curses arin-restful-output! $ whois -h whois.afrinic.net 168.167.168.34 % This is the AfriNIC Whois server.
% Note: this output has been filtered. % Information related to '168.167.0.0 - 168.167.255.255' inetnum: 168.167.0.0 - 168.167.255.255 netname: BOTSNET descr: Botswana Telecommunications Corporation descr: Independance Avenue, Government Enclave (the 41 block in the original email does just show as allocated to AFRINIC only though) -Chris On Mon, Jan 31, 2011 at 11:29 PM, Christopher Morrow <morrowc.li...@gmail.com> wrote: > On Mon, Jan 31, 2011 at 11:14 PM, Owen DeLong <o...@delong.com> wrote: >> Interesting... "The Leadig Provider in Dhaka" is using hijacked addresses. > > .... botswana (not the same direct area. but one I happened to notice > this same thing happening with this weekend) > > ;; QUESTION SECTION: > ;bw. IN NS > > ;; ANSWER SECTION: > bw. 86400 IN NS ns4.btc.bw. > bw. 86400 IN NS rain.psg.com. > bw. 86400 IN NS vpsm.btc.bw. > bw. 86400 IN NS hippo.ru.ac.za. > bw. 86400 IN NS bw.auth-servers.net. > bw. 86400 IN NS ns1.btc.bw. > > ns4.btc.bw. 32809 IN A 168.167.253.20 > ns1.btc.bw. 32735 IN A 168.167.168.34 > > NetRange: 168.167.0.0 - 168.167.255.255 > CIDR: 168.167.0.0/16 > OriginAS: > NetName: AFRINIC-168-167-0-0 > NetHandle: NET-168-167-0-0-1 > Parent: NET-168-0-0-0-0 > NetType: Transferred to AfriNIC > Comment: This IP address range is under AFRINIC responsibility. > Comment: Please see http://www.afrinic.net/ for further details, > Comment: or check the WHOIS server located at whois.afrinic.net. > RegDate: 2005-02-21 > Updated: 2005-02-21 > Ref: http://whois.arin.net/rest/net/NET-168-167-0-0-1 > > OrgName: African Network Information Center > OrgId: AFRINIC > Address: Level 11ABC > Address: Raffles Tower > Address: Lot 19, Cybercity > City: Ebene > StateProv: > PostalCode: > Country: MU > RegDate: 2004-05-17 > Updated: 2010-06-28 > Comment: AfriNIC - http://www.afrinic.net > Comment: The African & Indian Ocean Internet Registry > > Seems like Afrinic has some records-keeping-issues... > > -chris > >> Owen >> >> On Jan 31, 2011, at 8:00 PM, Richard Barnes wrote: >> >>> Some times they're not so anonymous :) >>> >>> 122.200.40.0/21 38272 >>UNKNOWN<< >>> >>> <http://122.200.40.5/> >>> >>> "Sonargaon Online Limited(SOL) is the leading Internet Service >>> Provider in Dhaka" >>> >>> <http://122.200.40.5/pages/contact_us.htm> >>> >>> " >>> 40/1, Rahman Plaza >>> >>> Shahid Faruk Road (4th Floor) >>> >>> Jatrabari, Dhaka >>> >>> Bangladesh >>> >>> Tel : 88-02-7553432 >>> >>> E-mail : i...@sonargaononline.net >>> " >>> >>> >>> >>> >>> On Mon, Jan 31, 2011 at 10:00 PM, Owen DeLong <o...@delong.com> wrote: >>>> >>>> On Jan 31, 2011, at 6:32 PM, Vovan wrote: >>>> >>>>> Hello, >>>>> >>>>> sorry for possibly trite question, but what does this ">>UNKNOWN<<" mean? >>>>> e.g.: >>>>> >>>>>> Network Origin AS Description >>>>>> 41.222.79.0/24 36938 >>UNKNOWN<< >>>>> >>>>> quote from: http://thyme.rand.apnic.net/current/data-add-IANA >>>>> >>>>> >>>>> Cheers, >>>>> >>>>> Vladimir >>>> >>>> It's an unallocated address being advertised by an unallocated AS number. >>>> >>>> Pretty hard to identify a contact for such a route, no? >>>> >>>> Owen >>>> >>>> >>>> >> >> >> >
