Hi, I just ran a little study regarding unresolvable IPs that request web services from us against the statistics file APNIC, ARIN, and RIPE issue. I am posting this in the hope that the RIRs would correct the errors or missing data. Those statistics files are supposed to contain all the IPv4 space assigned; they can be found at: 1.1- apnic: ftp://ftp.apnic.net/pub/stats/apnic/ 1.2- ripe: ftp://ftp.ripe.net/ripe/stats/ 1.3- arin: ftp://ftp.arin.net/pub/stats/arin/ The raw result is here: http://www.serveurDEDIE.com/stats/no-stat.txt The format is: <status> <IP> [<whois server> <owner from the whois> [ILLEGAL]] We have found several things: * there are some IPs that should be in the statistics file but are missing. Some IPs have got an associated whois record, but are not in the statistics. I would be nice if the RIRs could fix that. Please see by yourself: $ grep whois\.apnic\.net no-stat.txt $ grep whois\.arin\.net no-stat.txt $ grep whois\.ripe\.net no-stat.txt * there are some few IPs that are totally unknown from the registries: $ grep no-whois no-stat.txt No-stat-no-whois: 196.2.95.17 No-stat-no-whois: 211.234.140.220 $ grep IANA no-stat.txt No-stat: 90.0.0.4 [whois.arin.net] IANA * there are some inconsistent pointers in whois between ARIN and RIPE. Example with 159.157.251.43: " $ whois -a 159.157.251.43 [whois.arin.net] European Regional Internet Registry/RIPE NCC (NET-RIPE-159) RIPE-159 159.156.0.0 - 159.157.255.255 Schegel Corporation (NET-BTR-SSG-NET) BTR-SSG-NET159.157.0.0 - 159.157.255.255 " Here ARIN says that the bloc has been further assigned to RIPE: " These addresses have been further assigned to European users. Contact information can be found in the RIPE database at whois.ripe.net " But if you follow that pointer: $ whois -r 159.157.251.43 [whois.ripe.net] % This is the RIPE Whois server. % The objects are in RPSL format. % Please visit http://www.ripe.net/rpsl for more information. % Rights restricted by copyright. % See http://www.ripe.net/ripencc/pub-services/db/copyright.html inetnum: 0.0.0.0 - 255.255.255.255 netname: IANA-BLK descr: The whole IPv4 address space country: NL admin-c: IANA1-RIPE tech-c: IANA1-RIPE status: ALLOCATED UNSPECIFIED remarks: The country is really worldwide. remarks: This address space is assigned at various other places in remarks: the world and might therefore not be in the RIPE database. mnt-by: RIPE-NCC-HM-MNT mnt-lower: RIPE-NCC-HM-MNT mnt-routes: RIPE-NCC-NONE-MNT changed: bitbucket@ripe.net 20010529 source: RIPE " You see that RIPE has in fact no record for this IP. There are quite a few such problems, and they are no easy to spot. * Lastly, but that is already well known, some IPs, mainly in the RIPE space, are only ALLOCATED (not ASSIGNED) but still in use. The study will look for that when it has to lookup an IP the RIPE database and will mark the result (bare with the bug please) qith "<font color=red>ILLEGAL</font>". You can find those records with: $ grep \>ILLEGAL\< no-stat.txt I would really appreciate if the RIRs could fix the records that are missing in the statistics file, i.e. those that have a whois record but are not in the statistics. Thank you in advance -- Jean-Philippe Donnio tag@TBS-internet.com Services aux ISP - Services Thawte TBS-internet http://www.TBS-internet.com