nanog mailing list archives

Re: APNIC description: "unknown"


From: Christopher Morrow <morrowc.lists () gmail com>
Date: Mon, 31 Jan 2011 23:29:24 -0500

On Mon, Jan 31, 2011 at 11:14 PM, Owen DeLong <owen () delong com> wrote:
Interesting... "The Leadig Provider in Dhaka" is using hijacked addresses.

.... botswana (not the same direct area. but one I happened to notice
this same thing happening with this weekend)

;; QUESTION SECTION:
;bw.                            IN      NS

;; ANSWER SECTION:
bw.                     86400   IN      NS      ns4.btc.bw.
bw.                     86400   IN      NS      rain.psg.com.
bw.                     86400   IN      NS      vpsm.btc.bw.
bw.                     86400   IN      NS      hippo.ru.ac.za.
bw.                     86400   IN      NS      bw.auth-servers.net.
bw.                     86400   IN      NS      ns1.btc.bw.

ns4.btc.bw.             32809   IN      A       168.167.253.20
ns1.btc.bw.             32735   IN      A       168.167.168.34

NetRange:       168.167.0.0 - 168.167.255.255
CIDR:           168.167.0.0/16
OriginAS:
NetName:        AFRINIC-168-167-0-0
NetHandle:      NET-168-167-0-0-1
Parent:         NET-168-0-0-0-0
NetType:        Transferred to AfriNIC
Comment:        This IP address range is under AFRINIC responsibility.
Comment:        Please see http://www.afrinic.net/ for further details,
Comment:        or check the WHOIS server located at whois.afrinic.net.
RegDate:        2005-02-21
Updated:        2005-02-21
Ref:            http://whois.arin.net/rest/net/NET-168-167-0-0-1

OrgName:        African Network Information Center
OrgId:          AFRINIC
Address:        Level 11ABC
Address:        Raffles Tower
Address:        Lot 19, Cybercity
City:           Ebene
StateProv:
PostalCode:
Country:        MU
RegDate:        2004-05-17
Updated:        2010-06-28
Comment:        AfriNIC - http://www.afrinic.net
Comment:        The African & Indian Ocean Internet Registry

Seems like Afrinic has some records-keeping-issues...

-chris

Owen

On Jan 31, 2011, at 8:00 PM, Richard Barnes wrote:

Some times they're not so anonymous  :)

122.200.40.0/21      38272     >>UNKNOWN<<

<http://122.200.40.5/>

"Sonargaon Online Limited(SOL) is the leading Internet Service
Provider in Dhaka"

<http://122.200.40.5/pages/contact_us.htm>

"
40/1, Rahman Plaza

Shahid Faruk Road (4th Floor)

Jatrabari, Dhaka

Bangladesh

Tel : 88-02-7553432

E-mail : info () sonargaononline net
"




On Mon, Jan 31, 2011 at 10:00 PM, Owen DeLong <owen () delong com> wrote:

On Jan 31, 2011, at 6:32 PM, Vovan wrote:

Hello,

sorry for possibly trite question, but what does this ">>UNKNOWN<<" mean? e.g.:

Network            Origin AS  Description
41.222.79.0/24       36938     >>UNKNOWN<<

quote from: http://thyme.rand.apnic.net/current/data-add-IANA


Cheers,

Vladimir

It's an unallocated address being advertised by an unallocated AS number.

Pretty hard to identify a contact for such a route, no?

Owen








Current thread: