On Mon, Jan 31, 2011 at 11:14 PM, Owen DeLong <owen@delong.com> wrote:
Interesting... "The Leadig Provider in Dhaka" is using hijacked addresses.
.... botswana (not the same direct area. but one I happened to notice this same thing happening with this weekend) ;; QUESTION SECTION: ;bw. IN NS ;; ANSWER SECTION: bw. 86400 IN NS ns4.btc.bw. bw. 86400 IN NS rain.psg.com. bw. 86400 IN NS vpsm.btc.bw. bw. 86400 IN NS hippo.ru.ac.za. bw. 86400 IN NS bw.auth-servers.net. bw. 86400 IN NS ns1.btc.bw. ns4.btc.bw. 32809 IN A 168.167.253.20 ns1.btc.bw. 32735 IN A 168.167.168.34 NetRange: 168.167.0.0 - 168.167.255.255 CIDR: 168.167.0.0/16 OriginAS: NetName: AFRINIC-168-167-0-0 NetHandle: NET-168-167-0-0-1 Parent: NET-168-0-0-0-0 NetType: Transferred to AfriNIC Comment: This IP address range is under AFRINIC responsibility. Comment: Please see http://www.afrinic.net/ for further details, Comment: or check the WHOIS server located at whois.afrinic.net. RegDate: 2005-02-21 Updated: 2005-02-21 Ref: http://whois.arin.net/rest/net/NET-168-167-0-0-1 OrgName: African Network Information Center OrgId: AFRINIC Address: Level 11ABC Address: Raffles Tower Address: Lot 19, Cybercity City: Ebene StateProv: PostalCode: Country: MU RegDate: 2004-05-17 Updated: 2010-06-28 Comment: AfriNIC - http://www.afrinic.net Comment: The African & Indian Ocean Internet Registry Seems like Afrinic has some records-keeping-issues... -chris
Owen
On Jan 31, 2011, at 8:00 PM, Richard Barnes wrote:
Some times they're not so anonymous :)
122.200.40.0/21 38272 >>UNKNOWN<<
"Sonargaon Online Limited(SOL) is the leading Internet Service Provider in Dhaka"
<http://122.200.40.5/pages/contact_us.htm>
" 40/1, Rahman Plaza
Shahid Faruk Road (4th Floor)
Jatrabari, Dhaka
Bangladesh
Tel : 88-02-7553432
E-mail : info@sonargaononline.net "
On Mon, Jan 31, 2011 at 10:00 PM, Owen DeLong <owen@delong.com> wrote:
On Jan 31, 2011, at 6:32 PM, Vovan wrote:
Hello,
sorry for possibly trite question, but what does this ">>UNKNOWN<<" mean? e.g.:
Network Origin AS Description 41.222.79.0/24 36938 >>UNKNOWN<<
quote from: http://thyme.rand.apnic.net/current/data-add-IANA
Cheers,
Vladimir
It's an unallocated address being advertised by an unallocated AS number.
Pretty hard to identify a contact for such a route, no?
Owen