On Mon, 30 Apr 2001, Kevin Day wrote:

...

http://wired.com/news/politics/0,1283,43437,00.html Time to drop AS4134. Is that the right AS number? ARIN and APNIC have no knowledge of it... RIPE says: as-block: AS3354 - AS4607 descr: ARIN ASN block remarks: These AS numbers are further assigned by ARIN remarks: to ARIN members and end-users in the ARIN region admin-c: ARIN1-RIPE tech-c: ARIN1-RIPE mnt-by: RIPE-NCC-HM-MNT mnt-lower: RIPE-NCC-NONE-MNT changed: ripe-dbm@ripe.net 20010423 source: RIPE

connecting to whois.arin.net [192.149.252.21:43] ... Data Communications Bureau (ASN-CHINALINK) 40, Xue Yuan Lu Beijing 100083 CN Autonomous System Name: CHINALINK Autonomous System Number: 4134 Coordinator: Wan, Jun (JW221-ARIN) dstanton@HQ.SI.NET (861)-201-2994 (FAX) (861)-205-3995 Record last updated on 01-Dec-1994. Database last updated on 28-Apr-2001 22:45:44 EDT. -Dan

-----Original Message----- From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of Kevin Day Sent: April 30, 2001 6:38 PM To: Dan Hollis Cc: 'nanog@merit.edu' Subject: Re: black hat .cn networks

...

http://wired.com/news/politics/0,1283,43437,00.html

Time to drop AS4134. Is that the right AS number? ARIN and APNIC have no knowledge of it... RIPE

ARIN seems to have knowledge of it from here, and that does seem right: vivienm@amethyst:~$ whois -a 4134 Data Communications Bureau (ASN-CHINALINK) 40, Xue Yuan Lu Beijing 100083 CN Autonomous System Name: CHINALINK Autonomous System Number: 4134 Coordinator: Wan, Jun (JW221-ARIN) dstanton@HQ.SI.NET (861)-201-2994 (FAX) (861)-205-3995 Record last updated on 01-Dec-1994. Database last updated on 28-Apr-2001 22:45:44 EDT. The ARIN Registration Services Host contains ONLY Internet Network Information: Networks, ASN's, and related POC's. Please use the whois server at rs.internic.net for DOMAIN related Information and whois.nic.mil for NIPRNET Information. Vivien -- Vivien M. vivienm@dyndns.org Assistant System Administrator Dynamic DNS Network Services http://www.dyndns.org/

Data Communications Bureau (ASN-CHINALINK) 40, Xue Yuan Lu Beijing 100083 CN Autonomous System Name: CHINALINK Autonomous System Number: 4134 Coordinator: Wan, Jun (JW221-ARIN) dstanton@HQ.SI.NET (861)-201-2994 (FAX) (861)-205-3995 Record last updated on 01-Dec-1994. Database last updated on 28-Apr-2001 22:45:44 EDT. On Mon, 30 Apr 2001, Kevin Day wrote:

...

http://wired.com/news/politics/0,1283,43437,00.html

Time to drop AS4134.

-Dan

Is that the right AS number? ARIN and APNIC have no knowledge of it... RIPE says:

as-block: AS3354 - AS4607 descr: ARIN ASN block remarks: These AS numbers are further assigned by ARIN remarks: to ARIN members and end-users in the ARIN region admin-c: ARIN1-RIPE tech-c: ARIN1-RIPE mnt-by: RIPE-NCC-HM-MNT mnt-lower: RIPE-NCC-NONE-MNT changed: ripe-dbm@ripe.net 20010423 source: RIPE

-- Kevin Day toasty@dragondata.com - kevin@stileproject.com

--- John Fraizer EnterZone, Inc

On Mon, 30 Apr 2001, Steve Schaefer wrote:

I think that's the right AS. ARIN has old data for it. The most recent info is from the CW routing database, viewable through RADB.net

I'd hit current contacts and ask for cooperation before slamming the primary AS for a whole country...

From CW-MAINT-MCI:

person: Zhang Xinjian address: CN phone: +1 999 999 9999 nic-hdl: ZX2-CW mnt-by: CN-MAINT-MCI changed: wwei@cndata.com 20001207 source: CW person: W Wei address: CN phone: +1 999 999 9999 nic-hdl: WW7-CW mnt-by: CN-MAINT-MCI changed: wwei@cndata.com 20001207 source: CW I just _love_ that valid telephone number. Sweet. ! ip as-path access-list CHINALINK permit _4134_ ! route-map PEERS permit 10 match as-path CHINALINK set ip next-hop 192.168.13.13 ! No more need for valid contact information. --- John Fraizer EnterZone, Inc

FWIW Sure are a lot of routes with 4134 in their path and/or are the origin of the route... Arin also has 4134 in their whois - just cuz its not in the IRR doesnt mean it aint real (dunno why it aint in their asn list avail by ftp, etc): Registry: whois.arin.net Results: Data Communications Bureau (ASN-CHINALINK) 40, Xue Yuan Lu Beijing 100083 CN Autonomous System Name: CHINALINK Autonomous System Number: 4134 Coordinator: Wan, Jun (JW221-ARIN) dstanton@HQ.SI.NET (861)-201-2994 (FAX) (861)-205-3995 Record last updated on 01-Dec-1994. Database last updated on 30-Apr-2001 22:35:39 EDT. Results brought to you by the GeekTools WHOIS Proxy v3.1 Server results may be copyrighted and are used with permission. Pat M/HW Kevin Day has declared that:

...

http://wired.com/news/politics/0,1283,43437,00.html

Time to drop AS4134.

-Dan

Is that the right AS number? ARIN and APNIC have no knowledge of it... RIPE says:

as-block: AS3354 - AS4607 descr: ARIN ASN block remarks: These AS numbers are further assigned by ARIN remarks: to ARIN members and end-users in the ARIN region admin-c: ARIN1-RIPE tech-c: ARIN1-RIPE mnt-by: RIPE-NCC-HM-MNT mnt-lower: RIPE-NCC-NONE-MNT changed: ripe-dbm@ripe.net 20010423 source: RIPE

-- Kevin Day toasty@dragondata.com - kevin@stileproject.com

-- #include <std.disclaimer.h> Pat Myrto (pat at rwing dot ORG) Seattle WA "Government is the only agency that can take a useful commodity like paper, slap some ink on it, and make it totally worthless." --Ludwig von Mises

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Irinically, when the Chinese protest in their own country, they're thrown into prison or run over with tanks. And any Chinese hacker caught hacking into a Chinese government server is executed. The Chinese government may not be publically encouraging the hackers to attack US sites, but they sure as hell aren't doing anything to discourage it. - -- Scott ========================== Scott Raymond LinkAmerica Communications http://soundamerica.com ==========================

-----Original Message----- From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of scott w Sent: Monday, April 30, 2001 5:08 PM To: Dan Hollis Cc: 'nanog@merit.edu' Subject: Re: black hat .cn networks

Since it was already brought up, I just wanted to point this part out... ;-)

"The point of the planned hack-attacks is to encourage the people of the U.S to protest against their government and demand peace between nations, the hackers said."

scott

On Mon, 30 Apr 2001, Dan Hollis wrote:

...

http://wired.com/news/politics/0,1283,43437,00.html

-----BEGIN PGP SIGNATURE----- Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com> iQA/AwUBOu5V5I6hnvitGreDEQJgwQCgshGDKQgzIEmhaCYiqq+janboXrIAoIpM 1C8l2wgjlQE7Rc2fHvlFOPq1 =bC5k -----END PGP SIGNATURE-----

On Tue, May 01, 2001 at 12:07:48AM +0000, scott w wrote:

"The point of the planned hack-attacks is to encourage the people of the U.S to protest against their government and demand peace between nations, the hackers said."

When in reality, people in the US break down into four categories: 1) Those who don't care, and don't understand. They don't care. 2) Those who don't care, and do understand. They're filtering .cn. 3) Those who care, and don't understand. They want us to retaliate. 4) Those who care, and understand. They're retaliating. Notice none of these involve protesting the US government not making nicey-nice with China. Considering the fact that they've recently gotten Most Favored Nation trade status, is there anybody left in the US who doesn't think we're being nice enough to China?

On Tue, May 01, 2001 at 11:27:14AM -0400, Valdis Kletnieks had this to say:

On Mon, 30 Apr 2001 14:58:38 PDT, Dan Hollis <goemon@anime.net> said:

...

http://wired.com/news/politics/0,1283,43437,00.html

Time to drop AS4134.

If we're gonna filter, let's filter *broken* stuff first.

RFC1918, RFC2644, RFC2827 filtering.

Oh wait.. we haven't gone the requisite 4 months without arguing THAT dead horse.. ;)

yeah, we need to wait until there are no other interesting threads before we drag back out multiple DNS roots/RFC1918 filtering/<insert fun religious topic here> :) -- Scott Francis scott@ [work:] v i r t u a l i s . c o m Systems Analyst darkuncle@ [home:] d a r k u n c l e . n e t PGP fingerprint 7ABF E2E9 CD54 A1A8 804D 179A 8802 0FBA CB33 CCA7 illum oportet crescere me autem minui