- NANOG - lists.nanog.org

Meeting Reminders
by Betty Burke 19 Jan '07

19 Jan '07

All: We are counting down the days to Toronto! I hope you have taken the time to register for NANOG-39. However, if you have forgotten to do so, a few reminders follow. 1. The hotel room rate increases on Saturday, the 20th. <http://www.nanog.org/mtg-0702/hotel.html> 2. The full agenda will be posted on Monday the 22nd. The PC has been working hard to bring a strong program to Toronto. <http://www.nanog.org/mtg-0702/topics.html> 3. Confirm passport issues have been resolved. <http://www.nanog.org/mtg-0702/passport.html> 4. REGISTER!!! <https://www.nanog.org/registration/> As always, send any all suggestions, questions or concerns to us, nanog-support(a)nanog.org. We look forward to a great meeting and in visiting with all soon. All best. Betty NANOG Project Manager

1 0

For anyone who hasn't yet asked Ren for an explanation...
by Bill Woodcock 19 Jan '07

19 Jan '07

...of how this whole AT&T rebranding thing works, Stephen Colbert summs it up: http://www.youtube.com/watch?v=Bj1Mtv9cD0I&eurl= -Bill

3 2

Drone Armies C&C Report - 19 Jan 2007
by randy_vaughn＠Baylor.edu 19 Jan '07

19 Jan '07

This is a periodic public report from the ISOTF's affiliated group 'DA' (Drone Armies (botnets) research and mitigation mailing list / TISF DA) with the ISOTF affiliated ASreport project (TISF / RatOut). For this report it should be noted that we base our analysis on the data we have accumulated from various sources, which may be incomplete. Any responsible party that wishes to receive reports of botnet command and control servers on their network(s) regularly and directly, feel free to contact us. For purposes of this report we use the following terms open the host completed the TCP handshake closed No activity detected reset issued a RST This month's survey is of 5187 unique, domains (or IPs) with port suspect C&Cs. This list is extracted from the BBL which has a historical base of 14723 reported C&Cs. Of the suspect C&Cs surveyed, 678 reported as Open, 1769 reported as closed, and 812 issued resets to the survey instrument. Of the C&Cs listed by domain name in the our C&C database, 5845 are mitigated. Top 20 ASNes by Total suspect domains mapping to a host in the ASN. These numbers are determined by counting the number of domains which resolve to a host in the ASN. We do not remove duplicates and some of the ASNs reported have many domains mapping to a single IP. Note the Percent_resolved figure is calculated using only the Total and Open counts and does not represent a mitigation effectiveness metric. Percent_ ASN Responsible Party Total Open Resolved 19318 NJIIX-AS-1 - NEW JERSEY INTERN 124 24 81 13301 UNITEDCOLO-AS Autonomous System of 99 29 71 4766 KIXS-AS-KR 61 21 66 14779 INKT Inktomi Corporation 58 0 100 30058 FDCSE FDCservers.net LLC 58 14 76 16265 LEASEWEB AS 43 26 40 23522 CIT-FOONET 42 24 43 9318 HANARO-AS 38 10 74 7132 SBC Internet Services 36 5 86 25761 STAMIN-2 Staminus Communications 35 20 43 13213 UK2NET-AS UK-2 Ltd Autonomous Syste 33 6 82 174 Cogent Communications 31 27 13 33597 InfoRelay Online Systems, Inc. 31 0 100 4837 CHINA169-Backbone 31 7 77 8560 SCHLUND-AS 29 14 52 15083 IIS-129 Infolink Information Servic 28 1 96 3786 ERX-DACOMNET 26 12 54 12832 Lycos Europe 24 0 100 28753 NETDIRECT AS NETDIRECT Frankfurt 23 8 65 4134 CHINANET-BACKBONE 22 7 68 Top 20 ASNes by number of active suspect C&Cs. These counts are determined by the number of suspect domains or IPs located within the ASN completed a connection request. Percent_ ASN Responsible Party Total Open Resolved 13301 UNITEDCOLO-AS Autonomous System of 99 29 71 174 Cogent Communications 31 27 13 16265 LEASEWEB AS 43 26 40 23522 CIT-FOONET 42 24 43 19318 NJIIX-AS-1 - NEW JERSEY INTERN 124 24 81 4766 KIXS-AS-KR 61 21 66 25761 STAMIN-2 Staminus Communications 35 20 43 8560 SCHLUND-AS 29 14 52 30058 FDCSE FDCservers.net LLC 58 14 76 3786 ERX-DACOMNET 26 12 54 9318 HANARO-AS 38 10 74 31103 KEYWEB-AS Keyweb AG 10 8 20 28753 NETDIRECT AS NETDIRECT Frankfurt 23 8 65 4837 CHINA169-Backbone 31 7 77 9930 TTNET-MY 8 7 13 4134 CHINANET-BACKBONE 22 7 68 18942 WEBHO-3 WebHostPlus Inc 11 7 36 6140 ImpSat 8 7 13 1781 KAIST-DAEJEON-AS-KR Korea Advanced 8 7 13 12322 PROXAD AS for Proxad ISP 8 7 13 A version of this report with addition rankings can be found via the isotf.org home page. Randal Vaughn Gadi Evron Professor ge at linuxbox.org Baylor University Waco, TX (254) 710 4756 randy_vaughn at baylor.edu

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 19 Jan '07

19 Jan '07

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 20 Jan, 2007 Analysis Summary ---------------- BGP routing table entries examined: 208300 Prefixes after maximum aggregation: 112624 Deaggregation factor: 1.85 Unique aggregates announced to Internet: 101475 Total ASes present in the Internet Routing Table: 24172 Origin-only ASes present in the Internet Routing Table: 21051 Origin ASes announcing only one prefix: 10192 Transit ASes present in the Internet Routing Table: 3121 Transit-only ASes present in the Internet Routing Table: 78 Average AS path length visible in the Internet Routing Table: 3.6 Max AS path length visible: 32 Max AS path prepend of ASN (20858) 18 Prefixes from unregistered ASNs in the Routing Table: 4 Unregistered ASNs in the Routing Table: 7 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 27 Number of addresses announced to Internet: 1660997452 Equivalent to 99 /8s, 0 /16s and 207 /24s Percentage of available address space announced: 44.8 Percentage of allocated address space announced: 63.6 Percentage of available address space allocated: 70.5 Total number of prefixes smaller than registry allocations: 106510 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 46255 Total APNIC prefixes after maximum aggregation: 18724 APNIC Deaggregation factor: 2.47 Prefixes being announced from the APNIC address blocks: 43822 Unique aggregates announced from the APNIC address blocks: 19170 APNIC Region origin ASes present in the Internet Routing Table: 2827 APNIC Region origin ASes announcing only one prefix: 793 APNIC Region transit ASes present in the Internet Routing Table: 422 Average APNIC Region AS path length visible: 3.6 Max APNIC Region AS path length visible: 16 Number of APNIC addresses announced to Internet: 276302048 Equivalent to 16 /8s, 120 /16s and 8 /24s Percentage of available APNIC address space announced: 86.4 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911 APNIC Address Blocks 58/7, 60/7, 121/8, 122/7, 124/7, 126/8, 202/7 210/7, 218/7, 220/7 and 222/8 ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 102695 Total ARIN prefixes after maximum aggregation: 60728 ARIN Deaggregation factor: 1.69 Prefixes being announced from the ARIN address blocks: 75619 Unique aggregates announced from the ARIN address blocks: 28899 ARIN Region origin ASes present in the Internet Routing Table: 11274 ARIN Region origin ASes announcing only one prefix: 4311 ARIN Region transit ASes present in the Internet Routing Table: 1039 Average ARIN Region AS path length visible: 3.4 Max ARIN Region AS path length visible: 21 Number of ARIN addresses announced to Internet: 313853056 Equivalent to 18 /8s, 181 /16s and 4 /24s Percentage of available ARIN address space announced: 69.3 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959 ARIN Address Blocks 24/8, 63/8, 64/5, 72/6, 76/8, 96/6, 199/8, 204/6, 208/7 and 216/8 RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 43136 Total RIPE prefixes after maximum aggregation: 28202 RIPE Deaggregation factor: 1.53 Prefixes being announced from the RIPE address blocks: 39854 Unique aggregates announced from the RIPE address blocks: 26576 RIPE Region origin ASes present in the Internet Routing Table: 9058 RIPE Region origin ASes announcing only one prefix: 4785 RIPE Region transit ASes present in the Internet Routing Table: 1465 Average RIPE Region AS path length visible: 4.0 Max RIPE Region AS path length visible: 32 Number of RIPE addresses announced to Internet: 286553764 Equivalent to 17 /8s, 20 /16s and 118 /24s Percentage of available RIPE address space announced: 77.6 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-43007 RIPE Address Blocks 62/8, 77/8, 78/7, 80/5, 88/6, 193/8, 194/7, 212/7 and 217/8 LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 13696 Total LACNIC prefixes after maximum aggregation: 4015 LACNIC Deaggregation factor: 3.41 Prefixes being announced from the LACNIC address blocks: 11682 Unique aggregates announced from the LACNIC address blocks: 7207 LACNIC Region origin ASes present in the Internet Routing Table: 759 LACNIC Region origin ASes announcing only one prefix: 248 LACNIC Region transit ASes present in the Internet Routing Table: 135 Average LACNIC Region AS path length visible: 4.2 Max LACNIC Region AS path length visible: 20 Number of LACNIC addresses announced to Internet: 36298752 Equivalent to 2 /8s, 41 /16s and 224 /24s Percentage of available LACNIC address space announced: 54.1 LACNIC AS Blocks 26592-26623, 27648-28671, plus ERX transfers LACNIC Address Blocks 189/8, 190/8, 200/7 AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 2515 Total AfriNIC prefixes after maximum aggregation: 954 AfriNIC Deaggregation factor: 2.64 Prefixes being announced from the AfriNIC address blocks: 1788 Unique aggregates announced from the AfriNIC address blocks: 1150 AfriNIC Region origin ASes present in the Internet Routing Table: 175 AfriNIC Region origin ASes announcing only one prefix: 55 AfriNIC Region transit ASes present in the Internet Routing Table: 33 Average AfriNIC Region AS path length visible: 3.6 Max AfriNIC Region AS path length visible: 15 Number of AfriNIC addresses announced to Internet: 5369600 Equivalent to 0 /8s, 81 /16s and 239 /24s Percentage of available AfriNIC address space announced: 16.0 AfriNIC AS Blocks 36864-37887 & ERX transfers AfriNIC Address Blocks 41/8, 196/8 APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4134 1269 8655 268 CHINANET-BACKBONE 4755 1091 383 75 Videsh Sanchar Nigam Ltd. Aut 9583 1023 99 66 Sify Limited 9498 929 467 64 BHARTI BT INTERNET LTD. 23577 774 34 702 KRNIC 4766 760 4944 312 Korea Telecom (KIX) 17488 584 36 20 Hathway IP Over Cable Interne 1221 570 1697 441 Telstra Pty Ltd 7545 564 126 74 TPG Internet Pty Ltd 18101 511 103 27 Reliance Infocom Ltd Internet 17676 503 10935 66 Softbank BB Corp. 9443 442 111 74 Primus Telecommunications 4812 434 759 68 China Telecom (Shanghai) 4802 361 86 150 Wantree Development 17974 357 129 14 PT TELEKOMUNIKASI INDONESIA 17557 353 35 171 Pakistan Telecom 17849 353 33 93 Telecommunications Technology 4837 333 4071 146 chinanet IDC center beijing n 2907 332 1749 309 SINET Japan 7474 312 212 239 SingTel Optus Pty Ltd ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7018 1548 6145 994 AT&T WorldNet Services 2386 1109 586 735 AT&T Data Communications Serv 4323 1066 820 299 Time Warner Telecom 6197 1022 645 500 BellSouth Network Solutions, 18566 986 272 8 Covad Communications 701 938 6692 751 UUNET Technologies, Inc. 174 934 6789 865 Cogent Communications 11492 910 99 14 Cable One 1239 827 2730 577 Sprint 19262 792 2570 184 Verizon Global Networks 20115 787 686 412 Charter Communications 7011 722 214 448 Citizens Utilities 209 717 3750 566 Qwest 22773 716 1744 42 Cox Communications, Inc. 721 708 21837 285 DLA Systems Automation Center 852 609 1093 394 Telus Advanced Communications 5668 568 161 19 CenturyTel Internet Holdings, 19916 568 49 54 OLM LLC 855 558 250 73 Canadian Research Network 6198 548 519 256 BellSouth Network Solutions, RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 702 547 1912 426 UUNET - Commercial IP service 3301 305 1199 287 TeliaNet Sweden 3320 298 4993 249 Deutsche Telekom AG 24863 298 45 25 LINKdotNET AS number 8220 271 474 262 COLT Telecommunications 6746 269 95 246 Dynamic Network Technologies, 680 257 2044 251 DFN-IP service G-WiN 3215 233 2136 96 France Telecom Transpac 8708 233 283 220 Romania Data Systems S.A. 1257 216 1069 172 SWIPnet Swedish IP Network 3269 211 2375 74 TELECOM ITALIA 30890 211 18 91 SC Kappa Invexim SRL 3246 207 354 197 Song Networks 5416 205 13 13 BATELCO-BH 8551 192 193 28 Bezeq International 20858 189 34 3 This AS will be used to conne 3300 177 171 89 AUCS Communications Services 3352 177 1767 31 Ibernet, Internet Access Netw 12479 176 578 6 Uni2 Autonomous System 786 171 1779 171 The JANET IP Service LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 849 2015 203 UniNet S.A. de C.V. 11830 482 299 19 Instituto Costarricense de El 11172 391 107 81 Servicios Alestra S.A de C.V 16814 329 20 8 NSS, S.A. 22047 307 206 11 VTR PUNTO NET S.A. 14117 259 16 13 Telefonica del Sur S.A. 6471 256 74 31 ENTEL CHILE S.A. 7303 231 103 33 Telecom Argentina Stet-France 6147 224 182 20 Telefonica Del Peru 6503 217 170 92 AVANTEL, S.A. 11556 212 105 7 Cable-Wireless Panama 10481 181 72 8 Prima S.A. 21826 157 21 36 INTERCABLE 7910 149 10 33 ANDINET ON LINE 23216 147 19 43 RAMtelecom Telecomunicaciones 18822 145 9 10 TELEFONICA MANQUEHUE 19169 141 9 24 Telconet 19429 140 84 35 E.T.B. 14522 135 21 8 SatNet S.A. 7738 116 442 21 Telecomunicacoes da Bahia S.A AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 3741 290 868 232 The Internet Solution 8452 222 60 6 TEDATA 15475 154 84 4 Nile Online 6713 144 135 11 Itissalat Al-MAGHRIB 2018 138 309 113 Tertiary Education Network 5536 123 8 15 Internet Egypt Network 33783 106 6 4 EEPAD TISP TELECOM & INTERNET 2905 85 176 74 The Internetworking Company o 24835 85 48 6 RAYA Telecom - Egypt 2561 60 6 2 Egyptian Universities Network 15706 55 12 4 Sudatel Internet Exchange Aut 23889 50 13 15 MAURITIUS TELECOM 5713 41 294 34 Telkom SA Ltd 12455 39 6 3 Jambonet Autonomous system 33774 38 12 22 AS Number for Telecom Algeria 16637 33 21 25 Johnnic e-Ventures 33766 33 2 1 Nyala Communications Pty Ltd 8524 30 2 6 AUCEGYPT Autonomous System 33776 27 2 5 Starcomms Nigeria Limited 10798 23 1 14 Standard Bank of South Africa Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4755 1091 1016 Videsh Sanchar Nigam Ltd. Aut 4134 1269 1001 CHINANET-BACKBONE 18566 986 978 Covad Communications 9583 1023 957 Sify Limited 11492 910 896 Cable One 9498 929 865 BHARTI BT INTERNET LTD. 4323 1066 767 Time Warner Telecom 22773 716 674 Cox Communications, Inc. 8151 849 646 UniNet S.A. de C.V. 19262 792 608 Verizon Global Networks 17488 584 564 Hathway IP Over Cable Interne 5668 568 549 CenturyTel Internet Holdings, 6197 1022 522 BellSouth Network Solutions, 19916 568 514 OLM LLC 7545 564 490 TPG Internet Pty Ltd 855 558 485 Canadian Research Network 18101 511 484 Reliance Infocom Ltd Internet 15270 498 464 PaeTec.net -a division of Pae 11830 482 463 Instituto Costarricense de El 4766 760 448 Korea Telecom (KIX) List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 23456 UNALLOCATED 203.10.62.0/24 1221 Telstra Pty Ltd 24410 UNALLOCATED 203.119.28.0/24 4134 CHINANET-BACKBONE 24409 UNALLOCATED 203.119.29.0/24 9808 Guangdong Mobile Com 65313 PRIVATE 203.184.140.0/24 9304 Hutchison Telecom (H Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 7.1.1.0/24 1239 Sprint 116.0.0.0/24 12654 RIPE NCC RIS Project 116.50.0.0/21 12654 RIPE NCC RIS Project 116.255.0.0/16 12654 RIPE NCC RIS Project 117.0.0.0/24 12654 RIPE NCC RIS Project 117.50.0.0/21 12654 RIPE NCC RIS Project 117.255.0.0/16 12654 RIPE NCC RIS Project 118.0.0.0/24 12654 RIPE NCC RIS Project 118.50.0.0/21 12654 RIPE NCC RIS Project 118.255.0.0/16 12654 RIPE NCC RIS Project 119.0.0.0/24 12654 RIPE NCC RIS Project 119.50.0.0/21 12654 RIPE NCC RIS Project 119.255.0.0/16 12654 RIPE NCC RIS Project 120.0.0.0/24 12654 RIPE NCC RIS Project 120.50.0.0/21 12654 RIPE NCC RIS Project 120.255.0.0/16 12654 RIPE NCC RIS Project 132.0.0.0/10 721 DLA Systems Automation Center 137.0.0.0/13 721 DLA Systems Automation Center 158.0.0.0/13 721 DLA Systems Automation Center 172.33.1.0/24 7018 AT&T WorldNet Services 180.190.0.0/16 24003 JUBILANT ORGANOSYS LTD., INDI 192.0.10.0/24 9498 BHARTI BT INTERNET LTD. 192.44.0.0/24 5501 Fraunhofer Gesellschaft 192.44.0.0/19 702 UUNET - Commercial IP service 192.70.164.0/24 25689 National Research Council of 192.153.136.0/21 721 DLA Systems Automation Center 192.172.0.0/19 721 DLA Systems Automation Center Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:19 /9:10 /10:13 /11:32 /12:117 /13:230 /14:412 /15:811 /16:9126 /17:3652 /18:5948 /19:12921 /20:14539 /21:12987 /22:16561 /23:17804 /24:111456 /25:626 /26:448 /27:360 /28:66 /29:39 /30:90 /31:0 /32:33 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 969 986 Covad Communications 11492 896 910 Cable One 9583 852 1023 Sify Limited 7018 848 1548 AT&T WorldNet Services 2386 831 1109 AT&T Data Communications Serv 6197 795 1022 BellSouth Network Solutions, 23577 760 774 KRNIC 7011 626 722 Citizens Utilities 9498 587 929 BHARTI BT INTERNET LTD. 4766 569 760 Korea Telecom (KIX) 19916 563 568 OLM LLC 4755 500 1091 Videsh Sanchar Nigam Ltd. Aut 15270 466 498 PaeTec.net -a division of Pae 855 456 558 Canadian Research Network 18101 444 511 Reliance Infocom Ltd Internet 5668 437 568 CenturyTel Internet Holdings, 1239 412 827 Sprint 17488 407 584 Hathway IP Over Cable Interne 33588 400 422 Bresnan Communications, LLC. 6517 388 414 Yipes Communications, Inc. Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:9 7:1 8:62 9:1 12:1661 13:1 15:15 16:3 17:3 18:5 20:36 24:871 25:1 32:55 38:276 40:56 41:61 44:2 47:10 52:4 55:1 56:3 57:24 58:295 59:376 60:199 61:953 62:1037 63:1901 64:3183 65:2312 66:3130 67:708 68:640 69:1722 70:416 71:133 72:1137 73:1 74:138 75:61 76:20 80:819 81:778 82:641 83:346 84:494 85:799 86:435 87:460 88:268 89:754 90:2 91:139 97:1 116:1 117:1 118:1 119:1 120:1 121:129 122:66 123:25 124:551 125:753 128:311 129:219 130:112 131:315 132:49 133:9 134:183 135:44 136:180 137:113 138:190 139:54 140:522 141:135 142:365 143:211 144:266 145:67 146:321 147:138 148:365 149:189 150:114 151:118 152:90 153:119 154:5 155:245 156:166 157:168 158:167 159:147 160:99 161:101 162:227 163:162 164:451 165:239 166:244 167:281 168:493 169:121 170:378 171:15 172:1 189:73 190:351 192:5737 193:3638 194:2913 195:2206 196:920 198:3784 199:3283 200:4610 201:959 202:7129 203:7261 204:3958 205:2095 206:2407 207:2895 208:2405 209:3563 210:2317 211:880 212:1306 213:1422 214:391 215:39 216:4103 217:1180 218:356 219:267 220:854 221:368 222:289 End of report Report Website: http://thyme.apnic.net

1 0

Re: HTML email, was Re: Phishing and BGP Blackholing
by Fergie 19 Jan '07

19 Jan '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- Stephane Bortzmeyer <bortzmeyer(a)nic.fr> wrote: >> a combination of retarded registry policies (pitting business >> interests against common technical sense) > >In a capitalist country, I do not see how you could do otherwise. In a >non-capitalist country, there is still hope, I'll talk to Fidel about >that, next time we meet. > Whatever. :-) I'm sure that all 30,090 results of a search for "ebay" are legit: http://domain-search.domaintools.com/?q=ebay Cheers, - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.5.2 (Build 4075) wj8DBQFFsP8Aq1pz9mNUZTMRAvxTAJ0dDPpqcUhEDirzpEQNrdBf9jWdlACg7GmU 3EeA9OZ5veYUQfooHsUFh58= =Waoa -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

Phishing and BGP Blackholing
by Joy, Dylan 19 Jan '07

19 Jan '07

Happy New Year all, I'm curious if anyone can answer whether there has been any traction made relative to blocking egress traffic (via BGP) on US backbones which is destined to IP addresses used for fraudulent purposes, such as phishing sites. I'm sure there are several challenges to implementing this... Regards, Dylan Joy Network Security Analyst, BECU NOTICE: This communication and any attachments may contain privileged or otherwise confidential information. If you are not the intended recipient or believe that you may have received this communication in error, please reply to the sender indicating that fact and delete the copy you received without printing, copying, retransmitting, disseminating, or otherwise using the information. Thank you.

24 40

BGP Update Report
by cidr-report＠potaroo.net 19 Jan '07

19 Jan '07

BGP Update Report Interval: 05-Jan-07 -to- 18-Jan-07 (14 days) Observation Point: BGP Peering with AS4637 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS28751 22688 1.9% 163.2 -- CAUCASUS-NET-AS Caucasus Network Tbilisi, Georgia 2 - AS4788 18516 1.5% 10.1 -- TMNET-AS-AP TM Net, Internet Service Provider 3 - AS306 17798 1.5% 98.3 -- DNIC - DoD Network Information Center 4 - AS24326 13280 1.1% 121.8 -- TTT-AS-AP TT&T Public Company Limited, Service Provider,Bangkok 5 - AS5800 12265 1.0% 141.0 -- DDN-ASNBLK - DoD Network Information Center 6 - AS17974 12038 1.0% 33.9 -- TELKOMNET-AS2-AP PT TELEKOMUNIKASI INDONESIA 7 - AS702 11240 0.9% 15.9 -- AS702 MCI EMEA - Commercial IP service provider in Europe 8 - AS4621 10494 0.9% 77.7 -- UNSPECIFIED UNINET-TH 9 - AS4618 9667 0.8% 134.3 -- INET-TH-AS Internet Thailand Company Limited 10 - AS4775 8781 0.7% 48.5 -- GLOBE-TELECOM-AS Telecom Carrier / ISP Plus + 11 - AS4795 7961 0.7% 32.4 -- INDOSAT2-ID INDOSATM2 ASN 12 - AS30890 7805 0.6% 36.6 -- EVOLVA Evolva Telecom 13 - AS12654 6259 0.5% 156.5 -- RIPE-NCC-RIS-AS RIPE NCC RIS project 14 - AS721 6097 0.5% 7.9 -- DISA-ASNBLK - DoD Network Information Center 15 - AS9583 6061 0.5% 6.0 -- SIFY-AS-IN Sify Limited 16 - AS33783 6042 0.5% 55.4 -- EEPAD 17 - AS34160 5977 0.5% 221.4 -- TRANSTRUM Transtrum 18 - AS18231 5914 0.5% 44.8 -- EXATT-AS-AP Exatt Technologies Private Ltd. 19 - AS21826 5444 0.5% 34.7 -- Internet Cable Plus C. A. 20 - AS4249 5320 0.4% 39.4 -- LILLY-AS - Eli Lilly and Company TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS35489 3708 0.3% 3708.0 -- TOTO-TECH-AS Toto Ltd. 2 - AS31594 3459 0.3% 3459.0 -- FORTESS-AS Fortess LLC Network 3 - AS27407 1398 0.1% 1398.0 -- FRISCHS-INC - Frisch's Restaurants, Inc. 4 - AS31480 1288 0.1% 1288.0 -- GLOBAL-TS-AS CJSC Global TeleSystems 5 - AS15774 1043 0.1% 1043.0 -- MEDIANAT LLC "MEDIANAT", ISP primarily for educational institution 6 - AS10100 4014 0.3% 1003.5 -- ASN-AP-UBSW # AS-AP-UBSW CONVERTED TO ASN-AP-UBSW FOR RPSL COMPLIANCE UBS Warburg Autonomous System Asia-Pacific 7 - AS34378 964 0.1% 964.0 -- RUG-AS Razguliay-UKRROS Group 8 - AS3043 3435 0.3% 858.8 -- AMPHIB-AS - Amphibian Media Corporation 9 - AS38134 4010 0.3% 802.0 -- IMUB-AS-KR INCHEON MUSIC BROADCASTING.CO.,LTD 10 - AS39250 1440 0.1% 720.0 -- COLOPROVIDER-AS Colo Provider 11 - AS27462 1125 0.1% 562.5 -- KDVTECH-AS - KDV Technology and Consulting Services 12 - AS12922 525 0.0% 525.0 -- MULTITRADE-AS Bank Outsourcer 13 - AS8349 515 0.0% 515.0 -- IPI-UA 14 - AS39610 996 0.1% 498.0 -- LCH-CLEARNET LCH Clearnet 15 - AS23917 982 0.1% 491.0 -- BRIBIE-NET-AS-AP Bribie Island Net Multihomed, Brisbane 16 - AS31527 481 0.0% 481.0 -- TELEPOL-AS Telepol Security 17 - AS33188 919 0.1% 459.5 -- SCS-NETWORK-1 - Sono Corporate Suites 18 - AS21391 1311 0.1% 437.0 -- TDA-AS TDA AS Maintainer 19 - AS4678 4347 0.4% 434.7 -- FINE CANON NETWORK COMMUNICATIONS INC. 20 - AS14699 3910 0.3% 391.0 -- BTCBCI - Bloomingdale Communications Inc TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 222.127.32.0/19 4571 0.3% AS4775 -- GLOBE-TELECOM-AS Telecom Carrier / ISP Plus + 2 - 61.0.0.0/8 4337 0.3% AS17607 -- ATT7192-AS-KR ATT GNS korea AS4678 -- FINE CANON NETWORK COMMUNICATIONS INC. 3 - 147.60.0.0/16 4001 0.3% AS10100 -- ASN-AP-UBSW # AS-AP-UBSW CONVERTED TO ASN-AP-UBSW FOR RPSL COMPLIANCE UBS Warburg Autonomous System Asia-Pacific 4 - 62.213.176.0/23 3708 0.3% AS35489 -- TOTO-TECH-AS Toto Ltd. 5 - 194.242.124.0/22 3459 0.2% AS31594 -- FORTESS-AS Fortess LLC Network 6 - 209.140.24.0/24 3432 0.2% AS3043 -- AMPHIB-AS - Amphibian Media Corporation 7 - 216.32.206.0/24 2858 0.2% AS20473 -- AS-CHOOPA - Choopa, LLC 8 - 138.187.128.0/18 2690 0.2% AS3303 -- SWISSCOM Swisscom Solutions Ltd 9 - 89.4.131.0/24 2206 0.1% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 10 - 203.177.144.0/23 2083 0.1% AS4775 -- GLOBE-TELECOM-AS Telecom Carrier / ISP Plus + 11 - 203.223.32.0/20 1987 0.1% AS17726 -- CAMNET-AS CAMNET is an ISP of Ministry of Posts 12 - 203.199.128.0/19 1686 0.1% AS4755 -- VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System 13 - 203.212.120.0/21 1639 0.1% AS38134 -- IMUB-AS-KR INCHEON MUSIC BROADCASTING.CO.,LTD 14 - 203.212.116.0/22 1531 0.1% AS38134 -- IMUB-AS-KR INCHEON MUSIC BROADCASTING.CO.,LTD 15 - 83.98.220.0/23 1437 0.1% AS39250 -- COLOPROVIDER-AS Colo Provider 16 - 66.117.207.0/24 1398 0.1% AS27407 -- FRISCHS-INC - Frisch's Restaurants, Inc. 17 - 193.151.108.0/22 1288 0.1% AS31480 -- GLOBAL-TS-AS CJSC Global TeleSystems 18 - 89.4.130.0/24 1287 0.1% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 19 - 216.85.83.0/24 1267 0.1% AS6467 -- ESPIRECOMM - Xspedius Communications Co. 20 - 62.68.143.0/24 1043 0.1% AS15774 -- MEDIANAT LLC "MEDIANAT", ISP primarily for educational institution Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org ausnog(a)ausnog.net

1 0

The Cidr Report
by cidr-report＠potaroo.net 19 Jan '07

19 Jan '07

This report has been generated at Fri Jan 19 21:46:43 2007 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 12-01-07 204271 133133 13-01-07 204375 133206 14-01-07 204384 133265 15-01-07 204415 133375 16-01-07 204613 133603 17-01-07 204729 133630 18-01-07 204880 133706 19-01-07 205110 133867 AS Summary 24071 Number of ASes in routing system 10183 Number of ASes announcing only one prefix 1528 Largest number of prefixes announced by an AS AS7018 : ATT-INTERNET4 - AT&T WorldNet Services 90870272 Largest address span announced by an AS (/32s) AS721 : DISA-ASNBLK - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 19Jan07 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 205128 133758 71370 34.8% All ASes AS4134 1236 300 936 75.7% CHINANET-BACKBONE No.31,Jin-rong Street AS18566 986 104 882 89.5% COVAD - Covad Communications Co. AS4755 1052 179 873 83.0% VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System AS9498 930 87 843 90.6% BBIL-AP BHARTI BT INTERNET LTD. AS4323 1061 303 758 71.4% TWTC - Time Warner Telecom, Inc. AS22773 713 48 665 93.3% CCINET-2 - Cox Communications Inc. AS11492 910 329 581 63.8% CABLEONE - CABLE ONE AS19262 760 185 575 75.7% VZGNI-TRANSIT - Verizon Internet Services Inc. AS7018 1528 990 538 35.2% ATT-INTERNET4 - AT&T WorldNet Services AS17488 584 50 534 91.4% HATHWAY-NET-AP Hathway IP Over Cable Internet AS6197 1022 508 514 50.3% BATI-ATL - BellSouth Network Solutions, Inc AS19916 568 71 497 87.5% ASTRUM-0001 - OLM LLC AS18101 511 32 479 93.7% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS17676 503 66 437 86.9% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS721 707 289 418 59.1% DISA-ASNBLK - DoD Network Information Center AS15270 496 82 414 83.5% AS-PAETEC-NET - PaeTec.net -a division of PaeTecCommunications, Inc. AS8151 848 438 410 48.3% Uninet S.A. de C.V. AS4766 725 317 408 56.3% KIXS-AS-KR Korea Telecom AS9583 1024 622 402 39.3% SIFY-AS-IN Sify Limited AS2386 1107 737 370 33.4% INS-AS - AT&T Data Communications Services AS6467 414 45 369 89.1% ESPIRECOMM - Xspedius Communications Co. AS4812 427 68 359 84.1% CHINANET-SH-AP China Telecom (Group) AS3602 524 187 337 64.3% AS3602-RTI - Rogers Telecom Inc. AS16852 392 67 325 82.9% BROADWING-FOCAL - Broadwing Communications, Inc. AS33588 422 120 302 71.6% BRESNAN-AS - Bresnan Communications, LLC. AS6517 405 115 290 71.6% YIPESCOM - Yipes Communications, Inc. AS6198 552 263 289 52.4% BATI-MIA - BellSouth Network Solutions, Inc AS855 558 274 284 50.9% CANET-ASN-4 - Bell Aliant AS7011 720 446 274 38.1% FRONTIER-AND-CITIZENS - Frontier Communications, Inc. AS14654 304 32 272 89.5% WAYPORT - Wayport Total 21989 7354 14635 66.6% Top 30 total Possible Bogus Routes 24.246.0.0/17 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 61.4.64.0/20 AS9929 CNCNET-CN China Netcom Corp. 64.7.112.0/21 AS13511 ITXC - ITXC 64.7.120.0/21 AS13537 ITXC-2 - ITXC 64.7.240.0/20 AS3602 AS3602-RTI - Rogers Telecom Inc. 64.17.32.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.33.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.37.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.46.96.0/20 AS13680 AS13680 Hostway Corporation Tampa, FL 64.46.112.0/20 AS13680 AS13680 Hostway Corporation Tampa, FL 64.79.64.0/19 AS10789 BIGNET-AS - The Bignet 64.79.86.0/24 AS10789 BIGNET-AS - The Bignet 64.79.87.0/24 AS10789 BIGNET-AS - The Bignet 64.79.88.0/24 AS10789 BIGNET-AS - The Bignet 64.79.89.0/24 AS10789 BIGNET-AS - The Bignet 64.79.90.0/24 AS10789 BIGNET-AS - The Bignet 64.79.96.0/20 AS10789 BIGNET-AS - The Bignet 64.89.224.0/24 AS15276 MAX-LV - Intuitive Logic 64.89.225.0/24 AS15276 MAX-LV - Intuitive Logic 64.89.226.0/24 AS15276 MAX-LV - Intuitive Logic 64.89.232.0/24 AS15276 MAX-LV - Intuitive Logic 64.89.239.0/24 AS15276 MAX-LV - Intuitive Logic 64.250.128.0/18 AS10789 BIGNET-AS - The Bignet 65.60.45.0/24 AS32311 JKS-ASN - JKS Media, LLC 66.11.32.0/20 AS6261 VISINET - Visionary Systems, Inc. 66.37.96.0/20 AS3764 IA-HOU-AS - Internet America, Inc. 66.163.96.0/20 AS25767 WAVEFORM - Waveform Technology, LLC 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.235.158.0/23 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 69.36.128.0/20 AS16527 GVTCINTERNET - Guadalupe Valley Telephone Co-op, Inc. 69.36.192.0/20 AS29804 INTEGRATIX - Integratix Inc. 69.55.108.0/24 AS4977 NET1 - Pecos Technologies 72.9.128.0/20 AS27572 THEBOE-27572 - The Boeing Company 72.9.130.0/24 AS29904 THEBOE-29904 - The Boeing Company 77.240.176.0/20 AS24641 FASTER-AS This is AS for ISP Faster, Brno, CZ. 78.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 78.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 79.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 79.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 91.123.64.0/20 AS6851 BKCNET BKCNET Autonomous System 125.213.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 128.209.0.0/16 AS4017 BELLST - Bell Atlantic Science & Technology 131.64.0.0/12 AS721 DISA-ASNBLK - DoD Network Information Center 132.0.0.0/10 AS721 DISA-ASNBLK - DoD Network Information Center 137.0.0.0/13 AS721 DISA-ASNBLK - DoD Network Information Center 138.136.0.0/13 AS721 DISA-ASNBLK - DoD Network Information Center 139.56.0.0/19 AS14956 BROADVISION-ASN - Broadvision Inc. 139.56.72.0/23 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 151.135.0.0/16 AS4763 TELSTRANZ-AS TelstraClear Ltd 158.0.0.0/13 AS721 DISA-ASNBLK - DoD Network Information Center 159.3.211.0/24 AS2687 ATT-ASIAPACIFIC AT&T Global Network Services - EMEA 159.220.0.0/22 AS16050 REUTERS-DOCKLANDS-RES-AS Reuters Docklands resiliancy 159.220.4.0/22 AS16050 REUTERS-DOCKLANDS-RES-AS Reuters Docklands resiliancy 159.220.4.0/24 AS16050 REUTERS-DOCKLANDS-RES-AS Reuters Docklands resiliancy 159.220.8.0/22 AS35528 REUTERS-UK2-AS Reuters-UK2 159.220.40.0/24 AS1787 REUTERS-AMERICA-ISP-CELL-AS - Reuters America Inc. 159.220.41.0/24 AS1787 REUTERS-AMERICA-ISP-CELL-AS - Reuters America Inc. 159.220.42.0/24 AS1787 REUTERS-AMERICA-ISP-CELL-AS - Reuters America Inc. 159.220.43.0/24 AS1787 REUTERS-AMERICA-ISP-CELL-AS - Reuters America Inc. 159.220.64.0/23 AS24977 MONEYLINE-UK Moneyline Telerate 162.54.122.0/24 AS5400 BT BT European Backbone 163.142.0.0/16 AS2500 JPNIC-ASBLOCK-AP JPNIC 180.190.0.0/16 AS24003 JUBL-MAIN-AS-IN JUBILANT ORGANOSYS LTD., INDIA, LEADING CHEMICAL MANUFACTURER 190.54.0.0/16 AS6429 Core Internet AT&T Chile 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.40.105.0/24 AS12582 TSF-DATANET-NGD-AS TSF MPLS VPN Services 192.69.107.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.69.108.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.69.177.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.81.160.0/24 AS719 ELISA-AS Elisa Oyj 192.81.182.0/24 AS719 ELISA-AS Elisa Oyj 192.81.183.0/24 AS719 ELISA-AS Elisa Oyj 192.81.184.0/24 AS719 ELISA-AS Elisa Oyj 192.88.99.0/24 AS559 SWITCH SWITCH, Swiss Education and Research Network 192.96.36.0/24 AS5713 SAIX-NET 192.96.37.0/24 AS10474 NETACTIVE 192.96.135.0/24 AS2018 TENET-1 192.96.136.0/23 AS2018 TENET-1 192.96.140.0/24 AS2018 TENET-1 192.96.143.0/24 AS2018 TENET-1 192.96.145.0/24 AS2018 TENET-1 192.96.177.0/24 AS6083 POSIX-AFRICA 192.96.250.0/24 AS2018 TENET-1 192.107.104.0/24 AS7137 TELEMATIX/ ENITEL 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.133.6.0/24 AS10282 EQUANT-CEEUR EQUANT AS for Central and Eastern Europe region 192.139.3.0/24 AS23184 PERSONA - PERSONA COMMUNICATIONS INC. 192.153.144.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 192.172.0.0/19 AS721 DISA-ASNBLK - DoD Network Information Center 192.188.208.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 192.245.235.0/24 AS29748 CARPATHIA-HOSTING - Carpathia Hosting 193.43.228.0/22 AS8757 ACCESS11 Access 11 Ltd. (UK) 194.31.227.0/24 AS21461 TRANSFAIRNET Transfair-net GmbH Krefeld 194.59.176.0/20 AS1273 CW Cable & Wireless 194.246.72.0/23 AS8893 ARTFILES-AS Artfiles New Media GmbH 195.35.104.0/24 AS12445 SPIDERNET-AS Selene s.p.a. 196.6.108.0/24 AS5713 SAIX-NET 196.6.175.0/24 AS3741 IS 196.6.176.0/23 AS3741 IS 196.6.183.0/24 AS3741 IS 196.6.196.0/24 AS3741 IS 196.6.199.0/24 AS3741 IS 196.6.204.0/22 AS3741 IS 196.6.208.0/24 AS3741 IS 196.6.211.0/24 AS3741 IS 196.6.212.0/23 AS3741 IS 196.6.212.0/24 AS3741 IS 196.6.222.0/23 AS3741 IS 196.6.237.0/24 AS3741 IS 196.10.119.0/24 AS2018 TENET-1 196.10.122.0/23 AS2018 TENET-1 196.10.136.0/22 AS3741 IS 196.10.140.0/22 AS3741 IS 196.10.231.0/24 AS3741 IS 196.10.251.0/24 AS2018 TENET-1 196.10.252.0/23 AS2018 TENET-1 196.10.254.0/24 AS2018 TENET-1 196.11.0.0/20 AS3741 IS 196.11.40.0/21 AS3741 IS 196.11.135.0/24 AS3741 IS 196.11.188.0/23 AS3741 IS 196.11.190.0/24 AS3741 IS 196.11.251.0/24 AS3741 IS 196.13.101.0/24 AS2018 TENET-1 196.13.102.0/23 AS2018 TENET-1 196.13.104.0/24 AS2018 TENET-1 196.13.108.0/24 AS3741 IS 196.13.116.0/22 AS2018 TENET-1 196.13.121.0/24 AS2018 TENET-1 196.13.125.0/24 AS2018 TENET-1 196.13.126.0/24 AS2018 TENET-1 196.13.128.0/22 AS3741 IS 196.13.144.0/22 AS2905 TICSA-ASN 196.13.152.0/21 AS2905 TICSA-ASN 196.13.160.0/24 AS2905 TICSA-ASN 196.13.169.0/24 AS2018 TENET-1 196.13.174.0/23 AS2018 TENET-1 196.13.176.0/21 AS2018 TENET-1 196.13.188.0/22 AS2018 TENET-1 196.13.192.0/22 AS2018 TENET-1 196.13.196.0/24 AS2018 TENET-1 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.54.82.0/24 AS2018 TENET-1 198.54.92.0/24 AS2018 TENET-1 198.54.222.0/24 AS2018 TENET-1 198.54.249.0/24 AS2018 TENET-1 198.54.250.0/24 AS2018 TENET-1 198.54.251.0/24 AS2018 TENET-1 198.97.72.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.80.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.96.0/19 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.240.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.163.155.0/24 AS684 MTSAL-ASN - MTS Allstream Inc. 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.168.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 198.169.0.0/16 AS803 SASKTEL - SaskTel 199.9.128.0/17 AS668 ASN-ASNET-NET-AS - Defense Research and Engineering Network 199.10.0.0/16 AS721 DISA-ASNBLK - DoD Network Information Center 199.60.0.0/20 AS271 BCNET-AS - University of British Columbia 199.114.0.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.128.0/18 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.130.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.132.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DISA/UNRRA 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DISA/UNRRA 199.114.142.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.144.0/24 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.148.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.150.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.114.160.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.121.0.0/16 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.0.0/18 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.16.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.80.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 199.175.64.0/19 AS6539 GT-BELL - Bell Canada 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 199.246.116.0/24 AS813 UUNET-CANADA - MCI Communications Services, Inc. d/b/a Verizon Business 202.4.160.0/24 AS9498 BBIL-AP BHARTI BT INTERNET LTD. 202.4.161.0/24 AS9498 BBIL-AP BHARTI BT INTERNET LTD. 202.4.162.0/24 AS9498 BBIL-AP BHARTI BT INTERNET LTD. 202.9.64.0/19 AS9290 TPN-AS-AP Smart Global Network (M) Sdn Bhd 202.58.113.0/24 AS19161 INNOCOM-TELECOM - INNOCOM TELECOM 202.58.224.0/19 AS17925 WAVENET WAVENET PHILIPPINES INC. 202.58.224.0/20 AS17925 WAVENET WAVENET PHILIPPINES INC. 202.58.240.0/20 AS17925 WAVENET WAVENET PHILIPPINES INC. 202.58.240.0/24 AS17925 WAVENET WAVENET PHILIPPINES INC. 202.58.244.0/24 AS17925 WAVENET WAVENET PHILIPPINES INC. 202.58.249.0/24 AS17925 WAVENET WAVENET PHILIPPINES INC. 202.58.250.0/24 AS17925 WAVENET WAVENET PHILIPPINES INC. 202.58.253.0/24 AS17925 WAVENET WAVENET PHILIPPINES INC. 202.86.252.0/22 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.90.33.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.40.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.41.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.42.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.43.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.44.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.94.70.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.124.192.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.193.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.194.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.195.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.196.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.197.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.198.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.199.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.200.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.201.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.202.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.203.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.204.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.205.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.206.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.207.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.125.96.0/20 AS7693 COMNET-TH KSC Commercial Internet Co. Ltd. 202.136.254.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.136.255.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.148.32.0/20 AS17495 GATEWAY-AP BROADBAND WIRELESSS INTERNET SERVICE PROVIDER 202.164.100.0/24 AS18101 RIL-IDC Reliance Infocom Ltd Internet Data Centre, 202.182.32.0/22 AS10223 UECOMM-AU Uecomm Ltd 203.13.171.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.80.32.0/20 AS4817 DESTRA-AU-AP Destra Corporation 203.89.139.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 203.111.192.0/20 AS7473 SINGTEL-AS-AP Singapore Telecom 203.128.128.0/19 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 203.152.136.0/23 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.138.0/23 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.142.0/24 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.143.0/24 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.160.104.0/22 AS23914 OCI-AS-VN One-Connection Internet Company 203.160.110.0/23 AS7643 VNN-AS-AP Vietnam Posts and Telecommunications (VNPT) 204.29.196.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 204.29.197.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 204.48.58.0/24 AS4323 TWTC - Time Warner Telecom, Inc. 204.48.60.0/24 AS4323 TWTC - Time Warner Telecom, Inc. 204.153.68.0/24 AS4017 BELLST - Bell Atlantic Science & Technology 204.153.71.0/24 AS4017 BELLST - Bell Atlantic Science & Technology 204.153.104.0/24 AS10913 INTERNAP-BLK - Internap Network Services 204.154.125.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 205.143.144.0/21 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 205.150.0.0/15 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 206.128.104.0/21 AS11709 VIC - VIRTUAL INTERACTIVE CENTER 207.7.64.0/19 AS14093 ITRIBE - iTRiBE, Inc. 207.189.62.0/23 AS7132 SBIS-AS - SBC Internet Services 207.191.224.0/23 AS2828 XO-AS15 - XO Communications 207.191.232.0/21 AS2828 XO-AS15 - XO Communications 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc 207.246.192.0/20 AS5656 ACCESSUS-DOM - accessU.S./BASENet 209.105.224.0/19 AS20074 KNOWLEDGENET - KNOWLEDGENET 209.159.128.0/19 AS209 ASN-QWEST - Qwest 209.177.64.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 209.177.65.0/24 AS8088 SRTNET - SRT ENTERPRISES 209.177.66.0/23 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 209.177.68.0/23 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 209.177.70.0/24 AS19159 STING - Sting Communications 209.177.89.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 209.177.93.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 209.177.94.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 209.177.95.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 209.205.81.0/24 AS15066 SkyNet de Colombia S.A. 209.205.82.0/24 AS15066 SkyNet de Colombia S.A. 209.205.84.0/24 AS15066 SkyNet de Colombia S.A. 209.212.128.0/19 AS7453 GTINET - Gateway Telecommunications, Inc. 210.5.128.0/20 AS4837 CHINA169-BACKBONE CNCGROUP China169 Backbone 216.21.1.0/24 AS11652 DATATONE - Datatone Communications Inc 216.21.6.0/24 AS11652 DATATONE - Datatone Communications Inc 216.21.7.0/24 AS11652 DATATONE - Datatone Communications Inc 216.21.15.0/24 AS11652 DATATONE - Datatone Communications Inc 216.21.17.0/24 AS11652 DATATONE - Datatone Communications Inc 216.65.160.0/19 AS7770 TRITON - Triton Technologies, Inc. 216.71.224.0/20 AS23527 COTELLIGENCE - Cotelligence, Inc. 216.201.72.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.73.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.74.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.75.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.76.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.77.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.78.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.79.0/24 AS14709 Telefonica Moviles Panama S.A. 216.230.224.0/20 AS15270 AS-PAETEC-NET - PaeTec.net -a division of PaeTecCommunications, Inc. 216.240.240.0/20 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.242.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org ausnog(a)ausnog.net

1 0

Re: HTML email, was Re: Phishing and BGP Blackholing
by Fergie 19 Jan '07

19 Jan '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- Randy Bush <randy(a)psg.com> wrote: >> Back in the day, pre-CIRA, .CA was managed according to rules which >> included the restriction that a single company was only allowed one >> domain name. So, to choose a company at random, General Motors Canada >> was welcome to GMC.CA but they couldn't also register PONTIAC.CA or >> GM.CA or GENERALMOTORS.CA. > >for those of us who manage smaller cctlds pro bono, it is also good >for our sanity, especially when paired with the requirement that the >registrant be real and in-country. > >it also encourages the isps in-country to take over the cctld, which >is good. they can charge a bit for the service and multiple name >registrants become a good thing. > It's funny you should bring this up (or whomever). I'm actually in the process of putting together my presentation for next week's ISOI meeting in Redmond on DNS issues in the security realm, and one of the major bullet items on my check-list of "why we suck" is the whole mish-mash of issues w.r.t a combination of retarded registry policies (pitting business interests against common technical sense) and the lag between published domain registrations and trickle-down WHOIS information (and admittedly, there are a couple of associated social-engineering foos in there, too). We do suck. And we have created a horrible situation wherein we need to stop pointing fingers and figure out how to dig ourselves out of this sh*thole. It's deplorable. - - ferg p.s. Since I'm still putting my presentation together, I'd love to solicit comments from the field. :-) See: http://isotf.org/isoi2.html -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.5.2 (Build 4075) wj8DBQFFsGkhq1pz9mNUZTMRAsljAKCaU9+SSpJReSPhgs6g2SPptFlxcgCguvsr wkO8LAtIBcmxwdxmcf8SQE4= =b1N5 -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

2 1

Sprint Cellular: The Final Insult
by nealr 18 Jan '07

18 Jan '07

We used to have five phones with Sprint. Two months ago we dropped them after six months of trying to get them to bill us for our plan. The bills had been consistently 50% - 100% over what we expected. Each time they were apologetic and a refund was issued. The final straw was an hour long call with a very helpful Sprint person who told me their internal systems were such a mess it was 'almost impossible' for them to provision a customer correctly if the customer had added phones as we had done. Her attempts to fix the problem only made the next month's bill worse. I spoke with someone at Sprint, told them we weren't going to put up with it any more, canceled our service, and told them they needed to have someone contact us to sort out how much of the $1,400 bill we actually owed. No one ever contacted me. A written complaint of a similar nature sent to their headquarters has also gone unanswered. Today I received a collection notice - not only the additional $1,400 due but they apparently failed to cancel our service on the basis of that call and let two more months of billing @ $300/month accumulate before placing the debt for collections. Our expected monthly rate was $175/mo and this 40% overcharge was fairly consistent with our experience with Sprint when we were a paid up customer. I can at this time wholeheartedly recommend against ever using Sprint's cellular service. We liked the service itself and bent over backwards trying to get the billing problems resolved, but they seem to be relentlessly incapable of managing their own internal systems in such a fashion as to provide good customer service. I have not yet read their 10Q/10K filings but when I see stuff like this on my own account and many other Sprint customers confirm that they've had similar experiences I have to wonder how well the company is doing financially. I see this collection notice and I imagine I am going to go ahead and pay the bill eventually, but this matter is going to be bitter pain for Sprint before I'm done. Sprint investor relations is the only visible receiver of this email but I know that a great many of you are like me - owners of businesses that might purchase cellular service, or technical staff in a position to influence such purchases. Perhaps a few of you are even more like me in that your given to writing the occasional freelance article in the telecommunications arena. I figure this email alone is worth maybe $200,000 in negative advertising for Sprint. That is a nice start, but I feel the urge to keep going. I'm going to pay the $2,000 I owe Sprint, but the only source of funds for this bill will be articles I write about this matter and sell to the various trade journals. My own story is frightful, but it'll be an easier sell if I've interviewed a few other victims. If you're smarting from Sprint's incompetent handling of billing please feel free to drop me a line and tell me all about it. Neal Rauhauser

2 1