- NANOG - lists.nanog.org

Your DNS Servers are not working correctly.
by Mark Andrews 12 Apr '23

12 Apr '23

I work for a DNS vendor and saw reports about DNS resolution errors when looking up names under dhhs.gov. It looks like your servers are not returning non-existence answers over UDP which breaks servers that are trying to do DNS QNAME minimisation (See RFC 7816). Below are three queries that the servers should be capable of answering if they are following the DNS protocol correctly. dhhs.gov is answered but foobar.dhhs.gov doesn’t return anything and I would expect a NXDOMAIN (Name Error) response. Additionally 355.dhhs.gov should be returning a NODATA/NOERROR response at a minimum as it part of your DNS servers names. If I ask the same questions over TCP instead of UDP I get answers. This really smells like a misconfigured firewall. Mark % dig dhhs.gov @158.74.30.99 ; <<>> DiG 9.19.11-dev <<>> dhhs.gov @158.74.30.99 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59012 ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ; COOKIE: 7b8cd5530b5fa45190ac7ac264364fe858d1f83093c6da62 (good) ;; QUESTION SECTION: ;dhhs.gov. IN A ;; ANSWER SECTION: dhhs.gov. 9000 IN A 52.7.111.176 ;; Query time: 243 msec ;; SERVER: 158.74.30.99#53(158.74.30.99) (UDP) ;; WHEN: Wed Apr 12 16:30:00 AEST 2023 ;; MSG SIZE rcvd: 81 % dig foobar.dhhs.gov @158.74.30.99 ;; communications error to 158.74.30.99#53: timed out ;; communications error to 158.74.30.99#53: timed out ;; communications error to 158.74.30.99#53: timed out ; <<>> DiG 9.19.11-dev <<>> foobar.dhhs.gov @158.74.30.99 ;; global options: +cmd ;; no servers could be reached [ant-7641:~/git/bind9] marka% dig 355.dhhs.gov @158.74.30.99 ;; communications error to 158.74.30.99#53: timed out ;; communications error to 158.74.30.99#53: timed out ;; communications error to 158.74.30.99#53: timed out ; <<>> DiG 9.19.11-dev <<>> 355.dhhs.gov @158.74.30.99 ;; global options: +cmd ;; no servers could be reached % % dig dhhs.gov @158.74.30.99 +tcp ; <<>> DiG 9.19.11-dev <<>> dhhs.gov @158.74.30.99 +tcp ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18254 ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ; COOKIE: 710a14c38e16a91fd4060d86643652ecca2dce18d21e3144 (good) ;; QUESTION SECTION: ;dhhs.gov. IN A ;; ANSWER SECTION: dhhs.gov. 9000 IN A 52.7.111.176 ;; Query time: 246 msec ;; SERVER: 158.74.30.99#53(158.74.30.99) (TCP) ;; WHEN: Wed Apr 12 16:42:52 AEST 2023 ;; MSG SIZE rcvd: 81 % dig 355.dhhs.gov @158.74.30.99 +tcp ; <<>> DiG 9.19.11-dev <<>> 355.dhhs.gov @158.74.30.99 +tcp ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56223 ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ; COOKIE: e10fe6bd8dccc0ed038bbff1643652fb582c8d51b5d3a25c (good) ;; QUESTION SECTION: ;355.dhhs.gov. IN A ;; AUTHORITY SECTION: dhhs.gov. 3600 IN SOA rh120ns1.368.dhhs.gov. hostmaster.psc.hhs.gov. 2023021759 1200 300 2419200 3600 ;; Query time: 246 msec ;; SERVER: 158.74.30.99#53(158.74.30.99) (TCP) ;; WHEN: Wed Apr 12 16:43:07 AEST 2023 ;; MSG SIZE rcvd: 137 % -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka(a)isc.org

1 0

Santander bank contact
by Matthew Crocker 11 Apr '23

11 Apr '23

If anyone on this list is affiliated with Santander bank please reach me off-list. You are blocking one of my subnets and my customers cannot access your bank website. Thanks -Matt

1 0

Fwd: WG Last Call on draft-ietf-idr-bgp-model-16
by Jeffrey Haas 11 Apr '23

11 Apr '23

The IETF BGP YANG module authors would like to draw your collective attention to a Working Group Last Call that has begun for the IETF BGP YANG module. This module provides the base for core IETF BGP technologies, and will serve as the primary point of extension for BGP-related technologies modeled in YANG in the IETF, including the BGP portion of VPN technologies. Your operational wisdom and scrutiny would be greatly appreciated. A URL for the WGLC mail is here: https://mailarchive.ietf.org/arch/msg/idr/263_yrn_ZnNRokmUwgye7Id5mHo/ For those of you who haven't participated in IETF mail lists before, the IDR datatracker page has subscription information for the mailing list: https://datatracker.ietf.org/wg/idr/about/ Thanks! -- Jeff (for the authors) > Begin forwarded message: > > From: "Dongjie (Jimmy)" <jie.dong(a)huawei.com> > Subject: WG Last Call on draft-ietf-idr-bgp-model-16 > Date: April 10, 2023 at 10:17:26 PM EDT > To: "idr(a)ietf.org" <idr(a)ietf.org> > Cc: "idr-chairs(a)ietf.org" <idr-chairs(a)ietf.org>, "Dongjie (Jimmy)" <jie.dong(a)huawei.com> > Resent-From: <alias-bounces(a)ietf.org> > Resent-To: skh(a)ndzh.com, keyur(a)arrcus.com, jhaas(a)pfrc.org, jie.dong(a)huawei.com > > Hi WG, > > This begins the Working Group Last Call for "YANG Model for Border Gateway Protocol (BGP-4)", draft-ietf-idr-bgp-model-16. The draft could be found at: https://datatracker.ietf.org/doc/html/draft-ietf-idr-bgp-model-16 <https://datatracker.ietf.org/doc/html/draft-ietf-idr-bgp-model-16>. > > Since all the IDR chairs are coauthors of this document, I’m helping with this last call procedure. Please reply to the list with your comments. Considering this is a long document with a big YANG model, the last call will last for 4 weeks and conclude on Sunday, 7 May, 2023. > > The authors are requested to state whether they are aware of applicable IPR related to this draft. Similarly, if others in the Working Group are aware of applicable IPR, please also disclose them. > > People are encouraged to indicate whether there is implementation of this document. According to the IDR rule, at least two implementations will be required to advance the document. > > > Best regards, > Jie (on behalf of the IDR chairs)

1 0

Spoofer Report for NANOG for Mar 2023
by CAIDA Spoofer Project 08 Apr '23

08 Apr '23

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Mar 2023: ASN Name Fixed-By 33185 TGLO-VGLO 2023-03-03 54825 PACKET 2023-03-08 62005 AdNet-Telecom 2023-03-20 399445 2023-03-27 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Mar 2023: ASN Name First-Spoofed Last-Spoofed 6939 HURRICANE 2016-02-22 2023-03-24 209 CENTURYLINK-US-LEGACY-QWEST 2016-08-16 2023-03-30 20412 CLARITY-TELECOM 2016-09-30 2023-03-31 6181 FUSE-NET 2016-10-10 2023-03-26 25787 ROWE-NETWORKS 2016-10-21 2023-03-30 10796 TWC-10796-MIDWEST 2016-10-24 2023-03-30 271 BCNET 2016-10-24 2023-03-31 1403 EBOX 2016-11-12 2023-03-28 2828 XO-AS15 2016-11-21 2023-03-17 852 ASN852 2017-04-16 2023-03-26 6461 ZAYO-6461 2017-06-21 2023-03-28 33452 RW 2018-09-19 2023-03-26 21804 ACCESS-SK 2019-06-09 2023-03-05 11814 DISTRIBUTEL-AS11814 2020-11-22 2023-03-22 398836 2021-03-12 2023-03-27 22773 ASN-CXA-ALL-CCI-22773-RDC 2021-10-24 2023-03-13 46997 2021-12-22 2023-03-29 394414 E2WS 2022-05-08 2023-03-28 397086 GLOBAL-FRAG-NETWORKS-HOUSTON 2022-06-16 2023-03-27 11976 FIDN 2022-11-16 2023-03-29 12183 TALKIE-COMMUNICATIONS 2022-12-10 2023-03-30 21555 LHTC 2023-01-01 2023-03-24 33185 TGLO-VGLO 2023-02-04 2023-03-03 399852 2023-02-16 2023-03-26 210546 2023-02-27 2023-03-07 203394 asn-Lighting 2023-03-07 2023-03-21 199785 2023-03-11 2023-03-24 211380 2023-03-15 2023-03-29 964 GONET-ASN-17 2023-03-15 2023-03-29 140224 2023-03-18 2023-03-18 199868 2023-03-18 2023-03-24 41378 KirinoNET 2023-03-23 2023-03-30 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 07 Apr '23

07 Apr '23

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 08 Apr, 2023 BGP Table (Global) as seen in Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 917911 Prefixes after maximum aggregation (per Origin AS): 348250 Deaggregation factor: 2.64 Unique aggregates announced (without unneeded subnets): 447962 Total ASes present in the Internet Routing Table: 74298 Prefixes per ASN: 12.35 Origin-only ASes present in the Internet Routing Table: 63737 Origin ASes announcing only one prefix: 26192 Transit ASes present in the Internet Routing Table: 10561 Transit-only ASes present in the Internet Routing Table: 448 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 55 Max AS path prepend of ASN (265020) 50 Prefixes from unregistered ASNs in the Routing Table: 1103 Number of instances of unregistered ASNs: 1103 Number of 32-bit ASNs allocated by the RIRs: 41624 Number of 32-bit ASNs visible in the Routing Table: 34433 Prefixes from 32-bit ASNs in the Routing Table: 169845 Number of bogon 32-bit ASNs visible in the Routing Table: 56 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 713 Number of addresses announced to Internet: 3062021376 Equivalent to 182 /8s, 130 /16s and 189 /24s Percentage of available address space announced: 82.7 Percentage of allocated address space announced: 82.7 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.6 Total number of prefixes smaller than registry allocations: 307012 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 242441 Total APNIC prefixes after maximum aggregation: 69292 APNIC Deaggregation factor: 3.50 Prefixes being announced from the APNIC address blocks: 236823 Unique aggregates announced from the APNIC address blocks: 97741 APNIC Region origin ASes present in the Internet Routing Table: 13397 APNIC Prefixes per ASN: 17.68 APNIC Region origin ASes announcing only one prefix: 3937 APNIC Region transit ASes present in the Internet Routing Table: 1808 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 26 Number of APNIC region 32-bit ASNs visible in the Routing Table: 8686 Number of APNIC addresses announced to Internet: 773675648 Equivalent to 46 /8s, 29 /16s and 90 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-151865 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 268778 Total ARIN prefixes after maximum aggregation: 122061 ARIN Deaggregation factor: 2.20 Prefixes being announced from the ARIN address blocks: 271173 Unique aggregates announced from the ARIN address blocks: 130691 ARIN Region origin ASes present in the Internet Routing Table: 19085 ARIN Prefixes per ASN: 14.21 ARIN Region origin ASes announcing only one prefix: 6975 ARIN Region transit ASes present in the Internet Routing Table: 1959 Average ARIN Region AS path length visible: 3.7 Max ARIN Region AS path length visible: 24 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4781 Number of ARIN addresses announced to Internet: 1285572096 Equivalent to 76 /8s, 160 /16s and 70 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 258784 Total RIPE prefixes after maximum aggregation: 121878 RIPE Deaggregation factor: 2.12 Prefixes being announced from the RIPE address blocks: 254754 Unique aggregates announced from the RIPE address blocks: 157516 RIPE Region origin ASes present in the Internet Routing Table: 28287 RIPE Prefixes per ASN: 9.01 RIPE Region origin ASes announcing only one prefix: 12034 RIPE Region transit ASes present in the Internet Routing Table: 3968 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 31 Number of RIPE region 32-bit ASNs visible in the Routing Table: 11116 Number of RIPE addresses announced to Internet: 717837184 Equivalent to 42 /8s, 201 /16s and 83 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 117557 Total LACNIC prefixes after maximum aggregation: 28483 LACNIC Deaggregation factor: 4.13 Prefixes being announced from the LACNIC address blocks: 116872 Unique aggregates announced from the LACNIC address blocks: 49120 LACNIC Region origin ASes present in the Internet Routing Table: 10968 LACNIC Prefixes per ASN: 10.66 LACNIC Region origin ASes announcing only one prefix: 2644 LACNIC Region transit ASes present in the Internet Routing Table: 2289 Average LACNIC Region AS path length visible: 5.0 Max LACNIC Region AS path length visible: 55 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8773 Number of LACNIC addresses announced to Internet: 176705536 Equivalent to 10 /8s, 136 /16s and 80 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-273820 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 29248 Total AfriNIC prefixes after maximum aggregation: 5772 AfriNIC Deaggregation factor: 5.07 Prefixes being announced from the AfriNIC address blocks: 37576 Unique aggregates announced from the AfriNIC address blocks: 12283 AfriNIC Region origin ASes present in the Internet Routing Table: 1729 AfriNIC Prefixes per ASN: 21.73 AfriNIC Region origin ASes announcing only one prefix: 602 AfriNIC Region transit ASes present in the Internet Routing Table: 333 Average AfriNIC Region AS path length visible: 4.9 Max AfriNIC Region AS path length visible: 40 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 1077 Number of AfriNIC addresses announced to Internet: 107769344 Equivalent to 6 /8s, 108 /16s and 110 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 9492 8884 51 CHINAMOBILE-CN China Mobile Communicati 7545 5744 786 689 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4865 4192 75 ERX-CERNET-BKB China Education and Rese 7552 3563 1331 21 VIETEL-AS-AP Viettel Group, VN 7713 3546 1043 65 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 3383 1872 93 VNPT-AS-VN VNPT Corp, VN 9498 2901 491 237 BBIL-AP BHARTI Airtel Ltd., IN 4766 2555 11252 592 KIXS-AS-KR Korea Telecom, KR 24560 2363 835 442 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd 45090 2184 1438 79 TENCENT-NET-AP Shenzhen Tencent Compute Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 8269 10783 2879 AMAZON-02, US 11492 4541 301 610 CABLEONE, US 7155 3967 279 48 VIASAT-SP-BACKBONE, US 22773 3608 3057 281 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3514 1320 64 SHAW, CA 16625 3160 1589 2342 AKAMAI-AS, US 749 3054 50541 2321 DNIC-AS-00749, US 396982 2631 3590 363 GOOGLE-CLOUD-PLATFORM, US 7018 2565 24118 1562 ATT-INTERNET4, US 30036 2488 359 526 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 7244 1705 149 UNI2-AS, ES 39891 4833 286 59 ALJAWWALSTC-AS, SA 20940 4058 3399 164 AKAMAI-ASN1, NL 8551 3885 370 37 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2954 2292 911 ROSTELECOM-AS, RU 9009 2646 248 1379 M247, RO 34984 2272 359 611 TELLCOM-AS, TR 6849 2076 307 18 UKRTELNET, UA 58224 1850 950 543 TCI, IR 13188 1606 100 26 TRIOLAN, UA Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 11211 3343 578 Uninet S.A. de C.V., MX 10620 3499 506 850 Telmex Colombia S.A., CO 13999 2311 370 610 Mega Cable, S.A. de C.V., MX 11830 2264 369 64 Instituto Costarricense de Electricidad 28573 1332 2325 235 Claro NXT Telecomunicacoes Ltda, BR 3816 1303 767 159 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6503 1299 339 514 Axtel, S.A.B. de C.V., MX 6147 1131 370 22 Telefonica del Peru S.A.A., PE 11664 1101 180 446 Techtel LMDS Comunicaciones Interactiva 26615 1030 2498 45 TIM SA, BR Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1576 393 19 LINKdotNET-AS, EG 24835 1541 533 30 RAYA-AS, EG 36992 1356 1518 275 ETISALAT-MISR, EG 36903 1242 550 99 MT-MPLS, MA 29571 1016 67 48 ORANGE-COTE-IVOIRE, CI 36935 872 520 42 Vodafone-, EG 6713 550 1861 34 IAM-AS, MA 15399 532 54 47 WANANCHI-, KE 37342 493 32 1 MOVITEL, MZ 24757 488 73 5 EthioNet-AS, ET Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 11211 3343 578 Uninet S.A. de C.V., MX 9808 9492 8884 51 CHINAMOBILE-CN China Mobile Communicati 16509 8269 10783 2879 AMAZON-02, US 12479 7244 1705 149 UNI2-AS, ES 7545 5744 786 689 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4865 4192 75 ERX-CERNET-BKB China Education and Rese 39891 4833 286 59 ALJAWWALSTC-AS, SA 11492 4541 301 610 CABLEONE, US 20940 4058 3399 164 AKAMAI-ASN1, NL 7155 3967 279 48 VIASAT-SP-BACKBONE, US Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 9492 9441 CHINAMOBILE-CN China Mobile Communications Grou 12479 7244 7095 UNI2-AS, ES 16509 8269 5390 AMAZON-02, US 7545 5744 5055 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4865 4790 ERX-CERNET-BKB China Education and Research Net 39891 4833 4774 ALJAWWALSTC-AS, SA 11492 4541 3931 CABLEONE, US 7155 3967 3919 VIASAT-SP-BACKBONE, US 20940 4058 3894 AKAMAI-ASN1, NL 8551 3885 3848 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 3507 UNALLOCATED 5.105.166.0/24 213035 AS-SERVERION Serverion B.V., 33123 UNALLOCATED 8.10.69.0/24 11168 SCC, US 12169 UNALLOCATED 8.15.207.0/24 32787 PROLEXIC-TECHNOLOGIES-DDOS-M 53775 UNALLOCATED 8.20.88.0/24 7029 WINDSTREAM, US 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 396894 UNALLOCATED 8.28.201.0/24 46887 LIGHTOWER, US 394936 UNALLOCATED 8.33.224.0/24 22442 HOU-PHONOSCOPE, US 54338 UNALLOCATED 8.33.241.0/24 6461 ZAYO-6461, US 18798 UNALLOCATED 8.40.106.0/24 6461 ZAYO-6461, US Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.131.185.0/24 Origin: 174 COGENT-174, US 23.131.185.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.131.186.0/24 Origin: 174 COGENT-174, US 23.131.186.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.131.187.0/24 Origin: 174 COGENT-174, US 23.131.187.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.131.188.0/24 Origin: 174 COGENT-174, US 23.131.188.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.136.112.0/24 Origin: 54835 UNASSIGNED 23.136.112.0/24 Transit: 21559 OSNET, PR Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:39 /11:103 /12:299 /13:578 /14:1198 /15:2036 /16:13471 /17:8269 /18:13858 /19:25180 /20:44264 /21:51593 /22:109702 /23:97592 /24:548972 /25:728 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 6305 7244 UNI2-AS, ES 8151 5175 11211 Uninet S.A. de C.V., MX 39891 3632 4833 ALJAWWALSTC-AS, SA 11492 3449 4541 CABLEONE, US 8551 3357 3885 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 6327 3323 3514 SHAW, CA 7155 3039 3967 VIASAT-SP-BACKBONE, US 22773 2675 3608 ASN-CXA-ALL-CCI-22773-RDC, US 30036 2145 2488 MEDIACOM-ENTERPRISE-BUSINESS, US 10620 2053 3499 Telmex Colombia S.A., CO Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1703 2:1237 3:172 4:5 5:4485 6:122 7:6 8:1548 9:1 11:172 12:1558 13:394 14:2310 15:299 16:185 17:371 18:417 20:248 21:4 22:188 23:6158 24:2578 25:6 27:2491 29:19 31:2524 32:97 34:10 35:107 36:1918 37:4644 38:4453 39:805 40:151 41:3959 42:987 43:2345 44:308 45:16542 46:4238 47:363 49:1758 50:1837 51:571 52:1595 54:389 55:855 56:8 57:90 58:1756 59:1128 60:978 61:2444 62:2648 63:1923 64:5689 65:2327 66:4946 67:3020 68:1375 69:4154 70:1255 71:671 72:2974 74:2615 75:1464 76:610 77:2433 78:1863 79:3163 80:2096 81:1745 82:1485 83:1279 84:1533 85:2992 86:747 87:2003 88:1240 89:3626 90:614 91:7687 92:2058 93:2616 94:3598 95:3996 96:1328 97:336 98:1157 99:745 100:73 101:1069 102:2646 103:31259 104:4640 105:483 106:906 107:2507 108:1022 109:4418 110:2079 111:3233 112:2054 113:1563 114:1640 115:2028 116:1933 117:2559 118:2284 119:2023 120:1798 121:1109 122:2624 123:2188 124:1615 125:2537 128:1312 129:1063 130:1002 131:1986 132:801 133:422 134:1902 135:305 136:839 137:945 138:2549 139:1538 140:1234 141:1458 142:1432 143:1499 144:1165 145:346 146:1936 147:1572 148:2345 149:2009 150:870 151:1155 152:1843 153:489 154:4411 155:1421 156:1801 157:1301 158:1054 159:2280 160:2537 161:1532 162:3526 163:1504 164:1592 165:1713 166:1004 167:1717 168:3883 169:939 170:4605 171:880 172:3536 173:2934 174:1072 175:1154 176:3682 177:4546 178:3628 179:2145 180:2410 181:3435 182:3376 183:1929 184:2353 185:20177 186:4678 187:3945 188:4117 189:3559 190:9158 191:1447 192:10923 193:8851 194:7300 195:5152 196:3085 197:2377 198:5966 199:6088 200:7895 201:5878 202:10672 203:10223 204:4623 205:3540 206:4127 207:3457 208:4103 209:4894 210:4433 211:2496 212:4101 213:3573 214:1083 215:59 216:6622 217:2681 218:1295 219:576 220:2018 221:973 222:890 223:2182 End of report

1 0

Auth0 geolocation?
by Tim Burke 07 Apr '23

07 Apr '23

I thought so too, but we already send good geofeed data to Maxmind, and queried their DB to verify. On Apr 7, 2023, at 8:16 AM, Joel Esler <joel(a)joelesler.net> wrote: I bet money it’s maxmind. — Sent from my iPhone On Apr 6, 2023, at 20:33, Tim Burke <tim(a)mid.net> wrote: Anyone know who Auth0 is using for geolocation services? Have a customer reporting that Auth0, Lowes, Bank of America, and some other sites are reporting their IP in the wrong location. Checked the usual suspects, BrothersWISP.com<http://BrothersWISP.com> geolocation providers list, etcetera and they’re all showing in the correct location. Thanks, Tim

2 1

Early Bird Reg. Rates End Sunday + Start Your Seattle Coffee Tour Here
by Nanog News 06 Apr '23

06 Apr '23

*NANOG 88 Early Bird Registration Deadline Sunday * *Discounted Rates Will End this Sunday 9 April* Join us for our 88th community-wide meeting, NANOG 88, taking place 12 - 14, June in Seattle, Wa. Register before Sunday, 9 April to receive our most discounted registration rate. *REGISTER NOW * <https://www.nanog.org/events/nanog-88/register/> *Start Your Seattle Coffee Tour Here* *Your Guide to the "Coffee Capital" of the U.S.* Coffee is like a fine wine, "the best cup" can only be determined by the person whose pallet it touches. Check out this curated list of legendary cafes in the coffee capital of the United States. Then plan your hunt for the best cup of coffee during your stay in the Emerald City for our upcoming meeting, NANOG 88. *READ NOW <https://nanog.org/stories/start-your-seattle-coffee-tour-here/>* *Don't Wait to Submit Your Presentation for N88!* *Presentation Submission Deadline is Monday, 24 April* The NANOG PC is looking to schedule over 1,600 minutes of content between General Session and Breakout Rooms for NANOG 88 - so don’t wait! Presentation abstracts and draft slides should be submitted before Monday, 24 April. *MORE INFO * <https://www.nanog.org/program/call-presentations/>

1 0

Route Hijacks
by Ron Bonica 05 Apr '23

05 Apr '23

Folks, Can anyone point me at literature regarding the frequency and cost of BGP route hijacks? Also, please email me privately if there is any information that you can share in confidence. Ron Juniper Business Use Only

1 0

SF union square area fiber
by Jared Mauch 04 Apr '23

04 Apr '23

Can someone who is familiar with the fiber assets around the union square area in SF ping me off-list? Thanks. - jared

3 2

Flow Tools AS-Path
by Mike Hammett 04 Apr '23

04 Apr '23

One of the reasons to analyze flow data is to make purchase\peering decisions. The sFlow standard seems to only include source and destination AS, though I know some route platforms have extensions to provide additional data. 1) How common is it to have the additional extensions to include that data for analysis? 2) I have seen flow tools that show the entire AS path. Are they just cherry picking which platforms they showcase for the best marketing, or are they enriching the data they receive from "lesser" platforms from an outside source? For that purpose, knowing what ASes your data goes to is useful. It's even more useful to find an upstream network that includes a bunch of those. ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com

5 5