Hello I'm going to tell you a story that does not makes me laugh at all. I am part of an nonprofit ISP in France. This ISP offers internet access, but also BGP tunnels to announce your own IP on the internet.
Some time ago, by several discussions, I found that a person member of the association and not ham had an allocation /24 Hamnet announced via its own AS via the AS of the association. Afterwards, after several information gathering, I noticed that this person was using it to propose hosting of small virtual machines and was allocating a Hamnet IP on these hosted VM. I warned this person that he did not have to have a Hamnet block, and that he should not do this type of use since he is not a ham His answer was clear "it's free, and I don't care".
In reality, after searching on the AMPR portal, this block was assigned to a ham. This ham is the national Hamnet coordinator of a country, and the person using and misusing it is none other than his son who is not a ham! I did not say anything until now, out of respect for the national coordinator.
Today, there is a member of the association who complains about receiving scans from a Hamnet IP belonging to the block used by the non-amateur. jul/15/2022 0l:02:56 system, error, critical login failure for user root from 44.151.129.214 via ssh jul/15/2022 0l:02:56 system, error, critical login failure for user msfadmin from 44.151.129.214 via ssh jul/15/2022 0l:02:57 system, error, critical login failure for user root from 44.151.129.214 via ssh jul/15/2022 01:02:57 system, error, critical login failure for user root from 44.151.129.214 via ssh jul/15/2022 0l:02:57 system, error, critical login failure for user postgres from 44.151.129.214 via ssh jul/15/2022 01:02:58 system, error, critical login failure for user service from 44.151.129.214 via ssh jul/15/2022 01:02:58 system, error, critical login failure for user vagrant from 44.151.129.214 via ssh jul/15/2022 01:02:58 system, error, critical login failure for user admin from 44.151.129.214 via ssh
To summarize, this person: - Has a hamnet block without being a ham radio operator, - Has obtained a legitimate hamnet block from another amateur radio operator, - makes a "commercial" use of it by assigning IP to VMs for clients or friends of his, - Let the VMs get drilled and scan/hacked with a hamnet IP.
I think it's time to set the record straight, stop assigning blocks to people who use them for commercial or non-amateur use. What do you think about it?
-- Gary F4HIN
Hi Gary,
While I don't mind the idea of hams using for non ham things, because why waste IP space?
I do think this is not a correct use of the IP space..
I believe this is abuse and the access to this IP space should be revoked.
Best regards Lewys VK2EVA
On Sun, 17 July 2022, 8:50 pm F4HIN via 44net, 44net@mailman.ampr.org wrote:
Hello I'm going to tell you a story that does not makes me laugh at all. I am part of an nonprofit ISP in France. This ISP offers internet access, but also BGP tunnels to announce your own IP on the internet.
Some time ago, by several discussions, I found that a person member of the association and not ham had an allocation /24 Hamnet announced via its own AS via the AS of the association. Afterwards, after several information gathering, I noticed that this person was using it to propose hosting of small virtual machines and was allocating a Hamnet IP on these hosted VM. I warned this person that he did not have to have a Hamnet block, and that he should not do this type of use since he is not a ham His answer was clear "it's free, and I don't care".
In reality, after searching on the AMPR portal, this block was assigned to a ham. This ham is the national Hamnet coordinator of a country, and the person using and misusing it is none other than his son who is not a ham! I did not say anything until now, out of respect for the national coordinator.
Today, there is a member of the association who complains about receiving scans from a Hamnet IP belonging to the block used by the non-amateur. jul/15/2022 0l:02:56 system, error, critical login failure for user root from 44.151.129.214 via ssh jul/15/2022 0l:02:56 system, error, critical login failure for user msfadmin from 44.151.129.214 via ssh jul/15/2022 0l:02:57 system, error, critical login failure for user root from 44.151.129.214 via ssh jul/15/2022 01:02:57 system, error, critical login failure for user root from 44.151.129.214 via ssh jul/15/2022 0l:02:57 system, error, critical login failure for user postgres from 44.151.129.214 via ssh jul/15/2022 01:02:58 system, error, critical login failure for user service from 44.151.129.214 via ssh jul/15/2022 01:02:58 system, error, critical login failure for user vagrant from 44.151.129.214 via ssh jul/15/2022 01:02:58 system, error, critical login failure for user admin from 44.151.129.214 via ssh
To summarize, this person: - Has a hamnet block without being a ham radio operator, - Has obtained a legitimate hamnet block from another amateur radio operator, - makes a "commercial" use of it by assigning IP to VMs for clients or friends of his, - Let the VMs get drilled and scan/hacked with a hamnet IP.
I think it's time to set the record straight, stop assigning blocks to people who use them for commercial or non-amateur use. What do you think about it?
-- Gary F4HIN _______________________________________________ 44net mailing list -- 44net@mailman.ampr.org To unsubscribe send an email to 44net-leave@mailman.ampr.org
Unfortunately it is not unheard of... In the past I also got an allocation request for a /22 from a ham who had not been active at all on AMPRnet before. A little research showed that his son has an internet hosting company. Not difficult to imagine what would have happened when I had assigned that block.
Of course, when a coordinator does it by himself it is more difficult to track. Maybe in the new system where coordinators will be less bound to regions and other coordinators could oversee this happening. But of course they would still have to do that and report it.
Rob
On 7/17/22 12:50, F4HIN via 44net wrote:
In reality, after searching on the AMPR portal, this block was assigned to a ham. This ham is the national Hamnet coordinator of a country, and the person using and misusing it is none other than his son who is not a ham!
Seems to be a relatively new setup -
https://fr.trustpilot.com/review/her-network.xyz
https://discord.com/invite/37F4PXPaCE - VPSs being sold "with IPs"
https://github.com/SwiramonNetwork
Quick scout under the /24 - main network seems to be her-network.xyz, also appears under swiramon.eu.org.
44.151.129.158 esxi.nonobzh.net 44.151.129.194 ether.elektron.ink 44.151.129.203 clg-kellermann.netlib.re 44.151.129.203 election-flone.ml 44.151.129.203 fluxynetwork.noho.st 44.151.129.203 panel.swiramon.eu.org 44.151.129.203 router.extraio.netlib.re 44.151.129.205 cdstrombone.fr 44.151.129.206 srv02.swnet.eu.org 44.151.129.212 node01.her-network.xyz 44.151.129.212 panel.her-network.xyz 44.151.129.213 srv04.swnet.eu.org 44.151.129.214 srv03.swnet.eu.org 44.151.129.215 mail.yoloski.netlib.re 44.151.129.231 debian-imt-1.shiloe.vtns.space 44.151.129.254 transit.shiloe.vtns.space
Open and shut abuse, really.
It looks like her-network.xyz is a friend of the subnet owner's son. We are very very far from amateur radio !!
Chris, please consider this a serious abuse !!
-----Message d'origine----- De : 44net via 44net 44net@mailman.ampr.org Envoyé : dimanche 17 juillet 2022 15:04 À : Rob PE1CHL 44net@pe1chl.nl Cc : 44net@mailman.ampr.org Objet : [44net] Re: Abuse or not abuse ?
Seems to be a relatively new setup -
https://fr.trustpilot.com/review/her-network.xyz
https://discord.com/invite/37F4PXPaCE - VPSs being sold "with IPs"
https://github.com/SwiramonNetwork
Quick scout under the /24 - main network seems to be her-network.xyz, also appears under swiramon.eu.org.
44.151.129.158 esxi.nonobzh.net 44.151.129.194 ether.elektron.ink 44.151.129.203 clg-kellermann.netlib.re 44.151.129.203 election-flone.ml 44.151.129.203 fluxynetwork.noho.st 44.151.129.203 panel.swiramon.eu.org 44.151.129.203 router.extraio.netlib.re 44.151.129.205 cdstrombone.fr 44.151.129.206 srv02.swnet.eu.org 44.151.129.212 node01.her-network.xyz 44.151.129.212 panel.her-network.xyz 44.151.129.213 srv04.swnet.eu.org 44.151.129.214 srv03.swnet.eu.org 44.151.129.215 mail.yoloski.netlib.re 44.151.129.231 debian-imt-1.shiloe.vtns.space 44.151.129.254 transit.shiloe.vtns.space
Open and shut abuse, really. _______________________________________________ 44net mailing list -- 44net@mailman.ampr.org To unsubscribe send an email to 44net-leave@mailman.ampr.org
Whilst I agree with people on this list that this abuse that needs to be handled. Simply revoking it in the ARMPnet portal is likely not going to stop this person. The ALTDB record needs to be revoked and the upstreams (singular in this case) need to be aware and at a minimum filter out this prefix. As F4HIN said they are apart of the nonprofit ISP in question, I would ask that they make sure that investigated internally there. I'm going to forward this message to the ALTDB admin and refer to this mailing list thread.
Sincerely, Keaton VE5LPL A Saskatchewian ham who does stuff and things https://kagl.me me@kagl.me On 2022-07-17 7:47 a.m., F4HIN via 44net wrote:
It looks like her-network.xyz is a friend of the subnet owner's son. We are very very far from amateur radio !!
Chris, please consider this a serious abuse !!
-----Message d'origine----- De : 44net via 44net 44net@mailman.ampr.org Envoyé : dimanche 17 juillet 2022 15:04 À : Rob PE1CHL 44net@pe1chl.nl Cc : 44net@mailman.ampr.org Objet : [44net] Re: Abuse or not abuse ?
Seems to be a relatively new setup -
https://fr.trustpilot.com/review/her-network.xyz
https://discord.com/invite/37F4PXPaCE - VPSs being sold "with IPs"
https://github.com/SwiramonNetwork
Quick scout under the /24 - main network seems to be her-network.xyz, also appears under swiramon.eu.org.
44.151.129.158 esxi.nonobzh.net 44.151.129.194 ether.elektron.ink 44.151.129.203 clg-kellermann.netlib.re 44.151.129.203 election-flone.ml 44.151.129.203 fluxynetwork.noho.st 44.151.129.203 panel.swiramon.eu.org 44.151.129.203 router.extraio.netlib.re 44.151.129.205 cdstrombone.fr 44.151.129.206 srv02.swnet.eu.org 44.151.129.212 node01.her-network.xyz 44.151.129.212 panel.her-network.xyz 44.151.129.213 srv04.swnet.eu.org 44.151.129.214 srv03.swnet.eu.org 44.151.129.215 mail.yoloski.netlib.re 44.151.129.231 debian-imt-1.shiloe.vtns.space 44.151.129.254 transit.shiloe.vtns.space
Open and shut abuse, really. _______________________________________________ 44net mailing list -- 44net@mailman.ampr.org To unsubscribe send an email to 44net-leave@mailman.ampr.org
44net mailing list -- 44net@mailman.ampr.org To unsubscribe send an email to 44net-leave@mailman.ampr.org
Question, what of the national coordinator which okayed this? Aren’t there checks and balances for this sort of thing?
On Sun, 17 Jul 2022 at 16:07, Keaton VE5LPL via 44net < 44net@mailman.ampr.org> wrote:
Whilst I agree with people on this list that this abuse that needs to be handled. Simply revoking it in the ARMPnet portal is likely not going to stop this person. The ALTDB record needs to be revoked and the upstreams (singular in this case) need to be aware and at a minimum filter out this prefix. As F4HIN said they are apart of the nonprofit ISP in question, I would ask that they make sure that investigated internally there. I'm going to forward this message to the ALTDB admin and refer to this mailing list thread.
Sincerely, Keaton VE5LPL A Saskatchewian ham who does stuff and things https://kagl.me me@kagl.me On 2022-07-17 7:47 a.m., F4HIN via 44net wrote:
It looks like her-network.xyz is a friend of the subnet owner's son. We are very very far from amateur radio !!
Chris, please consider this a serious abuse !!
-----Message d'origine----- De : 44net via 44net 44net@mailman.ampr.org Envoyé : dimanche 17 juillet 2022 15:04 À : Rob PE1CHL 44net@pe1chl.nl Cc : 44net@mailman.ampr.org Objet : [44net] Re: Abuse or not abuse ?
Seems to be a relatively new setup -
https://fr.trustpilot.com/review/her-network.xyz
https://discord.com/invite/37F4PXPaCE - VPSs being sold "with IPs"
https://github.com/SwiramonNetwork
Quick scout under the /24 - main network seems to be her-network.xyz,
also
appears under swiramon.eu.org.
44.151.129.158 esxi.nonobzh.net 44.151.129.194 ether.elektron.ink 44.151.129.203 clg-kellermann.netlib.re 44.151.129.203 election-flone.ml 44.151.129.203 fluxynetwork.noho.st 44.151.129.203 panel.swiramon.eu.org 44.151.129.203 router.extraio.netlib.re 44.151.129.205 cdstrombone.fr 44.151.129.206 srv02.swnet.eu.org 44.151.129.212 node01.her-network.xyz 44.151.129.212 panel.her-network.xyz 44.151.129.213 srv04.swnet.eu.org 44.151.129.214 srv03.swnet.eu.org 44.151.129.215 mail.yoloski.netlib.re 44.151.129.231 debian-imt-1.shiloe.vtns.space 44.151.129.254 transit.shiloe.vtns.space
Open and shut abuse, really. _______________________________________________ 44net mailing list -- 44net@mailman.ampr.org To unsubscribe send an
email to
44net-leave@mailman.ampr.org
44net mailing list -- 44net@mailman.ampr.org To unsubscribe send an email to 44net-leave@mailman.ampr.org
44net mailing list -- 44net@mailman.ampr.org To unsubscribe send an email to 44net-leave@mailman.ampr.org
Hi All,
If I could please ask everyone not to jump the gun and start firing off emails to ALTDB etc. I have exchanged emails with F4HIN and I have invited a response from all involved parties. We will investigate and take appropriate action, but it needs to be ARDC that takes any action, if appropriate, after this alleged abuse has been properly investigated and the relevant people have been given the chance to respond.
Thank you, Chris - G1FEF —
On 17 Jul 2022, at 16:06, Keaton VE5LPL via 44net 44net@mailman.ampr.org wrote:
Whilst I agree with people on this list that this abuse that needs to be handled. Simply revoking it in the ARMPnet portal is likely not going to stop this person. The ALTDB record needs to be revoked and the upstreams (singular in this case) need to be aware and at a minimum filter out this prefix. As F4HIN said they are apart of the nonprofit ISP in question, I would ask that they make sure that investigated internally there. I'm going to forward this message to the ALTDB admin and refer to this mailing list thread.
Sincerely, Keaton VE5LPL A Saskatchewian ham who does stuff and things https://kagl.me me@kagl.me On 2022-07-17 7:47 a.m., F4HIN via 44net wrote:
It looks like her-network.xyz is a friend of the subnet owner's son. We are very very far from amateur radio !!
Chris, please consider this a serious abuse !!
-----Message d'origine----- De : 44net via 44net 44net@mailman.ampr.org Envoyé : dimanche 17 juillet 2022 15:04 À : Rob PE1CHL 44net@pe1chl.nl Cc : 44net@mailman.ampr.org Objet : [44net] Re: Abuse or not abuse ?
Seems to be a relatively new setup -
https://fr.trustpilot.com/review/her-network.xyz
https://discord.com/invite/37F4PXPaCE - VPSs being sold "with IPs"
https://github.com/SwiramonNetwork
Quick scout under the /24 - main network seems to be her-network.xyz, also appears under swiramon.eu.org.
44.151.129.158 esxi.nonobzh.net 44.151.129.194 ether.elektron.ink 44.151.129.203 clg-kellermann.netlib.re 44.151.129.203 election-flone.ml 44.151.129.203 fluxynetwork.noho.st 44.151.129.203 panel.swiramon.eu.org 44.151.129.203 router.extraio.netlib.re 44.151.129.205 cdstrombone.fr 44.151.129.206 srv02.swnet.eu.org 44.151.129.212 node01.her-network.xyz 44.151.129.212 panel.her-network.xyz 44.151.129.213 srv04.swnet.eu.org 44.151.129.214 srv03.swnet.eu.org 44.151.129.215 mail.yoloski.netlib.re 44.151.129.231 debian-imt-1.shiloe.vtns.space 44.151.129.254 transit.shiloe.vtns.space
Open and shut abuse, really. _______________________________________________ 44net mailing list -- 44net@mailman.ampr.org To unsubscribe send an email to 44net-leave@mailman.ampr.org
44net mailing list -- 44net@mailman.ampr.org To unsubscribe send an email to 44net-leave@mailman.ampr.org
44net mailing list -- 44net@mailman.ampr.org To unsubscribe send an email to 44net-leave@mailman.ampr.org
This is not the first time this has happened. Those of us working on Wall Street will be familiar with the Nasdaq test system. It too uses 44net IP's and has done for at least 20 years. Thier explanation at the time I brought it up over 20 years ago; "it's a closed network". We'll, it's not a closed network.
On Sun, Jul 17, 2022, 12:03 Chris - G1FEF via 44net 44net@mailman.ampr.org wrote:
Hi All,
If I could please ask everyone not to jump the gun and start firing off emails to ALTDB etc. I have exchanged emails with F4HIN and I have invited a response from all involved parties. We will investigate and take appropriate action, but it needs to be ARDC that takes any action, if appropriate, after this alleged abuse has been properly investigated and the relevant people have been given the chance to respond.
Thank you, Chris - G1FEF —
On 17 Jul 2022, at 16:06, Keaton VE5LPL via 44net <
44net@mailman.ampr.org> wrote:
Whilst I agree with people on this list that this abuse that needs to be handled. Simply revoking it in the ARMPnet portal is likely not going to stop this person. The ALTDB record needs to be revoked and the upstreams (singular in this case) need to be aware and at a minimum filter out this prefix. As F4HIN said they are apart of the nonprofit ISP in question, I would ask that they make sure that investigated internally there. I'm going to forward this message to the ALTDB admin and refer to this mailing list thread.
Sincerely, Keaton VE5LPL A Saskatchewian ham who does stuff and things https://kagl.me me@kagl.me On 2022-07-17 7:47 a.m., F4HIN via 44net wrote:
It looks like her-network.xyz is a friend of the subnet owner's son. We are very very far from amateur radio !!
Chris, please consider this a serious abuse !!
-----Message d'origine----- De : 44net via 44net 44net@mailman.ampr.org Envoyé : dimanche 17 juillet 2022 15:04 À : Rob PE1CHL 44net@pe1chl.nl Cc : 44net@mailman.ampr.org Objet : [44net] Re: Abuse or not abuse ?
Seems to be a relatively new setup -
https://fr.trustpilot.com/review/her-network.xyz
https://discord.com/invite/37F4PXPaCE - VPSs being sold "with IPs"
https://github.com/SwiramonNetwork
Quick scout under the /24 - main network seems to be her-network.xyz,
also
appears under swiramon.eu.org.
44.151.129.158 esxi.nonobzh.net 44.151.129.194 ether.elektron.ink 44.151.129.203 clg-kellermann.netlib.re 44.151.129.203 election-flone.ml 44.151.129.203 fluxynetwork.noho.st 44.151.129.203 panel.swiramon.eu.org 44.151.129.203 router.extraio.netlib.re 44.151.129.205 cdstrombone.fr 44.151.129.206 srv02.swnet.eu.org 44.151.129.212 node01.her-network.xyz 44.151.129.212 panel.her-network.xyz 44.151.129.213 srv04.swnet.eu.org 44.151.129.214 srv03.swnet.eu.org 44.151.129.215 mail.yoloski.netlib.re 44.151.129.231 debian-imt-1.shiloe.vtns.space 44.151.129.254 transit.shiloe.vtns.space
Open and shut abuse, really. _______________________________________________ 44net mailing list -- 44net@mailman.ampr.org To unsubscribe send an
email to
44net-leave@mailman.ampr.org
44net mailing list -- 44net@mailman.ampr.org To unsubscribe send an email to 44net-leave@mailman.ampr.org
44net mailing list -- 44net@mailman.ampr.org To unsubscribe send an email to 44net-leave@mailman.ampr.org
44net mailing list -- 44net@mailman.ampr.org To unsubscribe send an email to 44net-leave@mailman.ampr.org
I can only reiterate what I have said here in the past: If anyone discovers or suspects that ARDC address space is being used inappropriately, please email me with the details and it will be investigated.
Thanks, Chris - G1FEF
On 17 Jul 2022, at 17:31, Mark Phillips enicomms@gmail.com wrote:
This is not the first time this has happened. Those of us working on Wall Street will be familiar with the Nasdaq test system. It too uses 44net IP's and has done for at least 20 years. Thier explanation at the time I brought it up over 20 years ago; "it's a closed network". We'll, it's not a closed network.
On Sun, Jul 17, 2022, 12:03 Chris - G1FEF via 44net <44net@mailman.ampr.org mailto:44net@mailman.ampr.org> wrote: Hi All,
If I could please ask everyone not to jump the gun and start firing off emails to ALTDB etc. I have exchanged emails with F4HIN and I have invited a response from all involved parties. We will investigate and take appropriate action, but it needs to be ARDC that takes any action, if appropriate, after this alleged abuse has been properly investigated and the relevant people have been given the chance to respond.
Thank you, Chris - G1FEF —
On 17 Jul 2022, at 16:06, Keaton VE5LPL via 44net <44net@mailman.ampr.org mailto:44net@mailman.ampr.org> wrote:
Whilst I agree with people on this list that this abuse that needs to be handled. Simply revoking it in the ARMPnet portal is likely not going to stop this person. The ALTDB record needs to be revoked and the upstreams (singular in this case) need to be aware and at a minimum filter out this prefix. As F4HIN said they are apart of the nonprofit ISP in question, I would ask that they make sure that investigated internally there. I'm going to forward this message to the ALTDB admin and refer to this mailing list thread.
Sincerely, Keaton VE5LPL A Saskatchewian ham who does stuff and things https://kagl.me https://kagl.me/ me@kagl.me mailto:me@kagl.me On 2022-07-17 7:47 a.m., F4HIN via 44net wrote:
It looks like her-network.xyz http://her-network.xyz/ is a friend of the subnet owner's son. We are very very far from amateur radio !!
Chris, please consider this a serious abuse !!
-----Message d'origine----- De : 44net via 44net <44net@mailman.ampr.org mailto:44net@mailman.ampr.org> Envoyé : dimanche 17 juillet 2022 15:04 À : Rob PE1CHL <44net@pe1chl.nl mailto:44net@pe1chl.nl> Cc : 44net@mailman.ampr.org mailto:44net@mailman.ampr.org Objet : [44net] Re: Abuse or not abuse ?
Seems to be a relatively new setup -
https://fr.trustpilot.com/review/her-network.xyz https://fr.trustpilot.com/review/her-network.xyz
https://discord.com/invite/37F4PXPaCE https://discord.com/invite/37F4PXPaCE - VPSs being sold "with IPs"
https://github.com/SwiramonNetwork https://github.com/SwiramonNetwork
Quick scout under the /24 - main network seems to be her-network.xyz http://her-network.xyz/, also appears under swiramon.eu.org http://swiramon.eu.org/.
44.151.129.158 esxi.nonobzh.net http://esxi.nonobzh.net/ 44.151.129.194 ether.elektron.ink 44.151.129.203 clg-kellermann.netlib.re http://clg-kellermann.netlib.re/ 44.151.129.203 election-flone.ml http://election-flone.ml/ 44.151.129.203 fluxynetwork.noho.st http://fluxynetwork.noho.st/ 44.151.129.203 panel.swiramon.eu.org http://panel.swiramon.eu.org/ 44.151.129.203 router.extraio.netlib.re http://router.extraio.netlib.re/ 44.151.129.205 cdstrombone.fr http://cdstrombone.fr/ 44.151.129.206 srv02.swnet.eu.org http://srv02.swnet.eu.org/ 44.151.129.212 node01.her-network.xyz http://node01.her-network.xyz/ 44.151.129.212 panel.her-network.xyz http://panel.her-network.xyz/ 44.151.129.213 srv04.swnet.eu.org http://srv04.swnet.eu.org/ 44.151.129.214 srv03.swnet.eu.org http://srv03.swnet.eu.org/ 44.151.129.215 mail.yoloski.netlib.re http://mail.yoloski.netlib.re/ 44.151.129.231 debian-imt-1.shiloe.vtns.space http://debian-imt-1.shiloe.vtns.space/ 44.151.129.254 transit.shiloe.vtns.space http://transit.shiloe.vtns.space/
Open and shut abuse, really. _______________________________________________ 44net mailing list -- 44net@mailman.ampr.org mailto:44net@mailman.ampr.org To unsubscribe send an email to 44net-leave@mailman.ampr.org mailto:44net-leave@mailman.ampr.org
44net mailing list -- 44net@mailman.ampr.org mailto:44net@mailman.ampr.org To unsubscribe send an email to 44net-leave@mailman.ampr.org mailto:44net-leave@mailman.ampr.org
44net mailing list -- 44net@mailman.ampr.org mailto:44net@mailman.ampr.org To unsubscribe send an email to 44net-leave@mailman.ampr.org mailto:44net-leave@mailman.ampr.org
44net mailing list -- 44net@mailman.ampr.org mailto:44net@mailman.ampr.org To unsubscribe send an email to 44net-leave@mailman.ampr.org mailto:44net-leave@mailman.ampr.org
Hello,
I remind you that it was I who delivered the IP you have... you better respect me...
These are my IPs and they are not used for commercial applications contrary to what you claim in your claims.
So I strongly advise you to stop your not very hamspirit activity...
I guess the purpose was to try to harm me, you probably thought I wasn't reading the list...
This kind of behavior deserves your allowance to be removed. but I have principles unlike you.
You attack me personally then it remains a personal attack and I don't mix genres.
So, for Christ, I have been managing IPs for a long time, even before the ampr.org server existed and long before this young F4HIN radio amateur was even a radio amateur...
My 44.151.129 IP are not use for commercial use of course.
The server belongs to my son indeed but I ask him for allocations, the IP 44.129 are mine.
I know very well the goal of this young radio amateur f4hin, it is to take the management of the network in my place... So given what I read on telegram mailing lists, I wish you good luck...
Best regards, Ludovic Vuillermet - F5PBG Coordinator of 44.151
It's probably a mistake then.
My apologies for the noise.
De : f5pbg--- via 44net 44net@mailman.ampr.org Envoyé : lundi 18 juillet 2022 08:04 À : 44net@mailman.ampr.org Objet : [44net] Re: Abuse or not abuse ?
Hello,
I remind you that it was I who delivered the IP you have... you better respect me...
These are my IPs and they are not used for commercial applications contrary to what you claim in your claims.
So I strongly advise you to stop your not very hamspirit activity...
I guess the purpose was to try to harm me, you probably thought I wasn't reading the list...
This kind of behavior deserves your allowance to be removed. but I have principles unlike you.
You attack me personally then it remains a personal attack and I don't mix genres.
So, for Christ, I have been managing IPs for a long time, even before the ampr.org server existed and long before this young F4HIN radio amateur was even a radio amateur...
My 44.151.129 IP are not use for commercial use of course.
The server belongs to my son indeed but I ask him for allocations, the IP 44.129 are mine.
I know very well the goal of this young radio amateur f4hin, it is to take the management of the network in my place... So given what I read on telegram mailing lists, I wish you good luck...
Best regards, Ludovic Vuillermet - F5PBG Coordinator of 44.151
Hi Rob,
Just thought I would give you some feedback on your comment. I understand there seems to have been a breach of the rules in the case Gary has brought to light. But i think it's a big jump to cast dispersion on every Ham that happens to have connections with an ISP that they are up to no good. When I first ask for my allocation (i also am a principal at an ISP) i was told by my regional co-coordinator that I was an evil ISP operator and my attempt to steal 44 net space would not be tolerated. I was perplexed by there attitude as I was a legitimate licensed radio operator who wanted to use the space for radio related things not only that I wanted to use my position within the ISP to help other operators route 44 space for their radio projects for free without the added latency and packet size constraints of a vpn. I must say i went away very disheartened with the whole 44 net idea.
About a year later i learnt that the regional co-coordinator had moved on so I re-applied and got a /24. Since then I have routed a few /28 /29's from my block to local hams and clubs for radio projects, radio related web sites DMR and allstar networks all for free thought the charity of the ISP that was mainlined by the radio community as being evil.
I think it's a far leap to assume that just because an operator has some involvement with an ISP that they are by default up to no good. In fact some of us are interested in giving our services and vast knowledge obtained in the commercial world to radio related projects for free and in good faith sticking within the rules. There's always some bad apples sure. But not everyone is up to no good.
Best regards 73
Matt
On 17/7/2022 10:52 pm, Rob PE1CHL via 44net wrote:
Unfortunately it is not unheard of... In the past I also got an allocation request for a /22 from a ham who had not been active at all on AMPRnet before. A little research showed that his son has an internet hosting company. Not difficult to imagine what would have happened when I had assigned that block.
Of course, when a coordinator does it by himself it is more difficult to track. Maybe in the new system where coordinators will be less bound to regions and other coordinators could oversee this happening. But of course they would still have to do that and report it.
Rob
On 7/17/22 12:50, F4HIN via 44net wrote:
In reality, after searching on the AMPR portal, this block was assigned to a ham. This ham is the national Hamnet coordinator of a country, and the person using and misusing it is none other than his son who is not a ham!
44net mailing list -- 44net@mailman.ampr.org To unsubscribe send an email to 44net-leave@mailman.ampr.org
Agree Matt, applications should be judged on their merit and actions, not their business affiliations. And the flip side argument is that being in charge of an ISP puts you in a unique position to help fellow amateurs (as you have done).
If someone does abuse their allocation, then that should be passed on to ARDC for them to follow up.
On 18/7/22 11:59 am, Matt - VK2FLY via 44net wrote:
Hi Rob,
Just thought I would give you some feedback on your comment. I understand there seems to have been a breach of the rules in the case Gary has brought to light. But i think it's a big jump to cast dispersion on every Ham that happens to have connections with an ISP that they are up to no good. When I first ask for my allocation (i also am a principal at an ISP) i was told by my regional co-coordinator that I was an evil ISP operator and my attempt to steal 44 net space would not be tolerated. I was perplexed by there attitude as I was a legitimate licensed radio operator who wanted to use the space for radio related things not only that I wanted to use my position within the ISP to help other operators route 44 space for their radio projects for free without the added latency and packet size constraints of a vpn. I must say i went away very disheartened with the whole 44 net idea.
About a year later i learnt that the regional co-coordinator had moved on so I re-applied and got a /24. Since then I have routed a few /28 /29's from my block to local hams and clubs for radio projects, radio related web sites DMR and allstar networks all for free thought the charity of the ISP that was mainlined by the radio community as being evil.
I think it's a far leap to assume that just because an operator has some involvement with an ISP that they are by default up to no good. In fact some of us are interested in giving our services and vast knowledge obtained in the commercial world to radio related projects for free and in good faith sticking within the rules. There's always some bad apples sure. But not everyone is up to no good.
Best regards 73
Matt
On 17/7/2022 10:52 pm, Rob PE1CHL via 44net wrote:
Unfortunately it is not unheard of... In the past I also got an allocation request for a /22 from a ham who had not been active at all on AMPRnet before. A little research showed that his son has an internet hosting company. Not difficult to imagine what would have happened when I had assigned that block.
Of course, when a coordinator does it by himself it is more difficult to track. Maybe in the new system where coordinators will be less bound to regions and other coordinators could oversee this happening. But of course they would still have to do that and report it.
Rob
On 7/17/22 12:50, F4HIN via 44net wrote:
In reality, after searching on the AMPR portal, this block was assigned to a ham. This ham is the national Hamnet coordinator of a country, and the person using and misusing it is none other than his son who is not a ham!
44net mailing list -- 44net@mailman.ampr.org To unsubscribe send an email to 44net-leave@mailman.ampr.org
I did not claim that "because an operator has some involvement with an ISP that they are by default up to no good".
When the ham that asked for the allocation had been active with a smaller allocation before, I would have asked him why he needs a /22. I never allocated a /22 to an individual. Subnets that large are only allocated to regions, where they are put up on radio access points where many users in the region each get a smaller allocation. The default is a /28 but some /27 and a single /26 exist. That is about what you can reasonably use as a single user. A /22 (1024 addresses) requires some explanation. And it would not be likely that for a first application, never having used AMPRnet, so many addresses would be required. So I do some research and find what I wrote below.
That does not mean that EVERY operator which has involvement with an ISP is rejected. Not at all. When they make a reasonable request, of course they get the allocation. And when it would be to host some amateur service that requires a lot of addresses, we could have offered to host the servers as well. (we do host amateur services like 230 echolink proxies, 10 echolink relays, brandmeister services, etc)
Rob
On 7/18/22 03:59, Matt - VK2FLY via 44net wrote:
Hi Rob,
Just thought I would give you some feedback on your comment. I understand there seems to have been a breach of the rules in the case Gary has brought to light. But i think it's a big jump to cast dispersion on every Ham that happens to have connections with an ISP that they are up to no good. When I first ask for my allocation (i also am a principal at an ISP) i was told by my regional co-coordinator that I was an evil ISP operator and my attempt to steal 44 net space would not be tolerated. I was perplexed by there attitude as I was a legitimate licensed radio operator who wanted to use the space for radio related things not only that I wanted to use my position within the ISP to help other operators route 44 space for their radio projects for free without the added latency and packet size constraints of a vpn. I must say i went away very disheartened with the whole 44 net idea.
About a year later i learnt that the regional co-coordinator had moved on so I re-applied and got a /24. Since then I have routed a few /28 /29's from my block to local hams and clubs for radio projects, radio related web sites DMR and allstar networks all for free thought the charity of the ISP that was mainlined by the radio community as being evil.
I think it's a far leap to assume that just because an operator has some involvement with an ISP that they are by default up to no good. In fact some of us are interested in giving our services and vast knowledge obtained in the commercial world to radio related projects for free and in good faith sticking within the rules. There's always some bad apples sure. But not everyone is up to no good.
Best regards 73
Matt
On 17/7/2022 10:52 pm, Rob PE1CHL via 44net wrote:
Unfortunately it is not unheard of... In the past I also got an allocation request for a /22 from a ham who had not been active at all on AMPRnet before. A little research showed that his son has an internet hosting company. Not difficult to imagine what would have happened when I had assigned that block.
Of course, when a coordinator does it by himself it is more difficult to track. Maybe in the new system where coordinators will be less bound to regions and other coordinators could oversee this happening. But of course they would still have to do that and report it.
Rob
On 7/17/22 12:50, F4HIN via 44net wrote:
In reality, after searching on the AMPR portal, this block was assigned to a ham. This ham is the national Hamnet coordinator of a country, and the person using and misusing it is none other than his son who is not a ham!
44net mailing list -- 44net@mailman.ampr.org To unsubscribe send an email to 44net-leave@mailman.ampr.org
On 7/17/2022 6:50 AM, F4HIN via 44net wrote:
Some time ago, by several discussions, I found that a person member of the association and not ham had an allocation /24 Hamnet announced via its own AS via the AS of the association. Afterwards, after several information gathering, I noticed that this person was using it to propose hosting of small virtual machines and was allocating a Hamnet IP on these hosted VM. I warned this person that he did not have to have a Hamnet block, and that he should not do this type of use since he is not a ham His answer was clear "it's free, and I don't care".
In reality, after searching on the AMPR portal, this block was assigned to a ham. This ham is the national Hamnet coordinator of a country, and the person using and misusing it is none other than his son who is not a ham!
This is a sad situation, but it may be that the best solution is to ask one of the ARDC principals to have a quiet word with the coordinator involved, and ask that the assignments be changed to commercially-available IP addresses. Since IPv6 is now widely available, the odds are that a equivalently-sized block is available for minor money, or even for the asking.
There used to be a popular TV show in the U.S., called "Little House On The Prairie," based on books written by a young woman who lived there. It turned out that, in real life, the family had built their home on land owned by a Native American tribe, and they were compelled to pull up stakes and move. I don't know if the ARDC would choose to start the conversation with that story, but it's a good reminder of what is sometimes needed.
73,
Bill, W4EWH
On 7/17/2022 6:50 AM, F4HIN via 44net wrote:
Some time ago, by several discussions, I found that a person member of the association and not ham had an allocation /24 Hamnet announced via its own AS via the AS of the association. Afterwards, after several information gathering, I noticed that this person was using it to propose hosting of small virtual machines and was allocating a Hamnet IP on these hosted VM. I warned this person that he did not have to have a Hamnet block, and that he should not do this type of use since he is not a ham His answer was clear "it's free, and I don't care".
In reality, after searching on the AMPR portal, this block was assigned to a ham. This ham is the national Hamnet coordinator of a country, and the person using and misusing it is none other than his son who is not a ham!
This is a sad situation, but it may be that the best solution is to ask one of the ARDC principals to have a quiet word with the coordinator involved, and ask that the assignments be changed to commercially-available IP addresses. Since IPv6 is now widely available, the odds are that a equivalently-sized block is available for minor money, or even for the asking.
There used to be a popular TV show in the U.S., called "Little House On The Prairie," based on books written by a young woman who lived there. It turned out that, in real life, the family had built their home on land owned by a Native American tribe, and they were compelled to pull up stakes and move. I don't know if the ARDC would choose to start the conversation with that story, but it's a good reminder of what is sometimes needed.
Bill, W4EWH
Bonjur à tous,
Ce serait pas mail que de mettre tout cela en Français non? Ce serait sympa et cela aiderait.
Avec mes 73
F6DAA François
Le 17/07/2022 à 12:50, F4HIN via 44net a écrit :
Hello I'm going to tell you a story that does not makes me laugh at all. I am part of an nonprofit ISP in France. This ISP offers internet access, but also BGP tunnels to announce your own IP on the internet.
Some time ago, by several discussions, I found that a person member of the association and not ham had an allocation /24 Hamnet announced via its own AS via the AS of the association. Afterwards, after several information gathering, I noticed that this person was using it to propose hosting of small virtual machines and was allocating a Hamnet IP on these hosted VM. I warned this person that he did not have to have a Hamnet block, and that he should not do this type of use since he is not a ham His answer was clear "it's free, and I don't care".
In reality, after searching on the AMPR portal, this block was assigned to a ham. This ham is the national Hamnet coordinator of a country, and the person using and misusing it is none other than his son who is not a ham! I did not say anything until now, out of respect for the national coordinator.
Today, there is a member of the association who complains about receiving scans from a Hamnet IP belonging to the block used by the non-amateur. jul/15/2022 0l:02:56 system, error, critical login failure for user root from 44.151.129.214 via ssh jul/15/2022 0l:02:56 system, error, critical login failure for user msfadmin from 44.151.129.214 via ssh jul/15/2022 0l:02:57 system, error, critical login failure for user root from 44.151.129.214 via ssh jul/15/2022 01:02:57 system, error, critical login failure for user root from 44.151.129.214 via ssh jul/15/2022 0l:02:57 system, error, critical login failure for user postgres from 44.151.129.214 via ssh jul/15/2022 01:02:58 system, error, critical login failure for user service from 44.151.129.214 via ssh jul/15/2022 01:02:58 system, error, critical login failure for user vagrant from 44.151.129.214 via ssh jul/15/2022 01:02:58 system, error, critical login failure for user admin from 44.151.129.214 via ssh
To summarize, this person: - Has a hamnet block without being a ham radio operator, - Has obtained a legitimate hamnet block from another amateur radio operator, - makes a "commercial" use of it by assigning IP to VMs for clients or friends of his, - Let the VMs get drilled and scan/hacked with a hamnet IP.
I think it's time to set the record straight, stop assigning blocks to people who use them for commercial or non-amateur use. What do you think about it?
-- Gary F4HIN _______________________________________________ 44net mailing list -- 44net@mailman.ampr.org To unsubscribe send an email to 44net-leave@mailman.ampr.org
-
44net -
Chris - G1FEF -
Chris Smith
-
E. William Horne -
F4HIN -
f5pbg＠free.fr -
F6DAA François MONDON -
Keaton VE5LPL -
Lewys Martin -
Mark Phillips -
Matt - VK2FLY -
Rob PE1CHL -
Tom M0LTE -
Tony Langdon