-15290 AT&T Canada Telecom Services Company AS705 2367 1308 1059 44.7% ALTERNET-AS UUNET Technologies, Inc. AS7132 835 237 598 71.6% SBIS-AS SBC Internet Services - Southwest AS18566 604 8 596 98.7% COVAD Covad Communications AS4716 1281 727 554 43.2% POWEREDCOM POWEREDCOM, Inc. AS3908 1807 1260 547 30.3% SUPERNETASBLK SuperNet, Inc. AS11305 549 81 468 85.2% INTERLAND-NET1 Interland Incorporated AS690 1614 1170 444 27.5% MERIT-AS-27 Merit Network Inc. AS701 1526 1090 436 28.6% ALTERNET-AS UUNET Technologies, Inc. AS7018 1364 947 417 30.6% ATT-INTERNET4 AT&T WorldNet Services AS189 685 316 369 53.9% GENUITY-AS189 Genuity AS4323 602 236 366 60.8% TW-COMM Time Warner Communications, Inc. AS3215 569 228 341 59.9% AS3215 France Telecom Transpac AS1221 1120 782 338 30.2% ASN-TELSTRA Telstra Pty Ltd AS1239 973 687 286 29.4% SPRINTLINK Sprint AS6198 476 207 269 56.5% BATI-MIA BellSouth Network Solutions, Inc AS7046 1345 1101 244 18.1% UUNET-CUSTOMER UUNET Technologies, Inc. AS3356 604 362 242 40.1% LEVEL3 Level 3 Communications, LLC AS27364 320 89 231 72.2% ACS-INTERNET Armstrong Cable Services AS6197 521 303 218 41.8% BATI-ATL BellSouth Network Solutions, Inc AS7843 630 421 209 33.2% ADELPHIA-AS Adelphia Corp. AS4755 433 227 206 47.6% VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System AS17676 250 49 201 80.4% GIGAINFRA XTAGE CORPORATION AS2386 410 225 185 45.1% INS-AS AT&T Data Communications Services AS4355 405 222 183 45.2% ERMS-EARTHLNK EARTHLINK, INC AS376 381 211 170 44.6% RISQ-AS Reseau Interordinateurs Scientique Quebecois (RISQ) AS209 629 462 167 26.6% ASN-QWEST Qwest AS2548 906 739 167 18.4% ALGX-ATCW-AS Allegiance Telecom Companies Worldwide AS6140 285 122 163 57.2% IMPSAT-USA ImpSat AS20115 460 298 162 35.2% CHARTER-NET-HKY-NC Charter Communications Total 25824 14321 11503 44.5% Top 30 total Possible Bogus Routes 5.5.5.0/24 AS1239 SPRINTLINK Sprint 24.119.0.0/16 AS11492 CABLEONE CABLE ONE 24.183.185.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.183.186.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.183.187.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.183.188.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.183.189.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.183.191.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.199.0.0/18 AS20001 ROADRUNNER-WEST HoldCo LLC - Road Runner 24.199.32.0/22 AS1668 AOL-PRIMEHOST GNN Hosting Service 24.223.128.0/17 AS11060 NEO-RR-COM Time Warner Cable Northeast Ohio 39.0.0.0/8 AS4554 EP0-BLK-ASNBLOCK-4 Exchange Point Blocks 61.12.32.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 61.12.34.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 63.0.0.0/8 AS226 LOS-NETTOS-AS Los Nettos 64.30.64.0/19 AS14900 USLEC-CORP-1 USLEC Corp. 65.6.145.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.6.146.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.6.147.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.6.150.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.6.151.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 66.41.192.0/18 AS13367 ATT-BBND-B AT&T Broadband 66.207.54.80/29 AS2548 ALGX-ATCW-AS Allegiance Telecom Companies Worldwide 67.45.23.120/29 AS2548 ALGX-ATCW-AS Allegiance Telecom Companies Worldwide 67.45.53.192/29 AS2548 ALGX-ATCW-AS Allegiance Telecom Companies Worldwide 69.60.128.0/20 AS23131 STARLAN Starlan Communications Inc. 82.129.128.0/17 AS24835 RAYA-AS RAYA Telecom - Egypt 132.0.0.0/10 AS568 SUMNET-AS DISO-UNRRA 137.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 138.136.0.0/13 AS568 SUMNET-AS DISO-UNRRA 140.240.0.0/13 AS1 GNTY-1 Genuity 158.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 165.212.0.0/16 AS7424 USANET USA.Net 166.16.0.0/16 AS7132 SBIS-AS SBC Internet Services - Southwest 171.64.0.0/10 AS1 GNTY-1 Genuity 192.43.230.0/24 AS4738 SAARDNET-AS South Australian Academic Research and Development Network 192.44.0.0/19 AS702 ALTERNET-AS UUNET Technologies, Inc. 192.83.14.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.16.0/20 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.25.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.32.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.64.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.96.0/22 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.100.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.119.135.0/24 AS270 PSCNI-AS National Aeronautics and Space Administration 192.124.252.0/22 AS680 AS680 DFN-IP service G-WiN 192.135.50.0/24 AS7018 ATT-INTERNET4 AT&T WorldNet Services 192.136.79.0/24 AS719 AS719 LANLINK autonomous system 192.136.80.0/24 AS719 AS719 LANLINK autonomous system 192.136.84.0/24 AS719 AS719 LANLINK autonomous system 192.136.85.0/24 AS719 AS719 LANLINK autonomous system 192.153.136.0/21 AS568 SUMNET-AS DISO-UNRRA 192.153.144.0/21 AS568 SUMNET-AS DISO-UNRRA 192.168.4.0/24 AS21166 AS21166 SatGate autonomous system 192.172.0.0/19 AS568 SUMNET-AS DISO-UNRRA 192.188.208.0/20 AS568 SUMNET-AS DISO-UNRRA 192.243.32.0/23 AS2044 PALIN-AS Palin Aquisitions Inc. 198.23.26.0/24 AS4390 BELLATLANTIC-COM Bell Atlantic, Inc. 198.97.72.0/21 AS568 SUMNET-AS DISO-UNRRA 198.97.80.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.88.0/24 AS89 NUSC-CSTLNET-AS Naval Underwater Systems Center 198.97.192.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.240.0/20 AS568 SUMNET-AS DISO-UNRRA 198.98.8.0/21 AS3701 NERONET Oregon Joint Graduate Schools of Engineering 198.101.4.0/22 AS568 SUMNET-AS DISO-UNRRA 198.136.32.0/20 AS19329 MCNET Martin County Board of County Commissioners 198.144.32.0/19 AS3998 CITY-NET CityNet, Inc. 198.161.87.0/24 AS6539 GROUPTLCOM GT Group Telecom Services Corp. 198.161.165.0/24 AS852 ASN852 Telus Advanced Communications 198.161.200.0/24 AS6539 GROUPTLCOM GT Group Telecom Services Corp. 198.163.155.0/24 AS684 MBNET-AS Manitoba Regional Network 198.167.0.0/16 AS7456 INTERHOP Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ATTCA-15290 AT&T Canada Telecom Services Company 198.168.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL SaskTel 198.232.133.0/24 AS23075 SKOTOS-AS Skotos Tech, Inc 199.10.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.60.0.0/20 AS271 BCNET-AS University of British Columbia 199.79.32.0/20 AS3701 NERONET Oregon Joint Graduate Schools of Engineering 199.84.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 199.114.0.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.0.0/21 AS568 SUMNET-AS DISO-UNRRA 199.114.128.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.140.0/24 AS3544 ITSDN-U7 DISA/UNRRA 199.120.32.0/19 AS16582 NEXTLEVELINTERNET NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.123.16.0/20 AS568 SUMNET-AS DISO-UNRRA 199.123.80.0/21 AS568 SUMNET-AS DISO-UNRRA 199.189.32.0/19 AS7332 IQUEST-AS IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 202.3.144.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.145.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.146.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.147.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.148.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.149.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.150.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.151.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.152.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.153.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.154.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.155.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.156.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.157.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.158.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.159.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.4.252.0/22 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.4.255.0/24 AS4799 UNSPECIFIED Ji Tong Communications Co., Ltd. 202.6.96.0/24 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.6.97.0/24 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.6.99.0/24 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.10.72.0/21 AS9716 AUSTAR-AS-AP Austar Entertainement 202.44.112.0/20 AS17458 CWNETDG-IO-AP Cable and Wireless 202.122.76.0/24 AS17553 TIMELESS-AP System Integration provider 202.130.224.0/20 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.130.240.0/21 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.130.248.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 202.130.252.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 202.136.254.0/23 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.136.254.0/24 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.140.230.0/23 AS9466 UUNET-JP-AP UUNET Japan Limited 202.140.232.0/23 AS9466 UUNET-JP-AP UUNET Japan Limited 202.140.234.0/24 AS9466 UUNET-JP-AP UUNET Japan Limited 202.140.235.0/24 AS9466 UUNET-JP-AP UUNET Japan Limited 202.142.130.0/23 AS17820 DIL-AP DIRECT INTERNET LTD. 202.142.132.0/22 AS17820 DIL-AP DIRECT INTERNET LTD. 202.143.48.0/21 AS4795 INDOSAT2-ID-AP INDOSATNET-ASN 202.143.56.0/21 AS4795 INDOSAT2-ID-AP INDOSATNET-ASN 202.161.0.0/19 AS10097 FLOWCOM flow communications level 2 541 kent st sydney nsw 2000 202.161.0.0/21 AS4634 -No Whois Entry- 202.161.8.0/21 AS4634 -No Whois Entry- 202.164.192.0/19 AS7599 IPXC-AS-AP IP Exchange 202.165.0.0/19 AS9443 INTERNETPRIMUS-AS-AP Primus Telecommunications 202.173.32.0/19 AS9671 APNIC-AS-3-BLOCK Asia Pacific Network Information Centre 203.12.222.64/26 AS4802 WANTREE-AS-AP Wantree Development 203.12.222.192/26 AS4802 WANTREE-AS-AP Wantree Development 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.76.128.0/24 AS9729 IS-AP iAdvantage Limited 203.76.224.0/24 AS9549 COMDEK-ISP-AS-AP Comdek ISP 203.78.125.0/24 AS17653 PCM-HK-AP Pacific Century Matrix 203.84.192.0/19 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 203.84.192.0/20 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 203.84.208.0/20 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 203.86.2.0/23 AS4058 APNIC-4058 Asia Pacific Network Information Centre 203.90.192.0/20 AS9658 ETPI-IDS-AS-AP Eastern Telecoms Phils., Inc. 203.135.99.0/24 AS2687 IBM-MMD-AS IBM 203.135.224.0/19 AS4058 APNIC-4058 Asia Pacific Network Information Centre 204.19.224.0/19 AS816 UUNET-AS4 UUNET Technologies, Inc. 204.29.189.0/24 AS11755 WAYMARKCOMM Waymark Internet Services, Inc. 204.52.232.0/24 AS7177 DFWNET DFW Internet Services, Inc. 204.89.225.0/24 AS2495 KANREN Kansas Research and Education Network 204.154.240.0/21 AS11572 MEDIACOM Mediacom,llc / RidgeNet 204.194.110.0/23 AS10588 ICSNET Intelligent Computer Solutions, Inc 205.150.0.0/15 AS701 ALTERNET-AS UUNET Technologies, Inc. 205.151.0.0/19 AS816 UUNET-AS4 UUNET Technologies, Inc. 206.41.32.0/19 AS14824 NEWSOUTH NewSouth Communications Corp. 206.81.187.0/24 AS19194 JOVITA Sentris Network LLC 206.82.64.0/18 AS7029 ALLTELNET Alltel Information Services, Inc. 206.108.34.0/24 AS852 ASN852 Telus Advanced Communications 206.108.35.0/24 AS852 ASN852 Telus Advanced Communications 206.126.0.0/19 AS5750 FLEXNET-HAWAII FlexNet Inc. 206.167.57.0/24 AS376 RISQ-AS Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ATTCA-15290 AT&T Canada Telecom Services Company 206.191.96.0/19 AS15290 ATTCA-15290 AT&T Canada Telecom Services Company 206.251.69.0/24 AS27429 TIL Telesat International Ltd. 207.47.39.0/24 AS816 UUNET-AS4 UUNET Technologies, Inc. 207.92.0.0/14 AS2551 ICG ICG NetAhead, Inc. 207.162.192.0/19 AS4589 EASYNET Easynet Group Plc 207.231.96.0/19 AS11194 NUNETPA NuNet Inc 208.65.232.0/23 AS701 ALTERNET-AS UUNET Technologies, Inc. 208.81.187.0/24 AS19194 JOVITA Sentris Network LLC 208.104.103.0/24 AS1239 SPRINTLINK Sprint 209.104.198.0/24 AS6137 SISNA SISNA, Inc. 209.104.199.0/24 AS6137 SISNA SISNA, Inc. 209.104.218.0/24 AS6137 SISNA SISNA, Inc. 209.104.219.0/24 AS6137 SISNA SISNA, Inc. 209.104.252.0/22 AS12030 PACIFIC-ONLINE-PON Pacific Online Services 209.108.0.0/14 AS2551 ICG ICG NetAhead, Inc. 209.151.128.0/19 AS816 UUNET-AS4 UUNET Technologies, Inc. 209.160.73.0/24 AS13415 LUMIX Lumix Communications, Inc. 209.160.209.0/24 AS13415 LUMIX Lumix Communications, Inc. 209.169.219.0/24 AS189 GENUITY-AS189 Genuity 209.169.223.0/24 AS189 GENUITY-AS189 Genuity 209.172.0.0/18 AS7770 TRITON Triton Technologies, Inc. 209.213.32.0/19 AS10629 INTERPAC Inter-Pacific Network Services 209.213.50.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.51.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.55.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.56.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.160.0/19 AS4355 ERMS-EARTHLNK EARTHLINK, INC 209.222.137.0/24 AS27429 TIL Telesat International Ltd. 209.240.96.0/19 AS10815 KCNET KCnet, Inc. 209.251.0.0/19 AS11036 SISCOM SISCOM, Inc 209.251.64.0/19 AS10266 NETWAY-AS MDC, Inc. 210.4.20.0/22 AS10095 -No Whois Entry- 210.4.60.0/24 AS10095 -No Whois Entry- 210.4.61.0/24 AS10095 -No Whois Entry- 211.27.156.0/24 AS9768 PUBNET1-AS KT 211.27.156.192/26 AS9768 PUBNET1-AS KT 216.18.224.0/21 AS11458 IMBRIS IMBRIS, INC. 216.18.224.0/22 AS11458 IMBRIS IMBRIS, INC. 216.18.228.0/22 AS11458 IMBRIS IMBRIS, INC. 216.19.244.192/27 AS2548 ALGX-ATCW-AS Allegiance Telecom Companies Worldwide 216.47.32.0/19 AS11304 SPLUS Solutions Plus Inc. 216.96.128.0/18 AS7018 ATT-INTERNET4 AT&T WorldNet Services 216.115.178.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.179.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.182.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.183.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.184.0/23 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.186.0/23 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.186.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.189.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.190.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.191.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.153.0.0/17 AS6203 ISDN-NET ISDN-Net Inc. 216.211.177.0/24 AS14473 KNET KNet, Inc. 216.226.108.0/22 AS3602 SPRINT-CA-AS Sprint Canada Inc. 216.226.176.0/20 AS11109 STATE-OF-ALABAMA-ISD State of Alabama, Information Services Division Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Re: Country of Origin for Malicious Attacks
by Jamie Reid 27 Jun '03

27 Jun '03

I've found that country of origin is less relevant than route/subnet and ASN, as there is a link between the address and the people in a position to actually respond to the problem. I'd be interested in knowing how linking aggregated attack information to country of origin is actually valuable relative to our ability to respond to it. Cheers, -j -- Jamie.Reid, CISSP, jamie.reid(a)mbs.gov.on.ca Senior Security Specialist, Information Protection Centre Corporate Security, MBS 416 327 2324

3 2

National Do Not Call Registry has opened
by John R Levine 27 Jun '03

27 Jun '03

The domain is donotcall.gov, IP range is 206.16.196.192/26. They all seem to have the same subject line. Subject: National Do Not Call Registry - Complete Your Registration DCC checksums (already have a count of 25 even though it's only been open for an hour or so and it's the middle of the night): ok fuz1 ac8763a8 a9e8d829 5e8a506b 1d6ac5e5 ok fuz2 bc65f25a 2c08ccfd 5b8b6e2c 3c806c1d They don't quite have all the bugs out. I gave them three phone numbers, but they only sent two confirmations. Regards, John Levine, johnl(a)iecc.com, Primary Perpetrator of "The Internet for Dummies", Information Superhighwayman wanna-be, http://iecc.com/johnl, Sewer Commissioner "More Wiener schnitzel, please", said Tom, revealingly. ---------- Forwarded message ---------- Return-Path: <Register(a)donotcall.gov> Delivered-To: johnl(a)iecc.com Received: (qmail 3643 invoked by uid 100); 27 Jun 2003 05:12:01 -0000 Received: (qmail 3518 invoked from network); 27 Jun 2003 05:09:30 -0000 Received: from unknown (HELO DoNotCall.GOV) (206.16.196.221) by mail.iecc.com with SMTP; 27 Jun 2003 05:09:30 -0000 Received: from donotcall.gov ([206.16.196.208]) by DoNotCall.GOV with Microsoft SMTPSVC(5.0.2195.5329); Fri, 27 Jun 2003 01:05:04 -0400 Received: from mail pickup service by donotcall.gov with Microsoft SMTPSVC; Fri, 27 Jun 2003 01:09:29 -0400 From: <Register(a)donotcall.gov> To: <donotcall(a)johnlevine.com> Subject: [donotcall(a)johnlevine.com] National Do Not Call Registry - Complete Your Registration Date: Fri, 27 Jun 2003 01:09:29 -0400 Message-ID: <058d01c33c6a$49752600$d0c410ce@8798WWW3> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft CDO for Windows 2000 Thread-Index: AcM8akl1m6Ypbr9BRGKj8OREFMsymw== Content-Class: urn:content-classes:message X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 X-OriginalArrivalTime: 27 Jun 2003 05:09:29.0515 (UTC) FILETIME=[49941FB0:01C33C6A] X-DCC-IECC-Metrics: tom.iecc.com 1107; Body=1 Fuz1=7 Fuz2=7 X-Spam-Status: No, hits=-5.6 required=7.0 tests=BAYES_01,CLICK_BELOW,NO_REAL_NAME version=2.53 X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.53 (1.174.2.15-2003-03-30-exp) Click here [ url snipped ] to complete your request to register your phone number ((607) 330-5711) on the National Do Not Call Registry. Important: You must respond to this email by clicking the link within 72 hours for your registration to be successful. Once you have registered, your phone number registration will be effective for 5 years. It will be illegal for most telemarketers to call you, and you will be able to file a complaint if a telemarketer does call you. The website www.donotcall.gov provides information about filing a complaint. Important: After you click on the link, print the web page and keep it for your records. ******************************************************************************************************************************* Please do not reply to this message as it is from an unattended mailbox. Any replies to this email will not be responded to or forwarded. This service is used for outgoing emails only and cannot respond to inquiries.

1 0

Re: companies like microsoft and telia...
by Kevin Oberman 26 Jun '03

26 Jun '03

> From: "Peter Galbavy" <peter.galbavy(a)knowtion.net> > Date: Thu, 26 Jun 2003 12:36:02 +0100 > Sender: owner-nanog(a)merit.edu > > > Paul Vixie wrote: > > consider microsoft-yahoo-aol's big fad of the moment which is suing > > spammers and blaming asia. the number one (#1) contributor to spam > > And then: http://news.bbc.co.uk/1/hi/business/3020566.stm > > Not in that report, but on TV last night a M$ spokedroid was quoted as > saying something like "... if Mr. Grainger offers definative proof he is > innocent, we will drop the action." > > Erm, I thought that both the US and the UK subscribed to a doctrine of > burden-of-proof on the accuser ? You confuse civil and criminal law. In criminal law the accused is considered innocent until proven guilty (unless he's someone you don't like or member of a group or class you don't like). Conviction requires proof beyond a reasonable doubt. In civil law the only requirement to sue is that you legally exist. (Both people and corporations may sue.) It's not even clear that the party being sued has to legally exist. (God has been sued.) Of course, many suits are immediately dismissed for lacking merit. But, if you can present any real indication that you have been wrongs, you can sue. Even if the defendant can present clear proof that he is not guilty, he must present it in court. So they actually are showing a bit of flexibility by saying that they will drop the suit if they are given evidence. Also, civil suites don't require a heavy burden of proof. Instead of "beyond a reasonable doubt", they only require a "preponderance of evidence". Even if you think the accusation is clearly unfounded, you can lose if you don't waste the time to show up and present evidence that the case is unfounded. This is true in the US (except, possibly, in Louisiana) where British common law is the basis of the system. Louisiana law is based on the Napoleonic Code and is supposed to be very different, but I can't say for sure. I assume that the UK has similar common law since ours come from there. (IANAL, I just play one on the net.) -- R. Kevin Oberman E-mail: oberman(a)es.net Phone: +1 510 486-8634

3 4