- NANOG - lists.nanog.org

Microsoft express routes contact
by Craig 16 Feb '22

16 Feb '22

Could someone from Microsoft please contact me off line please. We have had tickets opened for quite a while now but the ticket seems to be not getting to the correct team. We have a customer who has been trying to get their app working, we have an express route peering directly to MS, however we are NOT receiving the more specific prefix over express routes. This is creating issues w/ the app working due to the FW involved. The Azure Host IPv4 is: 52.158.246.45 <https://urldefense.com/v3/__http:/52.158.246.45__;!!NHLzug!dMhpBpzFo0cPNAWE…> and here are the networks we are learning over express routes: 52.158.0.0/17 52.158.160.0/20 52.158.176.0/20 52.158.192.0/19 52.159.64.0/18 However we are receiving a prefix over our ISP where the route is being used. I have not been able to find this specific host in the Azure route table dump that is posted on the MS web site. cpv

1 0

Fwd: [members-discuss] Cloud Innovation Ltd vs AFRINIC (SCR 5C/30/21) Court Update
by Mark Tinka 16 Feb '22

16 Feb '22

FYI. Mark. -------- Forwarded Message -------- Subject: [members-discuss] Cloud Innovation Ltd vs AFRINIC (SCR 5C/30/21) Court Update Date: Tue, 15 Feb 2022 18:49:56 +0400 From: AFRINIC Communication <comms(a)afrinic.net> To: AFRINIC Members Discuss <members-discuss(a)afrinic.net> Dear Colleagues, I am pleased to share with you the ruling delivered yesterday, 14 February 2022, in the appeal case ref Cloud Innovation Ltd vs African Network Information Centre (AfriNIC) Ltd. https://afrinic.net/ast/case9-judgement.pdf This case was filed in response to a letter that AFRINIC sent to Cloud Innovation Ltd dated 10 March 2021 pursuant to the provisions of the Registration Service Agreement (RSA) whereby AFRINIC contended that Cloud Innovation Ltd was, and continues to be, in breach of the RSA. This appeal stems from Cloud Innovation Ltd’s application for Interim Injunction, which was initially granted in its favour on 29 March 2021, but then set aside by the Honourable Judge in Chambers on 07 July 2021. Cloud Innovation Ltd had appealed against that judgement, and the hearing took place on 27 January 2022. To put it simply, the Appellate Division of the Supreme Court of Mauritius has, after having considered the arguments from both sides, dismissed the appeal. In other words, AFRINIC has won this appeal. No doubt, this is an essential milestone for AFRINIC, and we wish to thank the team and our stakeholders for their continued support. Kind Regards, Eddy Kayihura, Chief Executive Officer, African Network Information Centre (AFRINIC) ceo(a)afrinic.net …………………………………………………………………………….. Chers collègues, J'ai le plaisir de vous faire part de ce jugement rendu hier, 14 février 2022, dans l'affaire en appel réf Cloud Innovation Ltd vs African Network Information Centre (AfriNIC) Ltd. https://afrinic.net/ast/case9-judgement.pdf Cette affaire a été déposée en réponse à un courrier qu’AFRINIC a envoyé à Cloud Innovation Ltd en date du 10 mars 2021 conformément aux dispositions du Registration Service Agreement (RSA), dans lequel l'AFRINIC soutenait que Cloud Innovation Ltd était, et continue d'être, en infraction avec le RSA. Cet appel découle de la demande d'injonction provisoire de Cloud Innovation Ltd, qui a été initialement accordée en sa faveur le 29 mars 2021, mais ensuite annulée par l'honorable juge en chambre le 7 juillet 2021. Cloud Innovation Ltd a fait appel de ce jugement, et l'audience a eu lieu le 27 janvier 2022. En bref, la division d'appel de la Cour suprême de Maurice a, après avoir examiné les arguments des deux parties, rejeté l'appel. En d'autres termes, AFRINIC a gagné cet appel. Il s'agit sans aucun doute d'une étape essentielle pour l'AFRINIC, et nous souhaitons remercier l'équipe et nos parties prenantes pour leur soutien continu. Cordialement Eddy Kayihura, Directeur général, African Network Information Centre (AFRINIC) ceo(a)afrinic.net ………………………………………………………………………………………….. زملائي الأعزاء، يسعدني أن أشارككم الحكم الصادر بالأمس ، 14 فبراير 2022 ، في قضية الاستئناف المرجع Cloud Innovation Ltd vs African Network Information Center (AfriNIC) Ltd. https://afrinic.net/ast/case9-judgement.pdf تم رفع هذه القضية ردًا على خطاب أرسلته AFRINIC إلى Cloud Innovation Limited بتاريخ 10 مارس 2021 وفقًا لأحكام اتفاقية خدمة التسجيل (RSA) حيث أكدت AFRINIC أن Cloud Innovation Ltd كانت ولا تزال تنتهك RSA. ينبع هذا الاستئناف من طلب Cloud Innovation Limited للأمر المؤقت ، والذي تم منحه في البداية لصالحها في 29 مارس 2021 ، ولكن بعد ذلك ألغاه القاضي الموقر في الدوائر في 07 يوليو 2021. استأنفت Cloud Innovation Limited ضد هذا الحكم ، و عُقدت جلسة الاستماع في 27 يناير 2022. وببساطة ، فإن دائرة الاستئناف في المحكمة العليا لموريشيوس ، بعد أن نظرت في الحجج المقدمة من كلا الجانبين ، رفضت الاستئناف. بعبارة أخرى ، حازت AFRINIC على هذا النداء. لا شك أن هذا يعد معلمًا أساسيًا لـ AFRINIC ، ونود أن نشكر الفريق وأصحاب المصلحة لدينا على دعمهم المستمر. أطيب التحيات، إيدي كاييهورا ، الرئيس التنفيذى، المركز الأفريقي لمعلومات الشبكة (AFRINIC) ceo(a)afrinic.net …………………………………………………………………………………………….. Caros Colegas, Tenho o prazer de partilhar convosco a decisão proferida ontem, 14 de Fevereiro de 2022, no processo de recurso ref Cloud Innovation Ltd contra African Network Information Centre (AfriNIC) Ltd. https://afrinic.net/ast/case9-judgement.pdf Este caso foi arquivado em resposta a uma carta que a AFRINIC enviou à Cloud Innovation Ltd com data de 10 de Março de 2021, em conformidade com as disposições do Acordo de Serviço de Registo (RSA) em que a AFRINIC alegava que a Cloud Innovation Ltd estava, e continua a estar, em violação da RSA. Este recurso decorre do pedido de injunção provisória da Cloud Innovation Ltd, que foi inicialmente concedido a seu favor a 29 de Março de 2021, mas depois anulado pelo Meritíssimo Juiz das Câmaras a 07 de Julho de 2021. A Cloud Innovation Ltd tinha recorrido dessa sentença, e a audiência teve lugar a 27 de Janeiro de 2022. Para simplificar, a Divisão de Apelação do Supremo Tribunal das Maurícias, após ter considerado os argumentos de ambas as partes, indeferiu o recurso. Por outras palavras, a AFRINIC ganhou este recurso. Sem dúvida, este é um marco essencial para a AFRINIC, e gostaríamos de agradecer à equipa e às nossas partes interessadas o seu apoio continuado. Cumprimentos, Eddy Kayihura, Chefe do Executivo, Centro de Informação da Rede Africana (AFRINIC) ceo(a)afrinic.net _______________________________________________ Members-Discuss mailing list Members-Discuss(a)afrinic.net https://lists.afrinic.net/mailman/listinfo/members-discuss

1 0

Proofpoint woes?
by Adam Thompson 15 Feb '22

15 Feb '22

I realize this is a more networking-focused forum, but I'm wondering if anyone has contacts inside Proofpoint? They're an anti-spam service provider who has suddenly begun rejecting metric s***tons of email for (seemingly) bogus DMARC failures within the last week or so. -Adam Get Outlook for Android<https://aka.ms/AAb9ysg>

4 3

H&R Block contact
by Andy Ringsmuth 15 Feb '22

15 Feb '22

Is there any chance someone on here is associated with H&R Block, or knows someone who is, that could reach out to me off-list? Much appreciated. ---- Andy Ringsmuth 5609 Harding Drive Lincoln, NE 68521-5831 (402) 304-0083 andy(a)andyring.com

1 0

NANOG 84 VIRTUAL EXPO IS LIVE
by Nanog News 14 Feb '22

14 Feb '22

*** The Latest Technology, all in One Space* ------------------------------------------------------------ Be sure to visit the NANOG 84 Virtual Expo throughout the conference to learn about the latest technologies, connect with tech reps + win raffle prizes! Expo doors are open today through Feb. 25! Scroll on to learn more about each of our exhibitors. *VISIT EXPO BOOTH * <https://www.nanog.org/events/nanog-84/virtual-expo/> *** Comcast Technology Solutions* ------------------------------------------------------------ *Our media and entertainment technology redefines digital experiences and delivers the future of media to global audiences* Comcast Technology Solutions offers a portfolio of technology solutions, the CTSuite, that provides the industry with the technology, scale, and expertise to expand and navigate the rapidly-changing media and entertainment technology landscape. We invent technology that solves industry challenges, reimagines what is possible, and transforms businesses for an ever-changing world. Built on Comcast’s know-how, proven facilities, scalable platforms, and infrastructure, Comcast Technology Solutions offers more than 20 years of reliable real-world broadcast and digital experience. We partner with customers to redefine expectations and deliver the future to global audiences. Learn more: comcasttechnologysolutions.com *Visit Expo Booth <https://www.nanog.org/events/nanog-84/virtual-expo/comcast/overview/> * *** Element Critical* ------------------------------------------------------------ *Your Data Center Your Way* Element Critical is a leading provider of tailored data center services backed by our solutions engineering expertise. Enterprise businesses can accelerate their digital transformation initiatives in our secure and high-performance facilities strategically located in Silicon Valley-California, Austin-Texas, Houston-Texas, Chicago-Illinois, and Vienna-Virginia. Our Tier III facilities are hybrid IT-ready, network-rich, concurrently maintainable, and available in various deployment sizes and densities. Element Critical cares as much about the people we serve as the servers we house. For more information, visit www.elementcritical.com ( https://www.elementcritical.com/) or connect with our team at sales(a)elementcritical.com (mailto:sales@elementcritical.com) RAFFLE: * Apple AirPod Pros! Visit Expo Booth ( https://www.nanog.org/events/nanog-84/virtual-expo/element-critical/overvie… ) https://www.nanog.org/events/nanog-84/virtual-expo/juniper-networks/overvie… *** Juniper Networks* ------------------------------------------------------------ *Engineering Simplicity* Juniper Networks brings simplicity to networking with products, solutions, and services that connect the world. Through engineering innovation, we harness the power of networking in the cloud to solve the toughest challenges. Learn more: juniper.net *Visit Expo Booth <https://www.nanog.org/events/nanog-84/virtual-expo/juniper-networks/overvie…> * *** Microsoft* ------------------------------------------------------------ *Learn. Connect. Explore.* Empowering Others: Our mission is to empower every person and every organization on the planet to achieve more. Learn more: microsoft.com/en-us *Visit Expo Booth <https://www.nanog.org/events/nanog-84/virtual-expo/microsoft/overview/> * ** NOKIA ------------------------------------------------------------ *Open up a New Era of Data Center Networking* Cloud builders like you are faced with scaling your data centers to deliver distributed cloud applications, but current solutions lock you into building data center networks their way with tools that limit how you operate them. Nokia SR Linux is an open Linux-based NOS that gives you a flexible and consumable foundation to support data center networks at scale. And with the Nokia Fabric Services Platform, you get a declarative, intent-based toolkit to automate your data center network operations. So, you can manage data center growth and the accelerating demand for distributed cloud-based applications the way that best suits you. Learn more: nokia.com (https://www.nokia.com/networks/dc-fabric/) *Visit Expo Booth * <https://www.nanog.org/events/nanog-84/virtual-expo/nokia/overview/> *** NETSCOUT* ------------------------------------------------------------ *Visibility Without Borders* NETSCOUT SYSTEMS, INC. (NASDAQ: NTCT) helps assure digital business services against disruptions in availability, performance, and security. Our market and technology leadership stems from combining our patented smart data technology with smart analytics. We provide real-time, pervasive visibility and insights customers need to accelerate and secure their digital transformation. To learn more about improving service, network, and application performance in physical or virtual data centers, or in the cloud, and how NETSCOUT's performance and security solutions powered by service intelligence can help you move forward with confidence, visit www.netscout.com or follow @NETSCOUT on Twitter, Facebook, or LinkedIn. RAFFLE: * $200 Amazon Gift Card Giveaway! *Visit Expo Booth <https://www.nanog.org/events/nanog-84/virtual-expo/netscout/overview/> * *** NETWORK TO CODE* ------------------------------------------------------------ *Bridging the gap between DevOps & Networking* Network to Code is a leading network automation solution provider committed to bridging the gap between DevOps and Network Engineering. Founded by Jason Edelman, Network to Code has been a pioneer in the network automation industry since 2014. Our mission is to drastically change the way networks are deployed, managed, consumed, and operated daily by leveraging network automation and DevOps technologies and principles. Network to Code provides a variety of strategic consulting and professional services to define, design, implement, and support outcome-driven, network automation solutions. We work with clients across all industries and geographies, taking a vendor- and tool-agnostic approach, making automation a reality for any network. RAFFLE: *Visit Expo Booth <https://www.nanog.org/events/nanog-84/virtual-expo/network-to-code/overview/> * *** Precision Optical* ------------------------------------------------------------ *Custom Solutions. Reliable Networks* Precision Optical Transceivers is a system engineering company focused on optical transceivers and related active/passive optical components. For over a decade, we have helped build networks around the globe by providing high-quality, custom-engineered optical solutions. Learn more: precisionot.com Raffle: * Yeti Cooler *Visit Expo Booth <https://www.nanog.org/events/nanog-84/virtual-expo/precision-optical-transc…> * ============================================================ ** (http://www.facebook.com/NANOG.org) ** (http://www.instagram.com/nanog_org/) ** (http://www.linkedin.com/company/nanog/) ** (http://www.twitter.com/nanog/) ** (http://nanog.org) Copyright © *|CURRENT_YEAR|* *|LIST:COMPANY|*, All rights reserved. *|IFNOT:ARCHIVE_PAGE|* *|LIST:DESCRIPTION|* Our mailing address is: *|LIST_ADDRESS|* *|END:IF|* Want to change how you receive these emails? You can ** update your preferences (*|UPDATE_PROFILE|*) or ** unsubscribe from this list (*|UNSUB|*) . *|IF:REWARDS|* *|REWARDS_TEXT|* *|END:IF|*

1 0

(Free)RADIUS Front-End
by Mark Tinka 12 Feb '22

12 Feb '22

Hi all. I haven't been in the space in yonks, but I'm having to look into it for an acquisition. What's the latest on front-end panels for RADIUS, specifically, FreeRADIUS? I fumbled around with Daloradius some years back, but mainly to manage some pfSense captive portals for guest wi-fi VLAN's at the office. I found these chaps who make some basic comparisons between themselves and what is out there: https://www.cloudradius.com/is-there-a-freeradius-gui/ Grateful to get feedback, on- and off-list, about what folk are doing with this tech. nowadays. Enterpri$e options are welcome too, but essentially, we are just looking for an easy on-premise (no cloud, please; I consider RADIUS critical network infrastructure) pretty GUI system that can make the engineers, NOC, provisioning and billing teams happy; and especially, the customers, of course. I don't trust myself with Google to avoid snake oil in my search :-). All help appreciated. Thanks. Mark.

7 13

Fiber contractor in Washington state
by Ross Tajvar 12 Feb '22

12 Feb '22

Hi all, I'm looking for a fiber contractor to trench some fiber on private property and then splice it inside. The work will be in Washington state, north of Spokane. Does anyone have recommendations? On- and off-list welcome. Thanks, Ross

5 4

Re: VPN recommendations?
by Rich Greenwood 11 Feb '22

11 Feb '22

The port forwarding only applies to manual NAT traversal. If you use auto NAT traversal, it takes care of that. Because all of the connections are coordinated through the dashboard, the Auto-VPN will typically work even if all nodes are behind NAT. I've used them on the end of Verizon (CG-NAT) connections and they work fine. I have had one instance where three of them were behind the same single IP NAT and the third would fail to connect. We had to get one of them moved to a different NAT IP to solve that. If you're looking for a simple to use, easy to manage VPN appliance, the MX (and Z) Meraki products will work. The config is entirely handled through the dashboard, so no-touch, drop ship deployments are an option. You can provide view only access to users per network, so the customer or a first level tech could be given the ability to look but not break anything. All of the MX and Z products will work in a single VPN, so you can pick the device that best fits the requirements. For a small office with one or two people, the Z3 works great, it even has one PoE port for an IP phone. For larger sites or the core site, they go up to 6Gb (I think) of throughput for the MX450, with redundant power and uplinks. As others have pointed out, they are license based and they don't work without a license, and they are a Cisco product, so pricing will depend on how good your relationship is with your Cisco rep. :) One big caveat: they are still lacking in the IPv6 realm so if that is a requirement, they won't work right now. --Rich > ---------- Forwarded message ---------- > From: William Herrin <bill(a)herrin.us> > To: Shawn L <shawnl(a)up.net> > Cc: "nanog(a)nanog.org" <nanog(a)nanog.org> > Bcc: > Date: Thu, 10 Feb 2022 10:54:39 -0800 > Subject: Re: VPN recommendations? > On Thu, Feb 10, 2022 at 10:18 AM Shawn L <shawnl(a)up.net> wrote: > > Meraki MX series? Dynamic IPs and NATs don't really cause them a > problem. Some CGNats do (AT&T I'm looking at you). > > Thanks Shawn, > > The documentation I found at > > https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-Site_VPN_Setti… > suggests that the NAT firewall has to be explicitly configured to > deliver UDP 500/4500 to the Meraki behind it. Are you aware of any > documentation that describes: > > LAN - Meraki - NAT (dynaimic IP) - Internet - (static IP) Meraki - LAN > > Where the left-side Meraki is responsible for establishing and keeping > the NAT translations alive without any special configuration on the > NAT? > > Regards, > Bill > -- Rich Greenwood Network Engineer Shasta County Office of Education Information Technology 1644 Magnolia Ave. Redding, CA 96001 Office: 530-225-0161 Hotline: 530-225-0279 rgreenwood(a)shastacoe.org

1 0

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 11 Feb '22

11 Feb '22

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 12 Feb, 2022 BGP Table (Global) as seen in Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 888216 Prefixes after maximum aggregation (per Origin AS): 334710 Deaggregation factor: 2.65 Unique aggregates announced (without unneeded subnets): 427455 Total ASes present in the Internet Routing Table: 72833 Prefixes per ASN: 12.20 Origin-only ASes present in the Internet Routing Table: 62489 Origin ASes announcing only one prefix: 25802 Transit ASes present in the Internet Routing Table: 10344 Transit-only ASes present in the Internet Routing Table: 368 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 53 Max AS path prepend of ASN (265020) 50 Prefixes from unregistered ASNs in the Routing Table: 962 Number of instances of unregistered ASNs: 965 Number of 32-bit ASNs allocated by the RIRs: 38545 Number of 32-bit ASNs visible in the Routing Table: 32109 Prefixes from 32-bit ASNs in the Routing Table: 149645 Number of bogon 32-bit ASNs visible in the Routing Table: 22 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 562 Number of addresses announced to Internet: 3068928512 Equivalent to 182 /8s, 236 /16s and 34 /24s Percentage of available address space announced: 82.9 Percentage of allocated address space announced: 82.9 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 300423 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 233450 Total APNIC prefixes after maximum aggregation: 65864 APNIC Deaggregation factor: 3.54 Prefixes being announced from the APNIC address blocks: 228289 Unique aggregates announced from the APNIC address blocks: 94179 APNIC Region origin ASes present in the Internet Routing Table: 12370 APNIC Prefixes per ASN: 18.46 APNIC Region origin ASes announcing only one prefix: 3541 APNIC Region transit ASes present in the Internet Routing Table: 1714 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 29 Number of APNIC region 32-bit ASNs visible in the Routing Table: 7566 Number of APNIC addresses announced to Internet: 774475904 Equivalent to 46 /8s, 41 /16s and 144 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-151865 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 258538 Total ARIN prefixes after maximum aggregation: 119014 ARIN Deaggregation factor: 2.17 Prefixes being announced from the ARIN address blocks: 258644 Unique aggregates announced from the ARIN address blocks: 123403 ARIN Region origin ASes present in the Internet Routing Table: 18983 ARIN Prefixes per ASN: 13.63 ARIN Region origin ASes announcing only one prefix: 6899 ARIN Region transit ASes present in the Internet Routing Table: 1960 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 35 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4342 Number of ARIN addresses announced to Internet: 1295964160 Equivalent to 77 /8s, 62 /16s and 216 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 253719 Total RIPE prefixes after maximum aggregation: 116382 RIPE Deaggregation factor: 2.18 Prefixes being announced from the RIPE address blocks: 250101 Unique aggregates announced from the RIPE address blocks: 148984 RIPE Region origin ASes present in the Internet Routing Table: 28185 RIPE Prefixes per ASN: 8.87 RIPE Region origin ASes announcing only one prefix: 12134 RIPE Region transit ASes present in the Internet Routing Table: 3977 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 32 Number of RIPE region 32-bit ASNs visible in the Routing Table: 10644 Number of RIPE addresses announced to Internet: 713448576 Equivalent to 42 /8s, 134 /16s and 92 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 113955 Total LACNIC prefixes after maximum aggregation: 27367 LACNIC Deaggregation factor: 4.16 Prefixes being announced from the LACNIC address blocks: 114689 Unique aggregates announced from the LACNIC address blocks: 48536 LACNIC Region origin ASes present in the Internet Routing Table: 10944 LACNIC Prefixes per ASN: 10.48 LACNIC Region origin ASes announcing only one prefix: 2676 LACNIC Region transit ASes present in the Internet Routing Table: 2210 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 53 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8630 Number of LACNIC addresses announced to Internet: 176510208 Equivalent to 10 /8s, 133 /16s and 85 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-273820 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 27592 Total AfriNIC prefixes after maximum aggregation: 5367 AfriNIC Deaggregation factor: 5.14 Prefixes being announced from the AfriNIC address blocks: 35931 Unique aggregates announced from the AfriNIC address blocks: 11875 AfriNIC Region origin ASes present in the Internet Routing Table: 1593 AfriNIC Prefixes per ASN: 22.56 AfriNIC Region origin ASes announcing only one prefix: 552 AfriNIC Region transit ASes present in the Internet Routing Table: 312 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 34 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 927 Number of AfriNIC addresses announced to Internet: 108164608 Equivalent to 6 /8s, 114 /16s and 118 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 9059 8886 46 CHINAMOBILE-CN China Mobile Communicati 7545 5867 788 691 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4681 4192 74 ERX-CERNET-BKB China Education and Rese 7552 3596 1330 20 VIETEL-AS-AP Viettel Group, VN 7713 3484 1038 51 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 3435 1880 57 VNPT-AS-VN VNPT Corp, VN 4766 2557 11123 631 KIXS-AS-KR Korea Telecom, KR 9498 2317 475 235 BBIL-AP BHARTI Airtel Ltd., IN 45090 2170 1438 79 TENCENT-NET-AP Shenzhen Tencent Compute 4755 2114 429 198 TATACOMM-AS TATA Communications formerl Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 6241 10151 2680 AMAZON-02, US 11492 4514 299 785 CABLEONE, US 22773 3963 3028 367 ASN-CXA-ALL-CCI-22773-RDC, US 7155 3902 264 30 VIASAT-SP-BACKBONE, US 16625 3650 1883 2564 AKAMAI-AS, US 6327 3376 1318 63 SHAW, CA 749 2887 50780 2143 DNIC-AS-00749, US 30036 2608 374 150 MEDIACOM-ENTERPRISE-BUSINESS, US 209 2519 4962 428 CENTURYLINK-US-LEGACY-QWEST, US 20115 2253 3036 500 CHARTER-20115, US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6801 1715 152 UNI2-AS, ES 9121 6745 1692 17 TTNET, TR 8551 4004 378 39 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 3887 3347 207 AKAMAI-ASN1, NL 39891 3274 188 25 ALJAWWALSTC-AS, SA 12389 2961 2274 910 ROSTELECOM-AS, RU 9009 2469 250 1285 M247, GB 34984 2225 358 604 TELLCOM-AS, TR 47331 1953 312 1490 TTNET, TR 58224 1792 929 580 TCI, IR Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10268 3415 566 Uninet S.A. de C.V., MX 10620 3458 519 719 Telmex Colombia S.A., CO 11830 2456 369 62 Instituto Costarricense de Electricidad 13999 1666 284 474 Mega Cable, S.A. de C.V., MX 6503 1441 354 524 Axtel, S.A.B. de C.V., MX 28573 1400 2330 246 CLARO S.A., BR 3816 1246 651 148 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 26615 1149 2351 140 TIM SA, BR 6147 1096 369 21 Telefonica del Peru S.A.A., PE 11664 1001 191 447 Techtel LMDS Comunicaciones Interactiva Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1607 393 21 LINKdotNET-AS, EG 24835 1546 515 32 RAYA-AS, EG 36992 1299 1518 262 ETISALAT-MISR, EG 36903 1195 543 114 MT-MPLS, MA 29571 895 63 57 ORANGE-COTE-IVOIRE, CI 36935 735 521 39 Vodafone-, EG 6713 612 1863 34 IAM-AS, MA 15399 519 50 33 WANANCHI-, KE 37342 468 32 1 MOVITEL, MZ 23889 422 232 16 MauritiusTelecom, MU Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10268 3415 566 Uninet S.A. de C.V., MX 9808 9059 8886 46 CHINAMOBILE-CN China Mobile Communicati 12479 6801 1715 152 UNI2-AS, ES 9121 6745 1692 17 TTNET, TR 16509 6241 10151 2680 AMAZON-02, US 7545 5867 788 691 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4681 4192 74 ERX-CERNET-BKB China Education and Rese 11492 4514 299 785 CABLEONE, US 8551 4004 378 39 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 22773 3963 3028 367 ASN-CXA-ALL-CCI-22773-RDC, US Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 9059 9013 CHINAMOBILE-CN China Mobile Communications Grou 9121 6745 6728 TTNET, TR 12479 6801 6649 UNI2-AS, ES 7545 5867 5176 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4681 4607 ERX-CERNET-BKB China Education and Research Net 8551 4004 3965 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 7155 3902 3872 VIASAT-SP-BACKBONE, US 11492 4514 3729 CABLEONE, US 20940 3887 3680 AKAMAI-ASN1, NL 22773 3963 3596 ASN-CXA-ALL-CCI-22773-RDC, US Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 46990 UNALLOCATED 8.5.242.0/23 3356 LEVEL3, US 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 22442 HOU-PHONOSCOPE, US 54338 UNALLOCATED 8.33.241.0/24 6461 ZAYO-6461, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 395056 UNALLOCATED 8.45.133.0/24 3356 LEVEL3, US 32306 UNALLOCATED 8.46.80.0/24 33652 CMCS, US 17033 UNALLOCATED 8.48.225.0/24 3356 LEVEL3, US Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.141.0.0/24 Origin: 395350 UNASSIGNED 23.141.0.0/24 Transit: 11426 TWC-11426-CAROLINAS, US 23.252.160.0/24 Origin: 398968 GROUP-IID-01, US 23.252.160.0/24 Transit: 174 COGENT-174, US 23.252.161.0/24 Origin: 398968 GROUP-IID-01, US 23.252.161.0/24 Transit: 174 COGENT-174, US 23.252.163.0/24 Origin: 398968 GROUP-IID-01, US 23.252.163.0/24 Transit: 174 COGENT-174, US 23.252.164.0/24 Origin: 398968 GROUP-IID-01, US 23.252.164.0/24 Transit: 174 COGENT-174, US Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:40 /11:102 /12:305 /13:590 /14:1204 /15:2034 /16:13577 /17:8355 /18:13897 /19:25165 /20:43382 /21:52167 /22:108288 /23:95228 /24:523062 /25:791 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 9121 5908 6745 TTNET, TR 12479 5765 6801 UNI2-AS, ES 8151 3943 10268 Uninet S.A. de C.V., MX 8551 3469 4004 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 3436 4514 CABLEONE, US 6327 3187 3376 SHAW, CA 7155 2992 3902 VIASAT-SP-BACKBONE, US 22773 2956 3963 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2810 3274 ALJAWWALSTC-AS, SA 30036 2263 2608 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1924 2:996 3:153 4:7 5:3744 6:103 7:5 8:1559 9:1 11:172 12:1720 13:415 14:2386 15:160 16:39 17:368 18:137 20:167 21:4 22:188 23:5486 24:2337 25:6 27:2585 29:19 31:2414 32:98 34:1 35:58 36:1734 37:3947 38:2518 39:681 40:149 41:3924 42:1058 43:2091 44:288 45:15960 46:3885 47:303 49:1639 50:1913 51:107 52:1361 53:1 54:293 55:755 56:8 57:55 58:1764 59:1165 60:959 61:2266 62:2442 63:1938 64:5499 65:2307 66:4901 67:2932 68:1177 69:4165 70:1347 71:672 72:3056 74:2630 75:1515 76:717 77:2120 78:3810 79:3099 80:1951 81:1663 82:1457 83:1194 84:1336 85:3625 86:714 87:1952 88:2621 89:3190 90:506 91:7533 92:1886 93:2595 94:3262 95:4488 96:1309 97:345 98:988 99:862 100:75 101:1032 102:1960 103:28252 104:4137 105:463 106:812 107:2459 108:768 109:4182 110:2058 111:3258 112:1965 113:1531 114:1535 115:1955 116:1896 117:2496 118:2328 119:1827 120:1667 121:1031 122:2543 123:2110 124:1611 125:2090 128:1348 129:1201 130:926 131:2084 132:760 133:370 134:1925 135:287 136:860 137:861 138:2436 139:1221 140:883 141:1354 142:1255 143:1443 144:1230 145:344 146:1770 147:1471 148:2218 149:1686 150:857 151:1078 152:1825 153:448 154:3591 155:1340 156:1878 157:1221 158:1012 159:2044 160:2402 161:1301 162:3447 163:1217 164:1662 165:1573 166:633 167:1692 168:3703 169:682 170:4335 171:824 172:3002 173:3061 174:1024 175:1128 176:3519 177:4603 178:3031 179:1994 180:2286 181:2928 182:3243 183:1920 184:2391 185:19285 186:4293 187:3573 188:3809 189:3020 190:8841 191:1316 192:11033 193:8516 194:6917 195:4983 196:2923 197:2359 198:5997 199:6008 200:7507 201:5660 202:10402 203:9993 204:4541 205:3357 206:3852 207:3403 208:4009 209:4631 210:4235 211:2454 212:3942 213:3378 214:1158 215:64 216:6382 217:2652 218:1247 219:600 220:1955 221:988 222:857 223:2173 End of report

1 0

Cryptocurrency attack due to BGP hijacking
by Andrew Wesie 11 Feb '22

11 Feb '22

Recently, there was an attack on Klayswap [1] believed to be due to BGP hijacking [2]. From the public data on routeviews, we can see that there were announcements for the hijacked IP ranges, for example: U|A|1643854199.000000|routeviews|route-views.wide|||2497|202.249.2.169|211.249.221.0/24|202.249.2.169|2497 6461 9457|9457||| The weird part is that the path from AS6461 to AS9457 does not show up in any other routes. As far as I can tell from public information, there is no transit nor peering relationship between AS6461 and AS9457. As such, it seems likely a peer or customer of AS6461 was impersonating AS9457. I sent an email to Zayo's abuse email asking if they could provide any additional information but did not receive a response. If anyone has additional information, please reach out. Especially information about where the announcement may have originated. -- Andrew Wesie Theori, Inc. [1] https://medium.com/klayswap/klayswap-compensation-plan-99ec4db6742f [2] https://economist.co.kr/2022/02/07/column/expertColumn/20220207070013230.ht…

1 0