Maybe I'm misreading this but...
Dean Anderson
dean at av8.com
Wed Oct 14 21:47:12 UTC 1998
The 172.16 to 172.31 block is reserved in RFC1918 for private internets.
The last address 209.149.111.17 belongs to a bellsouth block. It's a safe
bet that libidomax.com is a bellsouth customer, or a customer of a
bellsouth customer. Probably bellsouth and alternet are peering and using
a private network between themselves.
--Dean
At 05:11 PM 10/14/98 -0400, Barry Shein wrote:
>
>The following traceroute seems to indicate, according to ARIN, that
>someone is running routers for spammers in the IANA Reserved netspace?
>
>First a traceroute:
>
>>world% traceroute www.libidomax.com
>>traceroute to www.libidomax.com (209.149.111.17), 30 hops max, 40 byte
packets
>> 1 Boston-STD-F.std.com (199.172.62.80) 17 ms 4 ms 4 ms
>> 2 553.Hssi2-0.GW2.BOS1.ALTER.NET (157.130.10.129) 59 ms 107 ms 69 ms
>> 3 124.ATM3-0.XR1.BOS1.ALTER.NET (146.188.176.250) 77 ms 54 ms 37 ms
>> 4 191.ATM2-0.TR1.NYC1.ALTER.NET (146.188.179.82) 38 ms 51 ms 51 ms
>> 5 104.ATM7-0.TR1.ATL1.ALTER.NET (146.188.136.57) 80 ms 87 ms 133 ms
>> 6 100.ATM7-0.XR1.ATL1.ALTER.NET (146.188.232.85) 91 ms 141 ms 63 ms
>> 7 195.ATM10-0-0.GW1.JAX1.ALTER.NET (146.188.232.169) 53 ms 81 ms 107 ms
>> 8 bs-jackson-gw.customer.alter.net (157.130.65.226) 107 ms 132 ms 96 ms
>> 9 172.17.80.46 (172.17.80.46) 59 ms 53 ms 44 ms
>>10 172.21.210.18 (172.21.210.18) 122 ms 96 ms 49 ms
>>11 209.149.111.17 (209.149.111.17) 53 ms (ttl=118!) 58 ms (ttl=118!)
150 ms (ttl=118!)
>
>
>
>Ok, now let's look up the 172.* addresses:
>
>>world% arin 172.17.80.46
>>IANA (IANA-BBLK-RESERVED)
>> Internet Assigned Numbers Authority
>> Information Sciences Institute
>> University of Southern California
>> 4676 Admiralty Way, Suite 1001
>> Marina del Rey, CA 90292-6695
>>
>> Netname: IANA-BBLK-RESERVED
>> Netblock: 172.16.0.0 - 172.31.0.0
>>
>> Coordinator:
>> Internet Assigned Numbers Authority (IANA-ARIN) iana at iana.org
>> (310) 822-1511
>>
>> Domain System inverse mapping provided by:
>>
>> BLACKHOLE.ISI.EDU 128.9.64.26
>> NS2.INTERNIC.NET 198.41.0.11
>
>and I get the same result of course for the other 172 address so I'll
>save you the redundant cut and paste.
>
>What's going on here?
>
>--
> -Barry Shein
>
>Software Tool & Die | bzs at world.std.com | http://www.world.com
>Purveyors to the Trade | Voice: 617-739-0202 | Login: 617-739-WRLD
>The World | Public Access Internet | Since 1989 *oo*
>
>
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Plain Aviation, Inc dean at av8.com
LAN/WAN/UNIX/NT/TCPIP http://www.av8.com
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
More information about the NANOG
mailing list