APNIC description: "unknown"
Hello, sorry for possibly trite question, but what does this ">>UNKNOWN<<" mean? e.g.:
Network Origin AS Description 41.222.79.0/24 36938 >>UNKNOWN<<
quote from: http://thyme.rand.apnic.net/current/data-add-IANA Cheers, Vladimir
On Jan 31, 2011, at 6:32 PM, Vovan wrote:
Hello,
sorry for possibly trite question, but what does this ">>UNKNOWN<<" mean? e.g.:
Network Origin AS Description 41.222.79.0/24 36938 >>UNKNOWN<<
quote from: http://thyme.rand.apnic.net/current/data-add-IANA
Cheers,
Vladimir
It's an unallocated address being advertised by an unallocated AS number. Pretty hard to identify a contact for such a route, no? Owen
Some times they're not so anonymous :) 122.200.40.0/21 38272 >>UNKNOWN<< <http://122.200.40.5/> "Sonargaon Online Limited(SOL) is the leading Internet Service Provider in Dhaka" <http://122.200.40.5/pages/contact_us.htm> " 40/1, Rahman Plaza Shahid Faruk Road (4th Floor) Jatrabari, Dhaka Bangladesh Tel : 88-02-7553432 E-mail : info@sonargaononline.net " On Mon, Jan 31, 2011 at 10:00 PM, Owen DeLong <owen@delong.com> wrote:
On Jan 31, 2011, at 6:32 PM, Vovan wrote:
Hello,
sorry for possibly trite question, but what does this ">>UNKNOWN<<" mean? e.g.:
Network Origin AS Description 41.222.79.0/24 36938 >>UNKNOWN<<
quote from: http://thyme.rand.apnic.net/current/data-add-IANA
Cheers,
Vladimir
It's an unallocated address being advertised by an unallocated AS number.
Pretty hard to identify a contact for such a route, no?
Owen
Interesting... "The Leadig Provider in Dhaka" is using hijacked addresses. Owen On Jan 31, 2011, at 8:00 PM, Richard Barnes wrote:
Some times they're not so anonymous :)
122.200.40.0/21 38272 >>UNKNOWN<<
"Sonargaon Online Limited(SOL) is the leading Internet Service Provider in Dhaka"
<http://122.200.40.5/pages/contact_us.htm>
" 40/1, Rahman Plaza
Shahid Faruk Road (4th Floor)
Jatrabari, Dhaka
Bangladesh
Tel : 88-02-7553432
E-mail : info@sonargaononline.net "
On Mon, Jan 31, 2011 at 10:00 PM, Owen DeLong <owen@delong.com> wrote:
On Jan 31, 2011, at 6:32 PM, Vovan wrote:
Hello,
sorry for possibly trite question, but what does this ">>UNKNOWN<<" mean? e.g.:
Network Origin AS Description 41.222.79.0/24 36938 >>UNKNOWN<<
quote from: http://thyme.rand.apnic.net/current/data-add-IANA
Cheers,
Vladimir
It's an unallocated address being advertised by an unallocated AS number.
Pretty hard to identify a contact for such a route, no?
Owen
On Mon, Jan 31, 2011 at 11:14 PM, Owen DeLong <owen@delong.com> wrote:
Interesting... "The Leadig Provider in Dhaka" is using hijacked addresses.
.... botswana (not the same direct area. but one I happened to notice this same thing happening with this weekend) ;; QUESTION SECTION: ;bw. IN NS ;; ANSWER SECTION: bw. 86400 IN NS ns4.btc.bw. bw. 86400 IN NS rain.psg.com. bw. 86400 IN NS vpsm.btc.bw. bw. 86400 IN NS hippo.ru.ac.za. bw. 86400 IN NS bw.auth-servers.net. bw. 86400 IN NS ns1.btc.bw. ns4.btc.bw. 32809 IN A 168.167.253.20 ns1.btc.bw. 32735 IN A 168.167.168.34 NetRange: 168.167.0.0 - 168.167.255.255 CIDR: 168.167.0.0/16 OriginAS: NetName: AFRINIC-168-167-0-0 NetHandle: NET-168-167-0-0-1 Parent: NET-168-0-0-0-0 NetType: Transferred to AfriNIC Comment: This IP address range is under AFRINIC responsibility. Comment: Please see http://www.afrinic.net/ for further details, Comment: or check the WHOIS server located at whois.afrinic.net. RegDate: 2005-02-21 Updated: 2005-02-21 Ref: http://whois.arin.net/rest/net/NET-168-167-0-0-1 OrgName: African Network Information Center OrgId: AFRINIC Address: Level 11ABC Address: Raffles Tower Address: Lot 19, Cybercity City: Ebene StateProv: PostalCode: Country: MU RegDate: 2004-05-17 Updated: 2010-06-28 Comment: AfriNIC - http://www.afrinic.net Comment: The African & Indian Ocean Internet Registry Seems like Afrinic has some records-keeping-issues... -chris
Owen
On Jan 31, 2011, at 8:00 PM, Richard Barnes wrote:
Some times they're not so anonymous :)
122.200.40.0/21 38272 >>UNKNOWN<<
"Sonargaon Online Limited(SOL) is the leading Internet Service Provider in Dhaka"
<http://122.200.40.5/pages/contact_us.htm>
" 40/1, Rahman Plaza
Shahid Faruk Road (4th Floor)
Jatrabari, Dhaka
Bangladesh
Tel : 88-02-7553432
E-mail : info@sonargaononline.net "
On Mon, Jan 31, 2011 at 10:00 PM, Owen DeLong <owen@delong.com> wrote:
On Jan 31, 2011, at 6:32 PM, Vovan wrote:
Hello,
sorry for possibly trite question, but what does this ">>UNKNOWN<<" mean? e.g.:
Network Origin AS Description 41.222.79.0/24 36938 >>UNKNOWN<<
quote from: http://thyme.rand.apnic.net/current/data-add-IANA
Cheers,
Vladimir
It's an unallocated address being advertised by an unallocated AS number.
Pretty hard to identify a contact for such a route, no?
Owen
curses arin-restful-output! $ whois -h whois.afrinic.net 168.167.168.34 % This is the AfriNIC Whois server. % Note: this output has been filtered. % Information related to '168.167.0.0 - 168.167.255.255' inetnum: 168.167.0.0 - 168.167.255.255 netname: BOTSNET descr: Botswana Telecommunications Corporation descr: Independance Avenue, Government Enclave (the 41 block in the original email does just show as allocated to AFRINIC only though) -Chris On Mon, Jan 31, 2011 at 11:29 PM, Christopher Morrow <morrowc.lists@gmail.com> wrote:
On Mon, Jan 31, 2011 at 11:14 PM, Owen DeLong <owen@delong.com> wrote:
Interesting... "The Leadig Provider in Dhaka" is using hijacked addresses.
.... botswana (not the same direct area. but one I happened to notice this same thing happening with this weekend)
;; QUESTION SECTION: ;bw. IN NS
;; ANSWER SECTION: bw. 86400 IN NS ns4.btc.bw. bw. 86400 IN NS rain.psg.com. bw. 86400 IN NS vpsm.btc.bw. bw. 86400 IN NS hippo.ru.ac.za. bw. 86400 IN NS bw.auth-servers.net. bw. 86400 IN NS ns1.btc.bw.
ns4.btc.bw. 32809 IN A 168.167.253.20 ns1.btc.bw. 32735 IN A 168.167.168.34
NetRange: 168.167.0.0 - 168.167.255.255 CIDR: 168.167.0.0/16 OriginAS: NetName: AFRINIC-168-167-0-0 NetHandle: NET-168-167-0-0-1 Parent: NET-168-0-0-0-0 NetType: Transferred to AfriNIC Comment: This IP address range is under AFRINIC responsibility. Comment: Please see http://www.afrinic.net/ for further details, Comment: or check the WHOIS server located at whois.afrinic.net. RegDate: 2005-02-21 Updated: 2005-02-21 Ref: http://whois.arin.net/rest/net/NET-168-167-0-0-1
OrgName: African Network Information Center OrgId: AFRINIC Address: Level 11ABC Address: Raffles Tower Address: Lot 19, Cybercity City: Ebene StateProv: PostalCode: Country: MU RegDate: 2004-05-17 Updated: 2010-06-28 Comment: AfriNIC - http://www.afrinic.net Comment: The African & Indian Ocean Internet Registry
Seems like Afrinic has some records-keeping-issues...
-chris
Owen
On Jan 31, 2011, at 8:00 PM, Richard Barnes wrote:
Some times they're not so anonymous :)
122.200.40.0/21 38272 >>UNKNOWN<<
"Sonargaon Online Limited(SOL) is the leading Internet Service Provider in Dhaka"
<http://122.200.40.5/pages/contact_us.htm>
" 40/1, Rahman Plaza
Shahid Faruk Road (4th Floor)
Jatrabari, Dhaka
Bangladesh
Tel : 88-02-7553432
E-mail : info@sonargaononline.net "
On Mon, Jan 31, 2011 at 10:00 PM, Owen DeLong <owen@delong.com> wrote:
On Jan 31, 2011, at 6:32 PM, Vovan wrote:
Hello,
sorry for possibly trite question, but what does this ">>UNKNOWN<<" mean? e.g.:
Network Origin AS Description 41.222.79.0/24 36938 >>UNKNOWN<<
quote from: http://thyme.rand.apnic.net/current/data-add-IANA
Cheers,
Vladimir
It's an unallocated address being advertised by an unallocated AS number.
Pretty hard to identify a contact for such a route, no?
Owen
and who is the upstream ISP that allows the AS to propagate? http://bgp.he.net/AS36938#_graph4 aut-num: AS37004 as-name: SUBURBAN-AS descr: Sub-Urban Telecom organisation: ORG-ST1-AFRINIC org-name: Suburban Telecom org-type: LIR descr: LIR Xtra Small country: NG address: Plot 30 Blantyre Street address: WUSE II address: ABUJA address: Abuja FCT PO 13235 e-mail: o.adeyemi@suburbantelecom.com e-mail: b.obakpolor@suburbantelecom.com and role: AS3257 Net Admin address: Tinet SpA abuse-mailbox: abuse@tinet.net Who sends them an email? ----- Original Message ----- From: "Owen DeLong" <owen@delong.com> To: "Richard Barnes" <richard.barnes@gmail.com> Cc: "NANOG" <nanog@nanog.org> Sent: Tuesday, 1 February, 2011 5:14:10 PM Subject: Re: APNIC description: "unknown" Interesting... "The Leadig Provider in Dhaka" is using hijacked addresses. Owen On Jan 31, 2011, at 8:00 PM, Richard Barnes wrote:
Some times they're not so anonymous :)
122.200.40.0/21 38272 >>UNKNOWN<<
"Sonargaon Online Limited(SOL) is the leading Internet Service Provider in Dhaka"
<http://122.200.40.5/pages/contact_us.htm>
" 40/1, Rahman Plaza
Shahid Faruk Road (4th Floor)
Jatrabari, Dhaka
Bangladesh
Tel : 88-02-7553432
E-mail : info@sonargaononline.net "
On Mon, Jan 31, 2011 at 10:00 PM, Owen DeLong <owen@delong.com> wrote:
On Jan 31, 2011, at 6:32 PM, Vovan wrote:
Hello,
sorry for possibly trite question, but what does this ">>UNKNOWN<<" mean? e.g.:
Network Origin AS Description 41.222.79.0/24 36938 >>UNKNOWN<<
quote from: http://thyme.rand.apnic.net/current/data-add-IANA
Cheers,
Vladimir
It's an unallocated address being advertised by an unallocated AS number.
Pretty hard to identify a contact for such a route, no?
Owen
On Mon, 31 Jan 2011 23:14:10 -0500, Owen DeLong <owen@delong.com> wrote:
Interesting... "The Leadig Provider in Dhaka" is using hijacked addresses.
Not according to APNIC... % [whois.apnic.net node-5] % Whois data copyright terms http://www.apnic.net/db/dbcopyright.html inetnum: 122.200.40.0 - 122.200.47.255 netname: SONARGAONONLINE descr: Sonargaon Online Services country: BD ...
On Jan 31, 2011, at 8:33 PM, Ricky Beam wrote:
On Mon, 31 Jan 2011 23:14:10 -0500, Owen DeLong <owen@delong.com> wrote:
Interesting... "The Leadig Provider in Dhaka" is using hijacked addresses.
Not according to APNIC...
% [whois.apnic.net node-5] % Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 122.200.40.0 - 122.200.47.255 netname: SONARGAONONLINE descr: Sonargaon Online Services country: BD ...
Odd... That's not what I got: [owen-delongs-macbook-pro:~] owen% whois -h whois.apnic.net 122.200.40.5 % [whois.apnic.net node-4] % Whois data copyright terms http://www.apnic.net/db/dbcopyright.html inetnum: 122.0.0.0 - 123.255.255.255 netname: APNIC-AP descr: Asia Pacific Network Information Centre descr: Regional Internet Registry for the Asia-Pacific Region descr: 6 Cordelia Street descr: PO Box 3646 descr: South Brisbane, QLD 4101 descr: Australia country: AU admin-c: HM20-AP tech-c: NO4-AP mnt-by: APNIC-HM mnt-lower: APNIC-HM mnt-irt: IRT-APNIC-AP status: ALLOCATED PORTABLE changed: hm-changed@apnic.net 20060109 changed: hm-changed@apnic.net 20101116 changed: hm-changed@apnic.net 20110114 source: APNIC role: APNIC Hostmaster address: 6 Cordelia Street address: South Brisbane address: QLD 4101 country: AU phone: +61 7 3858 3100 fax-no: +61 7 3858 3199 e-mail: helpdesk@apnic.net admin-c: AMS11-AP tech-c: AH256-AP nic-hdl: HM20-AP remarks: Administrator for APNIC notify: dbmon@apnic.net mnt-by: MAINT-APNIC-AP changed: hm-changed@apnic.net 19981111 changed: dbmon@apnic.net 19990702 changed: hm-changed@apnic.net 20020211 changed: hm-changed@apnic.net 20070612 changed: hm-changed@apnic.net 20100217 changed: hm-changed@apnic.net 20101217 source: APNIC person: APNIC Network Operations address: 6 Cordelia Street address: South Brisbane address: QLD 4101 country: AU phone: +61 7 3858 3100 fax-no: +61 7 3858 3199 e-mail: netops@apnic.net nic-hdl: NO4-AP remarks: Administrator for APNIC Network Operations notify: netops@apnic.net mnt-by: MAINT-APNIC-AP changed: netops@apnic.net 19981111 changed: hostmaster@apnic.net 20020211 changed: hm-changed@apnic.net 20081205 changed: hm-changed@apnic.net 20101217 source: APNIC My apologies for any confusion. Owen
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 FYI: Results: % [whois.apnic.net node-3] % Whois data copyright terms http://www.apnic.net/db/dbcopyright.html inetnum: 122.200.40.0 - 122.200.47.255 netname: SONARGAONONLINE descr: Sonargaon Online Services country: BD admin-c: SI109-AP tech-c: SI109-AP remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+ remarks: This object can only be updated by APNIC hostmasters. remarks: To update this object, please contact APNIC remarks: hostmasters and include your organisation's account remarks: name in the subject line. remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+ changed: hm-changed@apnic.net 20061023 mnt-by: APNIC-HM mnt-lower: MAINT-BD-SONARGAONONLINE mnt-routes: MAINT-BD-SONARGAONONLINE status: ALLOCATED PORTABLE source: APNIC person: Shahidul Islam nic-hdl: SI109-AP e-mail: admin@sonargaononline.net address: Sonargaon Online Services address: 40/1 Shahid Faruque road, address: South Jatrabari, Dhaka 1204. phone: +88-02-7550787 fax-no: +88-0152-486501 country: BD changed: saleh@deshonline.net 20060925 mnt-by: MAINT-NEW source: APNIC - - ferg On Mon, Jan 31, 2011 at 8:38 PM, Owen DeLong <owen@delong.com> wrote:
On Jan 31, 2011, at 8:33 PM, Ricky Beam wrote:
On Mon, 31 Jan 2011 23:14:10 -0500, Owen DeLong <owen@delong.com> wrote:
Interesting... "The Leadig Provider in Dhaka" is using hijacked addresses.
Not according to APNIC...
% [whois.apnic.net node-5] % Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 122.200.40.0 - 122.200.47.255 netname: SONARGAONONLINE descr: Sonargaon Online Services country: BD ...
Odd... That's not what I got:
[owen-delongs-macbook-pro:~] owen% whois -h whois.apnic.net 122.200.40.5 % [whois.apnic.net node-4] % Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 122.0.0.0 - 123.255.255.255 netname: APNIC-AP descr: Asia Pacific Network Information Centre descr: Regional Internet Registry for the Asia-Pacific Region descr: 6 Cordelia Street descr: PO Box 3646 descr: South Brisbane, QLD 4101 descr: Australia country: AU admin-c: HM20-AP tech-c: NO4-AP mnt-by: APNIC-HM mnt-lower: APNIC-HM mnt-irt: IRT-APNIC-AP status: ALLOCATED PORTABLE changed: hm-changed@apnic.net 20060109 changed: hm-changed@apnic.net 20101116 changed: hm-changed@apnic.net 20110114 source: APNIC
role: APNIC Hostmaster address: 6 Cordelia Street address: South Brisbane address: QLD 4101 country: AU phone: +61 7 3858 3100 fax-no: +61 7 3858 3199 e-mail: helpdesk@apnic.net admin-c: AMS11-AP tech-c: AH256-AP nic-hdl: HM20-AP remarks: Administrator for APNIC notify: dbmon@apnic.net mnt-by: MAINT-APNIC-AP changed: hm-changed@apnic.net 19981111 changed: dbmon@apnic.net 19990702 changed: hm-changed@apnic.net 20020211 changed: hm-changed@apnic.net 20070612 changed: hm-changed@apnic.net 20100217 changed: hm-changed@apnic.net 20101217 source: APNIC
person: APNIC Network Operations address: 6 Cordelia Street address: South Brisbane address: QLD 4101 country: AU phone: +61 7 3858 3100 fax-no: +61 7 3858 3199 e-mail: netops@apnic.net nic-hdl: NO4-AP remarks: Administrator for APNIC Network Operations notify: netops@apnic.net mnt-by: MAINT-APNIC-AP changed: netops@apnic.net 19981111 changed: hostmaster@apnic.net 20020211 changed: hm-changed@apnic.net 20081205 changed: hm-changed@apnic.net 20101217 source: APNIC
My apologies for any confusion.
Owen
-----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.5.3 (Build 5003) wj8DBQFNR5GVq1pz9mNUZTMRAgJRAKDxMal+5IUv+9VHtlTHcCbX1p0UfwCgqcFH J0SH1yd7Vn1zmOVPq67Zzx8= =xv1i -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's tech blog: http://fergdawg.blogspot.com/
participants (7)
-
Christopher Morrow -
Franck Martin -
Owen DeLong -
Paul Ferguson -
Richard Barnes -
Ricky Beam -
Vovan