- NANOG - lists.nanog.org

Re: AS11296 -- Hijacked?
by Robert Bonomi 03 Oct '10

03 Oct '10

> From nanog-bounces+bonomi=mail.r-bonomi.com(a)nanog.org Fri Oct 1 16:33:09 2010 > From: John Curran <jcurran(a)arin.net> > To: George Bonser <gbonser(a)seven.com> > Date: Fri, 1 Oct 2010 17:32:47 -0400 > Subject: Re: AS11296 -- Hijacked? > Cc: "nanog(a)nanog.org" <nanog(a)nanog.org> > > George - > Full agreement; the next step is defining a deterministic process for id= > entifying these specific resources which are hijacked, That _seems_ fairly simple -- can you trace a 'continuity of ownership from the party that they were -originally- allocatd to to the party presently using them. If yes, legiitmate, if no, hijacked. With most States corporation records on-line, tracing corporate continuity is fairly straight foruard. As long as you recognize that a corpoation 'abadoned', 'dissolved' (or similar) in one state is *NOT* the 'parent' of a same-/similarly-named corporation established in another state. And that "documents" surfacing 'long after' a resource-holder has 'disappeared', puporting to show a transfer of those resources 'at the time of disappearance', are "highly suspect", and really require confirmation from someone who can be -independantly- verified as part of the 'old' organization at the time of the transfer. This isn't rocket science, it's straightforward corporate forensics, and the establishment of "provenence", or the equivalent of an 'abstract of title' for real-estate. "Somebody", either IANA, or the RIRs _should_ have been keeping track of what prefixes are announced, and _by_whom_, as a minimal check on utilization when an existing AS submits a request for additional space. A netblock (meaing an entire allocation, not just some sub-set thereof) that's been 'missing' for an extended period, and then shows up in an geographically distant locale is 'suspicious' to start with. All the more so it it was multi-homed, and now has only a single upstream.

5 5

Re: AS11296 -- Hijacked?
by Ronald F. Guilmette 02 Oct '10

02 Oct '10

I received a nice email from a very polite graduate student just now, who shall remain nameless, and I decided that I wanted to give him the reply below, but also to post this all to NANOG too, so here it is. I hope this may ally some of the concern that has been expressed about me not being more forthcomeing about the details of this case. (And if anybody gives me a hard time about being ``off topic'' then I'm going to give him or her a knucke sandwich, because I was specifically asked... indeed badgered... to provide more explanation of, and more justification for my earlier posting, as the record in the archives of this list will clearly show.) The friendly graduate student wote: >I've been quietly following NANOG's little flamewar over this. I'm >interested in what techniques you used to arrive at your conclusion >regarding AS11296. > >Unfortunately for me, I'm not a network op. Instead, I am a PhD student >interested in all matters inter-domain. I hope you feel this is enough >to make me a worthy recipient. No, actually, it isn't. If I google you can I be _sure_ that you're not playing for the other team? Probably not. But the good news is that I have decided to be a bit less cagey generally, and specifically in my public comments about these things anyway, and to give out more confirming data bits anyway. And I'll be sending this letter on to the NANOG list soon, with your name redacted, of course. What follows below is information that could be gleened (if you know how) from whois.internic.net. It's all public info. I just rearrange it and print it out in a nice pretty way. (Of course knowing where to look within the vast IPv4 address space is also quite helpful, but I'm not going to get in to that.) The bottom line here is that if you get the whois records for the domains associated with the name servers in the list attached at the end, you'll see that they are all going to be ``fishy'' in some way, e.g. ``cloaked'' (aka ``privacy protected''), or else registered to some mystery fly-by night company that may or may not actually exist, or at any rate, the domains will all be registered to something sort-of stealthy... something which is intended to make the spammer behind all this a bit harder to find. Oh yea, and the snail mail addresses given in the WHOIS records for the domains will usually/often be tracable to UPS Store rental P.O. boxes... those are standard spammer favorites, because...as they well know... us spamfighters can't find out who really controls any one of those boxes without a subpoena... unlike USPS boxes, for instance. (All this is quite well known in the dank sleezy spammer undergound already, so I'm not hardly giving away any secrets here.) And in a similar vein, the contact phone numbers given in the whois records will quite typically be 1-800 or 1-888 or 1-877 or 1-866 toll-free numbers. No, the spammers are _not_ trying to save you money when you want to call them up to bitch to them about the fact that they sent you 8,372 spams in a row. Nope, again, they use the toll-free numbers for a very specific purpose, which is again to make it more difficult for anyone trying to track them down to find their actual physical location. Non-tollfree numbers are typically associated with a specific geographic vicinity (although even that is being substantially eroded by number portability). But the toll free numbers are truly and always utterly geographically anonymous. So spammers use them a lot, primarily in domain whois records. So here you are. You've got this s**t load of highly ``fishy'' name servers, and they are all planted firmly into IP space that (a) appears to have been allocated to a reputable name brand company... such as Seiko, in this case... *and* (b) the block in question, based on the RegDate: and Updated: fields of the block's ARIN whois record, apparently hasn't been touched for years... maybe even a decade or more... thus implying that the former owners of the block either have abandoned it years ago, or else they themselves went belly up and ceased to exist, probably during the Great Dot Com Crash of 2000. Add it all up and what does it spell? No, not heartburn... Hijack. See, there actually isn't any big mystery about any of this, except the part about how I came to focus on this particular set of IP blocks and/or the particular AS that was announcing routes to them. And about that part, I have nothing to say, except to tell these spammers (who are probably listening) what I always say... that spamming is THE most public of all crimes. If you really think that you an hide and be totally invisible, even while you blast MILLIONS of total strangers with your advertising, then you need to up your lithium, because the dosage you're on now clearly isn't doing the job. Oh, and one other small thing... Even though the spammers try to hide themselves, often times, they really don't try THAT hard, probably because most folks don't care enough to really learn how to track these kinds of schmucks down, so in general, they only have to be a little stealthy... not a lot stealthy, and they know that. But using hijacked space raises the bar a little. In this context, you shouldn't really use all P.O. boxes that are on your same island, just because you are too effing lazy to take a ferry to the mainland once a month to pick up your hate mail from your anonymous UPS drop box. I can't really tell you exactly who engineered the hijacking in this case. Somebody with some network savvy obviously. What I suspect I _can_ tell you is which spammer (who runs a false-front ``affiliate marketing'' operation, just as cover story for their own snowshoe spamming... as most of the serious snowshoers do these days) most probably sub-leased the IP space from whoever actually engineered the hijacking. Look at the snail-mail addresses in the whois records for the domains listed below. Yes, they are UPS boxes, but look at the general location, Victoria, BC. So now go and google for "affiliate marketing" and "Victoria". There really aren't that many probable suspects. Victoria ain't a terribly big place. Not like, e.g. Vancouver. But then the schmuck would have to take the ferry over once a month to collect his hate mail from his mainland anonymous UPS box, and he's too effing lazy to do that. That's why he's a spammer, because he's too effing lazy and untalented to get honest work, or even to learn an honest trade, you know, like male hooker. (Hey! At least it's consensual, unlike spamming.) (Nishant? I know you're listening. Now you WILL make sure that Tobyn gets a copy of this posting, won't you? That's a good boy. Thanks. Effing assholes!) Could it possibly be that I'm jumping to the Wrong Conclusion here about who the spammer is, I mean just based on something as flimsy as geographic proximity? Sure, but not bloody likely. You see that's not hardly the only evidence that I have in front of me. I'm just not talking about the rest. (And I hope it keeps the son of a bitch up nights trying to figure out how ELSE he phuked up, in addition to being lazy and using only local UPS drop boxes.) Regards, rfg P.S. Some or all of the data presented below may still be available via whois.internic.net, even though the IP blocks are no longer even routed. Try this for example: whois -h whois.internic.net 206.226.96.2 Yup. Still there. At least for now. Probably be gone by morning. P.P.S. To all of the spammers out there reading this who think that you have learned from this e-mail how to be more stealthy still, and how to hide from me even better in the future... well... enjoy your fantasy while it lasts. I can find you now, I can find you next year, and I'll be able to find you ten years from now. And do you know why? Because I'm smarter than you are. And that's not saying much. If you had any talent... any talent at all... then you'd be able to find an HONEST job. It wouldn't pay as well, but at least you wouldn't be ashamed to tell your mother what you _actually_ do for a living. In the meantime, please hurry up and die. The world will most definitely be a better place when we no longer have to carry your dead weight on the backs of humanity. Don't flatter yourselves. You make nothing. You build nothing. You contribute nothing. You just annoy people. For money. We will make sure that that exact epitaph is engraved on your headstone, so that you will be remembered properly, once you go. ================================================================ 63.247.172.3 ns1.tooplacedomain10tht.info 63.247.172.4 ns2.tooplacedomain10tht.info 63.247.181.3 ns1.steadyvolumebandw57.info 63.247.181.4 ns2.steadyvolumebandw57.info 63.247.185.19 ns1.magnumfourcompkriel.info 63.247.185.20 ns2.magnumfourcompkriel.info 199.241.95.253 fwd1.itargetdirect.net 206.226.64.4 ns1.granadacentral.info 206.226.64.5 ns2.granadacentral.info 206.226.96.2 ns1.sandpipedream.com ns1.optinletters.com ns1.notifications-mail.com ns1.mailingdaily.com ns1.blueholster.com ns1.allowingmail.com 206.226.96.3 ns2.sandpipedream.com ns2.optinletters.com ns2.notifications-mail.com ns2.mailingdaily.com ns2.blueholster.com ns2.allowingmail.com 206.226.112.2 ns1.drainagecorner.com 206.226.112.3 ns2.drainagecorner.com 206.226.112.130 ns1.calculatingdigits.com 206.226.112.131 ns2.calculatingdigits.com 206.226.112.194 ns1.mailcreatures.com 206.226.112.195 ns2.mailcreatures.com 206.226.113.2 ns1.qualitycampaigns.com 206.226.113.3 ns2.qualitycampaigns.com 206.226.113.66 ns1.onlyinstant.com 206.226.113.67 ns2.onlyinstant.com 206.226.114.194 ns1.droppedtargets.com 206.226.114.195 ns2.droppedtargets.com 206.226.115.2 ns1.dinneroutstanding.com 206.226.115.3 ns2.dinneroutstanding.com 206.226.116.130 ns1.offersenveloped.com 206.226.116.131 ns2.offersenveloped.com 206.226.117.2 ns1.sleekrange.com 206.226.117.3 ns2.sleekrange.com 206.226.117.66 ns1.thegulfofmail.com 206.226.117.67 ns2.thegulfofmail.com 206.226.118.2 ns1.mailmammals.com 206.226.118.3 ns2.mailmammals.com 206.226.118.66 ns1.trackpreference.com 206.226.118.67 ns2.trackpreference.com 206.226.119.2 ns1.platinumpermission.com 206.226.119.3 ns2.platinumpermission.com 206.226.119.130 ns1.approvedcity.com 206.226.119.131 ns2.approvedcity.com 206.226.120.130 ns1.creaturesofmail.com 206.226.120.131 ns2.creaturesofmail.com 206.226.121.2 ns1.tonnesofmail.com 206.226.121.3 ns2.tonnesofmail.com 206.226.122.2 ns1.cancellationsanytime.com 206.226.122.3 ns2.cancellationsanytime.com 206.226.123.2 ns1.hourofman.com 206.226.123.3 ns2.hourofman.com 206.226.124.2 ns1.businessneedsfilled.com 206.226.124.3 ns2.businessneedsfilled.com 206.226.124.130 ns1.underestimatedhours.com 206.226.124.131 ns2.underestimatedhours.com 206.226.126.2 ns1.companiesthatperform.com 206.226.126.3 ns2.companiesthatperform.com 206.226.126.130 ns1.pageuppleasure.com 206.226.126.131 ns2.pageuppleasure.com 206.226.127.2 ns1.transferredtraffic.com 206.226.127.3 ns2.transferredtraffic.com

12 21

ARIN IP/AS Assignment
by Imran Moin 02 Oct '10

02 Oct '10

Hello All, I was wondering how long it is taking ARIN these days to assign new IP block and AS Number. We are a new startup and looking to build our network over the next few months. Thanks, Imran.

10 10

AT&T Dry Pairs?
by Brandon Galbraith 02 Oct '10

02 Oct '10

Has anyone had any luck lately getting dry pairs from AT&T? I'm in the Chicago area attempting to get a dry pair between two buildings (100ft apart) for some equipment, but when speaking to several folks at AT&T the response I get is "You want AT&T service without the service? That's not logical!". Had no problems 3-4 years ago getting these sorts of "circuits", but it appears it's gone the way of the dodo now. Any emails off-list are appreciated. -- Brandon Galbraith US Voice: 630.492.0464

18 21

Active Directory requires Microsoft DNS?
by Tom Mikelson 02 Oct '10

02 Oct '10

Presently our organization utilizes BIND for DNS services, with the Networking team administering. We are now being told by the Systems team that they will be responsible for DNS services and that it will be changed over to the Microsoft DNS service run on domain controllers. The reason given is that the Active Directory implementation requires the Microsoft DNS service and dynamic DNS. Not being a Microsoft administrator I do not know the veracity of these claims. Anyone out there had any experiences with a situation like this? I am a bit leery of changing something that is already working.

15 15

BGP Update Report
by cidr-report＠potaroo.net 01 Oct '10

01 Oct '10

BGP Update Report Interval: 23-Sep-10 -to- 30-Sep-10 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS8151 24582 2.3% 12.3 -- Uninet S.A. de C.V. 2 - AS3464 21803 2.0% 484.5 -- ASC-NET - Alabama Supercomputer Network 3 - AS32528 17249 1.6% 2156.1 -- ABBOTT Abbot Labs 4 - AS5536 15687 1.5% 146.6 -- Internet-Egypt 5 - AS35931 13325 1.2% 4441.7 -- ARCHIPELAGO - ARCHIPELAGO HOLDINGS INC 6 - AS5800 12818 1.2% 59.3 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 7 - AS8452 9632 0.9% 9.7 -- TE-AS TE-AS 8 - AS3816 9132 0.9% 24.1 -- COLOMBIA TELECOMUNICACIONES S.A. ESP 9 - AS10620 9023 0.8% 6.8 -- Telmex Colombia S.A. 10 - AS4771 8955 0.8% 25.7 -- NZTELECOM Netgate 11 - AS14420 8319 0.8% 13.7 -- CORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EP 12 - AS27738 7444 0.7% 35.4 -- Ecuadortelecom S.A. 13 - AS2764 7225 0.7% 21.2 -- AAPT AAPT Limited 14 - AS7552 6856 0.6% 10.6 -- VIETEL-AS-AP Vietel Corporation 15 - AS3475 6692 0.6% 291.0 -- LANT-AFLOAT - Navy Network Information Center (NNIC) 16 - AS9498 6370 0.6% 14.1 -- BBIL-AP BHARTI Airtel Ltd. 17 - AS21017 6184 0.6% 618.4 -- VSI-AS VSI AS 18 - AS9829 6149 0.6% 24.0 -- BSNL-NIB National Internet Backbone 19 - AS15399 5871 0.6% 65.2 -- WANANCHI-KE 20 - AS36992 5846 0.6% 11.7 -- ETISALAT-MISR TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS35931 13325 1.2% 4441.7 -- ARCHIPELAGO - ARCHIPELAGO HOLDINGS INC 2 - AS32528 17249 1.6% 2156.1 -- ABBOTT Abbot Labs 3 - AS22753 1896 0.2% 1896.0 -- REDHAT-STUTTGART REDHAT Stuttgart 4 - AS53532 1037 0.1% 1037.0 -- KINGMETALS - King Architectural Metals 5 - AS45600 948 0.1% 948.0 -- UPM-AS-AP University of the Philippines, Manila 6 - AS38531 828 0.1% 828.0 -- SULLCROM-HK Sullivan & Cromwell LLP, Hong Kong Site, International Law Firm. 7 - AS11613 702 0.1% 702.0 -- U-SAVE - U-Save Auto Rental of America, Inc. 8 - AS53327 685 0.1% 685.0 -- CO-OPERATIVE-INSURANCE-COMPANIES - Co-operative Insurance Companies, inc. 9 - AS14294 638 0.1% 638.0 -- LIBERTYTEL - Liberty Telecom, LLC 10 - AS15984 622 0.1% 622.0 -- The Joint-Stock Commercial Bank CentroCredit. 11 - AS21017 6184 0.6% 618.4 -- VSI-AS VSI AS 12 - AS31055 579 0.1% 579.0 -- CONSULTIX-AS Consultix GmbH 13 - AS33775 4398 0.4% 549.8 -- NITEL-AS 14 - AS3 540 0.1% 333.0 -- STOFANET Stofa A/S 15 - AS27027 538 0.1% 538.0 -- ANBELL ASN-ANBELL 16 - AS3464 21803 2.0% 484.5 -- ASC-NET - Alabama Supercomputer Network 17 - AS37204 3385 0.3% 483.6 -- TELONE 18 - AS37065 462 0.0% 462.0 -- ZOOM-AS 19 - AS703 381 0.0% 381.0 -- UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 20 - AS9556 1745 0.2% 349.0 -- ADAM-AS-AP Adam Internet Pty Ltd TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 129.66.0.0/17 10808 0.9% AS3464 -- ASC-NET - Alabama Supercomputer Network 2 - 129.66.128.0/17 10804 0.9% AS3464 -- ASC-NET - Alabama Supercomputer Network 3 - 130.36.34.0/24 8616 0.7% AS32528 -- ABBOTT Abbot Labs 4 - 130.36.35.0/24 8616 0.7% AS32528 -- ABBOTT Abbot Labs 5 - 201.134.18.0/24 8420 0.7% AS8151 -- Uninet S.A. de C.V. 6 - 63.211.68.0/22 7886 0.7% AS35931 -- ARCHIPELAGO - ARCHIPELAGO HOLDINGS INC 7 - 198.140.43.0/24 5327 0.5% AS35931 -- ARCHIPELAGO - ARCHIPELAGO HOLDINGS INC 8 - 190.65.228.0/22 5307 0.5% AS3816 -- COLOMBIA TELECOMUNICACIONES S.A. ESP 9 - 216.126.136.0/22 4645 0.4% AS6316 -- AS-PAETEC-NET - PaeTec Communications, Inc. 10 - 148.204.141.0/24 4249 0.4% AS8151 -- Uninet S.A. de C.V. 11 - 95.32.192.0/18 3326 0.3% AS21017 -- VSI-AS VSI AS 12 - 206.184.16.0/24 3062 0.3% AS174 -- COGENT Cogent/PSI 13 - 216.118.245.0/24 3008 0.3% AS25747 -- VSC-SATELLITE-CO - VSC Satellite Co. 14 - 95.32.128.0/18 2824 0.2% AS21017 -- VSI-AS VSI AS 15 - 202.92.235.0/24 2535 0.2% AS9498 -- BBIL-AP BHARTI Airtel Ltd. 16 - 64.86.26.0/23 2473 0.2% AS37204 -- TELONE 17 - 41.238.176.0/23 1985 0.2% AS8452 -- TE-AS TE-AS 18 - 66.187.234.0/24 1896 0.2% AS22753 -- REDHAT-STUTTGART REDHAT Stuttgart 19 - 138.116.134.0/24 1369 0.1% AS7018 -- ATT-INTERNET4 - AT&T WorldNet Services 20 - 205.90.224.0/20 1159 0.1% AS3475 -- LANT-AFLOAT - Navy Network Information Center (NNIC) Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 01 Oct '10

01 Oct '10

This report has been generated at Fri Oct 1 21:12:03 2010 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 24-09-10 336850 207985 25-09-10 336997 207887 26-09-10 337000 208528 27-09-10 337205 208311 28-09-10 337437 208418 29-09-10 337629 208515 30-09-10 337929 208442 01-10-10 337368 208582 AS Summary 35515 Number of ASes in routing system 15117 Number of ASes announcing only one prefix 4480 Largest number of prefixes announced by an AS AS4323 : TWTC - tw telecom holdings, inc. 96837376 Largest address span announced by an AS (/32s) AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 01Oct10 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 337851 208477 129374 38.3% All ASes AS6389 3776 282 3494 92.5% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS4323 4480 1946 2534 56.6% TWTC - tw telecom holdings, inc. AS19262 1822 286 1536 84.3% VZGNI-TRANSIT - Verizon Online LLC AS4766 1861 519 1342 72.1% KIXS-AS-KR Korea Telecom AS22773 1199 66 1133 94.5% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. AS4755 1357 290 1067 78.6% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS17488 1347 297 1050 78.0% HATHWAY-NET-AP Hathway IP Over Cable Internet AS18566 1087 63 1024 94.2% COVAD - Covad Communications Co. AS5668 1080 95 985 91.2% AS-5668 - CenturyTel Internet Holdings, Inc. AS10620 1324 344 980 74.0% Telmex Colombia S.A. AS6478 1354 426 928 68.5% ATT-INTERNET3 - AT&T WorldNet Services AS1785 1796 962 834 46.4% AS-PAETEC-NET - PaeTec Communications, Inc. AS13343 1385 633 752 54.3% SCRR-13343 - Road Runner HoldCo LLC AS7303 810 114 696 85.9% Telecom Argentina S.A. AS8452 1009 345 664 65.8% TE-AS TE-AS AS7545 1414 757 657 46.5% TPG-INTERNET-AP TPG Internet Pty Ltd AS8151 1338 691 647 48.4% Uninet S.A. de C.V. AS18101 882 247 635 72.0% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS4808 936 303 633 67.6% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS4804 665 75 590 88.7% MPX-AS Microplex PTY LTD AS28573 1161 601 560 48.2% NET Servicos de Comunicao S.A. AS7018 1488 959 529 35.6% ATT-INTERNET4 - AT&T WorldNet Services AS4780 706 180 526 74.5% SEEDNET Digital United Inc. AS17676 607 81 526 86.7% GIGAINFRA Softbank BB Corp. AS24560 1040 517 523 50.3% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services AS7552 648 137 511 78.9% VIETEL-AS-AP Vietel Corporation AS9443 575 77 498 86.6% INTERNETPRIMUS-AS-AP Primus Telecommunications AS7011 1157 667 490 42.4% FRONTIER-AND-CITIZENS - Frontier Communications of America, Inc. AS22047 561 82 479 85.4% VTR BANDA ANCHA S.A. AS14420 564 102 462 81.9% CORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EP Total 39429 12144 27285 69.2% Top 30 total Possible Bogus Routes 31.0.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 31.1.0.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 31.1.24.0/24 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 41.222.79.0/24 AS36938 AMSCOTELECOMS Amsco Telecommunications Nigeria Limited 41.223.92.0/22 AS36936 CELTEL-GABON Celtel Gabon Internet Service 41.223.196.0/24 AS36990 41.223.197.0/24 AS36990 41.223.198.0/24 AS36990 41.223.199.0/24 AS36990 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV 64.20.80.0/20 AS40028 SPD-NETWORK-1 - SPD NETWORK 64.21.192.0/20 AS11610 INETNEBR-1 - Internet Nebraska Corporation 64.21.212.0/22 AS11610 INETNEBR-1 - Internet Nebraska Corporation 64.21.216.0/21 AS11610 INETNEBR-1 - Internet Nebraska Corporation 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.206.32.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.33.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.34.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.35.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.47.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 66.207.32.0/20 AS23011 66.230.240.0/20 AS27286 66.245.176.0/20 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 68.234.0.0/20 AS40430 COLO4JAX-AS - colo4jax, LLC 68.234.16.0/20 AS40430 COLO4JAX-AS - colo4jax, LLC 69.6.80.0/24 AS13442 69.6.81.0/24 AS13442 71.19.134.0/23 AS3313 INET-AS I.NET S.p.A. 71.19.160.0/23 AS4648 NZIX-2 Netgate 72.22.32.0/19 AS33150 72.22.61.0/24 AS33150 72.22.62.0/24 AS33150 76.77.32.0/19 AS2828 XO-AS15 - XO Communications 80.88.10.0/24 AS33774 DJAWEB 80.88.12.0/24 AS33779 wataniya-telecom-as 91.198.217.0/24 AS50877 INSTANTEXCHANGER-AS InstantExchanger Ltd. 96.45.160.0/24 AS3257 TINET-BACKBONE Tinet SpA 96.45.161.0/24 AS3257 TINET-BACKBONE Tinet SpA 96.45.162.0/24 AS3257 TINET-BACKBONE Tinet SpA 96.45.163.0/24 AS3257 TINET-BACKBONE Tinet SpA 96.45.164.0/24 AS3257 TINET-BACKBONE Tinet SpA 96.45.165.0/24 AS3257 TINET-BACKBONE Tinet SpA 96.45.166.0/24 AS3257 TINET-BACKBONE Tinet SpA 96.45.167.0/24 AS3257 TINET-BACKBONE Tinet SpA 96.45.168.0/21 AS3257 TINET-BACKBONE Tinet SpA 96.47.48.0/20 AS3257 TINET-BACKBONE Tinet SpA 110.34.44.0/22 AS12653 COMTONET KB Impuls Hellas 110.173.64.0/19 AS37963 CNNIC-ALIBABA-CN-NET-AP Alibaba (China) Technology Co., Ltd. 114.142.160.0/21 AS38595 OCEAN-AS-AU Ocean Broadband - Wireless Broadband Internet provider, Perth 114.142.160.0/22 AS38595 OCEAN-AS-AU Ocean Broadband - Wireless Broadband Internet provider, Perth 114.142.168.0/21 AS38595 OCEAN-AS-AU Ocean Broadband - Wireless Broadband Internet provider, Perth 114.142.168.0/23 AS38595 OCEAN-AS-AU Ocean Broadband - Wireless Broadband Internet provider, Perth 114.142.171.0/24 AS38595 OCEAN-AS-AU Ocean Broadband - Wireless Broadband Internet provider, Perth 114.142.172.0/24 AS38595 OCEAN-AS-AU Ocean Broadband - Wireless Broadband Internet provider, Perth 115.42.0.0/24 AS24541 FORTYFIVERU-AS-AU 45RU Pty Ltd. Internet Service Provider, Perth, Western Australia. 115.42.5.0/24 AS24541 FORTYFIVERU-AS-AU 45RU Pty Ltd. Internet Service Provider, Perth, Western Australia. 115.42.6.0/24 AS24541 FORTYFIVERU-AS-AU 45RU Pty Ltd. Internet Service Provider, Perth, Western Australia. 115.42.11.0/24 AS24541 FORTYFIVERU-AS-AU 45RU Pty Ltd. Internet Service Provider, Perth, Western Australia. 115.42.20.0/24 AS24541 FORTYFIVERU-AS-AU 45RU Pty Ltd. Internet Service Provider, Perth, Western Australia. 115.42.28.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 115.42.29.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 115.42.30.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 115.42.31.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 115.42.40.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 115.42.42.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 115.42.43.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 115.42.44.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 115.42.47.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 115.42.48.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 115.42.49.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 115.42.50.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 115.42.51.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 115.42.52.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 115.42.53.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 115.42.54.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 115.42.55.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 115.42.56.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 115.42.57.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 115.42.58.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 115.42.59.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 115.42.61.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 115.42.62.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 115.42.63.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 116.68.136.0/21 AS28045 Pantel Communications 117.120.56.0/21 AS4755 TATACOMM-AS TATA Communications formerly VSNL is Leading ISP 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 121.50.168.0/21 AS9931 CAT-AP The Communication Authoity of Thailand, CAT 142.54.0.0/19 AS23498 CDSI - Cogeco Data Services Inc. 158.222.70.0/23 AS6137 SISNA - SISNA, Inc. 158.222.72.0/23 AS6137 SISNA - SISNA, Inc. 158.222.224.0/20 AS19864 O1COMM - O1 COMMUNICATIONS 158.222.224.0/22 AS19864 O1COMM - O1 COMMUNICATIONS 158.222.229.0/24 AS19864 O1COMM - O1 COMMUNICATIONS 173.225.112.0/20 AS3257 TINET-BACKBONE Tinet SpA 176.0.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 176.1.0.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 176.1.24.0/24 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 177.0.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 177.1.0.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 177.1.8.0/24 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 181.0.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 181.1.0.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 181.1.8.0/24 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 190.102.32.0/20 AS30058 ACTIVO-SYSTEMS-AS30058 ACTIVO-SYSTEMS-AS30058 192.9.0.0/16 AS11479 BRM-SUN-AS - Sun Microsystems, Inc 192.64.85.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.108.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.101.46.0/24 AS6503 Axtel, S.A.B. de C.V. 192.101.64.0/21 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.70.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.71.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.72.0/24 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.74.0/24 AS1239 SPRINTLINK - Sprint 192.124.252.0/22 AS680 DFN-IP service X-WiN 192.131.233.0/24 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 192.154.32.0/19 AS81 NCREN - MCNC 192.154.64.0/19 AS81 NCREN - MCNC 192.188.208.0/20 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 196.2.224.0/22 AS24863 LINKdotNET-AS 196.6.108.0/24 AS5713 SAIX-NET 196.13.201.0/24 AS2018 TENET-1 196.13.202.0/24 AS2018 TENET-1 196.13.203.0/24 AS2018 TENET-1 196.13.204.0/24 AS2018 TENET-1 196.110.105.0/24 AS8513 SKYVISION SkyVision Network Services 196.201.248.0/24 AS30991 SAHANNET Sahannet AS Network 196.201.249.0/24 AS30991 SAHANNET Sahannet AS Network 196.201.250.0/24 AS30991 SAHANNET Sahannet AS Network 196.201.251.0/24 AS30991 SAHANNET Sahannet AS Network 196.201.253.0/24 AS30991 SAHANNET Sahannet AS Network 196.201.255.0/24 AS30991 SAHANNET Sahannet AS Network 196.202.224.0/21 AS8818 TELE Greenland Autonomous System 198.1.2.0/24 AS4761 INDOSAT-INP-AP INDOSAT Internet Network Provider 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.73.210.0/24 AS21570 ACI-1 - Accelerated Connections Inc. 198.74.38.0/24 AS16966 SBCIDC-LSAN03 - AT&T Internet Services 198.74.39.0/24 AS16966 SBCIDC-LSAN03 - AT&T Internet Services 198.74.40.0/24 AS16966 SBCIDC-LSAN03 - AT&T Internet Services 198.97.72.0/21 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 198.97.96.0/19 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 198.97.240.0/20 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 198.99.241.0/24 AS11797 AC-NIELSEN-AS AC NIELSEN 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.163.214.0/24 AS21804 ACCESS-SK - Access Communications Co-operative Limited 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.168.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 198.169.0.0/16 AS803 SASKTEL - Saskatchewan Telecommunications 198.180.198.0/24 AS23715 SEOUL-INTGW-GXS-AP Global Exchange Services 198.182.235.0/24 AS3356 LEVEL3 Level 3 Communications 199.10.0.0/16 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center 199.16.32.0/19 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 199.121.0.0/16 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.123.16.0/20 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.185.130.0/23 AS19662 UNISERVE-ONLINE - Uniserve On Line 199.202.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 199.202.216.0/21 AS577 BACOM - Bell Canada 199.233.92.0/24 AS26896 D102-ITC - Data 102, LLC 199.246.116.0/24 AS813 UUNET-CANADA - MCI Communications Services, Inc. d/b/a Verizon Business 200.1.112.0/24 AS29754 GO2TEL GO2TEL.COM INC. 200.24.73.0/24 AS26061 Equant Colombia 200.24.78.0/26 AS3549 GBLX Global Crossing Ltd. 200.24.78.64/26 AS3549 GBLX Global Crossing Ltd. 202.9.55.0/24 AS2764 AAPT AAPT Limited 202.9.57.0/24 AS2764 AAPT AAPT Limited 202.38.63.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.58.113.0/24 AS19161 202.61.75.0/24 AS9927 PHILCOMNET-PH A Multihomed ISP Company 202.66.128.0/18 AS9584 GENESIS-AP Diyixian.com Limited 202.66.160.0/19 AS9584 GENESIS-AP Diyixian.com Limited 202.66.160.0/20 AS9584 GENESIS-AP Diyixian.com Limited 202.66.176.0/20 AS9584 GENESIS-AP Diyixian.com Limited 202.66.184.0/24 AS9584 GENESIS-AP Diyixian.com Limited 202.66.186.0/24 AS9584 GENESIS-AP Diyixian.com Limited 202.66.188.0/24 AS9584 GENESIS-AP Diyixian.com Limited 202.66.189.0/24 AS9584 GENESIS-AP Diyixian.com Limited 202.66.190.0/24 AS9584 GENESIS-AP Diyixian.com Limited 202.73.144.0/20 AS4788 TMNET-AS-AP TM Net, Internet Service Provider 202.86.252.0/22 AS4748 RESOLINK-AS-AP Resources Link Network Limited 202.86.252.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.133.37.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.133.70.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.133.73.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.136.254.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.136.255.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.150.227.0/24 AS17727 NAPINFO-AS-AP PT. NAP Info Lintas Nusa 202.174.70.0/24 AS21175 WIS WIS S.A. : WIND International Services 202.174.125.0/24 AS9498 BBIL-AP BHARTI Airtel Ltd. 202.174.125.128/26 AS9498 BBIL-AP BHARTI Airtel Ltd. 202.176.1.0/24 AS9942 COMINDICO-AP SOUL Converged Communications Australia 202.179.130.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.179.131.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.179.133.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.179.134.0/24 AS23966 LDN-AS-PK LINKdotNET Telecom Limited 202.179.144.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.179.149.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.179.150.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.181.32.0/24 AS4645 ASN-HKNET-AP HKNet Co. Ltd 203.12.45.0/24 AS4854 NETSPACE-AS-AP Netspace Online Systems 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.80.136.0/21 AS4759 EVOSERVE-AS-AP EvoServe is a content and online access Internet provider company 203.112.111.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.113.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.114.0/24 AS4802 ASN-IINET iiNet Limited 203.112.116.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.117.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.118.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.119.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.120.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.121.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.127.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.128.128.0/24 AS23849 CNNIC-NET263-AP Beijing Capital-online science development Co.,Ltd. 203.142.219.0/24 AS45149 203.175.98.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 203.175.99.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 203.175.103.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 203.175.107.0/24 AS45595 PKTELECOM-AS-PK Pakistan Telecom Company Limited 203.175.110.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 204.9.216.0/23 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 204.10.232.0/21 AS33150 204.19.14.0/23 AS577 BACOM - Bell Canada 204.28.104.0/21 AS25973 MZIMA - Mzima Networks, Inc. 204.209.114.0/24 AS13768 PEER1 - Peer 1 Network Inc. 204.238.70.0/24 AS36826 205.150.0.0/15 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 205.189.134.0/24 AS11814 DISTRIBUTEL-AS11814 - DISTRIBUTEL COMMUNICATIONS LTD. 205.196.24.0/22 AS33724 BIZNESSHOSTING - VOLICO 205.210.145.0/24 AS11814 DISTRIBUTEL-AS11814 - DISTRIBUTEL COMMUNICATIONS LTD. 206.72.192.0/23 AS16526 BIRCH-TELECOM - Birch Telecom, Inc. 206.72.194.0/23 AS16526 BIRCH-TELECOM - Birch Telecom, Inc. 206.123.129.0/24 AS10790 INREACH-AS - InReach Internet 206.180.240.0/20 AS12083 KNOLOGY-NET - Knology Holdings 206.197.184.0/24 AS23304 DATOTEL-STL-AS - Datotel LLC, a NetLabs LLC Company 207.174.131.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.132.0/23 AS26116 INDRA - Indra's Net Inc. 207.174.152.0/23 AS26116 INDRA - Indra's Net Inc. 207.174.154.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.155.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.188.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.189.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.190.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.191.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc. 207.174.248.0/21 AS6653 PRIVATEI - privateI, LLC 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 208.64.200.0/22 AS11730 CIL-ASN - Circle Internet LTD 208.64.240.0/21 AS13871 TELEBYTE-NW - Telebyte NW 208.78.165.0/24 AS16565 208.92.196.0/22 AS10929 NETELLIGENT - Netelligent Hosting Services Inc. 208.92.199.0/24 AS26198 3MENATWORK - 3Men@Work Integrated Networks, Inc. 209.54.123.0/24 AS6062 NETPLEX - NETPLEX 209.105.224.0/19 AS20074 209.165.239.0/24 AS209 ASN-QWEST - Qwest Communications Company, LLC 209.177.64.0/20 AS6461 MFNX MFN - Metromedia Fiber Network 209.213.0.0/20 AS33005 ELTOPIA - Eltopia.com, LLC 209.213.1.0/24 AS7849 CROCKERCOM - CROCKER COMMUNICATIONS 209.213.4.0/24 AS7849 CROCKERCOM - CROCKER COMMUNICATIONS 209.236.96.0/20 AS3257 TINET-BACKBONE Tinet SpA 210.5.128.0/20 AS4837 CHINA169-BACKBONE CNCGROUP China169 Backbone 210.56.150.0/23 AS38138 INTECH-TRANSIT-BD InTech Online Limited, INTERNET SERVICE LIMITED 210.247.224.0/19 AS7496 WEBCENTRAL-AS WebCentral 216.10.235.0/24 AS13780 NTNCOMMUNICATIONS - NTN 216.10.236.0/24 AS13780 NTNCOMMUNICATIONS - NTN 216.21.196.0/24 AS12251 INVISION - Invision.com, Inc. 216.21.201.0/24 AS12251 INVISION - Invision.com, Inc. 216.21.202.0/24 AS12251 INVISION - Invision.com, Inc. 216.21.206.0/23 AS12251 INVISION - Invision.com, Inc. 216.47.32.0/20 AS3257 TINET-BACKBONE Tinet SpA 216.58.192.0/24 AS22702 X5SOLUTIONS - X5 Solutions, Inc. 216.58.197.0/24 AS22702 X5SOLUTIONS - X5 Solutions, Inc. 216.58.200.0/24 AS18530 ISOMEDIA-1 - Isomedia Inc. 216.172.198.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 216.172.199.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 216.250.112.0/20 AS7296 ALCHEMYNET - Alchemy Communications, Inc. 216.250.116.0/24 AS36066 UNI-MARKETING-ALLIANCE - Webhost4life.com Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 01 Oct '10

01 Oct '10

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 02 Oct, 2010 Report Website: http://thyme.apnic.net Detailed Analysis: http://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 332569 Prefixes after maximum aggregation: 152883 Deaggregation factor: 2.18 Unique aggregates announced to Internet: 163430 Total ASes present in the Internet Routing Table: 34884 Prefixes per ASN: 9.53 Origin-only ASes present in the Internet Routing Table: 30253 Origin ASes announcing only one prefix: 14676 Transit ASes present in the Internet Routing Table: 4631 Transit-only ASes present in the Internet Routing Table: 102 Average AS path length visible in the Internet Routing Table: 3.6 Max AS path length visible: 24 Max AS path prepend of ASN (41664) 21 Prefixes from unregistered ASNs in the Routing Table: 3584 Unregistered ASNs in the Routing Table: 1563 Number of 32-bit ASNs allocated by the RIRs: 804 Prefixes from 32-bit ASNs in the Routing Table: 1114 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 226 Number of addresses announced to Internet: 2276381248 Equivalent to 135 /8s, 174 /16s and 210 /24s Percentage of available address space announced: 61.4 Percentage of allocated address space announced: 65.6 Percentage of available address space allocated: 93.7 Percentage of address space in use by end-sites: 85.0 Total number of prefixes smaller than registry allocations: 157088 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 81203 Total APNIC prefixes after maximum aggregation: 27834 APNIC Deaggregation factor: 2.92 Prefixes being announced from the APNIC address blocks: 78077 Unique aggregates announced from the APNIC address blocks: 34231 APNIC Region origin ASes present in the Internet Routing Table: 4198 APNIC Prefixes per ASN: 18.60 APNIC Region origin ASes announcing only one prefix: 1168 APNIC Region transit ASes present in the Internet Routing Table: 650 Average APNIC Region AS path length visible: 3.7 Max APNIC Region AS path length visible: 15 Number of APNIC addresses announced to Internet: 551534112 Equivalent to 32 /8s, 223 /16s and 190 /24s Percentage of available APNIC address space announced: 78.3 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079 55296-56319, 131072-132095 APNIC Address Blocks 1/8, 14/8, 27/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 136044 Total ARIN prefixes after maximum aggregation: 70193 ARIN Deaggregation factor: 1.94 Prefixes being announced from the ARIN address blocks: 108795 Unique aggregates announced from the ARIN address blocks: 43480 ARIN Region origin ASes present in the Internet Routing Table: 13926 ARIN Prefixes per ASN: 7.81 ARIN Region origin ASes announcing only one prefix: 5321 ARIN Region transit ASes present in the Internet Routing Table: 1374 Average ARIN Region AS path length visible: 3.4 Max ARIN Region AS path length visible: 22 Number of ARIN addresses announced to Internet: 735644704 Equivalent to 43 /8s, 217 /16s and 12 /24s Percentage of available ARIN address space announced: 62.6 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 54/8, 55/8, 56/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 107/8, 108/8, 173/8, 174/8, 184/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 76257 Total RIPE prefixes after maximum aggregation: 44237 RIPE Deaggregation factor: 1.72 Prefixes being announced from the RIPE address blocks: 69692 Unique aggregates announced from the RIPE address blocks: 45701 RIPE Region origin ASes present in the Internet Routing Table: 14833 RIPE Prefixes per ASN: 4.70 RIPE Region origin ASes announcing only one prefix: 7643 RIPE Region transit ASes present in the Internet Routing Table: 2238 Average RIPE Region AS path length visible: 3.9 Max RIPE Region AS path length visible: 24 Number of RIPE addresses announced to Internet: 440007168 Equivalent to 26 /8s, 57 /16s and 250 /24s Percentage of available RIPE address space announced: 77.1 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 196608-197631 RIPE Address Blocks 2/8, 25/8, 31/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 176/8, 178/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 30341 Total LACNIC prefixes after maximum aggregation: 7326 LACNIC Deaggregation factor: 4.14 Prefixes being announced from the LACNIC address blocks: 28839 Unique aggregates announced from the LACNIC address blocks: 15055 LACNIC Region origin ASes present in the Internet Routing Table: 1353 LACNIC Prefixes per ASN: 21.31 LACNIC Region origin ASes announcing only one prefix: 419 LACNIC Region transit ASes present in the Internet Routing Table: 233 Average LACNIC Region AS path length visible: 4.0 Max LACNIC Region AS path length visible: 19 Number of LACNIC addresses announced to Internet: 75693952 Equivalent to 4 /8s, 130 /16s and 255 /24s Percentage of available LACNIC address space announced: 56.4 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 262144-263167 plus ERX transfers LACNIC Address Blocks 177/8, 181/8, 186/8, 187/8, 189/8, 190/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 7356 Total AfriNIC prefixes after maximum aggregation: 1891 AfriNIC Deaggregation factor: 3.89 Prefixes being announced from the AfriNIC address blocks: 5662 Unique aggregates announced from the AfriNIC address blocks: 1688 AfriNIC Region origin ASes present in the Internet Routing Table: 407 AfriNIC Prefixes per ASN: 13.91 AfriNIC Region origin ASes announcing only one prefix: 125 AfriNIC Region transit ASes present in the Internet Routing Table: 91 Average AfriNIC Region AS path length visible: 3.8 Max AfriNIC Region AS path length visible: 17 Number of AfriNIC addresses announced to Internet: 20910336 Equivalent to 1 /8s, 63 /16s and 17 /24s Percentage of available AfriNIC address space announced: 62.3 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 1861 9436 505 Korea Telecom (KIX) 7545 1409 297 82 TPG Internet Pty Ltd 4755 1357 368 163 TATA Communications formerly 17488 1347 155 124 Hathway IP Over Cable Interne 17974 1251 301 85 PT TELEKOMUNIKASI INDONESIA 24560 1040 303 179 Bharti Airtel Ltd., Telemedia 9583 1029 77 495 Sify Limited 4808 936 1714 261 CNCGROUP IP network: China169 18101 882 100 132 Reliance Infocom Ltd Internet 9829 820 692 33 BSNL National Internet Backbo Complete listing at http://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3775 3666 277 bellsouth.net, inc. 4323 2712 1106 389 Time Warner Telecom 19262 1821 4708 285 Verizon Global Networks 1785 1796 698 131 PaeTec Communications, Inc. 20115 1491 1530 650 Charter Communications 7018 1490 5731 956 AT&T WorldNet Services 6478 1354 275 136 AT&T Worldnet Services 2386 1297 555 915 AT&T Data Communications Serv 11492 1218 229 78 Cable One 22773 1200 2858 61 Cox Communications, Inc. Complete listing at http://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 3292 448 2026 389 TDC Tele Danmark 8866 417 117 21 Bulgarian Telecommunication C 702 405 1869 319 UUNET - Commercial IP service 8551 402 353 46 Bezeq International 34984 379 90 185 BILISIM TELEKOM 3301 377 1688 333 TeliaNet Sweden 30890 374 79 203 Evolva Telecom 3320 371 7328 322 Deutsche Telekom AG 12479 368 576 5 Uni2 Autonomous System 31148 352 18 77 FreeNet ISP Complete listing at http://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 1339 2559 367 UniNet S.A. de C.V. 10620 1324 248 149 TVCABLE BOGOTA 28573 1168 893 92 NET Servicos de Comunicao S.A 7303 810 424 102 Telecom Argentina Stet-France 6503 755 223 258 AVANTEL, S.A. 14420 563 39 81 CORPORACION NACIONAL DE TELEC 22047 561 310 15 VTR PUNTO NET S.A. 3816 483 210 94 Empresa Nacional de Telecomun 7738 477 922 30 Telecomunicacoes da Bahia S.A 11172 445 99 76 Servicios Alestra S.A de C.V Complete listing at http://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 8452 1008 445 10 TEDATA 24863 737 147 39 LINKdotNET AS number 36992 652 279 181 Etisalat MISR 3741 266 906 224 The Internet Solution 6713 203 199 12 Itissalat Al-MAGHRIB 29571 203 19 11 Ci Telecom Autonomous system 2018 197 277 64 Tertiary Education Network 33776 196 12 14 Starcomms Nigeria Limited 24835 163 78 9 RAYA Telecom - Egypt 16637 154 440 92 MTN Network Solutions Complete listing at http://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3775 3666 277 bellsouth.net, inc. 4323 2712 1106 389 Time Warner Telecom 4766 1861 9436 505 Korea Telecom (KIX) 19262 1821 4708 285 Verizon Global Networks 1785 1796 698 131 PaeTec Communications, Inc. 20115 1491 1530 650 Charter Communications 7018 1490 5731 956 AT&T WorldNet Services 7545 1409 297 82 TPG Internet Pty Ltd 4755 1357 368 163 TATA Communications formerly 6478 1354 275 136 AT&T Worldnet Services Complete listing at http://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4323 2712 2323 Time Warner Telecom 1785 1796 1665 PaeTec Communications, Inc. 19262 1821 1536 Verizon Global Networks 4766 1861 1356 Korea Telecom (KIX) 7545 1409 1327 TPG Internet Pty Ltd 17488 1347 1223 Hathway IP Over Cable Interne 6478 1354 1218 AT&T Worldnet Services 4755 1357 1194 TATA Communications formerly 10620 1324 1175 TVCABLE BOGOTA 17974 1251 1166 PT TELEKOMUNIKASI INDONESIA Complete listing at http://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 40331 UNALLOCATED 8.11.167.0/24 7018 AT&T WorldNet Servic 11946 UNALLOCATED 8.12.155.0/24 40913 Quality Technology S 15040 UNALLOCATED 8.12.156.0/24 3356 Level 3 Communicatio 33084 UNALLOCATED 8.15.195.0/24 3356 Level 3 Communicatio 18826 UNALLOCATED 8.17.208.0/20 2828 XO Communications 16734 UNALLOCATED 8.18.204.0/24 26914 Global Netoptex, Inc 53562 UNALLOCATED 8.19.94.0/24 3356 Level 3 Communicatio 23200 UNALLOCATED 8.20.243.0/24 25653 Pegasus Web Technolo 22015 UNALLOCATED 8.22.137.0/24 14989 Broadview Networks 46856 UNALLOCATED 8.22.184.0/22 3356 Level 3 Communicatio Complete listing at http://thyme.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 31.0.0.0/16 12654 RIPE NCC RIS Project 31.1.0.0/21 12654 RIPE NCC RIS Project 31.1.24.0/24 12654 RIPE NCC RIS Project 41.222.79.0/24 36938 >>UNKNOWN<< 41.223.92.0/22 36936 >>UNKNOWN<< 41.223.196.0/24 36990 Alkan Telecom Ltd 41.223.197.0/24 36990 Alkan Telecom Ltd 41.223.198.0/24 36990 Alkan Telecom Ltd 41.223.199.0/24 36990 Alkan Telecom Ltd 46.16.64.0/22 28703 Joint Stock Company "UralInte Complete listing at http://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:19 /9:10 /10:25 /11:67 /12:203 /13:422 /14:732 /15:1325 /16:11292 /17:5465 /18:9287 /19:18481 /20:23594 /21:23820 /22:31164 /23:30460 /24:173233 /25:1021 /26:1138 /27:584 /28:170 /29:47 /30:3 /31:0 /32:7 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6389 2403 3775 bellsouth.net, inc. 4766 1478 1861 Korea Telecom (KIX) 4323 1369 2712 Time Warner Telecom 1785 1259 1796 PaeTec Communications, Inc. 10620 1212 1324 TVCABLE BOGOTA 11492 1105 1218 Cable One 17488 1087 1347 Hathway IP Over Cable Interne 18566 1068 1087 Covad Communications 24560 941 1040 Bharti Airtel Ltd., Telemedia 8452 922 1008 TEDATA Complete listing at http://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:74 2:15 4:13 8:309 12:2014 13:8 14:13 15:20 16:3 17:9 20:8 24:1376 27:354 31:1 32:61 33:12 38:700 40:97 41:2467 44:3 46:140 47:10 49:4 52:12 55:5 56:2 57:29 58:827 59:505 60:478 61:1087 62:1045 63:1970 64:3727 65:2290 66:4043 67:1843 68:1138 69:2832 70:741 71:375 72:1944 73:2 74:2312 75:289 76:322 77:870 78:677 79:421 80:1016 81:800 82:505 83:454 84:680 85:1038 86:432 87:681 88:325 89:1557 90:104 91:3072 92:430 93:1004 94:1092 95:728 96:398 97:219 98:633 99:32 101:3 108:64 109:709 110:432 111:596 112:295 113:288 114:476 115:600 116:1105 117:659 118:531 119:971 120:178 121:716 122:1549 123:916 124:1228 125:1273 128:228 129:157 130:172 131:558 132:257 133:20 134:207 135:46 136:224 137:140 138:275 139:109 140:480 141:196 142:348 143:352 144:482 145:54 146:429 147:169 148:628 149:304 150:152 151:233 152:291 153:171 154:3 155:367 156:169 157:335 158:112 159:357 160:315 161:190 162:267 163:165 164:417 165:366 166:467 167:409 168:677 169:156 170:719 171:62 172:2 173:1086 174:558 175:176 176:1 177:1 178:518 180:677 181:1 182:228 183:258 184:156 186:685 187:501 188:825 189:805 190:4134 192:5776 193:4738 194:3432 195:2828 196:1202 198:3557 199:3591 200:5411 201:1581 202:8079 203:8302 204:4016 205:2396 206:2529 207:3040 208:3888 209:3496 210:2559 211:1283 212:1777 213:1701 214:665 215:66 216:4742 217:1569 218:491 219:401 220:1170 221:427 222:341 223:46 End of report

1 0

Followup and Thanks: AT&T Dry Pairs?
by Brandon Galbraith 01 Oct '10

01 Oct '10

I just wanted to follow up and say Thank You to everyone who responded to my email regarding getting an "alarm line" from AT&T. I've made some headway once I reached someone with clue, and everyone was extremely helpful with the information they provided. -- Brandon Galbraith US Voice: 630.492.0464

1 0

Visualizing Application Flows with xtractr
by kowsik 01 Oct '10

01 Oct '10

One of the challenges of troubleshooting networks with packet captures is that you quickly lose the bigger picture with the volume of data. And static reports just don't do justice to the flurry of activity on networks. We just posted a video on visualizing application flows using xtractr. You can learn more about xtractr here: http://www.pcapr.net/xtractr http://labs.mudynamics.com/2010/09/30/visualizing-application-flows-with-xt… K. --- http://www.pcapr.net http://twitter.com/pcapr http://labs.mudynamics.com

1 0