Re: Tell me about AS19111

2020-02-19 Thread John Sweeting
UPDATE: ARIN has completed coordination with the organization and whois is now correct. Thanks! On 2/5/20, 8:30 PM, "NANOG on behalf of John Levine" wrote: 1800vitamins.org has a web site at 12.180.219.234 which looks like they would sell me vitamins should I or my dog need any.

Re: Tell me about AS19111

2020-02-09 Thread Ronald F. Guilmette
Sorry to follow up on myself, but it seems that one figure I gave here regarding the value of the IPv4 space that was gifted to AFRINIC at its inception was off by roughly an order of magnitude. I said that at its inception, AFRINIC had been gifted with two /8 IPv4 blocks with a current open

Re: Tell me about AS19111

2020-02-07 Thread bzs
Once again I predict the past! It's amazing! Thanks John. On February 7, 2020 at 14:48 jcur...@arin.net (John Curran) wrote: > Barry - > > > FYI – In addition to a regular financial audit, ARIN periodically has a > third-party operational audit conducted of the registry,

Re: Tell me about AS19111

2020-02-07 Thread John Levine
In article <8930.1580963...@segfault.tristatelogic.com> you write: >>1800vitamins.org has a web site at 12.180.219.234 which looks like >>they would sell me vitamins should I or my dog need any. >> >>Routeviews tells me that IP is in AS19111, routed via AS7018. AS7018 >>is AT which isn't

Re: Tell me about AS19111

2020-02-07 Thread John Curran
Barry - FYI – In addition to a regular financial audit, ARIN periodically has a third-party operational audit conducted of the registry, including random sampling of transactions and detailed review of same. The results of the audit are used to both reaffirm registry integrity and have led to

Re: Tell me about AS19111

2020-02-07 Thread Marco Belmonte
Just imagine how good we would all feel if we came together as a community and really did do what Ron suggests below? I would do anything to be part of something like that... On 2/5/2020 11:39 PM, Ronald F. Guilmette wrote: For all of the people who have elected to pick on me for my less that

Re: Tell me about AS19111

2020-02-06 Thread Ronald F. Guilmette
In message <24124.30737.599536.809...@gargle.gargle.howl>, Sandra Murphy wrote: >It could measure the extent of the problem and would be within what I >suggested. > >For example if there were only one AS being abused that would make it >a different priority than 1,000 or 10,000 (some seem to be

Re: Tell me about AS19111

2020-02-06 Thread Ronald F. Guilmette
In message <24124.27418.388460.814...@gargle.gargle.howl>, Barry Shein wrote: >Given events including the IPv4 runout etc perhaps it's long overdue >that the RIRs should hire a professional big-name (we used to call >them Big 5) accounting firm to audit or at least review IP address, >ASN, etc.

Re: Tell me about AS19111

2020-02-06 Thread Tom Beecher
Reporting the issue is good and I’m sure appreciated by all. I appreciate that those who work in fields tracking down bad actors have a natural tendency to start viewing everything through that same lens, but assuming that every issue is cause by malice or stupidity gets really, really tiring.

Re: Tell me about AS19111

2020-02-06 Thread Brendan Carlson
According to ARIN Who-Was they've had this ASN assigned and removed multiple times. Created 11-20-2000 19111 NATURES-BOUN AS19111 NATURE-24 Registration Removed 12-12-2006 Created 01-04-2007 19111 NATURES-BOUN AS19111 NATURE-24 Registration Removed 07-14-2009 Created 07-22-2009 19111 NATURES-BOUN

Re: Tell me about AS19111

2020-02-06 Thread John Curran
On 5 Feb 2020, at 8:45 PM, Jon Lewis mailto:jle...@lewis.org>> wrote: On Wed, 5 Feb 2020, John Levine wrote: I believe you, but isn't ARIN's list of North American ASNs supposed to be authoritiative? Other than the funky ASN there doesn't seem anything particularly naughty about the site. If

Re: Tell me about AS19111

2020-02-06 Thread John Sweeting
I am replying to the original post as I am only answering John's question below. On 2/5/20, 8:30 PM, "NANOG on behalf of John Levine" wrote: 1800vitamins.org has a web site at 12.180.219.234 which looks like they would sell me vitamins should I or my dog need any. Routeviews

Re: Tell me about AS19111

2020-02-06 Thread thomas brenac via NANOG
+1 I fully agree, not to mention, but probably a bit more tricky to manage, so many resources holder, eg universities or similar, using just a /24 out of a /16, legacy of course  ! Funny enough bumped last week into a computing uni that was in the above exemple...and no IPv6... grrr On

Re: Tell me about AS19111

2020-02-06 Thread bzs
It could measure the extent of the problem and would be within what I suggested. For example if there were only one AS being abused that would make it a different priority than 1,000 or 10,000 (some seem to be implying a number like that) being abused. Do we have that number? And tracking the

Re: Tell me about AS19111

2020-02-06 Thread Sandra Murphy
> On Feb 6, 2020, at 2:38 PM, b...@theworld.com wrote: > > > It would likely be a lot better than "someone on NANOG noticed a > discrepancy let's shout at each other about it for a few days." Did I miss something? I thought the discrepancy being pointed out was that resources that were

Re: Tell me about AS19111

2020-02-06 Thread bzs
Given events including the IPv4 runout etc perhaps it's long overdue that the RIRs should hire a professional big-name (we used to call them Big 5) accounting firm to audit or at least review IP address, ASN, etc. allocation. I am not talking about money, I am talking about resource allocation.

Re: Tell me about AS19111

2020-02-06 Thread Rich Kulawiec
On Thu, Feb 06, 2020 at 09:08:35AM +0100, Pierfrancesco Caci wrote: > You would sound much more credible if you'd step down the high horse and > stop insulting the very same people you're supposed to work with. You're concerned with policing his tone instead of dealing with the massive security

Re: Tell me about AS19111

2020-02-06 Thread Ronald F. Guilmette
In message , Shane Ronan wrote: >It's not clear to me that HE having reserved AS numbers in THEIR routing >table is actually a problem. These AS numbers are actually reserved for >private use. Perhaps they have a customer who wants to do BGP but doesn't >want to register their own AS number

Re: Tell me about AS19111

2020-02-06 Thread Shane Ronan
It's not clear to me that HE having reserved AS numbers in THEIR routing table is actually a problem. These AS numbers are actually reserved for private use. Perhaps they have a customer who wants to do BGP but doesn't want to register their own AS number and is single-homed to HE. In this case,

Re: Tell me about AS19111

2020-02-06 Thread Pierfrancesco Caci
> "Ronald" == Ronald F Guilmette writes: Ronald> Try to think of a word that is the absolute antonym of "hygiene" and Ronald> that's the global routing table. Ronald> This stuff would be funny if only it wasn't so sick and pathetic. Ronald> Even if we forget about all of

Re: Tell me about AS19111

2020-02-05 Thread Ronald F. Guilmette
For all of the people who have elected to pick on me for my less that diplomatic assertion(s), I can only suggest that your time and effort would be more well spent by looking at the hard data that I suggested that everyone look at, and then looking to see if any of the bogus ASNs being used, day

Re: Tell me about AS19111

2020-02-05 Thread Wayne Bouchard
On Thu, Feb 06, 2020 at 04:35:14PM +1100, Mark Andrews wrote: > > > P.S. Remember, out of all of the networking engineers in the entire world, > > by definition, half of them are of below average intelligence. > > Unfortunately there is no basis for that claim as networking engineers are > not

Re: Tell me about AS19111

2020-02-05 Thread Mark Andrews
> P.S. Remember, out of all of the networking engineers in the entire world, > by definition, half of them are of below average intelligence. Unfortunately there is no basis for that claim as networking engineers are not uniformly randomly selected from the population as a whole. -- Mark

Re: Tell me about AS19111

2020-02-05 Thread Ronald F. Guilmette
In message <20200206013024.4b0b213c2...@ary.qy>, "John Levine" wrote: >1800vitamins.org has a web site at 12.180.219.234 which looks like >they would sell me vitamins should I or my dog need any. > >Routeviews tells me that IP is in AS19111, routed via AS7018. AS7018 >is AT which isn't

Re: Tell me about AS19111

2020-02-05 Thread Jon Lewis
On Wed, 5 Feb 2020, John Levine wrote: In article you write: -=-=-=-=-=- I do get some results from an online whois or two - https://ipinfo.io/AS19111 I believe you, but isn't ARIN's list of North American ASNs supposed to be authoritiative? Other than the funky ASN there doesn't seem

Re: Tell me about AS19111

2020-02-05 Thread John Levine
In article you write: >-=-=-=-=-=- > >I do get some results from an online whois or two - https://ipinfo.io/AS19111 I believe you, but isn't ARIN's list of North American ASNs supposed to be authoritiative? Other than the funky ASN there doesn't seem anything particularly naughty about the

Re: Tell me about AS19111

2020-02-05 Thread Christopher Morrow
0/24 <https://ipinfo.io/AS19111/12.180.219.0/24> > > NBTY, INC > > 256 > > 12.35.230.0/24 <https://ipinfo.io/AS19111/12.35.230.0/24> > > NBTY, INC > > 256 > > 144.121.136.0/24 <https://ipinfo.io/AS19111/144.121.136.0/24> > > The Nature's Bou

Re: Tell me about AS19111

2020-02-05 Thread Suresh Ramasubramanian
16.19.0/24<https://ipinfo.io/AS19111/63.116.19.0/24> NBTY GLOBAL INC 256 From: NANOG Date: Thursday, 6 February 2020 at 7:02 AM To: nanog@nanog.org Subject: Tell me about AS19111 1800vitamins.org has a web site at 12.180.219.234 which looks like they would sell me vitamins should I or my

Tell me about AS19111

2020-02-05 Thread John Levine
1800vitamins.org has a web site at 12.180.219.234 which looks like they would sell me vitamins should I or my dog need any. Routeviews tells me that IP is in AS19111, routed via AS7018. AS7018 is AT which isn't surprising for a 12/8 address, but ARIN says AS19111 doesn't exist. Huh? Signed,