[Dshield] Netblock 154.227/16 -- owner?

Johannes B. Ullrich jullrich at euclidian.com
Wed Oct 6 14:22:46 GMT 2004


On Tue, 2004-10-05 at 17:18, Jon R. Kibler wrote:
> Greetings all,
> 
> Question: Anyone have a clue who owns netblock 154.227/16? None of the RIRs list it.
>  However, I have a client with a compromised system that keeps trying to contact a 
> specific IP in that netblock. The IP appears to not be routable.

The IP is not routable at this time. However, it is possible that
someone (illegaly) announced this netblock for a while. Happens on
occassion that spam/malware authors borrow unused IP space.


> I guess the more general question is: "What is the story on 154/8?" Some of the lower 
> /16 blocks appear to be allocated and owned (< 154.64/16), but the others seem to 
> exist in an administrative black hole. Also, if they are not allocated/owned by 
> anyone, why are they not listed on the various bogon lists? 

According to my data, 154.0.0.0/10 is used. I assume that ARIN is using
154/8, but hasn't exhausted it so far.


-----------------+-----------------+------------------------------------+
| start           | end             | name                              
|
+-----------------+-----------------+------------------------------------+
| 154.002.000.000 | 154.002.255.255 | THESOU-13 The Southern Company    
|
| 154.005.000.000 | 154.005.255.255 | AGTA Telus Advanced Communications
|
| 154.006.000.000 | 154.007.255.255 | COGENT Cogent/PSI                 
|
| 154.006.064.000 | 154.006.071.255 | HOMC HomeCom Communications, Inc. 
|
| 154.006.109.000 | 154.006.109.255 | HOMC HomeCom Communications, Inc. 
|
| 154.008.000.000 | 154.008.031.255 | PSINETUK-BACKBONE PSINet UK Ltd.  
|
| 154.008.128.000 | 154.008.128.255 | PSINET-EUROPE PSINet Europe       
|
| 154.011.000.000 | 154.011.255.255 | AGTA Telus Advanced Communications
|
| 154.013.000.000 | 154.013.255.255 | COGENT Cogent/PSI                 
|
| 154.014.000.000 | 154.014.255.255 | PSINET-EUROPE PSINet Europe       
|
| 154.015.000.000 | 154.015.255.255 | PSINET-EUROPE PSINet Europe       
|
| 154.017.000.000 | 154.017.255.255 | COGENT Cogent/PSI                 
|
| 154.020.000.000 | 154.020.255.255 | AGTA Telus Advanced Communications
|
| 154.032.000.000 | 154.032.255.255 | PSINETUK-BACKBONE PSINet UK Ltd.  
|
| 154.033.000.000 | 154.033.255.255 | ERX-INTER-GRP-A PSI               
|
| 154.034.000.000 | 154.034.255.255 | ERX-INTER-GRP-A PSI               
|
| 154.048.000.000 | 154.063.255.255 | COGENT Cogent/PSI                 
|
+-----------------+-----------------+------------------------------------+

-- 
Johannes Ullrich                     jullrich at euclidian.com
contact: http://johannes.homepc.org/contact.htm

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/list/attachments/20041006/4532112a/attachment.bin


More information about the list mailing list