[gtld-tech] TMCH downtime

[Aaron Hickmann]

Hello All:

ICANN was made aware of the downtime on Friday. The outage lasted from
approximately 13:20 UTC to 13:40 UTC. Current findings indicate the downtime
was caused by to a network outage for an ISP that services the Luxemburg
data center. If any other information becomes available, I will share with
this list.

Thank you.

Aaron Hickmann
Director, GDD Operations
Internet Corporation for Assigned Names and Numbers (ICANN)
aaron.hickmann at icann.org
   



-----Original Message-----
From: gtld-tech-bounces at icann.org [mailto:gtld-tech-bounces at icann.org] On
Behalf Of Greg Aaron
Sent: Friday, February 14, 2014 7:54 AM
To: 'Gavin Brown'; gtld-tech at icann.org
Subject: Re: [gtld-tech] TMCH downtime

The only domains on ns1.sbp-isp.net are: marksdb.org and sbp-isp.net

Here's
what's within that /24  ... includes some banks and Mitsubishi Financial
Group:

IP Address 		ASN 	BGP Netblock Host/Domain 
91.198.126.129 43719
91.198.126.0/24 secure.trademark-clearinghouse.com
91.198.126.135 43719
91.198.126.0/24 mail1.trademark-clearinghouse.com
91.198.126.165 43719
91.198.126.0/24 marksdb.org
91.198.126.166 43719  91.198.126.0/24
ry.marksdb.org
91.198.126.168 43719  91.198.126.0/24 test.ry.marksdb.org
91.198.126.236 43719  91.198.126.0/24 cardifluxvie.lu
91.198.126.249 43719
91.198.126.0/24 ns2.sbp-isp.net
91.198.126.49 43719  91.198.126.0/24
mail.ubibanca.es
91.198.126.49 43719  91.198.126.0/24 mail1.ubibanca.lu
91.198.126.49 43719  91.198.126.0/24 mailsvr.bancalombarda.lu
91.198.126.5
43719  91.198.126.0/24 ns1.sbp-isp.net
91.198.126.67 43719  91.198.126.0/24
exchange.snci.lu
91.198.126.77 43719  91.198.126.0/24
gateway2.lu.tr.mufg.jp
91.198.126.78 43719  91.198.126.0/24
www.ccgwy.lu.tr.mufg.jp
91.198.126.94 43719  91.198.126.0/24
mail3.swedbank.lu
91.198.126.95 43719  91.198.126.0/24
mail4.swedbank.lu

AS43719 91.198.126.0/24  is: IBM Services Financial Sector Luxembourg Sarl

RIPE sez:
inetnum:        91.198.126.0 -
91.198.126.255
netname:        IBM-NET1-LUX-LU
descr:          IBM Services
Financial Sector Luxembourg Sarl
country:        BE
org:
ORG-IL108-RIPE
admin-c:        SVS131-RIPE
tech-c:         MLQ4-RIPE
status:
ASSIGNED PI
mnt-by:         RIPE-NCC-END-MNT
mnt-by:
DATACENTER-MNT
mnt-lower:      RIPE-NCC-END-MNT
mnt-routes:
DATACENTER-MNT
mnt-domains:    DATACENTER-MNT
source:         RIPE #
Filtered
organisation:   ORG-IL108-RIPE
org-name:       IBM Services
Financial Sector Luxembourg Sarl
org-type:       OTHER
address:
Luxembourg, LU
mnt-ref:        DATACENTER-MNT
mnt-by:
DATACENTER-MNT
source:         RIPE # Filtered
person:         Minh Le
Quang
address:        IBM Services Financial Sector Luxemburg

1, Ceinture um Schlass
                L-5880 Hesperange
mnt-by:
AS702-MNT
phone:          +352 360 385 209
nic-hdl:        MLQ4-RIPE
source:
RIPE # Filtered
person:         Serge Van Steenkiste
address:        IBM
Services Financial Sector Luxemburg
                1, Ceinture um Schlass

L-5880 Hesperange
mnt-by:         AS702-MNT
phone:          +352 360 385
209
nic-hdl:        SVS131-RIPE
source:         RIPE # Filtered

All
best,
--Greg

-----Original Message-----
From: gtld-tech-bounces at icann.org
[mailto:gtld-tech-bounces at icann.org] On Behalf Of Gavin Brown
Sent: Friday,
February 14, 2014 8:41 AM
To: gtld-tech at icann.org
Subject: [gtld-tech] TMCH
downtime

* PGP Signed by an unknown key

marksdb.org was down for a short
period a little while ago - it's up now.

The domain is delegated to
ns1.sbp-isp.net and ns2.sbp-isp.net, with IPs
91.198.126.5 and 91.198.126.5
(why no IPv6?). Neither of these responded to DNS queries or pings.

Given
that those IPs are within the same /24 (hosted by EuroDNS, it
seems) what's
the betting that they're on the same box, which has crashed.

G.

--
Gavin
Brown
Chief Technology Officer
CentralNic Group plc (LSE:CNIC)
Innovative,
Reliable and Flexible Registry Services for ccTLD, gTLD and private domain
name registries https://www.centralnic.com/

CentralNic Group plc is a
company registered in England and Wales with company number 8576358.
Registered Offices: 35-39 Moorgate, London, EC2R 6AR.


* Unknown Key
*
0xF923B4CE



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5522 bytes
Desc: not available
URL: <http://mm.icann.org/pipermail/gtld-tech/attachments/20140217/6dfea53b/smime.p7s>