- NANOG - lists.nanog.org

Reminder to Submit Presentations for NANOG 84
by Cat Gurinsky 17 Nov '21

17 Nov '21

NANOG Community, The NANOG Program Committee (PC) would like to remind you they are accepting proposals for in-person or remote presentations at all sessions of NANOG 84, a hybrid meeting, taking place in Austin, TX on February 14th-16th, 2022. Below is a summary of key details and dates from the Call For Presentations on the NANOG website, which can be found at https://www.nanog.org/program/call-presentations/. Don’t wait! Presentation abstracts and draft slides should be submitted no later than Monday, January 10, 2022. Given by many of the industry’s top minds, presentations at NANOG meetings are meant to spark the imagination, encourage dialog, and drive new solutions to our greatest networking challenges. Presentations may cover current technologies, soon-to-be deployed technologies, and industry innovation. Vendors are welcome to submit talks which cover relevant technologies and capabilities, but presentations should not be promotional, or discuss proprietary solutions. The primary speaker, moderator, or author should submit a presentation proposal and abstract via the Program Committee Tool at: https://www.nanog.org/meetings/submit-presentation/ - Sign in with your Profile Account - Select the type of talk you propose to present, and complete the form Timeline for submission and proposal review: - Submitter enters abstract (and draft slides if possible) in the Program Committee Tool prior to the deadline for slide submission. - PC performs initial review and assigns a “shepherd” to help develop the submission — typically within 2 weeks. - Submitter develops draft slides of talk if not already submitted with the initial proposal. Please submit initial draft slides early — the PC does not evaluate submissions until draft slides are available for review. NANOG Staff is available to assist with slide templates upon request from the submitter. - Panel and Track submissions should provide a topic list and intended/confirmed participants in the abstract. - PC reviews the slides and continues to work with Submitter as needed to develop the topic. - FINAL SUBMISSION DEADLINE Draft presentation slides should be submitted prior to the published deadline for slides (January 10, 2022). - PC evaluates submissions to determine presentations for the agenda (posted on January 24, 2022). - Agenda assembled and posted. - Submitters notified. - Final presentation slides must be submitted prior to the published deadline for slides (January 28, 2022 for Remote/Pre-recordings and February 4, 2022 for in-person presentations). If you think you have an interesting topic but want feedback or suggestions for developing an idea into a presentation, please email the PC ( nanogpc(a)nanog.org) and a representative will respond to you in a timely manner. Otherwise, submit your talk, keynote, track, or panel proposal to the Program Committee Tool at your earliest convenience. We look forward to reviewing your submission! NANOG 84 Calendar of Events Date Event/Deadline November 17, 2021 CFP Announced January 10, 2022 Submission Deadline: Abstracts WITH Draft Presentation Slides Due January 17, 2022 Topics List + Highlights Posted January 24, 2022 NANOG 84 Agenda Published January 28, 2022 Pre-Record Presentation FINAL Slides Due January 28, 2022 Speaker Presentation Recordings Finalized February 4, 2022 In-Person Presentation FINAL Slides Due February 14-16, 2022 NANOG 84 Conference Final slides for pre-recorded presentations must be submitted by Friday, January 28, 2022. NO changes will be accepted between the recording date and the conference. Final slides for in-person presentations must be submitted by Friday, February 4, 2022. Materials received after that date may be updated on the website after the completion of the conference. We look forward to seeing you in February! Sincerely, Cat Gurinsky Program Committee Chair Sent on behalf of the NANOG PC

1 0

strange scam? email claiming to be from the fbi
by Glenn McGurrin 16 Nov '21

16 Nov '21

I had a bit of an odd one this morning, I received two emails through contacts listed in whois subject: "Urgent: Threat actor in systems" from "eims(a)ic.fbi.gov". I was all set to ignore them as an odd bit of spam but did a quick check on the headers and was surprised to see it had valid dkim and spf and was from an actual FBI IP, queue real worry starting. Luckily it looks like it was a case of something being hacked on the FBI's end as calling they immediately knew what I was calling about and said they had dealt with the compromised equipment. Further googling after that call shows a few more reports of this ex. https://twitter.com/spamhaus/status/1459450061696417792 and https://www.newsweek.com/fbi-email-system-reportedly-hacked-fake-dhs-cybera… but I'd figured to mention it here so others don't get caught quite as off guard. Best guess I can come up with is it's an attempt to ruin the person mentioned in the email's name and/or promote the name of the mentioned gang. The specifics seem off for trying to get someone swatted given if you thought this was real what local agency would want to storm a federal operation with swat agents, and if you thought this was all fake, then you wouldn't go either. That or create FUD for any other warnings issued and distract from something else going on. Full body of the email: Our intelligence monitoring indicates exfiltration of several of your virtualized clusters in a sophisticated chain attack. We tried to blackhole the transit nodes used by this advanced persistent threat actor, however there is a huge chance he will modify his attack with fastflux technologies, which he proxies trough multiple global accelerators. We identified the threat actor to be Vinny Troia, whom is believed to be affiliated with the extortion gang TheDarkOverlord, We highly recommend you to check your systems and IDS monitoring. Beware this threat actor is currently working under inspection of the NCCIC, as we are dependent on some of his intelligence research we can not interfere physically within 4 hours, which could be enough time to cause severe damage to your infrastructure. Stay safe, U.S. Department of Homeland Security | Cyber Threat Detection and Analysis | Network Analysis Group

7 7

Netflix GeoIP location support
by Mike Lyon 15 Nov '21

15 Nov '21

Any Netflix folk on the list that would be able to fix a Geo-IP location lookup issue for end-user assignments in the SF Bay Area (Some of which are Netflix employees)? Your Geo-IP Lookup Helpdesk takes the matter a little too nonchalant with no sense of urgency (2-3 weeks). Any help would be appreciated, by myself (and some of your employees). Thank You, Mike -- Mike Lyon mike.lyon(a)gmail.com http://www.linkedin.com/in/mlyon

1 0

Questions about IRR best practices
by Lee Fawkes 13 Nov '21

13 Nov '21

Good morning Operators; I have a couple of questions about best practices for Internet Routing Registries. I'm able to find lots of documentation about *how* to do things, but not a lot of documentation about when I *should* do things. I work for a medium-sized ISP in the US, and we are currently using both RADb and the ARIN IRR. We peer all over the place, but my main concern is how Cogent and Hurricane Electric build prefix filters from our IRRs. 1. Netflix is asking us to add the AS of a downstream customer of one of our customers to our customer AS-SET. We have a direct relationship with this organization's provider, but not with this organization itself. Is this appropriate? 2. On the ARIN side, when ARIN-NONAUTH goes away next year, does that do away with our ability to do proxy route objects? Do we need to require all of our BGP customers to set up their own IRRs? 3. On the RADb side, if we're turning up a new customer that doesn't have an IRR, and another ISP already has a proxy registration for that customer, is it sufficient for us to add that customer's AS to our customer AS-SET? I've been getting around the fact that RADb doesn't allow multiple proxy registrations by registering proxy route objects in ARIN-NONAUTH, but that won't be an option much longer, and I can't really experiment with our customers' route objects to see what works. Thanks! -Lee Fawkes

7 9

DNS hijack?
by Jeff Shultz 13 Nov '21

13 Nov '21

Okay, so this is anecdotal, but since the domain belongs to me it's more than a little annoying. I got some calls that one of my domains, 2dpnr.org was going to a page that said it was Network Solutions and that my domain was available for renew or purchase. I hit my registrar, DirectNic, and found I'm good through 2023. They pulled up DNS checker and found that a bunch of DNS servers were showing 208.91.197.132 as the IP for the domain. It's actually in 64.130.197.x . I'm wondering if I was the only one? -- Jeff Shultz -- Like us on Social Media for News, Promotions, and other information!! <https://www.facebook.com/SCTCWEB/> <https://www.instagram.com/sctc_sctc/> <https://www.yelp.com/biz/sctc-stayton-3> <https://www.youtube.com/c/sctcvideos> _**** This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. ****_

9 17

Geolocation for Disney Plus
by Drew Weaver 12 Nov '21

12 Nov '21

We've had a few complaints that users are getting redirected to the EN-GB version of Disney+ whenever they try to visit the site. I have tried very hard to figure out which geolocation service they are using to come to that conclusion but have yet to be able to figure it out. Does anyone know specifically which service D+ uses or is there a "list of usual suspects" that you guys check when these sorts of things arise? I checked google, maxmind and a handful of others and those all know that we are in the US. Thanks, -Drew

5 4

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 12 Nov '21

12 Nov '21

This is an automated weekly mailing describing the state of the Internet Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Global IPv4 Routing Table Report 04:00 +10GMT Sat 13 Nov, 2021 Report Website: http://thyme.apnic.net Detailed Analysis: http://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 871023 Prefixes after maximum aggregation (per Origin AS): 329373 Deaggregation factor: 2.64 Unique aggregates announced (without unneeded subnets): 421022 Total ASes present in the Internet Routing Table: 72294 Prefixes per ASN: 12.05 Origin-only ASes present in the Internet Routing Table: 62097 Origin ASes announcing only one prefix: 25623 Transit ASes present in the Internet Routing Table: 10197 Transit-only ASes present in the Internet Routing Table: 356 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 53 Max AS path prepend of ASN (265020) 50 Prefixes from unregistered ASNs in the Routing Table: 864 Number of instances of unregistered ASNs: 868 Number of 32-bit ASNs allocated by the RIRs: 37805 Number of 32-bit ASNs visible in the Routing Table: 31370 Prefixes from 32-bit ASNs in the Routing Table: 144615 Number of bogon 32-bit ASNs visible in the Routing Table: 25 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 427 Number of addresses announced to Internet: 3071879936 Equivalent to 183 /8s, 25 /16s and 43 /24s Percentage of available address space announced: 83.0 Percentage of allocated address space announced: 83.0 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 290647 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 230878 Total APNIC prefixes after maximum aggregation: 64823 APNIC Deaggregation factor: 3.56 Prefixes being announced from the APNIC address blocks: 225931 Unique aggregates announced from the APNIC address blocks: 92904 APNIC Region origin ASes present in the Internet Routing Table: 12105 APNIC Prefixes per ASN: 18.66 APNIC Region origin ASes announcing only one prefix: 3455 APNIC Region transit ASes present in the Internet Routing Table: 1696 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 27 Number of APNIC region 32-bit ASNs visible in the Routing Table: 7278 Number of APNIC addresses announced to Internet: 773269632 Equivalent to 46 /8s, 23 /16s and 40 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-151865 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 255823 Total ARIN prefixes after maximum aggregation: 118120 ARIN Deaggregation factor: 2.17 Prefixes being announced from the ARIN address blocks: 255977 Unique aggregates announced from the ARIN address blocks: 122546 ARIN Region origin ASes present in the Internet Routing Table: 18948 ARIN Prefixes per ASN: 13.51 ARIN Region origin ASes announcing only one prefix: 6861 ARIN Region transit ASes present in the Internet Routing Table: 1957 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 28 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4208 Number of ARIN addresses announced to Internet: 1301297408 Equivalent to 77 /8s, 144 /16s and 57 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 242723 Total RIPE prefixes after maximum aggregation: 113535 RIPE Deaggregation factor: 2.14 Prefixes being announced from the RIPE address blocks: 238900 Unique aggregates announced from the RIPE address blocks: 146432 RIPE Region origin ASes present in the Internet Routing Table: 28141 RIPE Prefixes per ASN: 8.49 RIPE Region origin ASes announcing only one prefix: 12143 RIPE Region transit ASes present in the Internet Routing Table: 3915 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 38 Number of RIPE region 32-bit ASNs visible in the Routing Table: 10520 Number of RIPE addresses announced to Internet: 712386688 Equivalent to 42 /8s, 118 /16s and 40 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 113718 Total LACNIC prefixes after maximum aggregation: 26952 LACNIC Deaggregation factor: 4.22 Prefixes being announced from the LACNIC address blocks: 114593 Unique aggregates announced from the LACNIC address blocks: 47437 LACNIC Region origin ASes present in the Internet Routing Table: 10791 LACNIC Prefixes per ASN: 10.62 LACNIC Region origin ASes announcing only one prefix: 2615 LACNIC Region transit ASes present in the Internet Routing Table: 2129 Average LACNIC Region AS path length visible: 5.0 Max LACNIC Region AS path length visible: 53 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8463 Number of LACNIC addresses announced to Internet: 176442624 Equivalent to 10 /8s, 132 /16s and 77 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 27017 Total AfriNIC prefixes after maximum aggregation: 5273 AfriNIC Deaggregation factor: 5.12 Prefixes being announced from the AfriNIC address blocks: 35195 Unique aggregates announced from the AfriNIC address blocks: 11318 AfriNIC Region origin ASes present in the Internet Routing Table: 1573 AfriNIC Prefixes per ASN: 22.37 AfriNIC Region origin ASes announcing only one prefix: 549 AfriNIC Region transit ASes present in the Internet Routing Table: 308 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 25 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 901 Number of AfriNIC addresses announced to Internet: 108225280 Equivalent to 6 /8s, 115 /16s and 99 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 8699 9000 57 CHINAMOBILE-CN China Mobile Communicati 7545 5858 787 685 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4665 4192 74 ERX-CERNET-BKB China Education and Rese 7552 3591 1330 20 VIETEL-AS-AP Viettel Group, VN 7713 3498 1023 57 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 3195 1896 54 VNPT-AS-VN VNPT Corp, VN 4766 2507 11119 578 KIXS-AS-KR Korea Telecom, KR 9498 2169 471 234 BBIL-AP BHARTI Airtel Ltd., IN 45090 2135 1198 75 TENCENT-NET-AP Shenzhen Tencent Compute 4755 2124 429 204 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 5889 9964 2541 AMAZON-02, US 11492 4633 307 804 CABLEONE, US 22773 4047 3049 380 ASN-CXA-ALL-CCI-22773-RDC, US 7155 3950 264 30 VIASAT-SP-BACKBONE, US 16625 3665 1891 2547 AKAMAI-AS, US 6327 3390 1318 69 SHAW, CA 749 2890 50784 2146 DNIC-AS-00749, US 30036 2599 375 147 MEDIACOM-ENTERPRISE-BUSINESS, US 209 2523 5027 442 CENTURYLINK-US-LEGACY-QWEST, US 7018 2246 24164 1435 ATT-INTERNET4, US Complete listing at http://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6881 1725 146 UNI2-AS, ES 20940 3925 3348 218 AKAMAI-ASN1, NL 39891 3271 187 23 ALJAWWALSTC-AS, SA 8551 3089 378 39 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2928 2279 898 ROSTELECOM-AS, RU 9009 2510 258 1320 M247, GB 34984 2199 354 599 TELLCOM-AS, TR 58224 1738 912 587 TCI, IR 61317 1630 213 918 ASDETUK www.heficed.com, GB 13188 1610 100 27 TRIOLAN, UA Complete listing at http://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10629 3464 576 Uninet S.A. de C.V., MX 10620 3248 490 830 Telmex Colombia S.A., CO 11830 2470 369 62 Instituto Costarricense de Electricidad 13999 1641 286 453 Mega Cable, S.A. de C.V., MX 6503 1530 359 472 Axtel, S.A.B. de C.V., MX 28573 1451 2313 250 CLARO S.A., BR 3816 1240 651 153 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 26615 1132 2351 138 TIM SA, BR 6147 1092 370 21 Telefonica del Peru S.A.A., PE 11664 970 188 442 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1638 393 21 LINKdotNET-AS, EG 24835 1536 507 33 RAYA-AS, EG 36992 1285 1430 270 ETISALAT-MISR, EG 36903 1183 537 110 MT-MPLS, MA 29571 814 68 11 ORANGE-COTE-IVOIRE, CI 36935 702 523 44 Vodafone-, EG 6713 612 1863 34 IAM-AS, MA 15399 516 50 31 WANANCHI-, KE 37342 470 32 1 MOVITEL, MZ 23889 429 232 16 MauritiusTelecom, MU Complete listing at http://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10629 3464 576 Uninet S.A. de C.V., MX 9808 8699 9000 57 CHINAMOBILE-CN China Mobile Communicati 12479 6881 1725 146 UNI2-AS, ES 16509 5889 9964 2541 AMAZON-02, US 7545 5858 787 685 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4665 4192 74 ERX-CERNET-BKB China Education and Rese 11492 4633 307 804 CABLEONE, US 22773 4047 3049 380 ASN-CXA-ALL-CCI-22773-RDC, US 7155 3950 264 30 VIASAT-SP-BACKBONE, US 20940 3925 3348 218 AKAMAI-ASN1, NL Complete listing at http://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 8699 8642 CHINAMOBILE-CN China Mobile Communications Grou 12479 6881 6735 UNI2-AS, ES 7545 5858 5173 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4665 4591 ERX-CERNET-BKB China Education and Research Net 7155 3950 3920 VIASAT-SP-BACKBONE, US 11492 4633 3829 CABLEONE, US 20940 3925 3707 AKAMAI-ASN1, NL 22773 4047 3667 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3591 3571 VIETEL-AS-AP Viettel Group, VN 7713 3498 3441 TELKOMNET-AS-AP PT Telekomunikasi Indonesia, ID Complete listing at http://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 46990 UNALLOCATED 8.5.242.0/23 3356 LEVEL3, US 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 54338 UNALLOCATED 8.33.241.0/24 6461 ZAYO-6461, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 1782 UNALLOCATED 8.42.19.0/24 46887 LIGHTOWER, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 395056 UNALLOCATED 8.45.133.0/24 3356 LEVEL3, US Complete listing at http://thyme.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.132.208.0/24 Origin: 7850 CITYLINKFIBER, US 23.132.208.0/24 Transit: 15164 UPNLLC, US 23.141.0.0/24 Origin: 395350 UNASSIGNED 23.141.0.0/24 Transit: 11426 TWC-11426-CAROLINAS, US 23.252.160.0/24 Origin: 398968 GROUP-IID-01, US 23.252.160.0/24 Transit: 1299 TWELVE99 Twelve99, Telia Carrier, SE 23.252.161.0/24 Origin: 398968 GROUP-IID-01, US 23.252.161.0/24 Transit: 1299 TWELVE99 Twelve99, Telia Carrier, SE 23.252.162.0/24 Origin: 398968 GROUP-IID-01, US 23.252.162.0/24 Transit: 1299 TWELVE99 Twelve99, Telia Carrier, SE Complete listing at http://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:41 /11:99 /12:300 /13:597 /14:1214 /15:2044 /16:13567 /17:8258 /18:13918 /19:25286 /20:43031 /21:50861 /22:107243 /23:93940 /24:509146 /25:1449 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 5840 6881 UNI2-AS, ES 8151 4426 10629 Uninet S.A. de C.V., MX 11492 3586 4633 CABLEONE, US 6327 3198 3390 SHAW, CA 7155 3040 3950 VIASAT-SP-BACKBONE, US 22773 3010 4047 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2807 3271 ALJAWWALSTC-AS, SA 8551 2554 3089 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2253 2599 MEDIACOM-ENTERPRISE-BUSINESS, US 11830 1921 2470 Instituto Costarricense de Electricidad y Telec Complete listing at http://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1920 2:1048 3:145 4:18 5:3725 6:100 7:5 8:1549 9:1 11:172 12:1712 13:405 14:2267 15:123 16:30 17:375 18:125 20:143 21:4 22:188 23:5308 24:2389 25:2 27:2548 29:19 31:2380 32:106 34:1 35:47 36:1728 37:3910 38:2343 39:636 40:149 41:3872 42:1055 43:2082 44:290 45:15654 46:3784 47:323 49:1680 50:1876 51:103 52:1332 54:284 55:737 56:4 57:55 58:1741 59:1127 60:937 61:2246 62:2367 63:1957 64:5416 65:2347 66:4945 67:2874 68:1174 69:4086 70:1348 71:679 72:3090 74:2612 75:1499 76:709 77:2100 78:1745 79:2391 80:1872 81:1511 82:1411 83:1171 84:1300 85:2822 86:703 87:1877 88:973 89:3097 90:501 91:7463 92:1913 93:2571 94:3190 95:3593 96:1302 97:348 98:980 99:918 100:76 101:1044 102:1770 103:27411 104:4117 105:436 106:844 107:2412 108:748 109:3930 110:2059 111:3138 112:1952 113:1498 114:1538 115:1934 116:1875 117:2429 118:2328 119:1844 120:1613 121:1038 122:2535 123:2133 124:1597 125:2032 128:1376 129:1113 130:912 131:2072 132:749 133:364 134:1905 135:332 136:793 137:863 138:2423 139:1212 140:831 141:1323 142:1240 143:1340 144:1273 145:327 146:1585 147:1463 148:2235 149:1585 150:849 151:1080 152:1669 153:436 154:3292 155:1362 156:1819 157:1192 158:986 159:2012 160:2325 161:1262 162:3388 163:1112 164:1660 165:1497 166:610 167:1659 168:3654 169:681 170:4273 171:805 172:2838 173:3042 174:1002 175:1125 176:3395 177:4509 178:3008 179:1926 180:2260 181:2617 182:3159 183:1928 184:2417 185:18990 186:4234 187:3516 188:3628 189:3080 190:8723 191:1314 192:10974 193:8402 194:6867 195:4890 196:2878 197:2236 198:6032 199:6002 200:7404 201:5682 202:10470 203:10038 204:4496 205:3403 206:3848 207:3392 208:4006 209:4689 210:4223 211:2436 212:3788 213:3369 214:1159 215:64 216:6383 217:2622 218:1220 219:613 220:1955 221:986 222:852 223:2128 End of report

1 0

GeoLocation contact for HBO?
by Mike Lyon 11 Nov '21

11 Nov '21

Anyone have a GeoLocation contact for HBO? Appears they don’t allow external emails to CTIAEngineers(a)hbo.com Thanks in advance. -Mike

1 0

BGP hujack by AS25478?
by Hank Nussbacher 09 Nov '21

09 Nov '21

Based on my own observation as well as via bgpstream there was a massive BGP hijack attempt last night by IHOME-AS iHome LLC, RU (AS 25478). Lasted about 10 minutes. Noction? Finger faddle? Malicious? Thanks, Hank

4 3

Re: What’s up with Comcast in Philadelphia area
by Mel Beckman 09 Nov '21

09 Nov '21

There’s a huge thread on the outages.org mailing list. -mel > On Nov 9, 2021, at 6:31 AM, Jason Canady <jason(a)unlimitednet.us> wrote: > It's also affecting the Midwest. No update on what's going on. > > On 11/9/21 9:25 AM, Justin Keller wrote: >> Hello. >> Anyone know what's up with Comcast in the Philadelphia area? There >> seems to be a lot of outages both residential and business >> >> Justin

1 0