- Test - lists.nanog.org

MAE East outage?
by Alex Rubenstein 29 Sep '97

29 Sep '97

Hello MAE-EAST? thank you nitrous.digex.net Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State 165.117.1.17 4 2548 6934754 1496216 13625659 0 0 4w6d 165.117.1.35 4 2548 5907855 1526342 13625659 0 0 22:14:25 165.117.1.122 4 2548 1532453 3211484 13625556 0 0 4w6d 165.117.1.127 4 2548 60052 11744465 13625779 0 13 4w6d 192.41.177.2 4 1 49656 92380 0 0 0 00:50:52 Active 192.41.177.3 4 6478 63566 81892 0 0 0 00:50:52 Active 192.41.177.65 4 6205 99295 141169 0 0 0 00:50:52 Active 192.41.177.68 4 6113 165184 96560 0 0 0 00:50:52 Active 192.41.177.75 4 3951 50131 90229 0 0 0 00:50:52 Active 192.41.177.80 4 5000 50972 90919 0 0 0 00:50:51 Active 192.41.177.85 4 3491 71324 90136 0 0 0 00:50:51 Active 192.41.177.86 4 4565 51673 90927 0 0 0 00:50:51 Active 192.41.177.90 4 5388 50453 93455 0 0 0 00:50:51 Active 192.41.177.92 4 3914 49874 91278 0 0 0 00:50:51 Active 192.41.177.104 4 2041 93901 94947 0 0 0 00:50:51 Active 192.41.177.110 4 2685 58082 90924 0 0 0 00:50:51 Active 192.41.177.112 4 5378 52425 98304 0 0 0 00:50:50 Active 192.41.177.118 4 6196 49874 90710 0 0 0 00:50:50 Active 192.41.177.119 4 3967 51872 90732 0 0 0 00:50:50 Active 192.41.177.120 4 286 79607 90348 0 0 0 00:50:50 Active 192.41.177.121 4 2914 22465 27131 0 0 0 00:50:50 Active 192.41.177.125 4 297 66117 91477 0 0 0 00:50:50 Active 192.41.177.141 4 1673 101843 108025 0 0 0 00:50:50 Active 192.41.177.145 4 4200 153354 93300 0 0 0 00:50:50 Active 192.41.177.147 4 3847 65196 91088 0 0 0 00:50:49 Active 192.41.177.148 4 6172 49864 91375 0 0 0 00:50:49 Active 192.41.177.150 4 4136 147781 91894 0 0 0 00:50:49 Active 192.41.177.160 4 3407 147540 92424 0 0 0 00:50:49 Active 192.41.177.166 4 2885 49092 91508 0 0 0 00:50:49 Active 192.41.177.169 4 2885 49808 90347 0 0 0 00:50:49 Active 192.41.177.181 4 3561 580412 93460 0 0 0 00:50:49 Active 192.41.177.182 4 5683 66842 91811 0 0 0 00:50:49 Active 192.41.177.195 4 5390 49862 97760 0 0 0 00:50:48 Active 192.41.177.210 4 2551 71309 91828 0 0 0 00:50:48 Active 192.41.177.226 4 1746 50533 91515 0 0 0 00:50:48 Active 192.41.177.228 4 4006 50285 92109 0 0 0 00:50:48 Active 192.41.177.240 4 1800 471186 92147 0 0 0 00:50:48 Active 192.41.177.241 4 1239 829269 82275 0 0 0 00:50:47 Active 192.41.177.242 4 1239 814619 82034 0 0 0 00:50:47 Active 192.41.177.245 4 174 20408 16644 0 0 0 00:50:47 Active 192.41.177.248 4 701 1259066 93690 0 0 0 00:50:46 Active 192.41.177.251 4 293 54973 90461 0 0 0 00:50:46 Active 198.32.186.2 4 1 212647 102411 0 0 0 00:50:46 Active 206.205.242.7 4 3706 57639 99946 13625779 0 0 1w3d

1 0

Netcom?
by Alex Rubenstein 29 Sep '97

29 Sep '97

Does anyone have a magic number to NetCom NOC or abuse center? Thanks!

8 7

Re: *scream* Cannot contact AT&T WorldNet NOC
by Sean Donelan 29 Sep '97

29 Sep '97

>SprintLink is our upstream. After three hours they called back and >said that I "have to contact the Computer Crimes Division of the >FBI". Since the attempts stoped hours ago, I'm just going to pay >close attention to my logs and follow up if it happens again. I'm schocked! The catch-22 of Internet problem reporting, providers who don't accept trouble calls from non-customers and won't do trouble referrals between providers. I'm always amused when a provider with who we have no business relationship calls our NOC and expects help, yet when we call their NOC they refuse the call because we aren't a customer. Alternatives: - Call the FBI Computer Crime Squad (202) 324-9164, which will probally be very unsatisfying unless you can document a large dollar loss - Find a new upstream which will handle the problem referrals for you, if you find one, let me know - Form relationships yourself with other providers so you can do your own inter-provider problem referal In any case, release of customer information without the permission of the customer will require some type of legal order. -- Sean Donelan, Data Research Associates, Inc, St. Louis, MO Affiliation given for identification not representation

2 1

Re: *scream* Cannot contact AT&T WorldNet NOC
by Jonathan Clark 29 Sep '97

29 Sep '97

To answer your question about #1, we backhaul our dial-in calls all over the place. The same user dialling back in to the same number could easily end up in one of three or four IP blocks which are in turn associated with different cities in the DNS. Jonathan -- Someone apparently from a WorldNet dial-up account, calling in via New Orleans and Dallas was sending large numbers of TCP connections to port 1080. That's of course the default Socks Port. We don't run socks. Never have. The connection attempts were blocked and logged. The reasons could be: 1) stupid user entered in the wrong address for a socks proxy 2) Denial of Service attack It if were #1, then why would it be coming from two different cities and why sooooo many connections. If it was #2, why am I not seeing more connections and why TCP? IT seems to me that it's kinda pointless to spoof the source address on a TCP connection unless you are *very* clever. Why only port 1080? --Eric -- Eric Wieling (eric(a)ccti.net) Corporate Communications Technology Sales: 504-585-7303 (sales(a)ccti.net) Support: 504-525-5449 (support(a)ccti.net) I don't bother to set my alarm clock anymore. Someone always pages me before I need to wake up anyway. >-- End of excerpt from Eric Wieling

1 0

RE: *scream* Cannot contact AT&T WorldNet NOC
by Peter Lothberg 29 Sep '97

29 Sep '97

> Eric, > > If you are a customer of AT&T WorldNet Managed Internet Services > (meaning, you have a dedicated connection to the Internet from AT&T > WorldNet), the Customer Care number, which is manned 24 X7, is > 800-411-6427. You can open a trouble ticket there for whatever problem > you're having. The Customer Care technician will troubleshoot it as far > as they can take it (they have a fair amount of testing capability; if > need be the NOC will get involved and work further to resolve the > trouble. > > If you are a customer of our WorldNet Dial service, the number to call > for support is 800-WORLDNET or 800-400-1447. You are right, you will > probably always get asked about your PC configuration because that's the= Christine, The scenario is that he is not a customer of yours, he's a customer of some other ISP. The problem is that one of your customers are sending traffic that causes problems. -Peter

1 0

RE: *scream* Cannot contact AT&T WorldNet NOC
by Sorenson_Christine_M＠bns.att.com 28 Sep '97

28 Sep '97

2 1

*scream* Cannot contact AT&T WorldNet NOC
by Eric Wieling 28 Sep '97

28 Sep '97

Does *anyone* have a contact number for someone that does not keep asking me if I'm running a Windows machine? Every number I have for them, connects me to some moron that has no clue when I say "It appears that someone from your network is attempting to flood our network". Asking to be connected to Security gets me an e-mail address and asking for a supervisor get me "He's not avainable" Whois on att.net get me a voice mailbox saying that they are closed on the weekends. --Eric -- Eric Wieling (eric(a)ccti.net) Corporate Communications Technology Sales: 504-585-7303 (sales(a)ccti.net) Support: 504-525-5449 (support(a)ccti.net) I don't bother to set my alarm clock anymore. Someone always pages me before I need to wake up anyway.

1 0

URL: Spammers Lose Access, IEMMC Collapses
by Paul Ferguson 28 Sep '97

28 Sep '97

See: http://www.zdnet.com/intweek/daily/970922e.html - paul

5 4

NANOG MEETING INFO
by Pam Ciesla 26 Sep '97

26 Sep '97

Lunches at the NANOG Meeting in Phoenix, AZ, October 27 & 28 will include vegan/vegetarian and/or meat. If you have any special request, such as kosher, please let me know ASAP. The room block at the Radisson Resort (602-991-3800) ends at midnight, Friday 9/26. If the hotel still has rooms available after this date you can still request the NANOG room rate. Check out the airline discount rates. xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx Pam Ciesla 313-936-0172 - phone Merit Network, Inc. 313-647-3185 - fax University of Michigan 4251 Plymouth Road Bldg. I, Suite C Ann Arbor, MI 48105-2785 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

1 0

The Cidr Report
by Tony Bates 26 Sep '97

26 Sep '97

1 0