- NANOG - lists.nanog.org

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 20 Dec '24

20 Dec '24

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG UKNOF, TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 21 Dec, 2024 IPv4 BGP Table (Global) as seen at Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 973762 Prefixes after maximum aggregation (per Origin AS): 369108 Deaggregation factor: 2.64 Unique aggregates announced (without unneeded subnets): 467868 Number of IPv4 prefixes with a valid ROA: 519398 Number of IPv4 prefixes with an invalid ROA: 1302 Number of IPv4 prefixes with no ROA: 453062 Total ASes present in the Internet Routing Table: 76531 Prefixes per ASN: 12.72 Origin-only ASes present in the Internet Routing Table: 65519 Origin ASes announcing only one prefix: 26843 Transit ASes present in the Internet Routing Table: 11012 Transit-only ASes present in the Internet Routing Table: 533 Average AS path length visible in the Internet Routing Table: 5.3 Max AS path length visible: 65 Max AS path prepend of ASN ( 37447) 57 Prefixes from unregistered ASNs in the Routing Table: 1065 Number of instances of unregistered ASNs: 1070 Number of 32-bit ASNs allocated by the RIRs: 45988 Number of 32-bit ASNs visible in the Routing Table: 37598 Prefixes from 32-bit ASNs in the Routing Table: 196538 Number of bogon 32-bit ASNs visible in the Routing Table: 28 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 488 Number of addresses announced to Internet: 3117187328 Equivalent to 185 /8s, 204 /16s and 129 /24s Percentage of available address space announced: 84.2 Percentage of allocated address space announced: 84.2 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.6 Total number of prefixes smaller than registry allocations: 317636 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 259254 Total APNIC prefixes after maximum aggregation: 76225 APNIC Deaggregation factor: 3.40 Prefixes being announced from the APNIC address blocks: 251517 Unique aggregates announced from the APNIC address blocks: 102498 APNIC Region origin ASes present in the Internet Routing Table: 14484 APNIC Prefixes per ASN: 17.37 APNIC Region origin ASes announcing only one prefix: 4421 APNIC Region transit ASes present in the Internet Routing Table: 1916 Average APNIC Region AS path length visible: 5.5 Max APNIC Region AS path length visible: 39 Number of APNIC region 32-bit ASNs visible in the Routing Table: 9945 Number of APNIC addresses announced to Internet: 756946560 Equivalent to 45 /8s, 30 /16s and 22 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-153913 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 286370 Total ARIN prefixes after maximum aggregation: 126059 ARIN Deaggregation factor: 2.27 Prefixes being announced from the ARIN address blocks: 288276 Unique aggregates announced from the ARIN address blocks: 131474 ARIN Region origin ASes present in the Internet Routing Table: 19211 ARIN Prefixes per ASN: 15.01 ARIN Region origin ASes announcing only one prefix: 6971 ARIN Region transit ASes present in the Internet Routing Table: 2013 Average ARIN Region AS path length visible: 4.6 Max ARIN Region AS path length visible: 39 Number of ARIN region 32-bit ASNs visible in the Routing Table: 5101 Number of ARIN addresses announced to Internet: 1345860096 Equivalent to 80 /8s, 56 /16s and 50 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-402332 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 54/8, 55/8, 56/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 269577 Total RIPE prefixes after maximum aggregation: 130646 RIPE Deaggregation factor: 2.06 Prefixes being announced from the RIPE address blocks: 266505 Unique aggregates announced from the RIPE address blocks: 170130 RIPE Region origin ASes present in the Internet Routing Table: 28824 RIPE Prefixes per ASN: 9.25 RIPE Region origin ASes announcing only one prefix: 12103 RIPE Region transit ASes present in the Internet Routing Table: 3987 Average RIPE Region AS path length visible: 5.3 Max RIPE Region AS path length visible: 54 Number of RIPE region 32-bit ASNs visible in the Routing Table: 12178 Number of RIPE addresses announced to Internet: 732609152 Equivalent to 43 /8s, 170 /16s and 186 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-216475 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 53/8, 57/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 123469 Total LACNIC prefixes after maximum aggregation: 28911 LACNIC Deaggregation factor: 4.27 Prefixes being announced from the LACNIC address blocks: 120945 Unique aggregates announced from the LACNIC address blocks: 48670 LACNIC Region origin ASes present in the Internet Routing Table: 11183 LACNIC Prefixes per ASN: 10.82 LACNIC Region origin ASes announcing only one prefix: 2653 LACNIC Region transit ASes present in the Internet Routing Table: 2501 Average LACNIC Region AS path length visible: 5.9 Max LACNIC Region AS path length visible: 56 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 9104 Number of LACNIC addresses announced to Internet: 177549824 Equivalent to 10 /8s, 149 /16s and 50 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-274844 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 34027 Total AfriNIC prefixes after maximum aggregation: 6596 AfriNIC Deaggregation factor: 5.16 Prefixes being announced from the AfriNIC address blocks: 46031 Unique aggregates announced from the AfriNIC address blocks: 14686 AfriNIC Region origin ASes present in the Internet Routing Table: 1910 AfriNIC Prefixes per ASN: 24.10 AfriNIC Region origin ASes announcing only one prefix: 695 AfriNIC Region transit ASes present in the Internet Routing Table: 376 Average AfriNIC Region AS path length visible: 6.1 Max AfriNIC Region AS path length visible: 65 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 1270 Number of AfriNIC addresses announced to Internet: 103964416 Equivalent to 6 /8s, 50 /16s and 95 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 10100 8754 93 CHINAMOBILE-CN China Mobile Communication 7545 6192 842 661 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4809 4192 76 ERX-CERNET-BKB China Education and Resear 18403 4448 347 23 FPT-AS-AP FPT Telecom Company, VN 9498 4038 523 280 BBIL-AP BHARTI Airtel Ltd., IN 7552 3912 1331 25 VIETEL-AS-AP Viettel Group, VN 7713 3676 1036 72 TELKOMNET-AS-AP PT Telekomunikasi Indones 45899 3257 1869 100 VNPT-AS-VN VNPT Corp, VN 24560 2805 839 541 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., 4766 2280 11519 584 KIXS-AS-KR Korea Telecom, KR Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 12528 38249 3005 AMAZON-02, US 11492 4691 312 556 CABLEONE, US 174 4205 8764 880 COGENT-174, US 7155 4165 287 85 VIASAT-SP-BACKBONE, US 6327 3614 1320 79 SHAW, CA 22773 3394 3035 188 ASN-CXA-ALL-CCI-22773-RDC, US 749 3261 54895 2508 DNIC-AS-00749, US 7018 3254 23510 2065 ATT-INTERNET4, US 396982 2892 3656 438 GOOGLE-CLOUD-PLATFORM, US 16625 2861 1244 2126 AKAMAI-AS, US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 7705 1709 143 UNI2-AS, ES 39891 4750 290 62 ALJAWWALSTC-AS, SA 20940 3918 3395 129 AKAMAI-ASN1, NL 9009 3694 318 1868 M247, RO 12389 2968 2295 883 ROSTELECOM-AS, RU 34984 2351 360 577 TELLCOM-AS, TR 212238 1834 133 1349 CDNEXT, GB 8452 1626 1852 14 TE-AS TE-AS, EG 13188 1607 100 26 TRIOLAN, UA 62240 1495 98 748 CLOUVIDER Clouvider - Global ASN, GB Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 11519 3227 604 UNINET, MX 10620 3543 494 942 Telmex Colombia S.A., CO 13999 2539 541 372 Mega Cable, S.A. de C.V., MX 11830 1994 369 64 Instituto Costarricense de Electricidad y 28573 1332 2310 261 Claro NXT Telecomunicacoes Ltda, BR 3816 1329 778 207 COLOMBIA TELECOMUNICACIONES S.A. ESP BIC, 6503 1170 374 163 Axtel, S.A.B. de C.V., MX 11664 1131 278 33 Techtel LMDS Comunicaciones Interactivas 6147 1117 371 22 Telefonica del Peru S.A.A., PE 22884 1069 98 373 TOTAL PLAY TELECOMUNICACIONES SA DE CV, M Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1650 389 16 LINKdotNET-AS, EG 24835 1649 593 29 RAYA-AS, EG 29571 1464 93 59 ORANGE-COTE-IVOIRE, CI 36992 1425 1518 287 ETISALAT-MISR, EG 36903 1249 554 96 MT-MPLS, MA 36935 999 520 40 Vodafone-, EG 20011 967 179 271 INTERNET-SOLUTIONS, ZA 37069 845 1083 15 MOBINIL, EG 6713 557 1861 35 IAM-AS, MA 36914 543 82 3 KENET-AS, KE Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 12528 38249 3005 AMAZON-02, US 8151 11519 3227 604 UNINET, MX 9808 10100 8754 93 CHINAMOBILE-CN China Mobile Communication 12479 7705 1709 143 UNI2-AS, ES 7545 6192 842 661 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4809 4192 76 ERX-CERNET-BKB China Education and Resear 39891 4750 290 62 ALJAWWALSTC-AS, SA 11492 4691 312 556 CABLEONE, US 18403 4448 347 23 FPT-AS-AP FPT Telecom Company, VN 174 4205 8764 880 COGENT-174, US Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 8151 11519 10915 UNINET, MX 9808 10100 10007 CHINAMOBILE-CN China Mobile Communications Grou 12479 7705 7562 UNI2-AS, ES 7545 6192 5531 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4809 4733 ERX-CERNET-BKB China Education and Research Net 39891 4750 4688 ALJAWWALSTC-AS, SA 18403 4448 4425 FPT-AS-AP FPT Telecom Company, VN 11492 4691 4135 CABLEONE, US 7155 4165 4080 VIASAT-SP-BACKBONE, US 7552 3912 3887 VIETEL-AS-AP Viettel Group, VN Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 400866 UNALLOCATED 2.59.148.0/23 21859 ZEN-ECN, US 33123 UNALLOCATED 8.10.69.0/24 174 COGENT-174, US 12169 UNALLOCATED 8.15.207.0/24 32787 PROLEXIC-TECHNOLOGIES-D 40493 UNALLOCATED 8.17.26.0/24 3356 LEVEL3, US 46639 UNALLOCATED 8.17.66.0/24 701 UUNET, US 53775 UNALLOCATED 8.20.88.0/24 7029 WINDSTREAM, US 393266 UNALLOCATED 8.23.52.0/24 46887 CROWNCASTLE-AS46887, US 396894 UNALLOCATED 8.28.201.0/24 46887 CROWNCASTLE-AS46887, US 394936 UNALLOCATED 8.33.224.0/24 22442 HOU-PHONOSCOPE, US 54338 UNALLOCATED 8.33.241.0/24 3356 LEVEL3, US Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 14.192.20.0/22 Origin: 26658 HENGTONG-IDC-LLC, US 14.192.20.0/22 Transit: 6939 HURRICANE, US 23.132.192.0/24 Origin: 30500 WOLFPAWSERVICES, CA 23.132.192.0/24 Transit: 6939 HURRICANE, US 23.140.16.0/24 Origin: 63371 RESERVED, ZZ 23.140.16.0/24 Transit: 10796 TWC-10796-MIDWEST, US 23.140.48.0/24 Origin: 63371 RESERVED, ZZ 23.140.48.0/24 Transit: 7018 ATT-INTERNET4, US 23.140.216.0/24 Origin: 27176 DATAWAGON, US 23.140.216.0/24 Transit: 20278 NEXEON, US Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:16 /10:42 /11:93 /12:311 /13:590 /14:1222 /15:2152 /16:13975 /17:8296 /18:13778 /19:24878 /20:45100 /21:52508 /22:112306 /23:100992 /24:596800 /25:687 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 6677 7705 UNI2-AS, ES 8151 5714 11519 UNINET, MX 11492 3555 4691 CABLEONE, US 39891 3441 4750 ALJAWWALSTC-AS, SA 6327 3409 3614 SHAW, CA 7155 3113 4165 VIASAT-SP-BACKBONE, US 22773 2527 3394 ASN-CXA-ALL-CCI-22773-RDC, US 16509 2266 12528 AMAZON-02, US 30036 2222 2561 MEDIACOM-ENTERPRISE-BUSINESS, US 10620 2173 3543 Telmex Colombia S.A., CO Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:2316 2:1569 3:533 4:9 5:4474 6:165 7:6 8:1548 9:1 11:172 12:1398 13:357 14:2508 15:332 16:269 17:361 18:901 20:446 21:4 22:188 23:7202 24:2726 25:2 27:2612 29:19 31:3057 32:40 34:69 35:176 36:2405 37:4501 38:9005 39:880 40:150 41:4180 42:2099 43:2521 44:340 45:17974 46:4971 47:298 49:2006 50:1880 51:587 52:1574 54:315 55:1034 56:8 57:233 58:2293 59:1244 60:1154 61:2804 62:2885 63:1832 64:5412 65:2216 66:4646 67:3019 68:1286 69:3987 70:1107 71:596 72:2861 74:2790 75:1634 76:634 77:2566 78:1851 79:1693 80:2220 81:2034 82:1779 83:1412 84:1788 85:3188 86:972 87:2414 88:1266 89:4340 90:759 91:8257 92:2738 93:2836 94:3844 95:4197 96:1246 97:308 98:1065 99:732 100:71 101:1178 102:3463 103:32373 104:4459 105:742 106:1011 107:2603 108:1193 109:4046 110:2237 111:3324 112:2045 113:1831 114:1936 115:2156 116:2048 117:2684 118:2867 119:1955 120:1883 121:1398 122:2741 123:2173 124:1612 125:2859 126:62 128:1578 129:951 130:1265 131:1856 132:805 133:450 134:1507 135:323 136:1332 137:1142 138:2921 139:1542 140:1519 141:1453 142:1835 143:1583 144:1029 145:406 146:2130 147:2039 148:2572 149:2836 150:1160 151:1476 152:2111 153:499 154:7683 155:1572 156:2945 157:1855 158:1249 159:2444 160:3411 161:1748 162:3609 163:1788 164:1687 165:2154 166:1351 167:1861 168:4114 169:797 170:5079 171:994 172:4011 173:3190 174:915 175:1255 176:3553 177:4833 178:3750 179:2252 180:2540 181:3954 182:3358 183:2080 184:2257 185:21304 186:5045 187:4292 188:4223 189:4137 190:9596 191:1550 192:11221 193:9301 194:7685 195:5429 196:3203 197:3497 198:6100 199:8288 200:8079 201:6265 202:10588 203:10480 204:4641 205:3691 206:4673 207:3612 208:4213 209:5130 210:4784 211:2622 212:4499 213:3765 214:1061 215:48 216:6579 217:3072 218:1380 219:540 220:2108 221:1052 222:849 223:2313 End of report

1 0

Coming to the N93 Stage in Atlanta! Happy Holidays + More
by Nanog News 20 Dec '24

20 Dec '24

*** Coming to the N93 Stage in Atlanta!* ------------------------------------------------------------ *Get a Sneak Peek of NANOG 93 Programming Now* *Check out our exciting upcoming programming including:* + DNSSEC-Related Outages + Using AI Agents for Automated Networking Script Development + DNS Session: Let's Stop Using DNS + Now You Can Too! Design-Driven Automation + More More talks will be listed as the PC accepts submissions. ****Please note, standard registration rates will end this Sunday, 22 Dec.* *MORE INFO* <https://nanog.org/events/nanog-93/> ( https://nanog.org/events/nanog-93/) *** A (Tech) Road Less Traveled: Breaking Barrie-ers w/ Barrie Jones Cook* ------------------------------------------------------------ *The Path to Redefining Career Flexibility* Whether solving complex technical challenges as a successful entrepreneur or crafting cosplay costumes for her kids, Barrie exemplifies how a dynamic career and family life can coexist. *READ MORE* <https://nanog.org/stories/articles/a-tech-road-less-traveled-breaking-barri…> ( https://nanog.org/stories/articles/a-tech-road-less-traveled-breaking-barri… ) *** NANOG 93 Sponsorships* ------------------------------------------------------------ Please contact Shawn Winstead at swinstead(a)nanog.org (mailto: swinstead(a)nanog.org) for N93 Sponsorship information. *** Happy Holidays from all of us at NANOG!* ------------------------------------------------------------ *Wishing You a Season of Joy, Warmth, and Connection—Online and Off!* As the year comes to a close, we're filled with gratitude for our incredible community of tech enthusiasts, innovators, and network operators who make NANOG so special. *** Stay Connected* ------------------------------------------------------------ http://www.facebook.com http://www.instagram.com/nanog_org/ http://www.linkedin.com/company/nanog/ https://www.twitter.com/nanog/ http://nanog.org

1 0

PIR.org contact me, ASAP, please?
by Dan Mahoney 20 Dec '24

20 Dec '24

Hey there, Dayjob recently got a report from compliance(a)tucows.com alleging that an old, historic bind9.tar.gz.asc (a plain-text checksum file) on ftp.isc.org is malware. It’s not. It’s a false positive. Additionally, the URL they sent to vew the reporting material is http-only, and does not work, but it’s not hosted by tucows/hover, it’s hosted at http://url4091.abuse-report.pir.org, is http-only (what year is it?) and doesn’t work! Nor does that report actually come out and say what the file in question is, it’s only shown in an attached screenshot. Given what recently happened to another important internet domain (one of our IP providers) being put on administrative hold due to basically one complaint of fraud, I am incredibly concerned. I’ve been in touch with the registrar that holds our domain name about this (Hover/Tucows), and I’ve got a direct line with the CTO, but I need assurances that this will not lead to obnoxious actions, a week before Christmas. -Dan (From personal address, but with very much DayJob hat on)

4 3

Web.com support
by Eric Tykwinski 19 Dec '24

19 Dec '24

I just had a customer transfer a domain from Web.com <http://web.com/> to NameCheap.com <http://namecheap.com/>. The domain just released today and web.com <http://web.com/> deleted all DNS records, so I’m unable to log into NameCheap to change DNS because they use email 2FA. I called into NameCheap and they allowed me in, but is there any rules saying that the DNS zone should be at least up for 24 hours or something after a pending transfer is completed?

2 1

Contact at Lumen 3356/IP Networking
by Drew Weaver 19 Dec '24

19 Dec '24

If there are any folks from Lumen in the IP/Internet side on list I just had a couple of questions. Please contact off-list! Thanks, -Drew

1 0

NANOG 93: Registration + Room Block Reminder
by jblack＠nanog.org 18 Dec '24

18 Dec '24

Dear NANOG Community, A quick reminder before the holidays about NANOG 93 registration and hotel room block. NANOG 93 will take place February 03-05, 2025 in Atlanta, Georgia. NANOG Registration Fees: Currently we are in the Standard Registration Fee tier of $775 Member / $800 Non-member. If you plan to attend NANOG 93, register today and save $100 until Dec 22 before the price changes! View information on registration rates, social guest passes, deadlines, + cancellation policy at https://nanog.org/events/nanog-93/register/ NANOG Hotel Guest Room Block: The NANOG 93 Conference hotel guest room block is only available to registered attendees through December 22. Please make sure you have booked your hotel room before the block is opened up to everyone on December 23. Venue details, and a link to access the room block is available at https://nanog.org/events/nanog-93/venue/ Why Attend NANOG: We've put together some reasons why you should attend NANOG if you are looking for travel justification. Depending on where you are in your career, check out the reasons why you should be at NANOG. Student/Entry Level reasons to be at NANOG: https://nanog.org/events/why-attend-student-entry-level/ Intermediate/Senior/Executive Level reasons to be at NANOG: https://nanog.org/events/why-attend-intermediate-senior-executive/ Get on the NANOG Stage: Don't forget the Program Committee would like to hear from you too. They are accepting presentation proposals for NANOG 93 through January 6, 2025. Learn more at https://nanog.org/program/call-presentations/ Community Support: We're looking for a few key sponsors to participate in the February meeting. If you or your organization is interested in supporting our event, we're looking for sponsors for the Espresso Bar, the T-shirts, the lanyards and the hotel key card. If you want to talk about any available opportunities, please contact the NANOG staff at sponsor-support(a)nanog.org <mailto:sponsor-support@nanog.org> Happy Holidays. Looking forward to seeing you in Atlanta. Jonathan Black Executive Director <mailto:jblack@nanog.org> jblack(a)nanog.org | +1 613 612 2019 (mobile) | <http://www.nanog.org/> www.nanog.org ASN19230

1 0

Need Centurylink contact for serious ongoing issue
by John Neiberger 16 Dec '24

16 Dec '24

I apologize for using NANOG for this, but I need to get some traction on a telephone outage affecting a large number of homes in a small town that Centurylink seems to be unaware of. The affected customers have had no phone service for days and none of them know what's going on. Centurylink customer service says there are no outages in the area and just want to dispatch a tech to an individual home rather than escalate this as the emergency that it is. This is a rural area with poor cell service, so many of these customers have no alternative. I'm particularly concerned that many of the affected customers would be unable to reach emergency services, and haven't been able to for 3-4 days already. If someone has a contact at Centurylink that can escalate this, please contact me off-list. Many thanks! John Neiberger

12 17

Re: overly timid congestion control with amazon prime live video
by L Sean Kennedy 14 Dec '24

14 Dec '24

I replied to Dan off list to investigate. Any Prime Video quality issues reported to an ISP by customers or CDN issues can be sent directly to primevideo-isp-us(a)amazon.com . Thanks, Sean >> On Dec 13, 2024, at 3:52 PM, Daniel Sterling <sterling.daniel(a)gmail.com> wrote: >> >> While streaming football last night from AT&T fiber (AS7018), I >> noticed the video quality went way down when I did a large download on >> another system. I have gigabit fiber but I'm using Linux tc to >> throttle my network traffic. I've configured cake with a 200mbit >> limit, and I also use a low BQL setting to further ensure low latency >> for low-bandwidth traffic. >> >> IOW, my Linux router will drop packets across the board rather >> liberally in the face of large downloads, but I've always seen streams >> fight back for their share of the bandwidth -- except for amazon's. >> >> The live stream appears to use UDP on a non-standard port (not 443). >> Does anyone know what amazon has done to cause their congestion >> control algorithms to yield so much bandwidth and not fight for their >> fair share? >> >> Thanks, >> Dan

4 4

overly timid congestion control with amazon prime live video
by Daniel Sterling 13 Dec '24

13 Dec '24

While streaming football last night from AT&T fiber (AS7018), I noticed the video quality went way down when I did a large download on another system. I have gigabit fiber but I'm using Linux tc to throttle my network traffic. I've configured cake with a 200mbit limit, and I also use a low BQL setting to further ensure low latency for low-bandwidth traffic. IOW, my Linux router will drop packets across the board rather liberally in the face of large downloads, but I've always seen streams fight back for their share of the bandwidth -- except for amazon's. The live stream appears to use UDP on a non-standard port (not 443). Does anyone know what amazon has done to cause their congestion control algorithms to yield so much bandwidth and not fight for their fair share? Thanks, Dan

1 0

Curious if anyone can confirm this phish?
by Chris Boyd 13 Dec '24

13 Dec '24

Posted on Mastodon yesterday. Curious if anyone can confirm this? Via https://infosec.exchange/@threatinsight/113641860084873613 Between December 11 and 12, 2024, a spearphishing campaign targeted at least 20 Autonomous System (AS) owners, predominantly Internet Service Providers (ISPs), and purported to come from the Network Operations Center (NOC) of a prominent European ISP. All of the observed targeted entities peer with the spoofed ISP and phishing emails were sent to contact addresses present in the AS's WHOIS records, indicative of a highly deliberate targeting effort. Each spearphishing email was personalized to the target based on their Autonomous System Number (ASN) and purported to relate to a detected BGP (Border Gateway Protocol) flapping session within the target’s network. The email contained a password protected RAR archive named “Detailed Explanation of AS Relationships and the Impact of BGP Flapping on Upstream Networks.rar”. The RAR contains a Microsoft Shortcut (LNK) file which executes a Portable Executable (PE) file contained in a hidden folder named “_MACOSX”. Following execution, the target is shown a decoy document related to BGP Flapping, and the executable file uses indirect syscalls to load shellcode into memory before it deletes itself from disk. We are raising early awareness of this campaign given the coordinated effort to target network infrastructure administration personnel across a broad range of AS owners. More at https://infosec.exchange/@threatinsight/113641860084873613

1 0