- NANOG - lists.nanog.org

Timeframe for LinkedIn Attack?
by Oliver Garraux 11 Jun '12

11 Jun '12

Hey, I'm curious if anyone has heard of a possible timeframe for the LinkedIn attack? I use different email aliases on most websites I sign up for. (So I can identify where a spammer got my email address from and so I can just remove the alias if I get spammed a lot). I've been testing some scripts I wrote to parse through my email logs recently, and noticed a few interesting log entries from back in May. I have accounts on Last.fm and on LinkedIn (using email aliases). I received a spam message on the email alias I use for LinkedIn on May 10. I also received four spam messages on the email alias I use for Last.fm on May 10. The LinkedIn related message came in at 20:22 UTC. The four Last.fm messages came in between 21:26 and 21:51 UTC. All of these messages were rejected because the IP the connection came from was listed on Spamhaus’s XBL (they came from 5 different IP's). I don't think this necessarily proves anything beyond a shadow of a doubt - but it seems really suspicious to me, given that I've never seen any other spam directed to these address before or after May 10, and that the email addresses for both of these sites that were compromised were spammed for the first time on the same day. (And none of the other 100+ email aliases I have received spam for the first time on that day). This would suggest to me that LinkedIn and Last.fm may have been compromised at least a month ago. Has anyone else seen anything that would confirm or refute this? Oliver ------------------------------------- Oliver Garraux Check out my blog: www.GetSimpliciti.com/blog Follow me on Twitter: twitter.com/olivergarraux

2 1

Open DNS Resolver reflection attack Mitigation
by Joe Maimon 11 Jun '12

11 Jun '12

Is there any publicly available rate limiting for BIND? How about host-based IDS that can be used to trigger rtbh or iptables? Google and Level3 manage to run open resolvers, why cant I? Joe

5 8

CVV numbers
by Hal Murray 10 Jun '12

10 Jun '12

In response to my comment about: > If I'm not supposed to not "tell anyone", why is it even printed where I can > read it? (Sorry for the extra not in there.) I got an off list suggestion of: http://www.cvvnumber.com/ It looks reasonable. But then, whois for cvvnumber.com says: Registrant: Domains By Proxy, LLC DomainsByProxy.com 15111 N. Hayden Rd., Ste 160, PMB 353 Scottsdale, Arizona 85260 United States Should I really take them seriously? -- These are my opinions. I hate spam.

15 19

Re: Dear Linkedin,
by Hal Murray 10 Jun '12

10 Jun '12

>> I have accounts at probably 100's of sites. Am I to understand >> that I am supposed to remember each one of them and dutifully >> update them every month or two? > Yes; of course if most of those accounts are moribund and unused then you > don't need to change them so often, but the passwords you use frequently > should be changed at regular intervals. > It's pretty commonsensical once the threat is understood. Does anybody have a good URL explaining that idea? It's been kicking around for many years. I've never seen a convincing writeup. Does your bank request/require that you change the PIN on your ATM card every few months? Security is a tradeoff. I think there are two cases for passwords. I'll call them important and junk. I'm willing to store the junk ones in a file or piece of paper that I'm careful with. I have to memorize the important ones. I'm only smart enough to memorize a few good passwords. If I change them every few months, they will be less good, or fewer of them. -- These are my opinions. I hate spam.

6 7

Re: Dear Linkedin,
by Scott Weeks 09 Jun '12

09 Jun '12

--- lyndon(a)orthanc.ca wrote: From: Lyndon Nerenberg <lyndon(a)orthanc.ca> On 2012-06-08, at 12:48 PM, Michael Thomas wrote: > I'm sorry, my brain doesn't hold that many passwords. Unless you're > a savant, neither does yours. So what you're telling me and the rest > of the world is impossible. t :: https://agilebits.com/onepassword (1Password) is one solution to :: managing web site passwords. ---------------------------------------------------------------- Only if you have an OS you have to pay for: apple or ms. scot

8 7

ITU funsies
by Joe Provo 09 Jun '12

09 Jun '12

While we will expect to see the Patrick S. Ryan & Jacob Glick paper linked on http://www.nanog.org/meetings/nanog55/abstracts.php?pt=MTk0OCZuYW5vZzU1&nm=… at some point, folks wanting a head start on digesting it can hit http://ssrn.com/abstract=2077095 Interestingly enough, http://wcitleaks.org/ launched last Wednesday... -- RSUC / GweepNet / Spunk / FnB / Usenix / SAGE / NewNOG

2 1

AUT-NUM ROUTE OBJECT
by Peter Ehiwe 09 Jun '12

09 Jun '12

Please can any one familiar with route object creation help with understanding this error I am having a weird error with AUT-NUM object , even though i am using the correct maintainer password i keep getting this error message. Authorisation for parent [as-block] using mnt-lower: not authenticated by: RIPE-NCC-RPSL-MNT ***Info: Authorisation for [aut-num] using mnt-by: authenticated by: XXXXX -- Warm Regards

2 2

Re: Dear Linkedin, [and proposed mitigation approach
by Hal Murray 09 Jun '12

09 Jun '12

> Yes, well, I'm being cynical ... Yes, but are you being cynical enough? ---------- > Is 14 months a excusable length of time for someone not to have > changed their password after a break? That cuts both ways. Who is changing the password, the good guys or the bad guys? -- These are my opinions. I hate spam.

1 0

The Cidr Report
by cidr-report＠potaroo.net 08 Jun '12

08 Jun '12

This report has been generated at Fri Jun 8 21:12:37 2012 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 01-06-12 415005 242289 02-06-12 415008 242419 03-06-12 415143 242530 04-06-12 414957 242433 05-06-12 415378 242704 06-06-12 415605 242487 07-06-12 415516 242302 08-06-12 415656 242304 AS Summary 41397 Number of ASes in routing system 17290 Number of ASes announcing only one prefix 3409 Largest number of prefixes announced by an AS AS6389 : BELLSOUTH-NET-BLK - BellSouth.net Inc. 113033952 Largest address span announced by an AS (/32s) AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 08Jun12 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 415813 242299 173514 41.7% All ASes AS6389 3409 195 3214 94.3% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS22773 1644 135 1509 91.8% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. AS7029 3291 1783 1508 45.8% WINDSTREAM - Windstream Communications Inc AS4766 2645 1184 1461 55.2% KIXS-AS-KR Korea Telecom AS18566 2091 706 1385 66.2% COVAD - Covad Communications Co. AS28573 1923 555 1368 71.1% NET Servicos de Comunicao S.A. AS2118 1226 14 1212 98.9% RELCOM-AS OOO "NPO Relcom" AS4323 1575 387 1188 75.4% TWTC - tw telecom holdings, inc. AS10620 1932 764 1168 60.5% Telmex Colombia S.A. AS1785 1918 809 1109 57.8% AS-PAETEC-NET - PaeTec Communications, Inc. AS4755 1590 538 1052 66.2% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS7303 1437 450 987 68.7% Telecom Argentina S.A. AS7552 1173 214 959 81.8% VIETEL-AS-AP Vietel Corporation AS26615 902 32 870 96.5% Tim Celular S.A. AS8151 1500 686 814 54.3% Uninet S.A. de C.V. AS18101 949 159 790 83.2% RELIANCE-COMMUNICATIONS-IN Reliance Communications Ltd.DAKC MUMBAI AS17974 1928 1160 768 39.8% TELKOMNET-AS2-AP PT Telekomunikasi Indonesia AS4808 1103 346 757 68.6% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS9394 846 160 686 81.1% CRNET CHINA RAILWAY Internet(CRNET) AS13977 808 125 683 84.5% CTELCO - FAIRPOINT COMMUNICATIONS, INC. AS3356 1104 467 637 57.7% LEVEL3 Level 3 Communications AS17676 691 74 617 89.3% GIGAINFRA Softbank BB Corp. AS30036 1426 819 607 42.6% MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communications Corp AS19262 997 398 599 60.1% VZGNI-TRANSIT - Verizon Online LLC AS22561 1012 417 595 58.8% DIGITAL-TELEPORT - Digital Teleport Inc. AS8452 1375 784 591 43.0% TE-AS TE-AS AS4780 842 271 571 67.8% SEEDNET Digital United Inc. AS24560 1029 459 570 55.4% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services AS3549 997 440 557 55.9% GBLX Global Crossing Ltd. AS22047 583 31 552 94.7% VTR BANDA ANCHA S.A. Total 43946 14562 29384 66.9% Top 30 total Possible Bogus Routes 10.86.64.32/30 AS65530 -Private Use AS- 10.86.64.36/30 AS65530 -Private Use AS- 10.86.65.32/30 AS65530 -Private Use AS- 10.86.65.36/30 AS65530 -Private Use AS- 10.255.255.0/30 AS65530 -Private Use AS- 10.255.255.4/30 AS65530 -Private Use AS- 10.255.255.8/30 AS65530 -Private Use AS- 14.192.0.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.4.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.8.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.12.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.16.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.20.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.24.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.28.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 27.112.114.0/24 AS23884 PROENNET-AS Proimage Engineering and Communication Co.,Ltd. 41.188.64.0/18 AS29544 MAURITEL-AS Mauritanian Telecommunication Company 41.188.96.0/21 AS8346 SONATEL-AS Autonomous System 41.188.104.0/21 AS8346 SONATEL-AS Autonomous System 41.188.112.0/21 AS8346 SONATEL-AS Autonomous System 41.222.79.0/24 AS36938 AMSCOTELECOMS Amsco Telecommunications Nigeria Limited 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV 64.18.128.0/19 AS14037 64.18.128.0/24 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 64.18.143.0/24 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 64.18.159.0/24 AS14037 64.66.32.0/20 AS18864 66.171.32.0/20 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 66.172.64.0/19 AS6408 PRADO - Prado Internet Access INc. 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.207.32.0/20 AS23011 66.245.176.0/20 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 66.251.128.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.133.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.134.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.136.0/21 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.140.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.141.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.142.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.143.0/24 AS3356 LEVEL3 Level 3 Communications 69.46.224.0/20 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.233.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.236.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 70.34.112.0/20 AS27589 EOS - MOJOHOST 71.19.134.0/23 AS3313 INET-AS BT Italia S.p.A. 72.44.16.0/20 AS15054 HAMELTRONICS - Hameltronics, LLC 74.91.48.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.49.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.50.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.51.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.52.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.53.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.54.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.55.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.56.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.57.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.58.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.59.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.60.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.61.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.62.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.63.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.115.124.0/23 AS46540 74.115.126.0/24 AS11260 EASTLINK-HSI - EastLink 81.22.64.0/20 AS5511 OPENTRANSIT France Telecom S.A. 82.101.160.0/19 AS5511 OPENTRANSIT France Telecom S.A. 98.159.96.0/20 AS46975 100.100.0.0/16 AS9198 KAZTELECOM-AS JSC Kazakhtelecom 110.34.44.0/22 AS12653 COMTONET KB Impuls Hellas S.A. 116.206.72.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.85.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.103.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 117.120.56.0/21 AS4755 TATACOMM-AS TATA Communications formerly VSNL is Leading ISP 120.136.17.0/24 AS38779 BMG-AS-ID Badan Meteorologi dan Geofisika 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 142.54.0.0/19 AS23498 CDSI - Cogeco Data Services LP 172.12.224.0/20 AS26285 172.14.0.0/24 AS57871 ASTELECENTR TeleCentr Ltd. 172.15.0.0/24 AS57871 ASTELECENTR TeleCentr Ltd. 172.45.1.0/24 AS3356 LEVEL3 Level 3 Communications 172.102.0.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 172.223.60.0/22 AS6910 DIALTELECOMRO Dial Telecom S.R.L. 190.114.160.0/23 AS22927 Telefonica de Argentina 200.1.112.0/24 AS29754 GO2TEL GO2TEL.COM INC. 200.6.49.0/24 AS23148 TERREMARK Terremark 200.24.73.0/24 AS26061 Equant Colombia 200.33.40.0/24 AS11172 Alestra, S. de R.L. de C.V. 200.34.0.0/20 AS6342 Instituto Tecnológico y de Estudios Superiores de Monterrey 200.53.0.0/19 AS13878 Diveo do Brasil Telecomunicacoes Ltda 200.58.248.0/21 AS27849 200.75.184.0/21 AS14754 Telgua 200.106.128.0/20 AS3257 TINET-BACKBONE Tinet SpA 200.115.112.0/20 AS3257 TINET-BACKBONE Tinet SpA 202.1.224.0/24 AS10097 FLOWCOM Flow Communications 2/541 Kent St Sydney NSW 2000 202.8.106.0/24 AS9530 SHINSEGAE-AS SHINSEGAE I&C Co., Ltd. 202.58.113.0/24 AS19161 202.83.120.0/21 AS37972 202.83.124.0/24 AS37972 202.83.125.0/24 AS37972 202.83.126.0/24 AS37972 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.122.134.0/24 AS38615 202.140.128.0/19 AS9583 SIFY-AS-IN Sify Limited 202.160.152.0/22 AS10113 EFTEL-AS-AP Eftel Limited. 202.174.125.0/24 AS9498 BBIL-AP BHARTI Airtel Ltd. 202.176.1.0/24 AS9942 COMINDICO-AP SOUL Converged Communications Australia 202.179.134.0/24 AS23966 LDN-AS-PK LINKdotNET Telecom Limited 203.23.1.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.24.38.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.30.127.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/23 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.87.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.188.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 203.142.219.0/24 AS45149 204.8.216.0/21 AS14037 204.8.216.0/24 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 204.8.218.0/24 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 204.8.220.0/24 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 204.8.222.0/24 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 204.14.0.0/21 AS30693 EONIX-CORPORATION-AS-PHX01-WWW-INFINITIE-NET - Eonix Corporation 204.14.0.0/24 AS30693 EONIX-CORPORATION-AS-PHX01-WWW-INFINITIE-NET - Eonix Corporation 204.14.2.0/24 AS30693 EONIX-CORPORATION-AS-PHX01-WWW-INFINITIE-NET - Eonix Corporation 204.14.3.0/24 AS30693 EONIX-CORPORATION-AS-PHX01-WWW-INFINITIE-NET - Eonix Corporation 205.175.214.0/24 AS5583 ORANGE-BUSINESS-SERVICES-BENELUX France Telecom S.A. 206.197.184.0/24 AS23304 DATOTEL-STL-AS - Datotel LLC, a NetLabs LLC Company 207.174.131.0/24 AS26116 INDRA - Indra's Net Inc 207.174.132.0/23 AS26116 INDRA - Indra's Net Inc 207.174.152.0/23 AS26116 INDRA - Indra's Net Inc 207.174.154.0/24 AS26116 INDRA - Indra's Net Inc 207.174.155.0/24 AS26116 INDRA - Indra's Net Inc 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc. 207.174.248.0/21 AS6653 PRIVATEI - privateI, LLC 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 208.83.53.0/24 AS40569 YGOMI-AS - Ygomi LLC 208.91.56.0/21 AS22241 IC2NET - IC2NET 208.91.56.0/24 AS22241 IC2NET - IC2NET 208.91.57.0/24 AS22241 IC2NET - IC2NET 208.91.58.0/24 AS22241 IC2NET - IC2NET 208.91.59.0/24 AS22241 IC2NET - IC2NET 208.91.60.0/24 AS22241 IC2NET - IC2NET 208.91.61.0/24 AS22241 IC2NET - IC2NET 208.91.62.0/24 AS22241 IC2NET - IC2NET 208.91.63.0/24 AS22241 IC2NET - IC2NET 208.93.144.0/21 AS30693 EONIX-CORPORATION-AS-PHX01-WWW-INFINITIE-NET - Eonix Corporation 208.93.151.0/24 AS30693 EONIX-CORPORATION-AS-PHX01-WWW-INFINITIE-NET - Eonix Corporation 209.148.64.0/19 AS13773 TELNETCOMM - Telnet Communications 209.177.64.0/20 AS6461 MFNX MFN - Metromedia Fiber Network 209.213.0.0/20 AS33005 ELTOPIA - Eltopia.com, LLC 209.250.224.0/19 AS14037 209.250.227.0/24 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 209.250.228.0/23 AS14037 209.250.230.0/24 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 209.250.232.0/24 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 209.250.235.0/24 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 209.250.237.0/24 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 209.250.238.0/24 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 209.250.241.0/24 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 209.250.242.0/24 AS14037 209.250.245.0/24 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 209.250.247.0/24 AS14037 209.250.248.0/24 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 209.250.250.0/24 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 209.250.251.0/24 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 209.250.254.0/24 AS39323 209.250.255.0/24 AS46496 213.150.202.0/24 AS8513 SKYVISION SkyVision Global Networks Ltd 213.150.204.0/24 AS29338 AFOL-AS Used by Africaonline Operations 216.12.160.0/20 AS26627 AS-PILOSOFT - Pilosoft, Inc. 216.21.160.0/20 AS27876 American Data Networks 216.194.160.0/20 AS27876 American Data Networks Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

3 4

BGP Update Report
by cidr-report＠potaroo.net 08 Jun '12

08 Jun '12

BGP Update Report Interval: 31-May-12 -to- 07-Jun-12 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS8452 143220 7.0% 131.8 -- TE-AS TE-AS 2 - AS8402 52088 2.5% 37.5 -- CORBINA-AS OJSC "Vimpelcom" 3 - AS9829 49055 2.4% 60.6 -- BSNL-NIB National Internet Backbone 4 - AS19318 36813 1.8% 1673.3 -- NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 5 - AS35994 34504 1.7% 985.8 -- AKAMAI-AS - Akamai Technologies, Inc. 6 - AS12479 27374 1.3% 346.5 -- UNI2-AS France Telecom Espana SA 7 - AS3549 20534 1.0% 211.7 -- GBLX Global Crossing Ltd. 8 - AS17813 19135 0.9% 147.2 -- MTNL-AP Mahanagar Telephone Nigam Ltd. 9 - AS13118 17847 0.9% 482.4 -- ASN-YARTELECOM OJSC Rostelecom 10 - AS786 17391 0.8% 87.4 -- JANET The JNT Association 11 - AS8926 17239 0.8% 12.1 -- MOLDTELECOM-AS Moldtelecom SE 12 - AS35041 17150 0.8% 65.2 -- NET-CRYSTONE-STHLM Crystone Autonomous Network Stockholm 13 - AS5800 14979 0.7% 57.8 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 14 - AS36856 13702 0.7% 6851.0 -- MOZILLA-CORP - Mozilla Corporation 15 - AS29512 13516 0.7% 2703.2 -- TVK-WROC-AS TVK Tel-Ka Wroclaw 16 - AS7552 12127 0.6% 9.4 -- VIETEL-AS-AP Vietel Corporation 17 - AS47602 10882 0.5% 217.6 -- PROFISOL-AS SC PROFISOL TELECOM SRL 18 - AS28573 10235 0.5% 8.8 -- NET Servicos de Comunicao S.A. 19 - AS11664 10193 0.5% 38.8 -- Techtel LMDS Comunicaciones Interactivas S.A. 20 - AS28306 9861 0.5% 1095.7 -- TC Net Informática e Telecomunicações LTDA TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS36856 13702 0.7% 6851.0 -- MOZILLA-CORP - Mozilla Corporation 2 - AS26249 3092 0.1% 3092.0 -- MAI-CRO - MAI 3 - AS29512 13516 0.7% 2703.2 -- TVK-WROC-AS TVK Tel-Ka Wroclaw 4 - AS17621 2347 0.1% 2347.0 -- CNCGROUP-SH China Unicom Shanghai network 5 - AS19318 36813 1.8% 1673.3 -- NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 6 - AS19647 7011 0.3% 1402.2 -- HPOD20001 - Hewlett-Packard Operation Division 7 - AS1997 3352 0.2% 1117.3 -- IBMDES-AS - IBM Dallas Engineering & Scientific 8 - AS28306 9861 0.5% 1095.7 -- TC Net Informática e Telecomunicações LTDA 9 - AS35994 34504 1.7% 985.8 -- AKAMAI-AS - Akamai Technologies, Inc. 10 - AS55665 966 0.1% 966.0 -- STMI-AS-ID PT Sampoerna Telemedia Indonesia 11 - AS29126 860 0.0% 860.0 -- DATIQ-AS Datiq B.V. 12 - AS26896 1703 0.1% 567.7 -- D102-ITC - Data 102, LLC 13 - AS10455 7672 0.4% 548.0 -- LUCENT-CIO - Lucent Technologies Inc. 14 - AS30944 499 0.0% 499.0 -- DKD-AS Bendra Lietuvos, JAV ir Rusijos imone uzdaroji akcine bendrove "DKD" 15 - AS48068 483 0.0% 483.0 -- VISONIC Visonic Ltd 16 - AS13118 17847 0.9% 482.4 -- ASN-YARTELECOM OJSC Rostelecom 17 - AS36948 873 0.0% 436.5 -- KENIC 18 - AS3 417 0.0% 1756.0 -- BGTEL-AS BGTEL's AS Number 19 - AS57201 406 0.0% 406.0 -- EDF-AS Estonian Defence Forces 20 - AS20211 406 0.0% 406.0 -- HWI-ASN00 - Henry Wurst, Inc. TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 109.161.64.0/19 17667 0.8% AS13118 -- ASN-YARTELECOM OJSC Rostelecom 2 - 63.245.221.0/24 13697 0.6% AS36856 -- MOZILLA-CORP - Mozilla Corporation 3 - 69.31.106.0/23 12726 0.6% AS35994 -- AKAMAI-AS - Akamai Technologies, Inc. 4 - 23.65.27.0/24 10853 0.5% AS35994 -- AKAMAI-AS - Akamai Technologies, Inc. 5 - 23.2.6.0/23 10853 0.5% AS35994 -- AKAMAI-AS - Akamai Technologies, Inc. 6 - 41.43.147.0/24 9282 0.4% AS8452 -- TE-AS TE-AS 7 - 62.36.252.0/22 7967 0.4% AS12479 -- UNI2-AS France Telecom Espana SA 8 - 62.36.249.0/24 6540 0.3% AS12479 -- UNI2-AS France Telecom Espana SA 9 - 62.36.241.0/24 6195 0.3% AS12479 -- UNI2-AS France Telecom Espana SA 10 - 62.36.210.0/24 6071 0.3% AS12479 -- UNI2-AS France Telecom Espana SA 11 - 59.177.48.0/20 5994 0.3% AS17813 -- MTNL-AP Mahanagar Telephone Nigam Ltd. 12 - 194.63.9.0/24 5098 0.2% AS1273 -- CW Cable and Wireless Worldwide plc 13 - 149.77.236.0/22 4200 0.2% AS4195 -- DE-SHAW-AS DE SHAW 14 - 195.140.236.0/22 3966 0.2% AS29512 -- TVK-WROC-AS TVK Tel-Ka Wroclaw 15 - 94.231.224.0/20 3661 0.2% AS29512 -- TVK-WROC-AS TVK Tel-Ka Wroclaw 16 - 193.19.212.0/22 3661 0.2% AS29512 -- TVK-WROC-AS TVK Tel-Ka Wroclaw 17 - 200.115.64.0/21 3358 0.1% AS19318 -- NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 18 - 69.10.32.0/19 3357 0.1% AS19318 -- NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 19 - 202.53.73.0/24 3354 0.1% AS19318 -- NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 20 - 129.42.191.0/24 3346 0.1% AS1997 -- IBMDES-AS - IBM Dallas Engineering & Scientific Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0