use and abuse at ns.icann · you’ll need a phone number, reverse it, look it up in dns (type mx)...
TRANSCRIPT
![Page 1: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/1.jpg)
Use and Abuse at ns.icann.org Roy Arends | ICANN | June 2016
![Page 2: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/2.jpg)
| 2
Prologue
ns.icann.org
![Page 3: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/3.jpg)
| 3
What does NS.ICANN.ORG look like? Two servers at two locations: IAD and LAX A few weeks of captured traffic, uploaded to Turing
Traffic to NS.ICANN.ORG
![Page 4: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/4.jpg)
| 4
Authoritative for: dig @lax.xfr.dns.icann.org . axfr|grep "NS\tns.icann.org." int. 172800 IN NS ns.icann.org. museum. 172800 IN NS ns.icann.org. ug. 172800 IN NS ns.icann.org.
What does ns.icann.org do?
![Page 5: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/5.jpg)
| 5
Authoritative for: dig @lax.xfr.dns.icann.org . axfr|grep "NS\tns.icann.org." int. 172800 IN NS ns.icann.org. museum. 172800 IN NS ns.icann.org. ug. 172800 IN NS ns.icann.org. and a whole bunch more 224.in-addr.arpa. – 239.in-addr.arpa.ipv4only.arpa. mcast.net. icann.org. etc
What does ns.icann.org do?
![Page 6: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/6.jpg)
| 6
Authoritative for: dig @lax.xfr.dns.icann.org . axfr|grep "NS\tns.icann.org." int. 172800 IN NS ns.icann.org. museum. 172800 IN NS ns.icann.org. ug. 172800 IN NS ns.icann.org.
What does ns.icann.org do?
![Page 7: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/7.jpg)
| 7
Chapter One
The Telephone Company
![Page 8: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/8.jpg)
| 8
TPC.INT RFC 1528-1529-1530 RFC 1569 RFC 1703 “Remote Printing” The idea: send an email to a fax. You’ll need a phone number, reverse it, look it up in DNS (type MX)
Lets talk about INT
![Page 9: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/9.jpg)
| 9
TPC.INT “The Phone Company” RFC 1528-1529-1530 RFC 1569 RFC 1703 “Remote Printing” The idea: send an email to a fax. You’ll need a phone number, reverse it, look it up in DNS (type MX)
Lets talk about INT
![Page 10: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/10.jpg)
| 10
![Page 11: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/11.jpg)
| 11
![Page 12: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/12.jpg)
| 12
TPC.INT You’ll need a phone number, reverse it, look it up in DNS (type MX) Example from the RFC: +1 415 968 2510 0.1.5.2.8.6.9.5.1.4.1.tpc.int. IN MX 10 dbc.mtview.ca.us. Let’s look at the delegation for TPC.INT:
Lets talk about TPC.INT
![Page 13: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/13.jpg)
| 13
Let’s look at the delegation for TPC.INT: dig @ns.icann.org tpc.int ns tpc.int. NS ns1.tpc.int. tpc.int. NS ns1.simkin.ca. tpc.int. NS ns1.covalent.net. tpc.int. NS ns2.simkin.ca. tpc.int. NS auth02.ns.uu.net.
Lets talk about TPC.INT
![Page 14: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/14.jpg)
| 14
Let’s look at the delegation for TPC.INT: dig @ns.icann.org tpc.int ns tpc.int. NS ns1.tpc.int. A 216.152.192.130 tpc.int. NS ns1.simkin.ca. A 10.255.255.251 tpc.int. NS ns1.covalent.net. tpc.int. NS ns2.simkin.ca. A 10.6.6.7 tpc.int. NS auth02.ns.uu.net. A 198.6.1.82
Lets talk about TPC.INT
![Page 15: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/15.jpg)
| 15
Let’s look at the delegation for TPC.INT: dig @ns.icann.org tpc.int ns tpc.int. NS ns1.tpc.int. A 216.152.192.130 tpc.int. NS ns1.simkin.ca. A 10.255.255.251 tpc.int. NS ns1.covalent.net. NXDOMAIN tpc.int. NS ns2.simkin.ca. A 10.6.6.7 tpc.int. NS auth02.ns.uu.net. A 198.6.1.82
Lets talk about TPC.INT
![Page 16: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/16.jpg)
| 16
Let’s look at the delegation for TPC.INT: dig @ns.icann.org tpc.int ns tpc.int. NS ns1.tpc.int. A 216.152.192.130 tpc.int. NS ns1.simkin.ca. A 10.255.255.251 tpc.int. NS ns1.covalent.net. NXDOMAIN tpc.int. NS ns2.simkin.ca. A 10.6.6.7 tpc.int. NS auth02.ns.uu.net. A 198.6.1.82
Lets talk about TPC.INT
![Page 17: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/17.jpg)
| 17
Let’s look at the delegation for TPC.INT: dig @ns.icann.org tpc.int ns tpc.int. NS ns1.tpc.int. A 216.152.192.130 tpc.int. NS ns1.simkin.ca. A 10.255.255.251 tpc.int. NS ns1.covalent.net. NXDOMAIN tpc.int. NS ns2.simkin.ca. A 10.6.6.7 tpc.int. NS auth02.ns.uu.net. A 198.6.1.82
Lets talk about TPC.INT
![Page 18: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/18.jpg)
| 18
Let’s look at the delegation for TPC.INT: dig @ns.icann.org tpc.int ns tpc.int. NS ns1.tpc.int. A 216.152.192.130 ;; connection timed out; no servers could be reached tpc.int. NS auth02.ns.uu.net. A 198.6.1.82
Lets talk about TPC.INT
![Page 19: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/19.jpg)
| 19
Let’s look at the delegation for TPC.INT: dig @ns.icann.org tpc.int ns tpc.int. NS ns1.tpc.int. A 216.152.192.130 ;; connection timed out; no servers could be reached tpc.int. NS auth02.ns.uu.net. A 198.6.1.82 ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL
Lets talk about TPC.INT
![Page 20: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/20.jpg)
| 20
Let’s look at the delegation for TPC.INT: dig @ns.icann.org tpc.int ns tpc.int. NS ns1.tpc.int. A 216.152.192.130 ;; connection timed out; no servers could be reached tpc.int. NS auth02.ns.uu.net. A 198.6.1.82 ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL tpc.int. SOA ns1.tpc.int. dns.tpc.int. 2013103001 …
Lets talk about TPC.INT
![Page 21: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/21.jpg)
| 21
This stuff has stopped working YEARS AGO
Lets talk about TPC.INT
![Page 22: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/22.jpg)
| 22
Lets talk about TPC.INT
![Page 23: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/23.jpg)
| 23
Lets talk about TPC.INT
Normal stuff
![Page 24: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/24.jpg)
| 24
Lets talk about TPC.INT
Normal stuff
Inter. Direct Distance Dialing
![Page 25: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/25.jpg)
| 25
Lets talk about TPC.INT
Normal stuff
Inter. Direct Distance Dialing
+852 == Hong Kong
![Page 26: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/26.jpg)
| 26
Lets talk about TPC.INT
Normal stuff
Inter. Direct Distance Dialing
+852 == Hong Kong
+1212 == New York
![Page 27: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/27.jpg)
| 27
Chapter Two
The Ole’ Forgotten ip6.int
![Page 28: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/28.jpg)
| 28
Network Working Group G. Huston Request for Comments: 4159 APNIC BCP: 109 August 2005 Category: Best Current Practice Deprecation of "ip6.int" Status of This Memo This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements. Distribution of this memo is unlimited. Copyright Notice Copyright (C) The Internet Society (2005). Abstract This document advises of the deprecation of the use of "ip6.int" for Standards Conformant IPv6 implementations.
Lets talk about IP6.INT
![Page 29: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/29.jpg)
| 29
Network Working Group G. Huston Request for Comments: 4159 APNIC BCP: 109 August 2005 Category: Best Current Practice Deprecation of "ip6.int" Status of This Memo This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements. Distribution of this memo is unlimited. Copyright Notice Copyright (C) The Internet Society (2005). Abstract This document advises of the deprecation of the use of "ip6.int" for Standards Conformant IPv6 implementations.
Lets talk about IP6.INT
![Page 30: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/30.jpg)
| 30
1. IPv6 Standards Action In August 2001 the IETF published [RFC3152], which advised that the use of "ip6.int" as the domain for reverse-mapping of IPv6 addresses to DNS names was deprecated. The document noted that the use of "ip6.int" would be phased out in an orderly fashion. As of 1 September 2005, the IETF advises the community that the DNS domain "ip6.int" should no longer be used to perform reverse mapping of IPv6 addresses to domain names, and that the domain "ip6.arpa" should be used henceforth, in accordance with the IANA Considerations described in [RFC3596]. The domain "ip6.int" is deprecated, and its use in IPv6 implementations that conform to the IPv6 Internet Standards is discontinued.
Lets talk about IP6.INT
![Page 31: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/31.jpg)
| 31
1. IPv6 Standards Action In August 2001 the IETF published [RFC3152], which advised that the use of "ip6.int" as the domain for reverse-mapping of IPv6 addresses to DNS names was deprecated. The document noted that the use of "ip6.int" would be phased out in an orderly fashion. As of 1 September 2005, the IETF advises the community that the DNS domain "ip6.int" should no longer be used to perform reverse mapping of IPv6 addresses to domain names, and that the domain "ip6.arpa" should be used henceforth, in accordance with the IANA Considerations described in [RFC3596]. The domain "ip6.int" is deprecated, and its use in IPv6 implementations that conform to the IPv6 Internet Standards is discontinued.
Lets talk about IP6.INT
![Page 32: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/32.jpg)
| 32
IP6.INT was in use for 4 years Then the TLD was “rolled” to ARPA Over 10 years ago.
Lets talk about IP6.INT
![Page 33: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/33.jpg)
| 33
all traffic to ns.icann.org
![Page 34: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/34.jpg)
| 34
All traffic for INT
![Page 35: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/35.jpg)
| 35
All traffic for IP6.INT
![Page 36: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/36.jpg)
| 36
All traffic for IP6.INT
![Page 37: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/37.jpg)
| 37
Total traffic for ALL domains to NS.ICANN.ORG: 131M
Lets talk about IP6.INT
![Page 38: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/38.jpg)
| 38
Total traffic for ALL domains to NS.ICANN.ORG: 131M Total traffic for ALL int domains to NS.ICANN.ORG: 105M
Lets talk about IP6.INT
![Page 39: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/39.jpg)
| 39
Total traffic for ALL domains to NS.ICANN.ORG: 131M Total traffic for ALL int domains to NS.ICANN.ORG: 105M Total traffic for IP6.INT domains to NS.ICANN.ORG: 77M
Lets talk about IP6.INT
![Page 40: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/40.jpg)
| 40
59 % Lets talk about IP6.INT
Of ALL queries to NS.ICANN.ORG is for IP6.INT
![Page 41: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/41.jpg)
| 41
73 % Lets talk about IP6.INT
Of INT queries to NS.ICANN.ORG is for IP6.INT
![Page 42: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/42.jpg)
| 42
Interlude
stale roots
![Page 43: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/43.jpg)
| 43
.OM (Oman)
OMAN
![Page 44: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/44.jpg)
| 44
.OM (Oman) March 21, 2012, ns.icann.org is de-listed from OM zone apex
OMAN
![Page 45: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/45.jpg)
| 45
.OM (Oman) March 21, 2012, ns.icann.org is de-listed from OM zone apex April 4 2012, OM domain is delegated away from ns.icann.org
OMAN
![Page 46: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/46.jpg)
| 46
.OM (Oman) March 21, 2012, ns.icann.org is de-listed from OM zone apex April 4 2012, OM domain is delegated away from ns.icann.org April 5 2012, OM is not served from ns.icann.org anymore
OMAN
![Page 47: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/47.jpg)
| 47
OMAN
![Page 48: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/48.jpg)
| 48
Chapter Three
Wewe ni lulu ya taji la Afrika.
![Page 49: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/49.jpg)
| 49
Chapter Three
Wewe ni lulu ya taji la Afrika.
(The Pearl of Africa's Crown.)
![Page 50: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/50.jpg)
| 50
![Page 51: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/51.jpg)
| 51
Lets talk about .UG
![Page 52: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/52.jpg)
| 52
Lets talk about .UG
![Page 53: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/53.jpg)
| 53
Lets talk about .UG
![Page 54: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/54.jpg)
| 54
Lets talk about .UG
![Page 55: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/55.jpg)
| 55
Lets talk about .UG
![Page 56: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/56.jpg)
| 56
Lets talk about .UG
![Page 57: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/57.jpg)
| 57
Uganda Around 5500 registered domains Around 3.2 M queries per day
Lets talk about .UG
![Page 58: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/58.jpg)
| 58
Uganda Around 5500 registered domains Around 3.2 M queries per day Around 2.0 M queries result in NXDOMAIN
Lets talk about .UG
![Page 59: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/59.jpg)
| 59
Uganda Around 5500 registered domains Around 3.2 M queries per day Around 2.0 M queries result in NXDOMAIN
62% NXDOMAIN This NXDOMAIN rate is very high
Lets talk about .UG
![Page 60: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/60.jpg)
| 60
Lets talk about .UG
![Page 61: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/61.jpg)
| 61
Lets talk about .UG
That’s us
![Page 62: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/62.jpg)
| 62
Lets talk about .UG
That’s us Very Popular NS
![Page 63: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/63.jpg)
| 63
Lets talk about .UG
That’s us Very Popular NS
Whole bunch of funny domains
![Page 64: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/64.jpg)
| 64
Lets talk about .UG
![Page 65: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/65.jpg)
| 65
Lets talk about .UG
![Page 66: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/66.jpg)
| 66
Uganda Around 5500 registered domains Steady 3M queries per day 62% NXDOMAIN
Lets talk about .UG
![Page 67: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/67.jpg)
| 67
Uganda Around 5500 registered domains Steady 3M queries per day 62% NXDOMAIN
A SINGLE BOTNET
Lets talk about .UG
![Page 68: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/68.jpg)
| 68
Epilogue
![Page 69: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/69.jpg)
| 69
• Legacy stuff never goes away
• Regardless if the domain is failing
• Regardless if the domain is non-existent
• [meme alert] The Internet Never Forgets
• A single botnet can easily overwhelm smaller TLD
• Analysing DNS traffic is fun!
Conclusion
![Page 70: Use and Abuse at ns.icann · You’ll need a phone number, reverse it, look it up in DNS (type MX) Lets talk about INT | 10 | 11 | 12 TPC.INT You’ll need a phone number, reverse](https://reader033.vdocuments.us/reader033/viewer/2022050301/5f6adfff869d755e6626f195/html5/thumbnails/70.jpg)
| 70
The End