- NANOG - lists.nanog.org

AFRINIC: The Saga Continues
by Ronald F. Guilmette 01 Feb '20

01 Feb '20

My apologies to all. Certain of the blocks mentioned in my prior posting here have already been reclaimed, and are currently being routed by appropriate parties. In particular, these ones: 152.108.0.0/16 155.237.0.0/16 165.4.0.0/16 165.5.0.0/16 Also, I somehow managed to miss mentioning a few blocks that were also quite clearly stolen as part of this extensive and elaborate scheme, specifically these ones: 160.116.0.0/16 163.198.0.0/16 164.88.0.0/16 196.15.96.0/18 A full list of all of the stolen AFRINIC blocks that are still of ongoing concern at the present moment, taking into account the above adjustments, is available here: https://pastebin.com/raw/71zNNriB Note that many of the blocks listed at the link above have already been "reclaimed" as far as the AFRINIC WHOIS records are concerned. But because routing remains almost entirely decoupled from RIR WHOIS data bases, much of this "reclaimed" space is still being routed as I write this. The only difference is that now the space is being routed as bogons, rather than as "legitimately" allocated space. A summary of all of the current routing for all of the stolen AFRINIC IPv4 address space that is still of concern, including routing for recently reclaimed address space that AFRINIC will eventually be returning to its free pool is provided below. This list is sorted by the number of constituent stolen /24 blocks being routed by each listed network, thus showing the most major offenders at the top. A few footnotes concerning specific ASNs in this list follow below the listing. I urge everyone on this mailing list to share this data as widely as possible in and among the global networking connunity. In all cases noted below, the networks in question are unambiguously routing IP blocks that were obtained, in the first instance, via thefts perpetrated by one or more AFRINIC insiders and then resold on the black market in secretive deals. In many and perhaps most cases listed below, the relevant networks appear to have been more than happy to accept some cash in exchange for their services, while not looking all that carefully at the purported (but fradulent) "LOA" documents they were handed. (Repeated use of blatantly fradulent documents has been one of the consistant features of this entire ongoing criminal enterprise.) All routing data is derived from current data published by RIPEstat. ====================================================================== 3719 0 ?? UNROUTED IP SPACE 629 132165 PK Connect Communication 512 18013 HK Asline Limited 504 19969 US Joe's Datacenter, LLC 500 62355 CO Network Dedicated SAS 423 202425 SC IP Volume inc 286 58895 PK Ebone Network (PVT.) Limited 250 136525 PK Wancom (Pvt) Ltd. 192 18530 US Isomedia, Inc. 186 9009 GB M247 Ltd 134 262287 BR Maxihost LTDA 132 204655 NL Novogara LTD 79 132116 IN Ani Network Pvt Ltd 75 136384 PK Optix Pakistan (Pvt.) Limited 68 132422 HK Hong Kong Business Telecom Limited 60 137443 HK Anchnet Asia Limited 48 63956 AU Colocation Australia Pty Ltd 26 132335 IN LeapSwitch Networks Pvt Ltd 21 131284 AF Etisalat Afghan 20 139043 PK WellNetworks (Private) Limited 19 43092 JP OSOA Corporation., LTD 17 36351 US SoftLayer Technologies Inc. 16 56611 NL REBA Communications BV 16 199267 IL Netstyle A. Ltd 16 23679 ID Media Antar Nusa PT. 14 137085 IN Nixi 10 63018 US Dedicated.com 9 136782 JP Pingtan Hotline Co., Limited 8 45671 AU Servers Australia Pty. Ltd 8 57717 NL FiberXpress BV 7 49335 RU LLC "Server v arendy" 7 134451 SG NewMedia Express Pte Ltd 6 49367 IT Seflow S.N.C. Di Marco Brame' & C. 6 26754 ?? {{unknown organization}} 5 198504 AE Star Satellite Communications Company - PJSC 5 198381 AE Star Satellite Communications Company - PJSC 4 38001 SG NewMedia Express Pte Ltd 4 263812 AR TL Group SRL ( IPXON Networks ) 4 30827 GB Extraordinary Managed Services Ltd 4 42831 GB UK Dedicated Servers Limited 4 37200 NG SimbaNET Nigeria Limited 4 133495 PK Vision telecom Private limited 4 198394 AE Star Satellite Communications Company - PJSC 2 44066 DE First Colo GmbH 2 198247 AE Star Satellite Communications Company - PJSC 2 133933 PK NetSat Private Limited 2 328096 UG truIT Uganda Limited 2 38713 PK Satcomm (Pvt.) Ltd. 2 31122 IE Digiweb ltd 2 46562 US Total Server Solutions L.L.C. 2 13737 US Riverfront Internet Systems LLC 2 11990 US Unlimited Net, LLC 2 20860 GB Iomart Cloud Services Limited 2 45382 KR Ehostict 2 17216 US Dc74 Llc 2 16637 ZA Mtn Sa 2 53999 CA Priority Colo Inc 1 23470 US ReliableSite.Net LLC 1 35074 NG Cobranet Limited 1 19832 ZA Link Data Group 1 43945 IL Netstyle A. Ltd 1 134917 IN Ragsaa Communication pvt. ltd. 1 203833 DE First Colo GmbH ====================================================================== The actual current route announcements corresponding to all of the above are listed in the table given here, which is sorted by ASN: https://pastebin.com/raw/XQyJ8EK2 Footnotes: [1] AS62355 gives all indications of being a false front fradulent network, possibly one that was set up by one or more of the black market dealers involved in this case. There is no actual web site associated with its contact domain (networkdedicated.com) at present, the alleged contact phone number in the associated AS WHOIS record was non-orking when I tried it, and the street address given for this entity in Bogotá, Columbia, is one that Google maps cannot locate. Traceroutes to the one and only IPv4 block that is being routed by this AS and that is actually registed to the company itself (185.39.8.0/22) do not terminate in Columbia, South America, as one would expectm, based on the WHOIS, but rather such traceroutes dead- end somwhere on the network of core-backbone.com (Core-Backbone GmbH, Germany) in the general vicinity of Amsterdam, Netherlands. [2] The networks of AS202425 (IP volume, Inc. - Seychelles), AS204655 (Novogara, Ltd. - Netherlands), AS56611 (REBA Communications BV - Netherlands), and AS57717 (FiberXpress BV - Netherlands), are all believed by me to be onwed and controled by a certain pair of Dutch gentlemen who I have previously posted about. For more information on these characters, please google for "Ecatel" and/or "Quasi Networks". Both of those are, I believe, demonstratably the predecessors of what is now called "IP volume, Inc." [3] AS199267 (Netstyle A. Ltd. - Israel) and AS43945 (Netstyle A. Ltd. - Israel) belongs to one of the persons featured in Jan Vermeulen's detailed December 4th report on this whole AFRINIC caper, i.e. the particular fellow who has been going around passing out fradulent LOAs of such shockingly low quality that one wonders why he even bothers. [4] AS26754 was formerly an AFRINIC-assigned ASN which was assigned to the entirely fictitious business entity called "ITC'. That entity appears to have just been an imaginary concoction of Mr. Ernest Byaruhanga, formerly of AFRINIC, and now the target of an ongoing crimininal investigation in Africa, and/or other AFRINIC insiders who worked with or along side Mr. Byaruhanga to criminally strip assets from AFRINIC and its legacy block holders. The registration for this AS number has now been withdrawn by AFRINIC, thus rendering the ASN itself a bogon. [5] AS19832 ("Link Data Group") is yet another fiction that was manufactured out of -nearly- whole cloth, either by Mr. Byaruhanga and/or by other AFRINIC insiders who were working with him. It is not immediately clear why this ASN is still registered, let alone why is its route announcements are still being accepted or propagated anywhere.

5 5

CBS All acess/irdeto
by Michael Crapse 31 Jan '20

31 Jan '20

Our eyeball customers all of a sudden can no longer reach their CBS all access content. Inspection of the network connections now show a 403 error when trying to post to https://cbsi.live.ott.irdeto.com/widevine/getlicense code: 100214 message: "The request originated from ip address 196.53.97.0 which is not included in the JWT ips claim." I'm going to assume that they randomly started geolocating differently. Wonder if it's either CBS, or irdeto that can help us resolve our IP block 196.53.96.0/22 issues.

2 1

Weekly Routing Table Report
by cscora＠apnic.net 31 Jan '20

31 Jan '20

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 01 Feb, 2020 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 793947 Prefixes after maximum aggregation (per Origin AS): 302112 Deaggregation factor: 2.63 Unique aggregates announced (without unneeded subnets): 388441 Total ASes present in the Internet Routing Table: 66890 Prefixes per ASN: 11.87 Origin-only ASes present in the Internet Routing Table: 57486 Origin ASes announcing only one prefix: 24176 Transit ASes present in the Internet Routing Table: 9404 Transit-only ASes present in the Internet Routing Table: 288 Average AS path length visible in the Internet Routing Table: 4.5 Max AS path length visible: 34 Max AS path prepend of ASN (132972) 29 Prefixes from unregistered ASNs in the Routing Table: 1298 Number of instances of unregistered ASNs: 1299 Number of 32-bit ASNs allocated by the RIRs: 30389 Number of 32-bit ASNs visible in the Routing Table: 24990 Prefixes from 32-bit ASNs in the Routing Table: 114681 Number of bogon 32-bit ASNs visible in the Routing Table: 21 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 1125 Number of addresses announced to Internet: 2852816000 Equivalent to 170 /8s, 10 /16s and 132 /24s Percentage of available address space announced: 77.1 Percentage of allocated address space announced: 77.1 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.4 Total number of prefixes smaller than registry allocations: 266322 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 210695 Total APNIC prefixes after maximum aggregation: 61420 APNIC Deaggregation factor: 3.43 Prefixes being announced from the APNIC address blocks: 204156 Unique aggregates announced from the APNIC address blocks: 84890 APNIC Region origin ASes present in the Internet Routing Table: 10335 APNIC Prefixes per ASN: 19.75 APNIC Region origin ASes announcing only one prefix: 2869 APNIC Region transit ASes present in the Internet Routing Table: 1537 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 33 Number of APNIC region 32-bit ASNs visible in the Routing Table: 5383 Number of APNIC addresses announced to Internet: 768326144 Equivalent to 45 /8s, 203 /16s and 186 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-141625 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 233287 Total ARIN prefixes after maximum aggregation: 107371 ARIN Deaggregation factor: 2.17 Prefixes being announced from the ARIN address blocks: 231091 Unique aggregates announced from the ARIN address blocks: 116754 ARIN Region origin ASes present in the Internet Routing Table: 18392 ARIN Prefixes per ASN: 12.56 ARIN Region origin ASes announcing only one prefix: 6756 ARIN Region transit ASes present in the Internet Routing Table: 1908 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 23 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3144 Number of ARIN addresses announced to Internet: 1078449664 Equivalent to 64 /8s, 71 /16s and 214 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 224318 Total RIPE prefixes after maximum aggregation: 104312 RIPE Deaggregation factor: 2.15 Prefixes being announced from the RIPE address blocks: 221116 Unique aggregates announced from the RIPE address blocks: 130594 RIPE Region origin ASes present in the Internet Routing Table: 26771 RIPE Prefixes per ASN: 8.26 RIPE Region origin ASes announcing only one prefix: 11688 RIPE Region transit ASes present in the Internet Routing Table: 3792 Average RIPE Region AS path length visible: 4.6 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 8872 Number of RIPE addresses announced to Internet: 723775104 Equivalent to 43 /8s, 35 /16s and 238 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 102985 Total LACNIC prefixes after maximum aggregation: 23759 LACNIC Deaggregation factor: 4.33 Prefixes being announced from the LACNIC address blocks: 104184 Unique aggregates announced from the LACNIC address blocks: 45364 LACNIC Region origin ASes present in the Internet Routing Table: 9373 LACNIC Prefixes per ASN: 11.12 LACNIC Region origin ASes announcing only one prefix: 2388 LACNIC Region transit ASes present in the Internet Routing Table: 1765 Average LACNIC Region AS path length visible: 5.3 Max LACNIC Region AS path length visible: 31 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 6940 Number of LACNIC addresses announced to Internet: 174168320 Equivalent to 10 /8s, 97 /16s and 153 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-270748 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 21363 Total AfriNIC prefixes after maximum aggregation: 4482 AfriNIC Deaggregation factor: 4.77 Prefixes being announced from the AfriNIC address blocks: 32275 Unique aggregates announced from the AfriNIC address blocks: 9846 AfriNIC Region origin ASes present in the Internet Routing Table: 1358 AfriNIC Prefixes per ASN: 23.77 AfriNIC Region origin ASes announcing only one prefix: 475 AfriNIC Region transit ASes present in the Internet Routing Table: 264 Average AfriNIC Region AS path length visible: 5.0 Max AfriNIC Region AS path length visible: 21 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 651 Number of AfriNIC addresses announced to Internet: 107333120 Equivalent to 6 /8s, 101 /16s and 198 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 5235 642 598 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4622 4192 73 ERX-CERNET-BKB China Education and Rese 7552 3303 1331 24 VIETEL-AS-AP Viettel Group, VN 45899 3123 1787 108 VNPT-AS-VN VNPT Corp, VN 7713 2696 813 498 TELKOMNET-AS-AP PT Telekomunikasi Indon 9808 2606 9043 62 CMNET-GD Guangdong Mobile Communication 4766 2264 11101 566 KIXS-AS-KR Korea Telecom, KR 9498 2224 433 213 BBIL-AP BHARTI Airtel Ltd., IN 9829 2145 1374 236 BSNL-NIB National Internet Backbone, IN 4755 2136 441 195 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7155 4047 280 27 VIASAT-SP-BACKBONE, US 11492 3926 260 654 CABLEONE, US 16509 3784 7728 1670 AMAZON-02, US 22773 3522 2971 151 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3365 1324 93 SHAW, CA 16625 2976 1560 2137 AKAMAI-AS, US 209 2343 5075 532 CENTURYLINK-US-LEGACY-QWEST, US 30036 2291 358 92 MEDIACOM-ENTERPRISE-BUSINESS, US 20115 2138 2780 520 CHARTER-20115, US 18566 2059 405 103 MEGAPATH5-, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 5855 1622 133 UNI2-AS, ES 39891 4034 219 19 ALJAWWALSTC-AS, SA 31334 3431 484 13 KABELDEUTSCHLAND-AS, DE 8551 3092 379 45 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2817 450 1942 AKAMAI-ASN1, US 12389 2420 2244 700 ROSTELECOM-AS, RU 9009 2073 220 1119 M247, GB 34984 2067 348 557 TELLCOM-AS, TR 9121 1932 1691 18 TTNET, TR 13188 1604 100 47 TRIOLAN, UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6211 3300 610 Uninet S.A. de C.V., MX 10620 3357 533 471 Telmex Colombia S.A., CO 11830 2681 369 63 Instituto Costarricense de Electricidad 6503 1683 323 390 Axtel, S.A.B. de C.V., MX 7303 1484 1030 266 Telecom Argentina S.A., AR 28573 1267 2235 193 CLARO S.A., BR 13999 1182 504 288 Mega Cable, S.A. de C.V., MX 3816 1120 562 134 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 1100 379 39 Telefonica del Peru S.A.A., PE 11172 955 112 70 Alestra, S. de R.L. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1100 393 23 LINKdotNET-AS, EG 24835 1097 566 24 RAYA-AS, EG 36992 1039 1535 73 ETISALAT-MISR, EG 36903 876 452 97 MT-MPLS, MA 6713 613 1863 34 IAM-AS, MA 29571 560 68 12 ORANGE-COTE-IVOIRE, CI 37342 476 32 1 MOVITEL, MZ 36935 383 522 40 Vodafone-, EG 15399 355 45 10 WANANCHI-, KE 23889 351 231 15 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6211 3300 610 Uninet S.A. de C.V., MX 12479 5855 1622 133 UNI2-AS, ES 7545 5235 642 598 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4622 4192 73 ERX-CERNET-BKB China Education and Rese 7155 4047 280 27 VIASAT-SP-BACKBONE, US 39891 4034 219 19 ALJAWWALSTC-AS, SA 11492 3926 260 654 CABLEONE, US 16509 3784 7728 1670 AMAZON-02, US 22773 3522 2971 151 ASN-CXA-ALL-CCI-22773-RDC, US 31334 3431 484 13 KABELDEUTSCHLAND-AS, DE Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 5855 5722 UNI2-AS, ES 7545 5235 4637 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4622 4549 ERX-CERNET-BKB China Education and Research Net 7155 4047 4020 VIASAT-SP-BACKBONE, US 39891 4034 4015 ALJAWWALSTC-AS, SA 31334 3431 3418 KABELDEUTSCHLAND-AS, DE 22773 3522 3371 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3303 3279 VIETEL-AS-AP Viettel Group, VN 11492 3926 3272 CABLEONE, US 6327 3365 3272 SHAW, CA Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 17076 UNALLOCATED 8.12.244.0/24 3356 LEVEL3, US 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 174 COGENT-174, US 62485 UNALLOCATED 8.23.229.0/24 3356 LEVEL3, US 32985 UNALLOCATED 8.28.31.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 27205 UNALLOCATED 8.38.16.0/21 6461 ZAYO-6461, US 27205 UNALLOCATED 8.38.16.0/22 32787 PROLEXIC-TECHNOLOGIES-DDOS-M 27205 UNALLOCATED 8.38.20.0/22 32787 PROLEXIC-TECHNOLOGIES-DDOS-M 14109 UNALLOCATED 8.38.252.0/24 3356 LEVEL3, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.136.224.0/24 Origin: 15206 UNASSIGNED Transit: 174 COGENT-174, US 23.137.192.0/24 Origin: 31798 CANAD-86-31798, CA Transit: 174 COGENT-174, US 27.100.7.0/24 Origin: 56096 UNASSIGNED Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 27.126.156.0/22 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad, MY 27.126.156.0/23 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad, MY Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:10 /9:11 /10:38 /11:98 /12:287 /13:580 /14:1157 /15:1918 /16:13385 /17:8191 /18:13886 /19:25821 /20:40462 /21:47563 /22:98402 /23:80949 /24:459851 /25:1338 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 4830 5855 UNI2-AS, ES 31334 3276 3431 KABELDEUTSCHLAND-AS, DE 6327 3153 3365 SHAW, CA 7155 3139 4047 VIASAT-SP-BACKBONE, US 11492 3062 3926 CABLEONE, US 39891 2946 4034 ALJAWWALSTC-AS, SA 22773 2740 3522 ASN-CXA-ALL-CCI-22773-RDC, US 8551 2552 3092 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2040 2291 MEDIACOM-ENTERPRISE-BUSINESS, US 11830 2029 2681 Instituto Costarricense de Electricidad y Telec Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1502 2:1163 3:30 4:19 5:3265 6:48 8:1378 9:1 12:1787 13:478 14:2230 15:71 16:9 17:283 18:79 20:58 23:3275 24:2627 25:4 27:2496 31:2859 32:101 35:43 36:933 37:3230 38:1833 39:314 40:132 41:3273 42:872 43:2122 44:190 45:13057 46:3644 47:274 49:1430 50:1567 51:343 52:1109 54:271 55:670 56:6 57:48 58:1885 59:1117 60:682 61:2210 62:2159 63:1927 64:5034 65:2328 66:4836 67:2846 68:1233 69:3820 70:1412 71:670 72:2779 74:2615 75:1438 76:670 77:2576 78:1978 79:2365 80:1851 81:1565 82:1206 83:1117 84:1215 85:2473 86:573 87:1697 88:1074 89:2687 90:298 91:7544 92:1455 93:2434 94:2588 95:3702 96:1013 97:337 98:963 99:965 100:83 101:1088 102:813 103:23042 104:3616 105:398 106:826 107:1873 108:702 109:3613 110:1770 111:1950 112:1544 113:1369 114:1488 115:1834 116:1792 117:2033 118:2122 119:1693 120:839 121:1024 122:2372 123:1879 124:1558 125:2015 128:1391 129:912 130:610 131:1825 132:780 133:301 134:1225 135:274 136:597 137:886 138:2168 139:990 140:596 141:876 142:865 143:1162 144:947 145:292 146:1449 147:1023 148:2036 149:1103 150:807 151:1270 152:1476 153:370 154:4694 155:901 156:3279 157:1082 158:720 159:1939 160:1716 161:1009 162:3010 163:770 164:1422 165:1227 166:541 167:1468 168:3526 169:488 170:4232 171:747 172:1857 173:2354 174:1036 175:1008 176:2617 177:4105 178:2902 179:1446 180:2198 181:2356 182:2836 183:1118 184:2388 185:16009 186:3734 187:2540 188:3629 189:2086 190:8267 191:1506 192:10235 193:7305 194:5973 195:4287 196:3373 197:1860 198:6121 199:5936 200:7168 201:5126 202:10402 203:10224 204:4552 205:3073 206:3243 207:3268 208:4012 209:4358 210:4003 211:1992 212:3236 213:3015 214:1169 215:53 216:5933 217:2333 218:897 219:605 220:1976 221:921 222:1013 223:1398 End of report

1 0

Austin, San Antonio, Houston
by Rod Beck 31 Jan '20

31 Jan '20

I am looking for a list of dark fiber providers in these cities. Particularly those who have conduit or aerial rights of way or relatively new fiber to sell (title, not IRUs or leases). Please contact off list with free advice or if you represent such a carrier and are authorized to sell its products. No old fiber. No leases. Roderick Beck VP of Business Development United Cable Company www.unitedcablecompany.com<http://www.unitedcablecompany.com> New York City & Budapest rod.beck(a)unitedcablecompany.com 36-70-605-5144 [1467221477350_image005.png]

1 0

Microsoft mail delivery issue
by Paul Kelly - Blacknight 31 Jan '20

31 Jan '20

Hi There, If there are any Microsoft mail admins on the list can they please contact me ASAP. We’re having deliverability problems into you and all the usual tools don’t help with fixing problems, only diagnosing them after the fact. Thanks, Paul Paul Kelly CTO Blacknight Internet Solutions Limited Cloud Hosting, Colocation, Dedicated servers, IP Transit Services ISO 27001:2013 Certified Tel: +353(0)599183072 Lo-call: 1850 929 929 DDI: +353 (0) 59 9183091 Skype: flamegrill e-mail: paul(a)blacknight.com<mailto:paul@blacknight.com> web: http://www.blacknight.com Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park, Sleaty Road, Graiguecullen, Carlow, Ireland. Company No.: 370845

2 1

Looking for topology validation
by Kévin Vermeulen 31 Jan '20

31 Jan '20

Hi NANOG, Sorry for multiple sendings. We have received messages from operators telling that the validation website was unreachable. It is now running on port 80 to the following address: http://heartbeat.planet-lab.eu:80 Thanks for your help. Kevin The original message: Our teams at Sorbonne Université and Naval Postgraduate School have developed a new Internet topology mapping tool, Diamond-Miner. Diamond-Miner[3] combines Paris Traceroute Multipath Detection Algorithm[1] and high probing rate Yarrp[2] techniques to trace the load balanced paths at Internet Scale. We are seeking now some validation of our inferences, in particular the traceroutes links that we have found. We have developed a small website for operators to provide validation: http://heartbeat.planet-lab.eu:80 <http://heartbeat.planet-lab.eu:8000/>00 http://heartbeat.planet-lab.eu:80 You can either publicly submit the validation on the website or send us an email to kevin.vermeulen(a)sorbonne-universite.fr . You will find all the details on the website, do not hesitate to ask if you have further questions. Thanks in advance, Kevin [1]: https://arxiv.org/pdf/1809.10070 [2]: http://rbeverly.net/research/papers/yarrp-imc16.pdf [3]: https://www.usenix.org/conference/nsdi20/accepted-papers

1 0

abrupt speed changes and TCP
by Michael Thomas 31 Jan '20

31 Jan '20

So it occurs to me in the rollout of 5G just walking down the street you might shift back and forth between high speed 5G bands and 4G because of uneven deployment and all sorts of other reasons. It sounds like this could vary block by block practically. I assume TCP just views this as congestion? But with all of the congestion avoidance algorithms and the rapidly fluctuating bandwidth, wouldn't that result in the sender essentially adapting to the least common denominator (eg 4G)? The same goes with latency, I suppose for real time apps. Mike

4 4

Infomaniak Contact
by Bobin Joseph 31 Jan '20

31 Jan '20

Hello, If any net/sec Infomaniak.com/Infomaniak.ch operators subscribe to this list, would you kindly contact me off-list for assistance. Thank You, Bobin Bobin Joseph Senior Network Engineer Direct +1 858-380-3052 lytx.com =============== CONFIDENTIALITY NOTICE: This e-mail and any attachments contain information from Lytx, Inc. and/or its affiliates, and are intended solely for the use of the named recipient(s). This e-mail may contain confidential information of Lytx and its customers. Any dissemination of this e-mail by anyone other than an intended recipient is strictly prohibited. If you are not a named recipient, you are prohibited from any further viewing of the e-mail or any attachments or from making any use of the e-mail or attachments. If you believe you have received this e-mail in error, notify the sender immediately and permanently delete the e-mail, any attachments, and all copies thereof from any drives or storage media and destroy any printouts of the e-mail or attachments.

1 0

Ticketmaster sign in issues
by davidgarland＠panoratelco.com 30 Jan '20

30 Jan '20

Could someone from Ticketmaster or it's CDN provider reach out off list. Different IP blocks that never get the sign in window, just a spinning spiral. Thanks in advance. -- David Garland

1 0

Backup over 4G/LTE
by K MEKKAOUI 30 Jan '20

30 Jan '20

Dear NANOG Community, Can anyone help with any device information that provides redundancy for business internet access? In other words when the internet provided through the cable modem fails the 4G/LTE takes over automatically to provide internet access to the client. Thank you KARIM M.

11 12