22 October 2001. Add additional comment by J (shown first below). Add comment by Paul on J's comment. Add comments by V and DD.
21 October 2001
This relates to other Safeweb files:
http://cryptome.org/riaa-safeweb.htm
http://cryptome.org/riaa-anongo.htm
http://cryptome.org/safeweb-anongo.htm
http://cryptome.org/safeweb-trojans.htm
Comments welcome; send to [email protected]
Thanks to V, 22 October 2001:
Just a minor detail, but, having recently worked for an Asia-centric ISP, it seems worthwhile to mention that it's very important to Asian Internet concerns that they have multiple redundant routes across the Pacific, as fiber cuts are common and they're not keen on losing all international traffic due to a single point of failure.
Also, as per a few threads:
XO, AboveNet, PAIX, etc, are all Internet colocation facilities in San Jose or Palo Alto; almost every major website hosts machines in at least one of said locations. The majority of west-coast traffic passes thru PAIX at some point; seems like it'd be an ideal place for a Carnivore split, if Carnivore actually works as claimed.
Thanks to DD, 22 October 2001:
An interesting tool available at http://www.pkcrew.org/tools.php called "Route Fakker" says that it can add fake hops into the results of traceroutes:
http://www.pkcrew.org/tools/rf.tar.gz
Date: Mon, 22 Oct 2001 10:27:46 -0500 (CDT)
From: Paul
To: <[email protected]>
Subject: this is ludicrous
This is completely ludicrous. The paragraph below simply describes what should happen, every day, with every single provider on the Internet, that uses BGP. (BGP being the predominant inter-provider routing protocol on the Internet.)
"For a international example, the best one that comes to mind is Kornet.net, Korean Telecommunications. I have so far found 6 different feeds into the United States: AT&T, Exodus, Worldcom (MCI -UUNET/Alter.net) (several feeds all different locations, among others. The outgoing is randomly split to each ISP depending on destination."
(With the exception of the word 'randomly'; that appears to be semantic carelessness on the part of the author, given the 'depending on destination' phrase.)
What is even more bizarre is that "J" then follows up with the conclusion that they should be blocked, presumably because their inter-domain routing is working _correctly_:
"Kornet is the next "al-queda" and needs to be watched VERY carefully.Block their domain if you can, as a LARGE amount of unusual traffic comes from this domain. "
It would be interesting to read a more substantiated version of these claims. they seem really outlandish.
...
The BGP-4 standard is here: <http://www.ietf.org/rfc/rfc1771.txt> although it is fairly terse and technical. there are books out there that give more readable introductions. I've heard good things about Radia Perlman's Interconnections, but have not read it.
The point of BGP is to enable routers on the 'edges' of networks (where networks interconnect, such as at public or private exchanges) to communicate information about the paths available through their networks to other networks. Networks that share internal routing information are called "Autonomous Subnets" or ASs in BGPspeak.
From: J
To: <[email protected]>
Subject: Re: 64.124.150.130
Date: Sun, 21 Oct 2001 21:00:17 -0400
There are two examples that come to mind.
One an ISP that I consulted with www.netpath.net. E- mail Chris Laforet, and he can explain it in great detail, as he wrote the software and designed the hardware that this ISP is using. For a small ISP they are state of the art in service, support and speed.
For a international example, the best one that comes to mind is Kornet.net, Korean Telecommunications. I have so far found 6 different feeds into the United States: AT&T, Exodus, Worldcom (MCI - UUNET/Alter.net) (several feeds all different locations, among others. The outgoing is randomly split to each ISP depending on destination.
This is one of the most advanced bandwidth splitting schemes I have ever seem.
I have it mapped out on paper (based on trace routes), but I am not sure what hardware they are using.
Kornet is the next "al-queda" and needs to be watched VERY carefully.
Block their domain if you can, as a LARGE amount of unusual traffic comes from this domain.
Trace route by Cryptome: =================================================== === VisualRoute report on 22-Oct-01 10:04:17 AM === =================================================== Report for kornet.net [211.48.62.132] Analysis: 'kornet.net' was found in 14 hops (TTL=114). --------------------------------------------------------------------------------------------------------------------------------------------------------------- | Hop | %Loss | IP Address | Node Name | Location | Tzone | ms | Graph | Network | --------------------------------------------------------------------------------------------------------------------------------------------------------------- | 1 | | 206.115.154.3 | tnt3.nyc3.da.uu.net | New York, NY, USA | -05:00 | 126 | -x- | UUNET Dial-Up Networks | | 2 | | 206.115.244.1 | - | ?Fairfax, VA 22031 | | 131 | -x-- | UUNET Dial Access Network | | 3 | | 152.63.23.178 | 229.at-2-0-0.HR1.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 159 | -x-- | UUNET Technologies, Inc. | | 4 | | 152.63.15.150 | 0.so-1-3-0.XL2.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 161 | -x- | UUNET Technologies, Inc. | | 5 | | 152.63.23.133 | 0.so-2-0-0.TL2.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 163 | -x- | UUNET Technologies, Inc. | | 6 | | 152.63.146.82 | 0.so-7-0-0.TL2.SAC1.ALTER.NET | Sacramento, CA, USA | -08:00 | 208 | -x- | UUNET Technologies, Inc. | | 7 | | 152.63.55.133 | 0.so-7-0-0.XL2.SJC1.ALTER.NET | San Jose, CA, USA | -08:00 | 205 | -x---- | UUNET Technologies, Inc. | | 8 | | 152.63.55.129 | POS4-0.XR2.SJC1.ALTER.NET | San Jose, CA, USA | -08:00 | 208 | -x------ | UUNET Technologies, Inc. | | 9 | | 152.63.49.225 | 192.ATM5-0.GW8.SJC2.ALTER.NET | San Jose, CA, USA | -08:00 | 200 | -x---- | UUNET Technologies, Inc. | | 10 | | 208.222.9.138 | kornet-sjc2-0c12-gw.customer.alter.net | - | | 230 | x- | Zaksat | | 11 | | 211.48.63.89 | glgate136-p7-2.kornet.net | ?Seoul, Korea | +09:00 | 346 | x- | CENTRAL DATA COMMUNICATION OFFICE | | 12 | | 211.216.216.66 | glhub1-g6-0.kornet.net | ?Seoul, Korea | +09:00 | 328 | x- | CENTRAL DATA COMMUNICATION OFFICE | | 13 | | 211.192.46.203 | sv3-ge2.kornet.net | ?Seoul, Korea | +09:00 | 336 | x-- | KOREA TELECOM HYEWHA NODE | | 14 | | 211.48.62.132 | kornet.net | ?Seoul, Korea | +09:00 | 340 | x-- | CENTRAL DATA COMMUNICATION OFFICE | --------------------------------------------------------------------------------------------------------------------------------------------------------------- Roundtrip time to kornet.net, average = 340ms, min = 326ms, max = 426ms -- 22-Oct-01 10:04:17 AM
From: J
To: <[email protected]>
Subject: Re: 64.124.150.130
Date: Sun, 21 Oct 2001 01:01:51 -0400
It is called Bandwidth Splitting. A lot of large ISP's use it.
Would you like more information, or is this enough ??
_____
To: J
Very well, thanks very much for the information. Bandwidth splitting I understand for Cryptome uses a crude version to share the load when a file gets hammered by Slashdot .
It's presumably useful as well for other purposes. The FBI's Carnivore web site states it uses a version of bandwidth splitting:
[Source: http://www.fbi.gov/hq/lab/carnivore/images/largchart.jpg]
And it's safe to assume there are others who use the technique for covert and overt purposes.
And along with bandwidth splitting, IP spoofing is used to conceal where stolen, misdirected or snarfed data is being sent in addition to where the open address shows it is going.
But you know all this and more, while it remains to be revealed to most of us what happens behind the veil of public information about IP routing -- and bandwidth splitting by Safeweb and other trusted public services.
-- Cryptome
Cryptome:
J. has suggested that Safeweb engages in bandwidth splitting among IP addresses to handle its user load. This could account for why its various IP addresses show up in trace routes differently at different times, in the likelihood that addresses are assigned dynamically or otherwise churned to cloak which machines are doing the work and perhaps machines snooping Safeweb users.
One address, for Anongo.com, was discovered a short while ago by trace route to be 215.104.228.144, which resolves to a Department of Defense ISP, located in Vienna, VA. Not long after this discovery was published on Cryptome, it was pointed out by a Safeweb representative that the IP address was a typographic error and the address should be 216.104.228.144, which resolves to an Exodus Communications ISP, located in Santa Clara, CA. A record correction apparently was made and Anongo.com as well as Safeweb.com now trace route (and reverse trace route) to 216.104.228.144 and 206.104.228.139, respectively.
Today, in response to a comment by SC on the alleged typographic error for Anongo.com, Cryptome made a whois request to the Department of Defense NIC server for 216.104.228.144 and Exodus Communications appeared, although commercial services are seldom listed at the server:
216.104.228.144 route: 216.104.224.0/19 descr: NET-EXODUS-SNTC02 origin: AS3967 mnt-by: MAINT-AS3967 changed: [email protected] 20000720 source: RADB
Whois requests to the DoD server for Anongo, Safeweb, In-Q-Tel (CIA venture firm) produced no listings, except for one for the IP address of Safewebinc.com, 65.107.16.44:
anongo.com, anongo, safeweb, safewebinc, cia, in-q-tel
%% No entries found for the selected sources.
Safewebinc's IP address 65.107.16.44:
route: 65.104.0.0/14
descr: XO Communications
1400 Parkmoor Avenue
San Jose, CA 95126-3429
FOR ABUSE OR SPAM COMPLAINTS EMAIL - [email protected]
+1 314 506-3330 - Data NOC
+1 408 817-2800 - Data Headquarters
origin: AS2828
notify: [email protected]
mnt-by: MAINT-AS2828
changed: [email protected] 20010513
source: RADB
In additions, various IP addresses for the Central Intelligence Agency were listed in the DoD whois databank:
199.99.221.33 [cia (istac.gov) from Gov whois]
route: 199.99.221.0/24
descr: CIA
Washington
DC 20505, USA
origin: AS174
member-of: RS-COMM_NSFNET
mnt-by: MAINT-AS174
changed: [email protected] 19960411
source: RADB
198.81.128.0 [Central Intelligence Agency from ARIN whois]
route: 198.81.128.0/18
descr: MAS/CIA Information Technology Procurement Office
CIA HQ, Room 2U2204 NHB
McLean, VA 22101
origin: AS701
mnt-by: MAINT-AS701
changed: [email protected] 20001214
source: RADB
"Source: RADB" is Merit's RADB, a public repository of routing information for networks in the Internet. Requests for all of the "origins" produced lengthy responses, see below. For more on origins see "Routing Policy Specification Language (RPSL)."
However, most of the public CIA addresses did not respond to trace route requests, for example:
=================================================== === VisualRoute report on 21-Oct-01 10:56:14 AM === =================================================== Report for 198.81.128.0 Analysis: No nodes are responding. Is your Internet connection up?
IP addresses, trace routes and other information on this follows.
213.104.228.144 -- NTL Internet - Edinburgh site [to bracket 214.104.228.144 and 216.104.228.144]
214.104.228.144 -- DoD Network Information Center, Vienna, VA
215.104.228.144 -- DoD Network Information Center, Vienna, VA
216.104.228.144 -- Anongo.com and Safeweb.com, Santa Clara, CA
217.104.228.144 -- NTL Internet - Edinburgh site [to bracket 214.104.228.144 and 216.104.228.144]
anongo.com [216.104.228.144] -- Anongo.com, Santa Clara, CA
safeweb.com [216.104.228.139] -- Safeweb.com, Santa Clara, CA
safewebinc.com [65.107.16.44] -- Safewebinc.com, Santa Clara, CA
in-q-tel.com [63.146.11.194] -- IN Q TEL INC, Rosslyn, VA
odci.gov -- Office of the Director of Central Intelligence [No IP address available.]
cia.gov -- Central Intelligence Agency (NETBLK-OIT-BLK) OIT-BLK1 198.81.128.0 - 198.81.191.255 [from ARIN whois]
ucia.gov -- Central Intelligence Agency [No IP address available.]
istac.gov -- CIA (ISTAC-DOM) [ MARS.ISTAC.GOV 199.99.221.33], 1820 Electric Avenue, Vienna, VA 21076 [from Gov whois]
cia (W19990412003631), Federal Government: Yes, Unlisted Organization: Yes [from Gov whois]
nic.mil [207.132.116.5] -- DoD DISN Network Information Center, Chantilly, VA
=================================================== === VisualRoute report on 21-Oct-01 12:29:28 PM === =================================================== Report for 213.104.228.144 [m144-mp1-cvx3b.edi.ntl.com] Analysis: '213.104.228.144' [m144-mp1-cvx3b.edi.ntl.com] was found in 20 hops (TTL=110). But, problems starting at hop 3 in network "UUNET Technologies, Inc." are causing IP packets to be dropped. -------------------------------------------------------------------------------------------------------------------------------------------------------- | Hop | %Loss | IP Address | Node Name | Location | Tzone | ms | Graph | Network | -------------------------------------------------------------------------------------------------------------------------------------------------------- | 1 | | 206.115.154.10 | tnt10.nyc3.da.uu.net | New York, NY, USA | -05:00 | 117 | x | UUNET Dial-Up Networks | | 2 | | 206.115.245.2 | - | ?Fairfax, VA 22031 | | 114 | x | UUNET Dial Access Network | | 3 | 10 | 152.63.23.190 | 230.at-2-1-0.HR2.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 109 | x | UUNET Technologies, Inc. | | 4 | | 152.63.15.198 | 0.so-2-3-0.XL2.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 113 | x | UUNET Technologies, Inc. | | 5 | | 152.63.0.37 | 0.so-7-0-0.XL2.NYC8.Alter.Net | New York, NY, USA | -05:00 | 119 | x | UUNET Technologies, Inc. | | 6 | | 152.63.19.34 | 0.so-3-0-0.XR2.NYC8.ALTER.NET | New York, NY, USA | -05:00 | 116 | x | UUNET Technologies, Inc. | | 7 | | 152.63.23.77 | 182.ATM5-0.BR1.NYC8.ALTER.NET | New York, NY, USA | -05:00 | 122 | x | UUNET Technologies, Inc. | | 8 | | 208.184.231.245 | abovenet-uunet-OC12.lga2.above.net | New York, NY, USA | -05:00 | 113 | x | Abovenet Communications, Inc. | | 9 | | 216.200.127.169 | core2-core3-oc48.lga2.above.net | New York, NY, USA | -05:00 | 114 | x | Abovenet Communications, Inc. | | 10 | | 208.184.232.197 | core2-lga2-oc192.lga1.above.net | New York, NY, USA | -05:00 | 113 | x | Abovenet Communications, Inc. | | 11 | | 64.125.31.181 | lhr3-lga1-stm64.lhr3.above.net | London, UK | * | 218 | x | Abovenet Communications, Inc. | | 12 | | 208.185.156.1 | core2-lhr3-stm16.lhr1.above.net | London, UK | * | 218 | x | Abovenet Communications, Inc. | | 13 | | 208.185.188.30 | ntl-above-stm16-2.lhr1.above.net | London, UK | * | 220 | x | Abovenet Communications, Inc. | | 14 | | 213.105.172.142 | lng-bb-b-so-700-0.inet.ntl.com | - | | 228 | x | NTL Internet | | 15 | | 62.253.188.142 | lng-bb-a-ge-130-0.inet.ntl.com | - | | 223 | x | NTL Internet | | 16 | | 213.105.172.93 | man-bb-a-so-100-0.inet.ntl.com | - | | 235 | x | NTL Internet | | 17 | | 62.253.187.57 | edi-core-a-atm1200-3.inet.ntl.com | - | | 234 | x | NTL Internet | | 18 | | 62.253.0.142 | edi-dam3-a-pos20.inet.ntl.com | - | | 235 | x | NTL Internet | | 19 | | 62.253.3.198 | e1-cvx3b.edi.ntl.com | - | | 238 | x | NTL Internet | | 20 | 10 | 213.104.228.144 | m144-mp1-cvx3b.edi.ntl.com | - | | 5928 | --x--- | NTL Internet - Edinburgh site | -------------------------------------------------------------------------------------------------------------------------------------------------------- Roundtrip time to 213.104.228.144, average = 5928ms, min = 3743ms, max = 8220ms -- 21-Oct-01 12:29:28 PM
=================================================== === VisualRoute report on 21-Oct-01 12:32:24 PM === =================================================== Real-time report for 214.104.228.144 (40% done) Analysis: IP packets are being lost past network "Qwest Communications" at hop 13. There is insufficient cached information to determine the next network at hop 14. ------------------------------------------------------------------------------------------------------------------------------------------------------- | Hop | %Loss | IP Address | Node Name | Location | Tzone | ms | Graph | Network | ------------------------------------------------------------------------------------------------------------------------------------------------------- | 1 | | 206.115.154.10 | tnt10.nyc3.da.uu.net | New York, NY, USA | -05:00 | 119 | x- | UUNET Dial-Up Networks | | 2 | | 206.115.245.2 | - | ?Fairfax, VA 22031 | | 149 | --x | UUNET Dial Access Network | | 3 | | 152.63.23.190 | 230.at-2-1-0.HR2.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 152 | --x- | UUNET Technologies, Inc. | | 4 | | 152.63.15.158 | 0.so-2-3-0.XL1.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 181 | ---x-- | UUNET Technologies, Inc. | | 5 | | 152.63.19.25 | 0.so-1-2-0.XL1.NYC8.ALTER.NET | New York, NY, USA | -05:00 | 156 | --x- | UUNET Technologies, Inc. | | 6 | | 152.63.19.30 | 0.so-3-0-0.XR1.NYC8.ALTER.NET | New York, NY, USA | -05:00 | 160 | --x- | UUNET Technologies, Inc. | | 7 | | 152.63.23.73 | 183.ATM4-0.BR1.NYC8.ALTER.NET | New York, NY, USA | -05:00 | 129 | -x | UUNET Technologies, Inc. | | 8 | | 205.171.4.9 | jfk-brdr-02.inet.qwest.net | New York, NY, USA | -05:00 | 128 | -x | Colorado Supernet, Inc. | | 9 | | 205.171.230.22 | jfk-core-02.inet.qwest.net | New York, NY, USA | -05:00 | 115 | x | Colorado Supernet, Inc. | | 10 | | 205.171.230.1 | jfk-core-01.inet.qwest.net | New York, NY, USA | -05:00 | 134 | -x- | Colorado Supernet, Inc. | | 11 | | 205.171.5.235 | wdc-core-02.inet.qwest.net | Washington, DC, USA | -05:00 | 116 | x | Colorado Supernet, Inc. | | 12 | | 205.171.24.86 | wdc-edge-05.inet.qwest.net | Washington, DC, USA | -05:00 | 116 | x | Colorado Supernet, Inc. | | 13 | | 63.148.66.222 | - | ?Arlington, VA 22203 | | 120 | x- | Qwest Communications | | ... | | | | | | | | | | ? | | 214.104.228.144 | - | ?Vienna, VA 22183 | | | | DoD Network Information Center | ------------------------------------------------------------------------------------------------------------------------------------------------------- Roundtrip time to 63.148.66.222, average = 120ms, min = 114ms, max = 123ms -- 21-Oct-01 12:32:24 PM
=================================================== === VisualRoute report on 21-Oct-01 12:33:23 PM === =================================================== Real-time report for 215.104.228.144 (90% done) Analysis: IP packets are being lost past network "Qwest Communications" at hop 13. There is insufficient cached information to determine the next network at hop 14. ------------------------------------------------------------------------------------------------------------------------------------------------------- | Hop | %Loss | IP Address | Node Name | Location | Tzone | ms | Graph | Network | ------------------------------------------------------------------------------------------------------------------------------------------------------- | 1 | | 206.115.154.10 | tnt10.nyc3.da.uu.net | New York, NY, USA | -05:00 | 115 | -x | UUNET Dial-Up Networks | | 2 | | 206.115.245.2 | - | ?Fairfax, VA 22031 | | 133 | -x-- | UUNET Dial Access Network | | 3 | | 152.63.23.190 | 230.at-2-1-0.HR2.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 136 | -x--- | UUNET Technologies, Inc. | | 4 | | 152.63.15.158 | 0.so-2-3-0.XL1.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 142 | --x-- | UUNET Technologies, Inc. | | 5 | | 152.63.19.25 | 0.so-1-2-0.XL1.NYC8.ALTER.NET | New York, NY, USA | -05:00 | 145 | --x--- | UUNET Technologies, Inc. | | 6 | | 152.63.19.30 | 0.so-3-0-0.XR1.NYC8.ALTER.NET | New York, NY, USA | -05:00 | 109 | x | UUNET Technologies, Inc. | | 7 | | 152.63.23.169 | 183.ATM7-0.BR1.NYC8.ALTER.NET | New York, NY, USA | -05:00 | 110 | x- | UUNET Technologies, Inc. | | 8 | | 205.171.4.9 | jfk-brdr-02.inet.qwest.net | New York, NY, USA | -05:00 | 141 | --x- | Colorado Supernet, Inc. | | 9 | | 205.171.230.22 | jfk-core-02.inet.qwest.net | New York, NY, USA | -05:00 | 144 | --x-- | Colorado Supernet, Inc. | | 10 | | 205.171.230.1 | jfk-core-01.inet.qwest.net | New York, NY, USA | -05:00 | 150 | --x-- | Colorado Supernet, Inc. | | 11 | | 205.171.5.235 | wdc-core-02.inet.qwest.net | Washington, DC, USA | -05:00 | 115 | -x | Colorado Supernet, Inc. | | 12 | | 205.171.24.86 | wdc-edge-05.inet.qwest.net | Washington, DC, USA | -05:00 | 113 | x- | Colorado Supernet, Inc. | | 13 | | 63.148.66.222 | - | ?Arlington, VA 22203 | | 130 | x--- | Qwest Communications | | ... | | | | | | | | | | ? | | 215.104.228.144 | - | ?Vienna, VA 22183 | | | | DoD Network Information Center | ------------------------------------------------------------------------------------------------------------------------------------------------------- Roundtrip time to 63.148.66.222, average = 130ms, min = 116ms, max = 190ms -- 21-Oct-01 12:33:23 PM
================================================== === VisualRoute report on 21-Oct-01 9:08:10 AM === ================================================== Real-time report for 216.104.228.144 (40% done) Analysis: IP packets are being lost past network "Exodus Commnications Inc." at hop 14. There is insufficient cached information to determine the next network at hop 15. ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- | Hop | %Loss | IP Address | Node Name | Location | Tzone | ms | Graph | Network | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- | 1 | | 206.115.154.10 | tnt10.nyc3.da.uu.net | New York, NY, USA | -05:00 | 111 | x | UUNET Dial-Up Networks | | 2 | | 206.115.245.2 | - | ?Fairfax, VA 22031 | | 112 | x | UUNET Dial Access Network | | 3 | | 152.63.23.190 | 230.at-2-1-0.HR2.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 114 | x- | UUNET Technologies, Inc. | | 4 | | 152.63.15.198 | 0.so-2-3-0.XL2.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 112 | x- | UUNET Technologies, Inc. | | 5 | | 152.63.24.21 | POS7-0.GW5.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 109 | x | UUNET Technologies, Inc. | | 6 | | 157.130.217.2 | exodus-OC12-NYC.customer.alter.net | New York, NY, USA | -05:00 | 111 | x | UUNET Technologies, Inc. | | 7 | | 216.32.223.114 | bbr02-g4-0.jrcy01.exodus.net | Jersey City, NJ, USA | -05:00 | 115 | x | Exodus Commnications Inc. | | 8 | | 209.1.169.185 | bbr02-p4-0.whkn01.exodus.net | Weehawkin, NJ, USA | -05:00 | 110 | x | Exodus Communications | | 9 | | 209.185.9.102 | bbr01-p3-0.stng02.exodus.net | Sterling, VA, USA | -05:00 | 118 | x- | Exodus Commnications Inc. | | 10 | | 216.109.66.4 | bbr02-g2-0.stng02.exodus.net | Sterling, VA, USA | -05:00 | 122 | x- | Exodus Communications Inc. DC-3 | | 11 | | 209.185.9.113 | bbr02-p5-0.sntc04.exodus.net | Santa Clara, CA, USA | -08:00 | 189 | x- | Exodus Commnications Inc. | | 12 | | 209.1.169.253 | bbr01-p0-0.sntc02.exodus.net | Santa Clara, CA, USA | -08:00 | 194 | x- | Exodus Communications | | 13 | | 216.33.154.97 | dcr03-g6-0.sntc02.exodus.net | Santa Clara, CA, USA | -08:00 | 190 | x- | Exodus Commnications Inc. | | 14 | | 216.33.155.131 | csr01-ve240.sntc02.exodus.net | Santa Clara, CA, USA | -08:00 | 207 | -x--- | Exodus Commnications Inc. | | ... | | | | | | | | | | ? | | 216.104.228.114 | - | ?Santa Clara, CA 95112 | | | | Exodus Communications Inc. - SantaClara2 | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- Roundtrip time to 216.33.155.131, average = 207ms, min = 191ms, max = 293ms -- 21-Oct-01 9:08:10 AM
================================================== === VisualRoute report on 21-Oct-01 9:08:42 AM === ================================================== Real-time report for anongo.com [216.104.228.144] (40% done) Analysis: IP packets are being lost past network "Exodus Commnications Inc." at hop 14. There is insufficient cached information to determine the next network at hop 15. ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- | Hop | %Loss | IP Address | Node Name | Location | Tzone | ms | Graph | Network | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- | 1 | | 206.115.154.10 | tnt10.nyc3.da.uu.net | New York, NY, USA | -05:00 | 111 | -x | UUNET Dial-Up Networks | | 2 | | 206.115.245.2 | - | ?Fairfax, VA 22031 | | 110 | x | UUNET Dial Access Network | | 3 | | 152.63.23.190 | 230.at-2-1-0.HR2.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 109 | x | UUNET Technologies, Inc. | | 4 | | 152.63.15.198 | 0.so-2-3-0.XL2.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 111 | -x | UUNET Technologies, Inc. | | 5 | | 152.63.24.21 | POS7-0.GW5.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 110 | -x | UUNET Technologies, Inc. | | 6 | | 157.130.217.2 | exodus-OC12-NYC.customer.alter.net | New York, NY, USA | -05:00 | 109 | x | UUNET Technologies, Inc. | | 7 | | 216.32.223.113 | bbr01-g4-0.jrcy01.exodus.net | Jersey City, NJ, USA | -05:00 | 110 | x | Exodus Commnications Inc. | | 8 | | 216.32.173.10 | bbr02-p0-1.whkn01.exodus.net | Weehawkin, NJ, USA | -05:00 | 110 | x | Exodus Commnications Inc. | | 9 | | 209.185.9.102 | bbr01-p3-0.stng02.exodus.net | Sterling, VA, USA | -05:00 | 118 | x | Exodus Commnications Inc. | | 10 | | 216.109.66.130 | bbr02-g5-1.stng02.exodus.net | Sterling, VA, USA | -05:00 | 117 | x | Exodus Communications Inc. DC-3 | | 11 | | 209.185.9.113 | bbr02-p5-0.sntc04.exodus.net | Santa Clara, CA, USA | -08:00 | 228 | -x- | Exodus Commnications Inc. | | 12 | | 209.1.169.253 | bbr01-p0-0.sntc02.exodus.net | Santa Clara, CA, USA | -08:00 | 189 | -x | Exodus Communications | | 13 | | 216.33.154.129 | dcr03-g3-0.sntc02.exodus.net | Santa Clara, CA, USA | -08:00 | 190 | -x | Exodus Commnications Inc. | | 14 | | 216.33.155.130 | csr02-ve240.sntc02.exodus.net | Santa Clara, CA, USA | -08:00 | 193 | x | Exodus Commnications Inc. | | ... | | | | | | | | | | ? | | 216.104.228.144 | anongo.com | ?Santa Clara, CA 95112 | | | | Exodus Communications Inc. - SantaClara2 | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- Roundtrip time to 216.33.155.130, average = 193ms, min = 191ms, max = 196ms -- 21-Oct-01 9:08:42 AM
================================================== === VisualRoute report on 21-Oct-01 9:29:23 AM === ================================================== Real-time report for safeweb.com [216.104.228.139] (30% done) Analysis: IP packets are being lost past network "Exodus Commnications Inc." at hop 14. There is insufficient cached information to determine the next network at hop 15. ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- | Hop | %Loss | IP Address | Node Name | Location | Tzone | ms | Graph | Network | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- | 1 | | 206.115.154.10 | tnt10.nyc3.da.uu.net | New York, NY, USA | -05:00 | 126 | -x | UUNET Dial-Up Networks | | 2 | | 206.115.245.2 | - | ?Fairfax, VA 22031 | | 191 | ---x- | UUNET Dial Access Network | | 3 | | 152.63.23.190 | 230.at-2-1-0.HR2.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 200 | ---x- | UUNET Technologies, Inc. | | 4 | | 152.63.15.198 | 0.so-2-3-0.XL2.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 209 | ----x- | UUNET Technologies, Inc. | | 5 | | 152.63.24.21 | POS7-0.GW5.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 219 | ----x- | UUNET Technologies, Inc. | | 6 | | 157.130.217.2 | exodus-OC12-NYC.customer.alter.net | New York, NY, USA | -05:00 | 223 | ----x-- | UUNET Technologies, Inc. | | 7 | | 216.32.223.97 | bbr01-g4-1.jrcy01.exodus.net | Jersey City, NJ, USA | -05:00 | 162 | --x | Exodus Commnications Inc. | | 8 | | 216.32.173.10 | bbr02-p0-1.whkn01.exodus.net | Weehawkin, NJ, USA | -05:00 | 111 | x | Exodus Commnications Inc. | | 9 | | 209.185.9.102 | bbr01-p3-0.stng02.exodus.net | Sterling, VA, USA | -05:00 | 124 | x | Exodus Commnications Inc. | | 10 | | 216.109.66.130 | bbr02-g5-1.stng02.exodus.net | Sterling, VA, USA | -05:00 | 146 | -x | Exodus Communications Inc. DC-3 | | 11 | | 209.185.9.113 | bbr02-p5-0.sntc04.exodus.net | Santa Clara, CA, USA | -08:00 | 213 | -x | Exodus Commnications Inc. | | 12 | | 209.1.169.253 | bbr01-p0-0.sntc02.exodus.net | Santa Clara, CA, USA | -08:00 | 206 | -x | Exodus Communications | | 13 | | 216.33.154.129 | dcr03-g3-0.sntc02.exodus.net | Santa Clara, CA, USA | -08:00 | 194 | x | Exodus Commnications Inc. | | 14 | | 216.33.155.130 | csr02-ve240.sntc02.exodus.net | Santa Clara, CA, USA | -08:00 | 192 | x | Exodus Commnications Inc. | | ... | | | | | | | | | | ? | | 216.104.228.139 | safeweb.com | ?Santa Clara, CA 95112 | | | | Exodus Communications Inc. - SantaClara2 | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- Roundtrip time to 216.33.155.130, average = 192ms, min = 189ms, max = 195ms -- 21-Oct-01 9:29:23 AM
=================================================== === VisualRoute report on 21-Oct-01 12:26:45 PM === =================================================== Real-time report for 217.104.228.144 (40% done) Analysis: IP packets are being lost past network "NL-EDUCATIEFNET-990226" at hop 24. There is insufficient cached information to determine the next network at hop 25. Node 212.178.7.18 at hop 24 in network "NL-EDUCATIEFNET-990226" reports "The destination network is unreachable". ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | Hop | %Loss | IP Address | Node Name | Location | Tzone | ms | Graph | Network | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | 1 | | 206.115.154.10 | tnt10.nyc3.da.uu.net | New York, NY, USA | -05:00 | 117 | x | UUNET Dial-Up Networks | | 2 | | 206.115.245.2 | - | ?Fairfax, VA 22031 | | 111 | x | UUNET Dial Access Network | | 3 | | 152.63.23.190 | 230.at-2-1-0.HR2.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 109 | x- | UUNET Technologies, Inc. | | 4 | | 152.63.15.158 | 0.so-2-3-0.XL1.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 118 | x---- | UUNET Technologies, Inc. | | 5 | | 152.63.22.225 | POS6-0.BR2.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 122 | x---- | UUNET Technologies, Inc. | | 6 | | 209.244.160.161 | atm4-0-1.core2.NewYork1.Level3.net | New York, NY, USA | -05:00 | 125 | x---- | Level 3 Communications, Inc. | | 7 | | 64.159.17.162 | ae0-56.mp2.NewYork1.Level3.net | New York, NY, USA | -05:00 | 122 | x---- | Level 3 Communications, Inc. | | 8 | | 212.187.128.154 | so-2-0-0.mp2.London1.Level3.net | London, UK | * | 182 | -x | Transatlantic cable systems | | 9 | | 212.187.128.10 | so-1-0-0.mp2.Amsterdam1.Level3.net | Amsterdam, Netherlands | +01:00 | 212 | -x- | European MPLS core | | 10 | | 213.244.165.8 | gigabitethernet7-0.ipcolo2.Amsterdam1.Level3.net | Amsterdam, Netherlands | +01:00 | 187 | x | Level 3 Communications International | | 11 | | 213.244.164.126 | unknown.Level3.net | - | | 189 | x- | Level (3) Communications International | | 12 | | 212.178.7.11 | l3r4.kennisnet.nl | ?(Netherlands) | +01:00 | 205 | -x | NL-EDUCATIEFNET-990226 | | 13 | | 212.178.7.18 | l3r3.kennisnet.nl | ?(Netherlands) | +01:00 | 190 | x- | NL-EDUCATIEFNET-990226 | | 14 | 40 | | | | | | | | | 15 | 40 | | | | | | | | | 16 | 40 | | | | | | | | | 17 | 40 | | | | | | | | | 18 | 40 | | | | | | | | | 19 | 40 | | | | | | | | | 20 | 40 | | | | | | | | | 21 | 40 | | | | | | | | | 22 | 40 | | | | | | | | | 23 | 40 | ?212.178.7.18 | l3r3.kennisnet.nl | | | | | NL-EDUCATIEFNET-990226 | | 24 | 40 | 212.178.7.18 | l3r3.kennisnet.nl | ?(Netherlands) | +01:00 | 191 | x | NL-EDUCATIEFNET-990226 | | ... | | | | | | | | | | ? | | 217.104.228.144 | - | ?(Netherlands) | +01:00 | | | OBS DE OLM | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Roundtrip time to 212.178.7.18, average = 191ms, min = 191ms, max = 191ms -- 21-Oct-01 12:26:45 PM
================================================== === VisualRoute report on 21-Oct-01 9:26:55 AM === ================================================== Real-time report for safewebinc.com [65.107.16.44] (30% done) Analysis: IP packets are being lost past network "Concentric Network Corporation" at hop 18. There is insufficient cached information to determine the next network at hop 19. ----------------------------------------------------------------------------------------------------------------------------------------------------------- | Hop | %Loss | IP Address | Node Name | Location | Tzone | ms | Graph | Network | ----------------------------------------------------------------------------------------------------------------------------------------------------------- | 1 | | 206.115.154.10 | tnt10.nyc3.da.uu.net | New York, NY, USA | -05:00 | 121 | x | UUNET Dial-Up Networks | | 2 | | 206.115.245.2 | - | ?Fairfax, VA 22031 | | 126 | x- | UUNET Dial Access Network | | 3 | | 152.63.23.190 | 230.at-2-1-0.HR2.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 133 | -x | UUNET Technologies, Inc. | | 4 | | 152.63.15.198 | 0.so-2-3-0.XL2.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 141 | -x | UUNET Technologies, Inc. | | 5 | | 152.63.24.101 | POS7-0.BR3.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 129 | -x | UUNET Technologies, Inc. | | 6 | | 204.255.168.94 | - | ?Fairfax, VA 22031 | | 115 | x | UUNET Technologies, Inc. | | 7 | | 64.220.3.81 | ge6-0.dist1.hud-ny.us.xo.net | ?--- | | 123 | x- | Concentric Network Corporation | | 8 | | 64.220.3.94 | - | ?San Jose, CA 95126-3429 | | 113 | x | Concentric Network Corporation | | 9 | | 64.220.0.241 | ge9-0.tran1.nyc-ny.us.xo.net | New York, NY, USA | -05:00 | 115 | x | Concentric Network Corporation | | 10 | | 64.0.0.50 | p0-0.tran1.nwk-nj.us.xo.net | Newark, NJ, USA | -05:00 | 114 | x | Concentric Network Corporation | | 11 | | 64.0.0.45 | p0-0.tran2.chi-il.us.xo.net | Chicago, IL, USA | -06:00 | 138 | x | Concentric Network Corporation | | 12 | | 64.220.0.177 | ge9-0.tran1.chi-il.us.xo.net | Chicago, IL, USA | -06:00 | 150 | x- | Concentric Network Corporation | | 13 | | 64.0.0.17 | p0-0.tran2.scl-ca.us.xo.net | Santa Clara, CA, USA | -08:00 | 195 | x | Concentric Network Corporation | | 14 | | 64.0.0.5 | p0-0.tran2.pal-ca.us.xo.net | Palo Alto, CA, USA | -08:00 | 194 | x | Concentric Network Corporation | | 15 | | 64.220.0.19 | ge0-0.dist1.pal-ca.us.xo.net | Palo Alto, CA, USA | -08:00 | 194 | x | Concentric Network Corporation | | 16 | | 64.0.0.110 | - | ?San Jose, CA 95126-3429 | | 192 | x | Concentric Network Corporation | | 17 | | 65.105.231.2 | - | ?San Jose, CA 95126-3429 | | 197 | x | Concentric Network Corporation | | 18 | | 65.107.32.30 | - | ?San Jose, CA 95126-3429 | | 225 | -x- | Concentric Network Corporation | | ... | | | | | | | | | | ? | | 65.107.16.44 | safewebinc.com | ?San Jose, CA 95126-3429 | | | | Concentric Network Corporation | ----------------------------------------------------------------------------------------------------------------------------------------------------------- Roundtrip time to 65.107.32.30, average = 225ms, min = 201ms, max = 231ms -- 21-Oct-01 9:26:55 AM
in-q-tel.com ================================================== === VisualRoute report on 21-Oct-01 9:11:02 AM === ================================================== Report for in-q-tel.com [63.146.11.194] Analysis: 'in-q-tel.com' [www.in-q-tel.com] was found in 14 hops (TTL=114). ------------------------------------------------------------------------------------------------------------------------------------------------ | Hop | %Loss | IP Address | Node Name | Location | Tzone | ms | Graph | Network | ------------------------------------------------------------------------------------------------------------------------------------------------ | 1 | 10 | 206.115.154.10 | tnt10.nyc3.da.uu.net | New York, NY, USA | -05:00 | 116 | x- | UUNET Dial-Up Networks | | 2 | | 206.115.245.2 | - | ?Fairfax, VA 22031 | | 112 | x--- | UUNET Dial Access Network | | 3 | | 152.63.23.190 | 230.at-2-1-0.HR2.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 120 | x---- | UUNET Technologies, Inc. | | 4 | | 152.63.15.198 | 0.so-2-3-0.XL2.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 130 | -x- | UUNET Technologies, Inc. | | 5 | | 152.63.0.37 | 0.so-7-0-0.XL2.NYC8.Alter.Net | New York, NY, USA | -05:00 | 140 | -x-- | ?152.63.0.0 | | 6 | | 152.63.19.34 | 0.so-3-0-0.XR2.NYC8.ALTER.NET | New York, NY, USA | -05:00 | 141 | -x-- | UUNET Technologies, Inc. | | 7 | | 152.63.23.77 | 182.ATM5-0.BR1.NYC8.ALTER.NET | New York, NY, USA | -05:00 | 118 | x- | UUNET Technologies, Inc. | | 8 | | 205.171.4.9 | jfk-brdr-02.inet.qwest.net | New York, NY, USA | -05:00 | 115 | x- | Colorado Supernet, Inc. | | 9 | | 205.171.230.22 | jfk-core-02.inet.qwest.net | New York, NY, USA | -05:00 | 118 | x---- | Colorado Supernet, Inc. | | 10 | | 205.171.230.1 | jfk-core-01.inet.qwest.net | New York, NY, USA | -05:00 | 126 | -x---- | Colorado Supernet, Inc. | | 11 | | 205.171.5.235 | wdc-core-02.inet.qwest.net | Washington, DC, USA | -05:00 | 135 | -x-- | Colorado Supernet, Inc. | | 12 | | 205.171.24.58 | wdc-edge-04.inet.qwest.net | Washington, DC, USA | -05:00 | 117 | x- | Colorado Supernet, Inc. | | 13 | | 63.146.0.38 | - | ?Denver, CO 80202 | | 119 | x- | Qwest Communications | | 14 | | 63.146.11.194 | in-q-tel.com | ?ROSSLYN, VA 22209 | | 124 | -x | IN Q TEL INC | ------------------------------------------------------------------------------------------------------------------------------------------------ Roundtrip time to in-q-tel.com, average = 124ms, min = 119ms, max = 130ms -- 21-Oct-01 9:11:02 AM
================================================== === VisualRoute report on 21-Oct-01 9:30:07 AM === ================================================== VisualRoute report ERROR: DNS reports that 'odci.gov' is an unknown host. Please make sure the host name is correct, and try again.
================================================== === VisualRoute report on 21-Oct-01 9:30:07 AM === ================================================== VisualRoute report ERROR: DNS reports that 'cia.gov' is an unknown host. Please make sure the host name is correct, and try again. =================================================== === VisualRoute report on 21-Oct-01 10:56:14 AM === =================================================== Report for 198.81.128.0 Analysis: No nodes are responding. Is your Internet connection up?
================================================== === VisualRoute report on 21-Oct-01 9:30:07 AM === ================================================== VisualRoute report ERROR: DNS reports that 'ucia.gov' is an unknown host. Please make sure the host name is correct, and try again.
================================================== === VisualRoute report on 21-Oct-01 9:30:07 AM === ================================================== VisualRoute report ERROR: DNS reports that 'istac.gov' is an unknown host. Please make sure the host name is correct, and try again. But see trace route below for Gov whois IP address for istac.gov ================================================== === VisualRoute report on 21-Oct-01 9:49:03 AM === ================================================== Report for 199.99.221.33 Analysis: IP packets are being lost past network "Performance Systems International" at hop 8. There is insufficient cached information to determine the next network at hop 9. Node 154.13.2.40 at hop 8 in network "Performance Systems International" reports "The destination host is unreachable". -------------------------------------------------------------------------------------------------------------------------------------------------------------------- | Hop | %Loss | IP Address | Node Name | Location | Tzone | ms | Graph | Network | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- | 1 | | 206.115.154.10 | tnt10.nyc3.da.uu.net | New York, NY, USA | -05:00 | 128 | -x- | UUNET Dial-Up Networks | | 2 | | 206.115.245.2 | - | ?Fairfax, VA 22031 | | 117 | -x | UUNET Dial Access Network | | 3 | | 152.63.23.190 | 230.at-2-1-0.HR2.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 125 | -x-- | UUNET Technologies, Inc. | | 4 | | 152.63.15.158 | 0.so-2-3-0.XL1.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 126 | -x-- | UUNET Technologies, Inc. | | 5 | | 152.63.18.225 | POS6-0.BR1.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 129 | -x--- | UUNET Technologies, Inc. | | 6 | | 204.6.134.170 | - | ?Herndon, Virginia 22070 | | 125 | -x--- | Performance Systems International, Inc. | | 7 | | 154.13.2.40 | se.peering-j.tier1.us.psi.net | - | | 122 | -x---- | Performance Systems International | | 8 | 100 | 154.13.2.40 | se.peering-j.tier1.us.psi.net | - | | 121 | -x | Performance Systems International | | ... | | | | | | | | | | ? | | 199.99.221.33 | ?mars.istac.gov | | | | | Performance Systems International, Inc. | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- Roundtrip time to 154.13.2.40, average = 121ms, min = 116ms, max = 124ms -- 21-Oct-01 9:49:03 AM
================================================== === VisualRoute report on 21-Oct-01 9:30:07 AM === ================================================== VisualRoute report ERROR: DNS reports that 'cia (W19990412003631)' is an unknown host. Please make sure the host name is correct, and try again.
=================================================== === VisualRoute report on 21-Oct-01 11:14:01 AM === =================================================== Report for nic.mil [207.132.116.5] Analysis: 'nic.mil' was found in 15 hops (TTL=242). ------------------------------------------------------------------------------------------------------------------------------------------------------- | Hop | %Loss | IP Address | Node Name | Location | Tzone | ms | Graph | Network | ------------------------------------------------------------------------------------------------------------------------------------------------------- | 1 | | 206.115.154.10 | tnt10.nyc3.da.uu.net | New York, NY, USA | -05:00 | 143 | -x- | UUNET Dial-Up Networks | | 2 | | 206.115.245.2 | - | ?Fairfax, VA 22031 | | 146 | -x- | UUNET Dial Access Network | | 3 | | 152.63.23.190 | 230.at-2-1-0.HR2.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 149 | -x-- | UUNET Technologies, Inc. | | 4 | | 152.63.15.158 | 0.so-2-3-0.XL1.NYC9.ALTER.NET | New York, NY, USA | -05:00 | 153 | -x-- | UUNET Technologies, Inc. | | 5 | | 152.63.19.25 | 0.so-1-2-0.XL1.NYC8.ALTER.NET | New York, NY, USA | -05:00 | 160 | -x-- | UUNET Technologies, Inc. | | 6 | | 152.63.19.30 | 0.so-3-0-0.XR1.NYC8.ALTER.NET | New York, NY, USA | -05:00 | 157 | -x-- | UUNET Technologies, Inc. | | 7 | | 152.63.23.169 | 183.ATM7-0.BR1.NYC8.ALTER.NET | New York, NY, USA | -05:00 | 124 | x- | UUNET Technologies, Inc. | | 8 | | 205.171.4.9 | jfk-brdr-02.inet.qwest.net | New York, NY, USA | -05:00 | 111 | x | Colorado Supernet, Inc. | | 9 | | 205.171.230.26 | jfk-core-03.inet.qwest.net | New York, NY, USA | -05:00 | 113 | x- | Colorado Supernet, Inc. | | 10 | | 205.171.230.5 | jfk-core-01.inet.qwest.net | New York, NY, USA | -05:00 | 113 | x | Colorado Supernet, Inc. | | 11 | | 205.171.5.235 | wdc-core-02.inet.qwest.net | Washington, DC, USA | -05:00 | 114 | x | Colorado Supernet, Inc. | | 12 | | 205.171.24.86 | wdc-edge-05.inet.qwest.net | Washington, DC, USA | -05:00 | 113 | x | Colorado Supernet, Inc. | | 13 | | 63.148.66.222 | - | ?Arlington, VA 22203 | | 126 | x- | Qwest Communications | | 14 | | 198.26.119.50 | - | ?Columbus, OH 43216 | | 212 | --x---- | DLA Systems Automation Center | | 15 | | 207.132.116.5 | nic.mil | ?Chantilly, VA 20151 | | 133 | -x | DISN Network Information Center | ------------------------------------------------------------------------------------------------------------------------------------------------------- Roundtrip time to nic.mil, average = 133ms, min = 125ms, max = 163ms -- 21-Oct-01 11:14:01 AM
Department of Defense Network Information Center http://www.nic.mil/dodnic/ Search Whois --------------------------------------------------- 213.104.228.144 %% No entries found for the selected source(s). --------------------------------------------------- 214.104.228.144 route: 214.0.0.0/8 descr: DOD Network Information Center 7990 Boeing CourtMS CV-50 Vienna, VA 22183-7000 origin: AS568 mnt-by: MAINT-AS568 changed: [email protected] 19980608 source: RADB route: 214.0.0.0/8 descr: DOD Network Information Center 7990 Science Applications Court MS CV-50 Vienna, VA 22183-7000 origin: AS568 mnt-by: MAINT-AS568 changed: [email protected] 20000602 source: DoDNIC --------------------------------------------------- 215.104.228.144 route: 215.0.0.0/9 descr: DOD Network Information Center 7990 Boeing Court MS CV-50 Vienna, VA 22183-7000 origin: AS568 mnt-by: MAINT-AS568 changed: [email protected] 19980609 source: RADB route: 215.0.0.0/8 descr: DOD Network Information Center 7990 Science Applications Court MS CV-50 Vienna, VA 22183-7000 origin: AS568 mnt-by: MAINT-AS568 changed: [email protected] 20000214 source: DoDNIC -------------------------------------------------- 216.104.228.144 route: 216.104.224.0/19 descr: NET-EXODUS-SNTC02 origin: AS3967 mnt-by: MAINT-AS3967 changed: [email protected] 20000720 source: RADB ----- aut-num: AS3967 as-name: Exodus descr: Exodus Communications admin-c: MT1797 admin-c: Mark Tripod tech-c: MT1797 tech-c: Mark Tripod import: from AS38 action pref = 100; accept AS38 AS-UIUC AND NOT {0.0.0.0/0} import: from AS103 action pref = 100; accept AS103 AS-NUNET AND NOT {0.0.0.0/0} import: from AS237 action pref = 100; accept AS237 AS-MICHNET AND NOT {0.0.0.0/0} import: from AS293 action pref = 100; accept AS293 AS-ESNET AND NOT {0.0.0.0/0} import: from AS568 action pref = 100; accept AS568 AND NOT {0.0.0.0/0} import: from AS1746 action pref = 100; accept AS1746 AS-DRANET AND NOT {0.0.0.0/0} import: from AS1842 action pref = 100; accept AS1842 AS-DOINET AND NOT {0.0.0.0/0} import: from AS2905 action pref = 100; accept AS2905 AS-IAFRICA AND NOT {0.0.0.0/0} import: from AS3066 action pref = 100; accept AS3066 AND NOT {0.0.0.0/0} import: from AS3344 action pref = 100; accept AS3344 AS-VBCNET AND NOT {0.0.0.0/0} import: from AS3407 action pref = 100; accept AS3407 AS-ASNET AND NOT {0.0.0.0/0} import: from AS3563 action pref = 100; accept AS3563 AS-PILOT AND NOT {0.0.0.0/0} import: from AS3720 action pref = 100; accept AS3720 AS-MAINSTREET AND NOT {0.0.0.0/0} import: from AS3914 action pref = 100; accept AS3914 AS-DX AND NOT {0.0.0.0/0} import: from AS3932 action pref = 100; accept AS3932 AND NOT {0.0.0.0/0} import: from AS4183 action pref = 100; accept AS4183 AS-UUNET-HILLIARD NOT {0.0.0.0/0} import: from AS4197 action pref = 100; accept AS4197 AND NOT {0.0.0.0/0} import: from AS4436 action pref = 100; accept AS4436 AND NOT {0.0.0.0/0} import: from AS4445 action pref = 100; accept AS4445 AS-CXN AND NOT {0.0.0.0/0} import: from AS4540 action pref = 100; accept AS-WENET AND NOT {0.0.0.0/0} import: from AS5000 action pref = 100; accept AS5000 AND NOT {0.0.0.0/0} import: from AS5051 action pref = 100; accept AS5051 AND NOT {0.0.0.0/0} import: from AS5388 action pref = 100; accept AS5388 AS-POL AND NOT {0.0.0.0/0} import: from AS5390 action pref = 100; accept AS5390 AS-EURONET AND NOT {0.0.0.0/0} import: from AS5462 action pref = 100; accept AS5462 AS-CABLEINET AND NOT {0.0.0.0/0} import: from AS5496 action pref = 100; accept AS5496 AS-IXWIRES AND NOT {0.0.0.0/0} import: from AS5646 action pref = 100; accept AS5646 AS-NAPNET AND NOT {0.0.0.0/0} import: from AS5683 action pref = 100; accept AS5683 AS-CWIXCUST AND NOT {0.0.0.0/0} import: from AS6113 action pref = 100; accept AS6113 AS-GRIDNET AND NOT {0.0.0.0/0} import: from AS6123 action pref = 100; accept AS6123 AS-WEBPROS AND NOT {0.0.0.0/0} import: from AS6200 action pref = 100; accept AS6200 AS-UIC AND NOT {0.0.0.0/0} import: from AS6248 action pref = 100; accept AS6248 AND NOT {0.0.0.0/0} import: from AS6259 action pref = 100; accept AS6259 AS-FIBERNET AND NOT {0.0.0.0/0} import: from AS6261 action pref = 100; accept AS6261 AS-VISINET AND NOT {0.0.0.0/0} import: from AS6315 action pref = 100; accept AS6315 AS-XMISSION AND NOT {0.0.0.0/0} import: from AS6320 action pref = 100; accept AS6320 AS-VBCNET AND NOT {0.0.0.0/0} import: from AS6345 action pref = 100; accept AS6345 AS-ZIPLINK AND NOT {0.0.0.0/0} import: from AS6405 action pref = 100; accept AS6405 AS-AINET AND NOT {0.0.0.0/0} import: from AS6427 action pref = 100; accept AS6427 AS-LIGHTNING AND NOT {0.0.0.0/0} import: from AS6467 action pref = 100; accept AS6467 AS-ACSI AND NOT {0.0.0.0/0} import: from AS6472 action pref = 100; accept AS6472 AND NOT {0.0.0.0/0} import: from AS6716 action pref = 100; accept AS6716 AS-NETKONECTUS AND NOT {0.0.0.0/0} import: from AS6730 action pref = 100; accept AS6730 AS-GLOBAL AND NOT {0.0.0.0/0} import: from AS6939 action pref = 100; accept AS6939 AS-HURRICANE AND NOT {0.0.0.0/0} import: from AS7143 action pref = 100; accept AS7143 AS-CLEARDATA AND NOT {0.0.0.0/0} import: from AS7194 action pref = 100; accept AS7194 AS-MEGSINET AND NOT {0.0.0.0/0} import: from AS7599 action pref = 100; accept AS7599 AS-OGN AND NOT {0.0.0.0/0} import: from AS7922 action pref = 100; accept AS7922 AS-MEDIAONE AND NOT {0.0.0.0/0} import: from AS7960 action pref = 100; accept AS7960 AND NOT {0.0.0.0/0} import: from AS8709 action pref = 100; accept AS8709 AND NOT {0.0.0.0/0} import: from AS9318 action pref = 100; accept AS9318 AS-HANARO AND NOT {0.0.0.0/0} import: from AS12312 action pref = 100; accept AS12312 AS-NIKOMA AND NOT {0.0.0.0/0} export: to AS38 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS103 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS237 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS293 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS568 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS1746 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS1842 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS2905 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS3066 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS3344 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS3407 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS3563 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS3720 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS3914 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS3932 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS4183 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS4197 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS4436 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS4445 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS4540 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS5000 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS5051 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS5388 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS5390 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS5462 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS5496 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS5646 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS5683 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS6113 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS6123 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS6200 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS6248 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS6259 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS6261 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS6315 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS6320 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS6345 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS6405 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS6427 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS6467 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS6472 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS6716 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS6730 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS6939 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS7143 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS7194 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS7599 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS7922 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS7960 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS8709 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS9318 announce AS-EXODUS AND NOT {0.0.0.0/0} export: to AS12312 announce AS-EXODUS AND NOT {0.0.0.0/0} remarks: All RADB entries are for active route server peerings only remarks: for PBNAP, AADS NAP, Mae-East, Mae-West and PAIX. notify: [email protected] mnt-by: MAINT-AS3967 changed: [email protected] 20010418 source: RADB -------------------------------------------------- 217.104.228.144 %% No entries found for the selected source(s). -------------------------------------------------- 199.99.221.33 [cia (istac.gov)] route: 199.99.221.0/24 descr: CIA Washington DC 20505, USA origin: AS174 member-of: RS-COMM_NSFNET mnt-by: MAINT-AS174 changed: [email protected] 19960411 source: RADB ----- aut-num: AS174 as-name: PSINET-1 descr: Performance Systems International, Inc 510 Huntmar Park Drive Herndon, VA 22070 admin-c: RADB Liason tech-c: RADB Liason notify: [email protected] mnt-by: MAINT-AS174 changed: [email protected] 19950606 source: RADB -------------------------------------------------- anongo.com, anongo, safeweb, safewebinc, cia, in-q-tel %% No entries found for the selected source(s). But see DoD whois for Safewebinc's IP address 65.107.16.44: route: 65.104.0.0/14 descr: XO Communications 1400 Parkmoor Avenue San Jose, CA 95126-3429 FOR ABUSE OR SPAM COMPLAINTS EMAIL - [email protected] +1 314 506-3330 - Data NOC +1 408 817-2800 - Data Headquarters origin: AS2828 notify: [email protected] mnt-by: MAINT-AS2828 changed: [email protected] 20010513 source: RADB ----- aut-num: AS2828 as-name: ASN-CONCENTRIC descr: XO Communications, Inc. Former names: NextLink Communications, Concentric Network Corp., InterNex Information Services, Delta Internet Services, AnaServe, 9Net Avenue, ... 1400 Parkmoor Avenue San Jose, CA 95126-3429 FOR ABUSE OR SPAM COMPLAINTS EMAIL - [email protected] +1 314 506-3330 NOC/NCC 24x7 +1 408 817-2488 OpsDesk 24x7 +1 408 817-2800 Main admin-c: Network Operations tech-c: Internet Engineering import: from AS237 action pref=10; accept AS-MICHNET AND NOT {0.0.0.0/0} import: from AS4969 action pref=10; accept AS4969 AND NOT {0.0.0.0/0} import: from AS5669 action pref=10; accept AS-UNET AND NOT {0.0.0.0/0} import: from AS5705 action pref=10; accept AS5705 AND NOT {0.0.0.0/0} import: from AS6123 action pref=10; accept AS-WEBPROS AND NOT {0.0.0.0/0} import: from AS6261 action pref=10; accept AS-VISINET AND NOT {0.0.0.0/0} import: from AS6345 action pref=10; accept AS6345 AND NOT {0.0.0.0/0} import: from AS6467 action pref=10; accept AS-ACSI AND NOT {0.0.0.0/0} import: from AS6792 action pref=10; accept AS-BACTEL AND NOT {0.0.0.0/0} export: to AS237 announce AS-XO export: to AS4969 announce AS-XO export: to AS5669 announce AS-XO export: to AS5705 announce AS-XO export: to AS6123 announce AS-XO export: to AS6261 announce AS-XO export: to AS6345 announce AS-XO export: to AS6467 announce AS-XO remarks: -- Concentric Network Corporation acquired InterNex Information Services on 2/5/1998 NextLink Communications acquired Concentric 6/16/2000. NextLink/Concentric renamed XO Communications on 9/25/2000. We filter out private RFC1918 address space, in addition to the following network blocks: 192.233.33.0 0.0.0.255 192.41.177.0 0.0.0.255 192.157.69.0 0.0.0.255 198.32.128.0 0.0.0.255 198.32.130.0 0.0.0.255 198.32.136.0 0.0.0.255 198.32.146.0 0.0.0.255 198.32.176.0 0.0.0.255 198.32.184.0 0.0.0.255 198.32.186.0 0.0.0.255 198.32.187.0 0.0.0.255 198.32.200.0 0.0.0.255 204.123.0.0 0.0.0.255 206.220.243.0 0.0.0.255 -- notify: [email protected] notify: [email protected] mnt-by: MAINT-AS2828 changed: [email protected] 20010503 source: RADB -------------------------------------------------- 198.81.128.0 [Central Intelligence Agency from ARIN whois] route: 198.81.128.0/18 descr: MAS/CIA Information Technology Procurement Office CIA HQ, Room 2U2204 NHB McLean, VA 22101 origin: AS701 mnt-by: MAINT-AS701 changed: [email protected] 20001214 source: RADB ----- aut-num: AS701 as-name: AMUFSOFU descr: Alternet admin-c: Not available tech-c: See MAINT-AS701 mnt-by: MAINT-AS701 changed: [email protected] 19950201 source: RADB --------------------------------------------------