when i check our prefix 22.214.171.124/24 on www.ris.ripe.net i get an overlapping prefix:
192.0.0.0/3 announced by AS3303.
this occured today, but it was not the first time.
has anyone an explanation for this...???
Migros is selling a cheap netbook for CHF 222.-
Acer Aspire One AOD 255E-13DQws
1024x600 screen, 1GB RAM, 250GB disk
6-cell battery (!)
It's a perfect device for remotely-controlled network tests, like
packet capture or any telnet/snmp/SIP/perlscript testing
scenarios that you like.
Ubuntu runs immediately with full hardware support.
CentOS 5 would not run: "atl1c" NIC driver is missing, so those
pre-configured Asterisk boxes won't run.
Windows, of course, gets thrown away immediately :)
Usually you get a 3-cell battery in a 300-franks notebook, but
this one is coming with a decent 6-cell one. It's enough to watch
movies for 4 hours in a row.
1024x600 screen is too smal for any real work, but quite good for
Internet browsing and perfect for movies.
RAM is easy to upgrade to 2GB, but watch out the RAM clocking. As
far as I recall, CL9 works, and others do not. The easiest way to
check is to open the box and see what's inside.
IMMEDIATELY REMOVE FROM YOUR NEWSLETTER
---------- Messaggio originale ----------
Inviato il: 28/07/2011 12:00
> Send swinog mailing list submissions to
> To subscribe or unsubscribe via the World Wide Web, visit
> or, via email, send a message with subject or body 'help' to
> You can reach the person managing the list at
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of swinog digest..."
> Today's Topics:
> 1. *Special* Celebration SwiNOG-BE100 - Beer Event 100 - 15th of
> August 2011 @ Angelfood Lounge (Steven Glogger)
> Message: 1
> Date: Thu, 28 Jul 2011 09:39:55 +0200
> From: Steven Glogger<steven(a)swinog.org>
> To: swinog(a)lists.swinog.ch
> Subject: [swinog] *Special* Celebration SwiNOG-BE100 - Beer Event 100
> - 15th of August 2011 @ Angelfood Lounge
> Content-Type: text/plain; charset="iso-8859-1"; Format="flowed"
> hi everybody
> I'm happy to announce the next event:
> /CELEBRATION TIME!/
> BE 100 is coming next month!
> _the facts for the next event:_
> *Date:* 15th of August 2011 (! had to be shifted!)
> *Time:* starting around 18.30 o'clock
> *Location:* @ the "angelfood: The Cooking Lounge"
> (Forchstrasse 424, 8702 Zollikon; Tram 11 or Forchbahn until Rehalp)
> check out http://www.angelfood.ch for details
> *Registration deadline: *11.08.2011 23:59:59!
> *Seats are limited to 42 Places!*
> Please register here: http://swinog.mrmouse.ch/
> If you cannot attend and you're registered please inform me asap so we can release your seat (+41 79 277 92 35).
I'm happy to announce the next event:
BE 100 is coming next month!
_the facts for the next event:_
*Date:* 15th of August 2011 (! had to be shifted!)
*Time:* starting around 18.30 o'clock
*Location:* @ the "angelfood: The Cooking Lounge"
(Forchstrasse 424, 8702 Zollikon; Tram 11 or Forchbahn until Rehalp)
check out http://www.angelfood.ch for details
*Registration deadline: *11.08.2011 23:59:59!
*Seats are limited to 42 Places!*
Please register here: http://swinog.mrmouse.ch/
If you cannot attend and you're registered please inform me asap so we can release your seat (+41 79 277 92 35).
This is not directly related to networking, but behind those nice
routers and switches of yours, some people may have servers connected
there, a guy told me.
So, as mentioned in my subject, I got some old servers here that I'm
trying to sell :
I've got about 10 DL380G4 with drives, single or dual CPU, from 2.8 to
3.4 Ghz, 2 to 6 Gb of ram. I also have a pair of DL360 G4. Drives are
SCSI320, I don't think I've got anything higher than 76Gb there.
My idea would be to sell the lot in one shot, however I'm open to any
Obviously, I'm trying not to throw them out, as they have been running
in clean environment since their first startup, they could be useful. A
good compromise if you need a server with a full set of spare parts ;)
Current location of those machines is Geneva.
Anyway, just contact me off-list for any questions.
And if not, see you guys at next Swinog,
(sorry for any duplicates, some Bcc people are also on the SwiNOG list)
DO NOT FORGET, the deadline is THIS FRIDAY!
I had to convince them but finally, thanks to asut, the telecom federation, I'm able to share, with all of you, their answer  to the hearing.
You are all allowed to inspire yourself, copy fully or partially the document for your own response.
You know how important this is! If you don't have much time, you can copy/paste, sign and send it as-is.
It is crucial that they get as many responses as possible.
 http://www.swinog.ch/files/asut_Stellungsnahme_VUEPF.zip (3 documents in M$ Word format)
Have a nice week,
your right i allready was having such cases in the past, most sirea leone or romania calls,
but the abuser was originating from russia in most cases seldom from korea.
The scanner was allways one machine which doing bruteforce
but since a few weeks this changed, only a few request which do not trigger the detection
logic of such attacks from several hosts. Nothing harmfull at the moment .. but if it a bot
network doing this whis thousands of drones .. how to detect and protect ?
When the password of an account is cracked, why could not the same botnet be used to
make calls ?
That would be an horrorscenario of course
I fear we going in to expect that very soon.
On 23 Jul 2011 at 21:38, Andreas Fink wrote:
> those are scans to find open SIP gateways to then abuse them to dial to expensive destinations like Cuba.
> Those are large scale fraud attempts.
> On Jul 23, 2011, at 8:20 PM, roger(a)mgz.ch wrote:
> > hi all,
> > more and more i getting sipscans from dynamic ips from most swiss dsl and cable provider
> > the strange thing is they try at least twice .. and then stop
> > a few seconds later in most cases come 2 request from another connection.
> > is that some kind of trojan which is gone wild ?
> > anyone has some idea ?
> > Roger
> > _______________________________________________
> > swinog mailing list
> > swinog(a)lists.swinog.ch
> > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
more and more i getting sipscans from dynamic ips from most swiss dsl and cable provider
the strange thing is they try at least twice .. and then stop
a few seconds later in most cases come 2 request from another connection.
is that some kind of trojan which is gone wild ?
anyone has some idea ?
Kennt sich jemand mit mobilen Satelliten-Stationen aus? Also sowas, das
die Radio und TV Stationen auf Ihren Fahrzeugen haben?
Ich suche für einen Kunden eine Lösung, die sich auf einem Fahrzeug
montieren lässt und mehr oder weniger unabhängigen Internetzugang von
"irgendwo" zulässt (westliche Hemisphäre).
Bin für alle Tips dankbar.
You might already have heard about it but I think it's the first time I send it to the list.
The engineering school of Fribourg and some business partners (like Dreamlab and Objéctif Sécurité) have developed a set of tools to analyse the quality of the Swiss Internet. This project is called NetObservatory and our third report is out today. Have fun reading it. Especially noticeable are the efforts of Hostpoint (DNS) and Informaniak (MX) in the IPv6 integration, can you do better? :)
Have a nice day & weekend ;-)