May 2026 - NANOG - lists.nanog.org

BGP Stuck Routes Operational Experience Survey
by ixygkou3＠gatech.edu 25 Jun '26

25 Jun '26

Dear NANOG community members, We are researchers from Georgia Tech investigating the phenomenon of BGP stuck routes (also known as "zombie routes")—prefixes that persist in routing tables despite being withdrawn by their origin AS. While recent research using BGP beacons (including our work presented at IMC 2025 [1]) confirms that zombie routes occur regularly and can persist for long periods, there is a gap in understanding the operational reality of this issue. We observe the data, but we need to hear from operators to understand the real-world impact and their mitigation responses. We invite you to participate in a brief, anonymous survey to help us assess the extent and impact of this phenomenon in operational settings and to identify common practices for mitigating it. Survey Link: https://forms.office.com/r/9BuWqN0n0J Privacy & Data Usage: This survey is anonymous. We are not collecting any PII (Personally Identifiable Information) data. Thank you for your time and for your contributions to this Internet measurement study. [1] I. Xygkou, A. Chariton, X. Dimitropoulos, and A. Dainotti. "A First Look into Long-lived BGP Zombies". IMC '25. https://doi.org/10.1145/3730567.3764469 Best regards, Iliana Xygkou PhD student Georgia Institute of Technology

4 3

LAG/ECMP and 'exact-route'
by Saku Ytti 23 Jun '26

23 Jun '26

Hey-o, Which platform/software has a command to show which interface will be used for forwarding with given keys? ASR9k has a cef exec-route, and I see references to this in c-nsp, reddit and cisco.com forums, stressing how useful debugging tool it has been. Despite it not actually working, since it's just RE software, it doesn't talk to the EZchip/lightspeed, unless it has been fixed in the past couple of years, certainly hasn't worked in the timeline of various forums finding it useful. MX has 'jsim' https://www.juniper.net/documentation/en_US/day-one-books/TW_MX3D_PacketWal… which I think actually works, but it is quite involved. I have some (false?) memory that I saw in some release note this being a bit more productised into CLI command, but I'm failing to find anything to support this memory. There is also RFC5837, which is actually implemented in QFX5k, but not for TTL exceeded, we've opened ER to get it supported on MX and PTX and for TTL exceeded. This RFC will allow programmatic platform agnostic discovery of the actual interface used, without relying on platform specific magic. So please do ask your vendors to implement it. -- ++ytti

7 11

Google PNI Issue
by Clayton Zekelman 19 Jun '26

19 Jun '26

Late last year, Google requested we upgrade our 10G PNI at Equinix CH1 to 100G. We've had everything ready on our end since February. They've turned down the 10G, but we're caught in ticket hell with them since then to get the 100G up. We're now 13 days since the last response on our ticket, and my Netops team is at a loss as to what to do next. Suggestions? AS7057 -- Clayton Zekelman Managed Network Systems Inc. (MNSi) 3363 Tecumseh Rd. E Windsor, Ontario N8W 1H4 tel. 519-985-8410 fax. 519-985-8409

2 2

Sling Geolocation
by Eric C. Miller 01 Jun '26

01 Jun '26

Good day! Is there anyone from Sling that can point me towards the geolocation provider? I have an IP that's located in Zip 22311, but Sling is telling our mutual customer that it's showing in Zip 22302. Trying to figure out what we're doing wrong. Thank you! Eric

5 6

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 29 May '26

29 May '26

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG UKNOF, TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 30 May, 2026 IPv4 BGP Table (Global) as seen at Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 1053074 Prefixes after maximum aggregation (per Origin AS): 404356 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 519013 Number of IPv4 prefixes with a valid ROA: 676675 Number of IPv4 prefixes with an invalid ROA: 1258 Number of IPv4 prefixes with no ROA: 375141 Total ASes present in the Internet Routing Table: 78555 Prefixes per ASN: 13.41 Origin-only ASes present in the Internet Routing Table: 67533 Origin ASes announcing only one prefix: 27489 Transit ASes present in the Internet Routing Table: 11022 Transit-only ASes present in the Internet Routing Table: 569 Average AS path length visible in the Internet Routing Table: 4.7 Max AS path length visible: 69 Max AS path prepend of ASN (269326) 61 Prefixes from unregistered ASNs in the Routing Table: 1164 Number of instances of unregistered ASNs: 1194 Number of 32-bit ASNs allocated by the RIRs: 49951 Number of 32-bit ASNs visible in the Routing Table: 40717 Prefixes from 32-bit ASNs in the Routing Table: 231692 Number of bogon 32-bit ASNs visible in the Routing Table: 92 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 432 Number of addresses announced to Internet: 3105163008 Equivalent to 185 /8s, 21 /16s and 7 /24s Percentage of available address space announced: 83.9 Percentage of allocated address space announced: 83.9 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.6 Total number of prefixes smaller than registry allocations: 343517 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 289002 Total APNIC prefixes after maximum aggregation: 83759 APNIC Deaggregation factor: 3.45 Prefixes being announced from the APNIC address blocks: 275672 Unique aggregates announced from the APNIC address blocks: 108362 APNIC Region origin ASes present in the Internet Routing Table: 15201 APNIC Prefixes per ASN: 18.14 APNIC Region origin ASes announcing only one prefix: 4653 APNIC Region transit ASes present in the Internet Routing Table: 2001 Average APNIC Region AS path length visible: 4.7 Max APNIC Region AS path length visible: 44 Number of APNIC region 32-bit ASNs visible in the Routing Table: 10783 Number of APNIC addresses announced to Internet: 748597120 Equivalent to 44 /8s, 158 /16s and 175 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-155961 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 305164 Total ARIN prefixes after maximum aggregation: 137861 ARIN Deaggregation factor: 2.21 Prefixes being announced from the ARIN address blocks: 303835 Unique aggregates announced from the ARIN address blocks: 148190 ARIN Region origin ASes present in the Internet Routing Table: 19449 ARIN Prefixes per ASN: 15.62 ARIN Region origin ASes announcing only one prefix: 7115 ARIN Region transit ASes present in the Internet Routing Table: 1916 Average ARIN Region AS path length visible: 4.3 Max ARIN Region AS path length visible: 35 Number of ARIN region 32-bit ASNs visible in the Routing Table: 5607 Number of ARIN addresses announced to Internet: 1348265984 Equivalent to 80 /8s, 92 /16s and 232 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-404380 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 54/8, 55/8, 56/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 291092 Total RIPE prefixes after maximum aggregation: 144175 RIPE Deaggregation factor: 2.02 Prefixes being announced from the RIPE address blocks: 294770 Unique aggregates announced from the RIPE address blocks: 192457 RIPE Region origin ASes present in the Internet Routing Table: 29538 RIPE Prefixes per ASN: 9.98 RIPE Region origin ASes announcing only one prefix: 12251 RIPE Region transit ASes present in the Internet Routing Table: 4003 Average RIPE Region AS path length visible: 4.8 Max RIPE Region AS path length visible: 36 Number of RIPE region 32-bit ASNs visible in the Routing Table: 13477 Number of RIPE addresses announced to Internet: 734102144 Equivalent to 43 /8s, 193 /16s and 130 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-216475 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 53/8, 57/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 129241 Total LACNIC prefixes after maximum aggregation: 30863 LACNIC Deaggregation factor: 4.19 Prefixes being announced from the LACNIC address blocks: 123642 Unique aggregates announced from the LACNIC address blocks: 50285 LACNIC Region origin ASes present in the Internet Routing Table: 11421 LACNIC Prefixes per ASN: 10.83 LACNIC Region origin ASes announcing only one prefix: 2741 LACNIC Region transit ASes present in the Internet Routing Table: 2563 Average LACNIC Region AS path length visible: 5.4 Max LACNIC Region AS path length visible: 69 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 9456 Number of LACNIC addresses announced to Internet: 169752064 Equivalent to 10 /8s, 30 /16s and 54 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-275868 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 37411 Total AfriNIC prefixes after maximum aggregation: 7030 AfriNIC Deaggregation factor: 5.32 Prefixes being announced from the AfriNIC address blocks: 54723 Unique aggregates announced from the AfriNIC address blocks: 19347 AfriNIC Region origin ASes present in the Internet Routing Table: 2028 AfriNIC Prefixes per ASN: 26.98 AfriNIC Region origin ASes announcing only one prefix: 729 AfriNIC Region transit ASes present in the Internet Routing Table: 381 Average AfriNIC Region AS path length visible: 5.3 Max AfriNIC Region AS path length visible: 57 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 1394 Number of AfriNIC addresses announced to Internet: 104248576 Equivalent to 6 /8s, 54 /16s and 181 /24s AfriNIC AS Blocks 36864-37887, 327680-330751 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 14018 8922 104 CHINAMOBILE-CN - China Mobile Communicati 7545 5875 825 475 TPG-INTERNET-AP - TPG Telecom Limited, AU 4538 4996 4192 74 ERX-CERNET-BKB - China Education and Rese 9498 4942 552 324 BBIL-AP - BHARTI Airtel Ltd., IN 18403 4525 347 25 FPT-VN - FPT Telecom Company, VN 7552 4063 1331 24 VIETEL-AS-AP - Viettel Group, VN 7713 3726 1044 64 telkomnet-as-ap - PT Telekomunikasi Indon 56046 3543 887 178 CMNET-Jiangsu-AP - China Mobile communica 17561 3384 213 607 LCS-AS-AP - LARUS Limited, HK 45899 3383 1868 100 VNPT-AS-VN - VNPT Corp, VN Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 15051 41424 5724 AMAZON-02 - Amazon.com, Inc., US 22773 4765 3115 369 ASN-CXA-ALL-CCI-22773-RDC - Cox Communica 11492 4594 305 1088 CABLEONE - CABLE ONE, INC., US 7155 3870 286 90 VIASAT-SP-BACKBONE - ViaSat,Inc., US 6327 3727 1305 74 SHAW - Shaw Communications, CA 396982 3367 4868 515 GOOGLE-CLOUD-PLATFORM - Google LLC, US 749 3136 54728 2387 DNIC-AS-00749 - United States Department 36352 3073 232 1043 AS-COLOCROSSING - HostPapa, US 7029 2641 2556 898 WINDSTREAM - Windstream Communications LL 30036 2541 352 595 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom C Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 7176 1711 149 UNI2-AS - Orange Espagne SA, ES 39891 4975 307 72 ALJAWWALSTC-AS - Saudi Telecom Company JS 9009 4086 373 2472 M247 - M247 Europe SRL, RO 20940 3789 3389 109 AKAMAI-ASN1 - Akamai International B.V., 12389 3159 2319 870 ROSTELECOM-AS - PJSC Rostelecom, RU 212238 2946 215 2189 CDNEXT - Datacamp Limited, GB 34984 2486 367 582 TELLCOM-AS - Superonline Iletisim Hizmetl 8452 1725 1852 17 TE-AS - IDDQD-AS, EG 203020 1657 252 825 HostRoyale - HostRoyale Technologies Pvt 13188 1607 100 27 TRIOLAN - CONTENT DELIVERY NETWORK LTD, U Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 12735 3254 631 AS8151 - UNINET, MX 10620 3432 450 1101 AS10620 - Telmex Colombia S.A., CO 13999 2346 498 350 AS13999 - Mega Cable, S.A. de C.V., MX 11830 1930 369 65 AS11830 - Instituto Costarricense de Elec 11664 1475 277 34 AS11664 - Techtel LMDS Comunicaciones Int 28573 1363 2430 269 AS28573 - Claro NXT Telecomunicacoes Ltda 3816 1342 770 213 AS3816 - COLOMBIA TELECOMUNICACIONES S.A. 6147 1224 371 22 AS6147 - INTEGRATEL PERU S.A.A., PE 22884 1084 71 364 AS22884 - TOTAL PLAY TELECOMUNICACIONES, 26615 1072 2392 100 AS26615 - TIM S/A, BR Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24835 2028 649 36 Vodafone Data - Vodafone Data, EG 36992 1860 1532 337 ETISALAT MISR - ETISALAT MISR, EG 36935 1292 523 45 Vodafone Data - Vodafone Data, EG 24863 1267 389 16 Link Egypt (Link.NET) - Link Egypt (Link. 36903 1232 555 98 Office National des Postes et Telecommuni 37069 1117 1100 11 The Egyptian Company for Mobile Services 29571 1085 70 18 Orange Côte d'Ivoire - Orange Côte d'Iv 328608 632 57 176 Africa on Cloud - Africa on Cloud, ZA 20011 589 155 220 Dimension Data - Dimension Data, ZA 36914 553 82 3 Kenya Education Network - Kenya Education Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 15051 41424 5724 AMAZON-02 - Amazon.com, Inc., US 9808 14018 8922 104 CHINAMOBILE-CN - China Mobile Communicati 8151 12735 3254 631 AS8151 - UNINET, MX 12479 7176 1711 149 UNI2-AS - Orange Espagne SA, ES 7545 5875 825 475 TPG-INTERNET-AP - TPG Telecom Limited, AU 4538 4996 4192 74 ERX-CERNET-BKB - China Education and Rese 39891 4975 307 72 ALJAWWALSTC-AS - Saudi Telecom Company JS 9498 4942 552 324 BBIL-AP - BHARTI Airtel Ltd., IN 22773 4765 3115 369 ASN-CXA-ALL-CCI-22773-RDC - Cox Communica 11492 4594 305 1088 CABLEONE - CABLE ONE, INC., US Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 14018 13914 CHINAMOBILE-CN - China Mobile Communications Gr 8151 12735 12104 AS8151 - UNINET, MX 12479 7176 7027 UNI2-AS - Orange Espagne SA, ES 7545 5875 5400 TPG-INTERNET-AP - TPG Telecom Limited, AU 4538 4996 4922 ERX-CERNET-BKB - China Education and Research N 39891 4975 4903 ALJAWWALSTC-AS - Saudi Telecom Company JSC, SA 9498 4942 4618 BBIL-AP - BHARTI Airtel Ltd., IN 18403 4525 4500 FPT-VN - FPT Telecom Company, VN 22773 4765 4396 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 7552 4063 4039 VIETEL-AS-AP - Viettel Group, VN Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 46198 UNALLOCATED 8.10.6.0/24 23520 LIBERTY-NETWORKS - Colu 46198 UNALLOCATED 8.10.7.0/24 23520 LIBERTY-NETWORKS - Colu 395729 UNALLOCATED 8.28.58.0/24 32787 PROLEXIC-TECHNOLOGIES-D 395729 UNALLOCATED 8.28.60.0/24 32787 PROLEXIC-TECHNOLOGIES-D 396894 UNALLOCATED 8.28.201.0/24 3356 LEVEL3 - Level 3 Parent 394936 UNALLOCATED 8.33.224.0/24 22442 HOU-PHONOSCOPE - Phonos 395195 UNALLOCATED 8.38.115.0/24 3356 LEVEL3 - Level 3 Parent 400273 UNALLOCATED 8.41.137.0/24 3356 LEVEL3 - Level 3 Parent 1782 UNALLOCATED 8.42.19.0/24 3356 LEVEL3 - Level 3 Parent 13342 UNALLOCATED 12.17.5.0/24 174 COGENT-174 - Cogent Com Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE - Hurricane Electric LLC, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.131.100.0/24 Origin: 401541 UNASSIGNED 23.131.100.0/24 Transit: 38733 CMCTELECOM-VN - CMC Telecom Infrastructu 23.131.156.0/24 Origin: 401541 UNASSIGNED 23.131.156.0/24 Transit: 38733 CMCTELECOM-VN - CMC Telecom Infrastructu 23.131.212.0/24 Origin: 401541 UNASSIGNED 23.131.212.0/24 Transit: 38733 CMCTELECOM-VN - CMC Telecom Infrastructu 23.137.48.0/24 Origin: 16904 ARVIG-16904 - Arvig Enterprises Inc., US 23.137.48.0/24 Transit: 3257 GTT-BACKBONE - GTT Communications Inc., 23.137.200.0/24 Origin: 16276 OVH - OVH SAS, FR 23.137.200.0/24 Transit: 2516 KDDI - KDDI CORPORATION, JP Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:14 /10:39 /11:95 /12:298 /13:581 /14:1184 /15:2107 /16:13629 /17:8351 /18:13428 /19:25737 /20:47022 /21:52964 /22:114008 /23:108783 /24:664124 /25:694 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 8151 6959 12735 AS8151 - UNINET, MX 12479 6112 7176 UNI2-AS - Orange Espagne SA, ES 39891 3660 4975 ALJAWWALSTC-AS - Saudi Telecom Company JSC, SA 6327 3508 3727 SHAW - Shaw Communications, CA 11492 3470 4594 CABLEONE - CABLE ONE, INC., US 22773 3056 4765 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc., US 7155 2825 3870 VIASAT-SP-BACKBONE - ViaSat,Inc., US 16509 2717 15051 AMAZON-02 - Amazon.com, Inc., US 10620 2236 3432 AS10620 - Telmex Colombia S.A., CO 30036 2197 2541 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communications Corp, US Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:2541 2:2054 3:998 4:5 5:5138 6:204 7:6 8:1494 9:64 11:172 12:1129 13:708 14:2721 15:467 16:222 17:442 18:919 20:593 21:4 22:188 23:8393 24:2776 25:2 27:2729 28:1 29:19 31:3671 32:37 34:87 35:288 36:4801 37:4423 38:9822 39:1310 40:414 41:4511 42:2167 43:3178 44:449 45:19762 46:4894 47:416 48:158 49:2298 50:2025 51:802 52:1348 54:286 55:1101 56:11 57:327 58:2603 59:1512 60:1168 61:3133 62:3148 63:1678 64:6369 65:2155 66:6157 67:3275 68:1518 69:4226 70:1061 71:611 72:3194 74:3088 75:1500 76:598 77:2962 78:2042 79:1800 80:2353 81:2276 82:4244 83:1461 84:2178 85:3845 86:1099 87:2745 88:1322 89:4789 90:805 91:8480 92:2784 93:3022 94:4415 95:4704 96:1446 97:309 98:941 99:849 100:70 101:1376 102:4654 103:32289 104:5478 105:852 106:901 107:2943 108:1287 109:4278 110:2279 111:4192 112:3177 113:1991 114:2536 115:2237 116:2073 117:3600 118:2981 119:2092 120:2765 121:1600 122:3027 123:2219 124:1729 125:3033 126:158 128:1576 129:973 130:1680 131:2441 132:885 133:490 134:1727 135:619 136:1456 137:1430 138:3407 139:1692 140:1913 141:1785 142:2588 143:2047 144:1777 145:650 146:2193 147:2249 148:2798 149:3196 150:1375 151:2968 152:2363 153:1653 154:9571 155:2307 156:4964 157:2418 158:1579 159:2870 160:3842 161:1990 162:4123 163:2610 164:2385 165:2689 166:1266 167:2355 168:4104 169:869 170:5611 171:1140 172:4891 173:3451 174:893 175:1360 176:3950 177:4999 178:4471 179:2378 180:3163 181:4590 182:4023 183:2854 184:2022 185:21804 186:6227 187:5012 188:4537 189:4524 190:9896 191:1713 192:11677 193:9625 194:7862 195:5843 196:3373 197:3223 198:6279 199:6080 200:8324 201:6449 202:10787 203:10527 204:4813 205:3755 206:4446 207:4013 208:4369 209:5493 210:4911 211:2786 212:5108 213:4103 214:1042 215:47 216:7297 217:3619 218:1811 219:585 220:2221 221:1322 222:1084 223:3611 End of report

1 0

Anyone at Activison on list - Request for Help
by Norman Jester 29 May '26

29 May '26

We're getting a lot of reports from end users on our residential network that Call of Duty will not allow connections. We have verified it is not a user level block but seems to be an ip related issue. Please contact me or advise of whom to contact to sort this out. I thank you in advance. Norman

3 2

T-Mobile Fiber NC
by Raleigh Apple 28 May '26

28 May '26

T-Mobile fiber not routing in NC, anyone have any idea what's going on? Raleigh Apple JP Technologies office: 770/831-1036x105 “If more of us valued food and cheer above hoarded gold, it would be a much merrier world.” - J.R.R. Tolkien

2 1

Anyone From CloudFlare?
by Jimi Thompson 27 May '26

27 May '26

I have an ongoing abuse complaint that's not getting any traction and I'd like to see if I can't get some help with it. I happen to publish a web serial and a site has been scraping me for 2 months and I've been filing DMCAs for 2 months. I've filed multiple DMCA requests. Other than the autoresponder there's been silence. The site has no monetization options. No ads, nothing to buy. It's only source of funding seems to be the vast XML that it publishes which means its likely harvesting everything for AI training data as an "arms lenght aggregator". The site in question has an EXTENSIVE history on Lumen. I filed another DMCA yesterday and didn't even get the autoresponder this time. What's going on at CloudFlare? -- Thanks, Jimi

4 4

Regarding the BGP leak
by me 23 May '26

23 May '26

Tom, Thanks for your perspective. I do appreciate the Hanlon's Razor point — it's a good general principle. However, in this case, the same ASN also: - Manually injected China Telecom's IPv6 backbone (`240e::/20`) into its BIRD config on May 1 - Submitted a new ASN (`AS402333`) on May 16, the day of the leak - Maintains a global geofeed that still lists a Shanghai node as of May 22 If that's not malice, then perhaps it's a very, very advanced form of stupidity. Either way, the evidence is archived. me

2 1

[BGP Hijack] AS202734 hijacked multiple Chinese Carriers on May 16-17 – Full evidence and attribution
by me 23 May '26

23 May '26

Dear NANOG community, I am sharing a fully-attributed BGP hijacking incident that occurred on May 16-17, 2026. **What happened:** Between May 16-17, 2026, AS202734 announced 3,948 IPv4 prefixes that it does not legally own, targeting major Chinese carriers and infrastructure, including: - China Telecom (125.104.0.0/13) - China Unicom (123.144.0.0/12) - China Mobile - China Education and Research Network (CERNET) - China Postal Bureau (120.72.160.0/24) - Alibaba Cloud, Tencent Cloud, Huawei Cloud The same ASN also announced China Telecom's IPv6 backbone (240e::/20). **Key technical evidence:** - Attacker's own BIRD config shows manual injection of hijacked routes on May 1 (premeditation). - Attacker's own Looking Glass shows the hijacked routes were active in his routing table. - Attacker's GitHub shows he submitted a new ASN (AS402333) on May 16, the day of the hijack. - Sponsoring org (MoeDove)'s official website shows they operate 36 global PoPs, including nodes in mainland China (Shanghai, Hangzhou, Zhengzhou, Chengdu). **Who is behind it:** AS202734 is registered to Junqi Tian (Jacob Tian), a graduate student at McGill University and researcher at Mila - Quebec AI Institute. His RIPE WHOIS address is: 1103-2100 Rue de Bleury, Montreal, Canada. **The sponsoring org:** MoeDove LLC (ORG-ML942-RIPE) is the sponsoring organization. Their network engineer responded to my abuse report by calling me an "idiot" and refused to investigate. **What I have done:** - Reported to RIPE NCC, Vultr, HE, Cloudflare, Mila, and his academic supervisor. - Vultr has cut IPv4 peering and is "working with the customer" on IPv6. - RIPE NCC opened tickets #1042641 and #1043090, but stated they "do not have the scope to act." **Attached原始邮件 (.eml) 供验证：** - `moedove_abuse_reply_idiot.eml` (MoeDove engineer's response) - `ripe_carl_guderian_1042641.eml` (RIPE NCC first reply) - `ripe_carl_guderian_1043090.eml` (RIPE NCC second reply) **Questions for the community:** 1. Has anyone else observed unusual prefixes from AS202734 / AS402333 / AS44324? 2. What operational steps can the community take to filter bogons from these ASNs? 3. Are there best practices for dealing with a sponsoring LIR that refuses to act? **Public evidence:** - HE BGP Toolkit: https://bgp.he.net/AS202734 - RIPE WHOIS: https://apps.db.ripe.net/db-web-ui/query?searchtext=AS202734 Thank you for reading. I welcome any technical scrutiny or advice. Full evidence archive (with PII redacted) is available upon request. --- zhong miao me(a)haoziwan.xyz Independent Security Researcher

7 6