- NANOG - lists.nanog.org

AS29073, 196.16.0.0/14, Level3: Why does anyone peer with these schmucks?
by Ronald F. Guilmette 14 Aug '17

14 Aug '17

I think that this is primarily Level3's problem to fix. But you be the judge. Please, read on. +_+_+_+_+_+_+_+_ Over the weekend, I stumbled upon an interesting blog calld "Bad Packets", where a fellow named Troy has written about various unsavory goings on involving various newtorks. One network that he called out in particular was AS29073, formerly called "Ecatel". on his blog, this fellow Troy has noted at length some break-in attempts originating from AS29073 and his inability to get anyone, in particular RIPE NCC, to give a damn. https://badpackets.net/the-master-needler-80-82-65-66/ https://badpackets.net/a-conversation-with-ripe-ncc-regarding-quasi-network… https://badpackets.net/quasi-networks-responds-as-we-witness-the-death-of-t… The fact that RIPE NCC declined to accept the role of The Internet Police didn't surprise me at all... they never have and probably never will... but I decided to have a quick look at what this newtork was routing, at present, which can be easily see here: http://bgp.he.net/AS29073#_prefixes So I was looking through the announced routes for AS29073, and it all looked pretty normal... a /24 block, check, a /24 block, check, a /21 block check... another /24 block, and then ... WAIT A SECOND! HOLY MOTHER OF GOD! WHAT'S THIS??? 196.16.0.0/14 !!! So how does a little two-bit network with a rather dubious reputation and a grand total of only about a /19 to its name suddenly come to be routing an entire /14 block?? And of course, its a legacy (abandoned) Afrinic block. And of course, there's no reverse DNS for any of it, because there is no valid delegation for the reverse DNS for any of it... usually a good sign that whoever is routing the block right now -does not- have legit rights to do so. (If they did, then they would have presented their LOAs or whatever to Afrinic and thus gotten the reverse DNS properly delegated to their own name servers.) I've seen this movie before. You all have. This gives every indication of being just another sad chapter in the ongoing mass pillaging of unused Afrinic legacy IPv4 space, by various actors with evil intent. I've already documented this hightly unfortunate fad right here on multiple occasions: https://mailman.nanog.org/pipermail/nanog/2016-November/089232.html https://mailman.nanog.org/pipermail/nanog/2017-August/091821.html This incident is a bit different from the others however, in that it -does not- appear that the 196.16.0.0/14 block has been filed to the brim with snoeshoe spammers. Well, not yet anyway. But if in fact the stories are correct, and if AS29073 does indeed have a history of hosting outbound hacking activities, then the mind reels when thinking about how much mischief such bad actors could get into if given an entire /14 to play with. (And by the way, this is a new world's record I think, for largest singe-route deliberate hijack. I've seen plenty of /16 go walkabout before, and even a whole /15. But an entire /14?? That is uniquely brazen.) In addition to the above, and the points raised within teh Bad Packets blog (see links above) I found, via passive DNS a number of other causes for concern about AS29073, to wit: ================================================================== 80.82.64.193 ftp.little-preteen.com 80.82.64.193 mail.little-preteen.com 80.82.64.193 pop.little-preteen.com 80.82.64.193 smtp.little-preteen.com 80.82.78.2 mx.preteen-video.com 80.82.78.2 mx.preteenstop.com 80.82.78.2 ns1.preteen-video.com 80.82.78.2 ns1.preteenstop.com 80.82.78.2 ns2.preteen-video.com 80.82.78.2 ns2.preteenstop.com 80.82.78.2 preteen-video.com 80.82.78.2 preteenstop.com 80.82.78.2 www.preteen-video.com 80.82.78.2 www.preteenstop.com 80.82.79.11 magic-preteens.seductive-models.com 80.82.79.176 ftp.preteennude.net 80.82.79.176 mail.preteennude.net 89.248.164.84 preteen.nn100.in 89.248.166.21 mobile.preteen-angels.info 89.248.166.21 preteen-art.info 93.174.91.159 img.preteen-angels.info 93.174.91.159 www.preteen-angels.info 93.174.91.159 www.preteen-art.info 93.174.91.164 img.preteen-art.info 93.174.91.164 m.preteen-angels.info 94.102.48.103 preteen-angels.info ================================================================== 80.82.64.30 mobilebankofamerica.com-125765.duiassistant.com 80.82.64.30 mobilebankofamerica.com-131438.bestlegalform.com 80.82.64.30 mobilebankofamerica.com-179103.bestlegalform.com 80.82.64.30 mobilebankofamerica.com-312745.njdui.org 80.82.64.30 mobilebankofamerica.com-498912.njdui.org 80.82.64.30 mobilebankofamerica.com-528835.njdui.org 80.82.64.30 mobilebankofamerica.com-5973124.njdui.org 80.82.64.30 mobilebankofamerica.com-8528941.njdui.org 80.82.64.30 mobilebankofamerica.com-873366.duiassistant.com 80.82.64.30 mobilebankofamerica.com-927397.bestlegalform.com 80.82.64.30 wvw.mobilebankofamerica.com-0385488.rodee.net 80.82.64.30 wvw.mobilebankofamerica.com-08908.rodee.net 80.82.64.30 wvw.mobilebankofamerica.com-20282.rodee.net 80.82.64.30 wvw.mobilebankofamerica.com-2629335.rodee.net 80.82.64.30 wvw.mobilebankofamerica.com-34289.rodee.net 80.82.64.30 wvw.mobilebankofamerica.com-39426.rodee.net 80.82.64.30 wvw.mobilebankofamerica.com-394894.rodee.net 80.82.64.30 wvw.mobilebankofamerica.com-482862.rodee.net 80.82.64.30 wvw.mobilebankofamerica.com-66488375.rodee.net 80.82.64.30 wvw.mobilebankofamerica.com-77749.rodee.net 80.82.64.30 wvw.mobilebankofamerica.com-998759.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-0028552.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-034275.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-040259.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-058258.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-07684037.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-079286.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-2259.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-24880.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-254243.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-360065.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-505724.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-54776.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-57238347.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-57856.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-59078906.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-603.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-60937.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-6205.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-643507.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-64698.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-662564.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-72047.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-7209660.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-722776.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-742.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-74305.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-74408.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-76339.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-7745606.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-824983.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-8302546.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-8480.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-8584933.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-89600996.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-9362498.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-97690.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-9865.rodee.net 80.82.64.30 wwv.mobile-bankofamerica.com-9926689.rodee.net 80.82.64.30 www.bankofamerica.com-restoreid342.mrcars.net 89.248.170.241 mobile-bankofamerica.com-ld52945771735.tiresforless.mobi 89.248.170.241 mobile-bankofamerica.com-ld68275215685.tiresforless.mobi 89.248.170.241 wvw.mobile-bankofamerica.com-88596423.tiresforless.mobi 93.174.88.189 bankofamerica-verification.info 93.174.88.189 bankofamerica-verification01.com 93.174.88.189 mail.bankofamerica-verification.info 93.174.88.189 www.bankofamerica-verification.info 93.174.88.189 www.bankofamerica-verification01.com ================================================================== 80.82.66.63 barclays.wimore.com 80.82.66.65 barclays.xheiw.com 89.248.173.119 barclays.co.uk.personalbanking.p1242557947640.p1242557947640.p1242557947640… 93.174.88.189 barclaysib.net 93.174.88.189 barclaysibtc.com 93.174.88.189 barclaysprivateoffshore.online 93.174.88.189 mail.barclaysprivateoffshore.online 93.174.88.189 www.barclaysib.net 93.174.88.189 www.barclaysibtc.com 93.174.91.38 bank.barclays.co.uk.olb.auth.loginlink.action.cabe110.com.ar 93.174.91.38 barclays.co.uk.personalbanking.p1242557947640.p1242557947640.p1242557947640.093030023030230230002300239.cabe110.com.ar 93.174.91.38 barclays.co.uk.personalbanking.p1242557947640.p1242557947640.p1242557947640.p1242557947640.cabe110.com.ar ================================================================== 93.174.91.38 connect.secure.wellsfargo.com.auth.login.present.origin.cob.cabe110.com.ar 93.174.91.38 www.connect.secure.wellsfargo.com.auth.login.present.origin.cob.cabe110.com… ================================================================== 80.82.66.63 verizon.uhtml5game.com 80.82.66.63 verizon.wimore.com 80.82.66.63 verizonwireless.wimore.com 80.82.66.65 verizon.xheiw.com 80.82.69.144 verizonwireless.com-itunes-offerid11124871812.jmwellness.net 80.82.69.144 verizonwireless.com-itunes-offerid11425558129.jmwellness.net 80.82.69.144 verizonwireless.com-itunes-offerid12225125564.jmwellness.net 80.82.69.144 verizonwireless.com-itunes-offerid12278425795.jmwellness.net 80.82.69.144 verizonwireless.com-itunes-offerid12948633366.jmwellness.net 80.82.69.144 verizonwireless.com-itunes-offerid13293736858.jmwellness.net ... 80.82.69.144 verizonwireless.com-itunesgift-shopiphone-id11944461198.cyrusbucks.net 80.82.69.144 verizonwireless.com-itunesgift-shopiphone-id23454498634.cyrusbucks.net 80.82.69.144 verizonwireless.com-itunesgift-shopiphone-id23817823159.cyrusbucks.net 80.82.69.144 verizonwireless.com-itunesgift-shopiphone-id25178695232.cyrusbucks.net 80.82.69.144 verizonwireless.com-itunesgift-shopiphone-id25942262252.cyrusbucks.net ... 89.248.170.241 verizonwireless.com-itunesgiftid-37285419676.interventionlv.info 89.248.170.241 verizonwireless.com-itunesgiftid-41435778356.interventionlv.info 89.248.170.241 verizonwireless.com-itunesgiftid-93692234458.interventionlv.info 94.102.52.5 verizonwireiess.com-0.fixcarforless.com 94.102.52.5 verizonwireless.offer4.agacoverage.net 94.102.52.5 wwv.verizonwireiess.com-039.fixcarforless.com 94.102.52.5 wwv.verizonwireiess.com-247.fixcarforless.com 94.102.52.70 verizonwireless.com-itunesgift-id12764814492.bigefire.com 94.102.52.70 verizonwireless.com-itunesgift-id27633376736.bigefire.com 94.102.52.70 verizonwireless.com-itunesgift-id32343178271.bigefire.com ... 94.102.58.35 verizon-wireless.com-779shop.eurohangar.net 94.102.58.35 verizon-wireless.com-77shop.eurohangar.net 94.102.58.35 verizon-wireless.com-7shop.eurohangar.net 94.102.58.35 verizonwireless.com-16shop.eurohangar.net 94.102.58.35 verizonwireless.com-2529shop.eurohangar.net 94.102.58.35 verizonwireless.com-34shop.eurohangar.net 94.102.58.35 verizonwireless.com-396shop.eurohangar.net 94.102.58.35 verizonwireless.com-425.infinitygreen.co 94.102.58.35 verizonwireless.com-45.infinitygreen.co 94.102.58.35 verizonwireless.com-66shop.eurohangar.net 94.102.58.35 verizonwireless.com-67shop.eurohangar.net 94.102.58.35 verizonwireless.com-73shop.eurohangar.net 94.102.58.35 verizonwireless.com-76shop.eurohangar.net 94.102.58.35 verizonwireless.com-860shop.eurohangar.net 94.102.58.35 verizonwireless.com-901shop.eurohangar.net 94.102.58.35 verizonwireless.com-99shop.eurohangar.net 94.102.58.35 verizonwireless.com-shop.eurohangar.net 94.102.58.35 wwv.verizon-wireless.com-185.infinitygreen.net 94.102.58.35 wwv.verizon-wireless.com-8.infinitygreen.net ================================================================== (In addition to the above, I've also found plenty of additional domain names associated with AS29073 which incorporate the names "Apple" "AirBnB", "Facebook", and "Groupon", as well as dozens of other legitimate companies and organizations.) I confess that I have not had the time to look at any of the web sites that may or may not be associated with any of the above FQDNs, but the domain names themselves are certainly strongly suggestive of (a) the possible hosting of child porn and also and separately (b) the possible hosting of phishing sites. So, given the history of this network (as is well documented on the Bad Packets blog) and given all of the above, and given what would appear to be the unauthorized "liberation" of the entire 196.16.0.0/14 block by AS29073, one cannot help but wonder Why does anybody still even peer with these jerks? The always helpful and informative web site bgp.he.net indicates that very nearly 50% of the connectivity currently enjoyed by AS29073 is being provided to them by Level3. I would thus like to ask Level3 to reconsider that peering arrangement in light of the above facts, and especially in light of what would appear to be the unauthorized routing of the 196.16.0.0/14 block by AS29073. Surprisingly, given its history, AS29073 apparently has a total of 99 different peers, at present, and I would likewise ask all of them to reconsider their current peering arrangements with this network. I am listing all 99 peers below. Before I get to that however, I'd liek to also note that there currently exists, within the RIPE Routing Registry, the following route object: route: 196.16.0.0/14 origin: AS29073 mnt-by: QUASINETWORKS-MNT mnt-by: EC42500-MNT mnt-routes: EC42500-MNT mnt-routes: M247-EU-MNT created: 2017-03-28T21:47:03Z last-modified: 2017-08-11T19:58:39Z source: RIPE I confess that I am not 100% sure of the exact semantics of the "mnt-routes" tag, but it would appear from the above that the UK's M247 network (AS9009)... which itself is not even peering with AS29073... appears to have, in effect countersigned the above RIPE route object, vouching for its correctness and authenticity as they did so. Why they would have done that, especially given that they themselves are not even peering with AS29073, is, I confess, beyond me. But I would love to have them explain it, or even try to explain it. It's enigmatic, to say the least. Anyway, the "created" date in the above record seems to be consistant with that actual start of the announcement of 196.16.0.0/14 by AS29073, which the RIPE Routing History tool says occured sometime in March of this year. One additional (and rather bizzare) footnote to this whole story about the 196.16.0.0/14 block has to do with the entity that allegedly -is- the current rightful owner of the block (as far as Afrinic is concerned). That entity is designated by the Afrinic handle ORG-IA41-AFRINIC and that in turn has an admin-c and tech-c of NAIT1-AFRINIC. The record for that handle is as follows: ------------------------------------------------------- person: Network and Information Technology Administrator address: Unit 117, Orion Mall, Palm Street address: Victoria, Mahe address: Seychelles (SC) phone: +972-54-2203545 e-mail: info(a)networkandinformationtechnology.com nic-hdl: NAIT1-AFRINIC mnt-by: MNT-NETWORKANDINFORMATIONTECHNOLOGY changed: info(a)networkandinformationtechnology.com 20150725 source: AFRINIC ------------------------------------------------------- Upon fetching the current WHOIS record for networkandinformationtechnology.com I found it more than passing strange that all of the contact details therein are associated *not* with anything in Africa, nor even anything in the home country of AS29073 (Netherlands) but rather, the address and ophone numbers therein all appear to be ones associated with a relatively well known Internet attorney in Santa Monica, Califiornia by the name of Bennet Kelly. As it happens, in the distant past (about 10 years ago) I personally crossed swords with this particular fellow. He may be a lot of things, but it never seemed to me that stupid was one of them. And indeed the domain name networkandinformationtechnology.com and all of its connections to the 196.16.0.0/14 block appear to date from 2015... long before AS29073 started routing this block (which only started in March of this year). So, my best guess about this whole confuseing mess is that the -original- legitimate owners of the 196.16.0.0/14 block most probably sold it on, in a legitimate transaction, to some other party in 2015, where that other party was/is represented by Mr. Bennet Kelly, Esq. And my guess is that neither he nor the new owners, who he represents, even know that their expensive /14 has gone walkabout, as of March of this year. I will be trying to make contact with Mr. Kelley today to discuss this with him and will post a follow-up if any new and interesting information arises from that conversation. Regards, rfg Peers of AS29073: ================================================================================ 1 Level 3 Communications, Inc. United States AS3356 2 REBA Communications BV Netherlands AS56611 3 Hurricane Electric, Inc. United States AS6939 4 Core-Backbone GmbH Germany AS33891 5 Init7 (Switzerland) Ltd. Switzerland AS13030 6 RETN Limited Ukraine AS9002 7 COLT Technology Services Group Limited United Kingdom AS8220 8 State Institute of Information Technologies and Telecommunications (SIIT&T "Informika") Russian Federation AS3267 9 GlobeNet Cabos Submarinos Colombia, S.A.S. Colombia AS52320 10 Digital Telecommunication Services S.r.l. Italy AS49605 11 IT.Gate S.p.A. Italy AS12779 12 green.ch AG Switzerland AS1836 13 UNIDATA S.p.A. Italy AS5394 14 GEANT Limited European Union AS20965 15 IP-Max SA Switzerland AS25091 16 Lost Oasis SARL France AS29075 17 nexellent ag Switzerland AS31424 18 SEACOM Limited Mauritius AS37100 19 Angola Cables Angola AS37468 20 ENTANET International Limited United Kingdom AS8468 21 Blix Solutions AS Norway AS50304 22 POST Luxembourg Luxembourg AS6661 23 Zayo France SAS France AS8218 24 Wind Telecomunicazioni SpA Italy AS1267 25 Swisscom (Switzerland) Ltd Switzerland AS3303 26 Pacnet Global Ltd Hong Kong AS10026 27 SURFnet bv Netherlands AS1103 28 SEEWEB s.r.l. Italy AS12637 29 BIT BV Netherlands AS12859 30 euNetworks Managed Services GmbH Germany AS13237 31 CAIW Diensten B.V. Netherlands AS15435 32 netplus.ch SA Switzerland AS15547 33 DOKOM Gesellschaft fuer Telekommunikation mbH Germany AS15763 34 ADISTA SAS France AS16347 35 Viewqwest Pte Ltd Singapore AS18106 36 Digital Ocean, Inc. European Union AS200130 37 Digital Ocean, Inc. Netherlands AS202018 38 Open Peering B.V. Netherlands AS20562 39 Services Industriels de Geneve Switzerland AS20932 40 Cemig Telecomunicaes SA Brazil AS23106 41 SG.GS Singapore AS24482 42 Vorboss Limited United Kingdom AS25160 43 equada network GmbH Germany AS25220 44 Avantel, Close Joint Stock Company Russian Federation AS25227 45 Gyron Internet Ltd United Kingdom AS29017 46 IPROUTE SRL Italy AS49289 47 LLC "TRC FIORD" Russian Federation AS28917 48 Hostserver GmbH Germany AS29140 49 Telekommunikation Mittleres Ruhrgebiet GmbH Germany AS12329 50 Internet Systems Consortium, Inc. United States AS30132 51 Liquid Telecommunications Ltd United Kingdom AS30844 52 Paulus M. Hoogsteder trading as Meanie Netherlands AS31019 53 Digiweb ltd Ireland AS31122 54 Fiberax Networking&Cloud Ltd. United Kingdom AS3252 55 Hivane France AS34019 56 CELESTE SAS France AS34177 57 Kantonsschule Zug Switzerland AS34288 58 Citycable Switzerland AS34781 59 SoftLayer Technologies Inc. United States AS36351 60 Network Platforms (PTY) LTD South Africa AS37497 61 Micron21 Datacentre Pty Ltd Australia AS38880 62 Convergenze S.p.A. Italy AS39120 63 Fiberby ApS Denmark AS42541 64 IP ServerOne Solutions Sdn Bhd, Malaysia AS45352 65 Easynet Global Services European Union AS4589 66 IP-Only Networks AB Sweden AS12552 67 Tango S.A. Luxembourg AS48526 68 Les Nouveaux Constructeurs SA France AS49463 69 CustodianDC Limited United Kingdom AS50300 70 MCKAYCOM LTD United Kingdom AS50763 71 Daisy Communications Ltd United Kingdom AS5413 72 MC-IX Matrix Internet Exchange RS-1 Indonesia AS55818 73 NetIX Communications Ltd. Bulgaria AS57463 74 Anycast Global Backbone Australia AS58511 75 LUXNETWORK S.A. Luxembourg AS29467 76 oja.at GmbH Austria AS39912 77 Elisa Oyj Finland AS6667 78 A1 Telekom Austria AG Austria AS8447 79 Fusix Networks B.V. Netherlands AS57866 80 ClaraNET LTD United Kingdom AS8426 81 "OBIT" Ltd. Russian Federation AS8492 82 Console Network Solutions Ltd United Kingdom AS43531 83 NetCologne GmbH Germany AS8422 84 Tesonet Ltd Lithuania AS201341 85 Linx Telecommunications B.V. Estonia AS3327 86 Strato AG Germany AS6724 87 CJSC RASCOM Russian Federation AS20764 88 Sunrise Communications AG Switzerland AS6730 89 KPN B.V. Netherlands AS1136 90 MTN SA South Africa AS16637 91 Portlane AB Sweden AS42708 92 TM Net, Internet Service Provider Malaysia AS4788 93 Network Dedicated SAS Switzerland AS62355 94 Next Layer Telekommunikationsdienstleistungs- und Beratungs GmbH Austria AS1764 95 Telkom SA Ltd. South Africa AS5713 96 ShockSRV Internet Services Private Limited Netherlands AS60115 97 JUPITER 25 LIMITED Netherlands AS64484 98 M-net Telekommunikations GmbH Germany AS8767 99 Neterra Ltd. Bulgaria AS34224

1 0

Contact within Verizon Wireless
by Sean Fitzgerald 14 Aug '17

14 Aug '17

Hello all, I'm looking for a contact within Verizon Wireless US networking operations. Please contact me at this address. thanks, Sean Fitzgerald

1 0

2nd call for presentations RIPE 75
by Benno Overeinder 14 Aug '17

14 Aug '17

Dear colleagues, Please note the approaching deadline of *20 August 2017* for RIPE 75 plenary programme submissions. You can find the CFP for RIPE 75 below or at https://ripe75.ripe.net/submit-topic/cfp/, for your proposals for plenary session presentations, tutorials, workshops, BoFs (Birds of a Feather sessions) and lightning talks. Please also note that speakers do not receive any extra reduction or funding towards the meeting fee at the RIPE Meetings. Note: Due to UAE law, confirmed speakers will need to submit a copy of their passport and contact information in advance of the meeting. More details are available here: https://ripe75.ripe.net/attend/dctm-requirements Kind regards, Benno Overeinder RIPE PC Chair https://ripe75.ripe.net/ripe-pc/ -------------------->>><<<-------------------- Call for Presentations A RIPE Meeting is an open event where Internet Service Providers, network operators and other interested parties get together. Although the meeting is mostly technical, it is also a chance for people to meet and network with others in their field. RIPE 75 will take place from 22-26 October in Dubai, UAE. The RIPE Programme Committee (PC) is now seeking content proposals from the RIPE community for the plenary sessions, BoFs (Birds of a Feather sessions), panels, workshops, tutorials and lightning talks at RIPE 75. See the full descriptions of the different presentation formats, https://ripe75.ripe.net/submit-topic/presentation-formats/. Proposals for plenary sessions, BoFs, panels, workshops and tutorials must be submitted for full consideration no later than *20 August 2017*. Proposals submitted after this date will be considered depending on the remaining available space in the programme. The PC is looking for presentations covering topics of network engineering and operations, including but not limited to: - IPv6 deployment - Managing IPv4 scarcity - Data centre technologies - Network and DNS operations - Internet governance and regulatory practices - Network and routing security - Content delivery - Internet peering and mobile data exchange - Connected Things (aka. Internet of Things - IoT) Speakers Due to UAE law, confirmed speakers will need to submit a copy of their passport and contact information in advance of the meeting. More details are available here: https://ripe75.ripe.net/attend/dctm-requirements Please also note that speakers do not receive any discount or funding towards the meeting fee at RIPE Meetings. Submissions RIPE Meeting attendees are quite sensitive to keeping presentations non-commercial, and product marketing talks are strongly discouraged. Repeated audience feedback shows that the most successful talks focus on operational experience, research results, or case studies. For example, presenters wishing to describe a commercial solution should focus on the underlying technology and not attempt a product demonstration. Presenters should indicate how much time they will require. In general, the time allocated for the different presentation formats is as follows: - Plenary presentations: 20-25 minutes presentation with 5-10 minutes discussion - Tutorials: up to two hours (Monday morning) - Workshops: one hour (during evening sessions) to two hours (Monday morning) - BoFs: approximately one hour - Lightning talks: 10 minutes total for both presentation and any discussion The following general requirements apply: - Proposals must be submitted using the meeting submission system, https://ripe75.ripe.net/submit-topic/ - Lightning talks should also be submitted using the meeting submission system (https://ripe75.ripe.net/submit-topic/) and can be submitted any time up to and including the meeting week. The allocation of lightning talks will be announced on short notice, in some cases on the same day but often one day prior to the time slot allocated. - Presenters who propose a panel or BoF are encouraged to include speakers from several (perhaps even competing) companies and/or a neutral facilitator. - All presentation proposals will only be considered by the PC if they contain at least draft presentation slides (slides may be updated later on). For panels, proposals must contain a clear description, as well as the names of invited panellists, presenters and moderators. If you have any questions or requests concerning content submissions, please email pc [at] ripe [dot] net. -- Benno J. Overeinder NLnet Labs http://www.nlnetlabs.nl/

1 0

AS202746 Hijacks: Is Telia (a) stupid, or (b) lazy, or (c) complicit?
by Ronald F. Guilmette 13 Aug '17

13 Aug '17

The annotations in the RIPE WHOIS record for AS202746 seem pretty clear to me. This thing is B-O-G-U-S! Even RIPE, which is always reticent to say any bad things about any of its crooked customers... even after they have kicked them out of RIPE altogether, e.g. for being just toooooo obviously and blatantly crooked... was able to determine that this particular AS is rubbish, and said so, right in the WHOIS record: remarks: this object has been locked by the RIPE NCC pending deregistration So, you know, what's up with Telia (AS1299) which is the one and only peer of this stupid thing (AS202746)? I only ask because AS202746 is currently blatantly and obviously hijacking the following four separate Brazillian /22 blocks: 200.220.160.0/22 200.220.164.0/22 200.220.168.0/22 200.220.172.0/22 Unlike a lot of other cases I've seen of late, Telia can't even fall back on the lame excuse that "Oh! Gosh! We are only passing those routes through for our customer because they have corresponding route objects properly registered in the RIPE IRR telling us that it's A-OK for them to route this stuff." Whoever the actual hijacker is in this case, he/she/it didn't even bother to create bogus route objects in the RIPE data base, even though it is trivially easy for any criminal who can fog a mirror to do that. So, as the Subject line above says, I'd like to hear opinions on the following pertinent question: Is Telia (a) stupid, or (b) lazy, or (c) complicit? Vote early! Vote often! (I wouldn't even mind about these blatant hijackings if it were not for the fact that all of those hijacked /22 blocks have, quite predictably, been filed to the brim with outbound mail servers belonging to some snowshoe spammer... which is par for the course these days when it comes to IPv4 space hijackings.) Regards, rfg P.S. Over on some of the RIPE mailing lists, they've recently been discussing whether or not to continue allowing Joe Random Criminal to create totally unauthorized and totally unchecked/unverified (and typically bogus) route objects in the RIPE data base for so-called "out of region" IP address block resources. Of course, if anybody had any brains or any backbone over on that side of the pond, they would have done this already ten years ago. But such is the pace of change in the Old World, where even the most obvious things can't be implemented until everybody and his brother agrees, including even the stupid kid. My point, of course, is that even when and if those crazy europeans get around to doing the obviously rational thing... like locking the door to the bank before you leave at night... even that won't and wouldn't have made one wit of difference to this case of Telia's passing of the bogus/hijacked routes being announced by AS202746, which is ongoing, as we speak. There's no authority anywhere that I am aware of that is telling the Telia folks that it is OK for either them or their customer to pass out those routes. They are just doing it, because, quite obviously, they are being -paid- to do it, and screw everybody else. We can all just shut up and eat our spam, I guess.

7 6

EdgeRouter Infinity as medium-sized "IXP Peering Router"?
by Job Snijders 12 Aug '17

12 Aug '17

Dear NANOG, Some friends of mine are operating a nonprofit (on shoe string) and looking to connect some CDN caches to an IX fabric. A BGP speaking device is needed between the caches and the BGP peers connected to the fabric. The BGP speaker is needed to present the peers on the IX with a unified view of the assemblage of CDN nodes. I was wondering whether anyone was experience with the "EdgeRouter Infinity XG" device, specifically in the role of a simple peering router for a couple of tens of thousands of routes. (I'd point default to the left and take just the on-net routes on the right to reduce the table size requirement). I hope the device can do at least 2xLACP trunks, has a sizable FIB, is automatable (supports idempotency), can forward IMIX at line-rate, *flow, and exposes some telemetry via SNMP. Any note sharing would be appreciated! Kind regards, Job

11 18

Weekly Routing Table Report
by cscora＠apnic.net 11 Aug '17

11 Aug '17

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG MENOG, BJNOG, SDNOG, CMNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 12 Aug, 2017 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 657261 Prefixes after maximum aggregation (per Origin AS): 256276 Deaggregation factor: 2.56 Unique aggregates announced (without unneeded subnets): 317961 Total ASes present in the Internet Routing Table: 58053 Prefixes per ASN: 11.32 Origin-only ASes present in the Internet Routing Table: 50206 Origin ASes announcing only one prefix: 22210 Transit ASes present in the Internet Routing Table: 7847 Transit-only ASes present in the Internet Routing Table: 219 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 56 Max AS path prepend of ASN ( 55644) 51 Prefixes from unregistered ASNs in the Routing Table: 111 Number of instances of unregistered ASNs: 112 Number of 32-bit ASNs allocated by the RIRs: 19680 Number of 32-bit ASNs visible in the Routing Table: 15437 Prefixes from 32-bit ASNs in the Routing Table: 62907 Number of bogon 32-bit ASNs visible in the Routing Table: 67 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 375 Number of addresses announced to Internet: 2850849892 Equivalent to 169 /8s, 236 /16s and 132 /24s Percentage of available address space announced: 77.0 Percentage of allocated address space announced: 77.0 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 98.7 Total number of prefixes smaller than registry allocations: 219003 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 178583 Total APNIC prefixes after maximum aggregation: 51741 APNIC Deaggregation factor: 3.45 Prefixes being announced from the APNIC address blocks: 177604 Unique aggregates announced from the APNIC address blocks: 74126 APNIC Region origin ASes present in the Internet Routing Table: 8271 APNIC Prefixes per ASN: 21.47 APNIC Region origin ASes announcing only one prefix: 2303 APNIC Region transit ASes present in the Internet Routing Table: 1178 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 56 Number of APNIC region 32-bit ASNs visible in the Routing Table: 3129 Number of APNIC addresses announced to Internet: 763191268 Equivalent to 45 /8s, 125 /16s and 95 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-137529 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 200827 Total ARIN prefixes after maximum aggregation: 95469 ARIN Deaggregation factor: 2.10 Prefixes being announced from the ARIN address blocks: 202621 Unique aggregates announced from the ARIN address blocks: 93365 ARIN Region origin ASes present in the Internet Routing Table: 17954 ARIN Prefixes per ASN: 11.29 ARIN Region origin ASes announcing only one prefix: 6652 ARIN Region transit ASes present in the Internet Routing Table: 1780 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 23 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2145 Number of ARIN addresses announced to Internet: 1109821216 Equivalent to 66 /8s, 38 /16s and 135 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-397212 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 176231 Total RIPE prefixes after maximum aggregation: 86418 RIPE Deaggregation factor: 2.04 Prefixes being announced from the RIPE address blocks: 172120 Unique aggregates announced from the RIPE address blocks: 103881 RIPE Region origin ASes present in the Internet Routing Table: 24274 RIPE Prefixes per ASN: 7.09 RIPE Region origin ASes announcing only one prefix: 11175 RIPE Region transit ASes present in the Internet Routing Table: 3435 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 32 Number of RIPE region 32-bit ASNs visible in the Routing Table: 6073 Number of RIPE addresses announced to Internet: 713095040 Equivalent to 42 /8s, 128 /16s and 247 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 84281 Total LACNIC prefixes after maximum aggregation: 18754 LACNIC Deaggregation factor: 4.49 Prefixes being announced from the LACNIC address blocks: 85517 Unique aggregates announced from the LACNIC address blocks: 39302 LACNIC Region origin ASes present in the Internet Routing Table: 6238 LACNIC Prefixes per ASN: 13.71 LACNIC Region origin ASes announcing only one prefix: 1746 LACNIC Region transit ASes present in the Internet Routing Table: 1145 Average LACNIC Region AS path length visible: 5.4 Max LACNIC Region AS path length visible: 24 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 3754 Number of LACNIC addresses announced to Internet: 170951648 Equivalent to 10 /8s, 48 /16s and 131 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 17226 Total AfriNIC prefixes after maximum aggregation: 3838 AfriNIC Deaggregation factor: 4.49 Prefixes being announced from the AfriNIC address blocks: 19024 Unique aggregates announced from the AfriNIC address blocks: 6971 AfriNIC Region origin ASes present in the Internet Routing Table: 1067 AfriNIC Prefixes per ASN: 17.83 AfriNIC Region origin ASes announcing only one prefix: 333 AfriNIC Region transit ASes present in the Internet Routing Table: 211 Average AfriNIC Region AS path length visible: 4.7 Max AfriNIC Region AS path length visible: 21 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 336 Number of AfriNIC addresses announced to Internet: 93364480 Equivalent to 5 /8s, 144 /16s and 161 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5425 4192 87 ERX-CERNET-BKB China Education and Rese 7545 4014 407 392 TPG-INTERNET-AP TPG Telecom Limited, AU 17974 2963 902 73 TELKOMNET-AS2-AP PT Telekomunikasi Indo 4766 2801 11124 744 KIXS-AS-KR Korea Telecom, KR 9829 2751 1498 549 BSNL-NIB National Internet Backbone, IN 9808 2356 8699 32 CMNET-GD Guangdong Mobile Communication 45899 2234 1449 106 VNPT-AS-VN VNPT Corp, VN 4755 2095 422 220 TATACOMM-AS TATA Communications formerl 7552 1671 1104 73 VIETEL-AS-AP Viettel Corporation, VN 9498 1622 361 144 BBIL-AP BHARTI Airtel Ltd., IN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 22773 3830 2952 159 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 6327 3445 1341 88 SHAW - Shaw Communications Inc., CA 18566 2207 405 109 MEGAPATH5-US - MegaPath Corporation, US 6389 2066 3671 39 BELLSOUTH-NET-BLK - BellSouth.net Inc., 20115 2021 2203 434 CHARTER-NET-HKY-NC - Charter Communicat 209 1863 5066 639 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 16509 1833 3861 579 AMAZON-02 - Amazon.com, Inc., US 30036 1823 328 290 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 701 1718 10559 629 UUNET - MCI Communications Services, In 6983 1695 854 231 ITCDELTA - Earthlink, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 39891 3387 186 23 ALJAWWALSTC-AS, SA 20940 2969 970 2133 AKAMAI-ASN1, US 8551 2554 377 41 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 34984 2050 332 422 TELLCOM-AS, TR 9121 1911 1691 17 TTNET, TR 12479 1647 1048 59 UNI2-AS, ES 13188 1602 100 55 TRIOLAN, UA 12389 1560 1482 651 ROSTELECOM-AS, RU 6849 1225 355 21 UKRTELNET, UA 8402 1153 544 15 CORBINA-AS OJSC "Vimpelcom", RU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 3546 542 219 Telmex Colombia S.A., CO 8151 2656 3402 578 Uninet S.A. de C.V., MX 11830 2107 370 65 Instituto Costarricense de Electricidad 6503 1556 437 53 Axtel, S.A.B. de C.V., MX 7303 1556 1015 244 Telecom Argentina S.A., AR 6147 1230 377 27 Telefonica del Peru S.A.A., PE 3816 1023 501 93 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 28573 955 2277 194 CLARO S.A., BR 11172 917 126 86 Alestra, S. de R.L. de C.V., MX 18881 897 1052 23 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1196 398 48 LINKdotNET-AS, EG 37611 747 91 8 Afrihost, ZA 36903 711 357 130 MT-MPLS, MA 36992 678 1378 29 ETISALAT-MISR, EG 24835 501 850 15 RAYA-AS, EG 29571 421 36 10 CITelecom-AS, CI 37492 407 321 75 ORANGE-, TN 15399 357 35 7 WANANCHI-, KE 8452 313 1730 17 TE-AS TE-AS, EG 2018 304 327 74 TENET-1, ZA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5425 4192 87 ERX-CERNET-BKB China Education and Rese 7545 4014 407 392 TPG-INTERNET-AP TPG Telecom Limited, AU 22773 3830 2952 159 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 10620 3546 542 219 Telmex Colombia S.A., CO 6327 3445 1341 88 SHAW - Shaw Communications Inc., CA 39891 3387 186 23 ALJAWWALSTC-AS, SA 20940 2969 970 2133 AKAMAI-ASN1, US 17974 2963 902 73 TELKOMNET-AS2-AP PT Telekomunikasi Indo 4766 2801 11124 744 KIXS-AS-KR Korea Telecom, KR 9829 2751 1498 549 BSNL-NIB National Internet Backbone, IN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 22773 3830 3671 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 7545 4014 3622 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3387 3364 ALJAWWALSTC-AS, SA 6327 3445 3357 SHAW - Shaw Communications Inc., CA 10620 3546 3327 Telmex Colombia S.A., CO 17974 2963 2890 TELKOMNET-AS2-AP PT Telekomunikasi Indonesia, I 8551 2554 2513 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 9808 2356 2324 CMNET-GD Guangdong Mobile Communication Co.Ltd. 9829 2751 2202 BSNL-NIB National Internet Backbone, IN 45899 2234 2128 VNPT-AS-VN VNPT Corp, VN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 65602 UNALLOCATED 8.225.192.0/24 30372 SUNESYS2 - Sunesys, LLC, US 65532 PRIVATE 14.192.19.0/24 132717 NDCTPL-IN NxtGen Datacenter & 64525 PRIVATE 45.119.143.0/24 133275 GIGANTIC-AS Gigantic Infotel P 64525 PRIVATE 45.125.62.0/24 133275 GIGANTIC-AS Gigantic Infotel P 65530 PRIVATE 45.249.40.0/24 133720 SOFTCALLCOC-AS SOFT CALL CUST- 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 65534 PRIVATE 58.68.109.0/24 10201 DWL-AS-IN Dishnet Wireless Lim 4294901876 PRIVATE 59.101.19.0/24 2764 AAPT AAPT Limited, AU 4294902000 PRIVATE 59.101.45.0/24 2764 AAPT AAPT Limited, AU 4294901905 PRIVATE 59.101.49.0/24 2764 AAPT AAPT Limited, AU Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 14.192.48.0/24 134833 LIHGL-HK LANLIAN INTERNATIONAL HOLDING GROUP LIMITE 14.192.49.0/24 134833 LIHGL-HK LANLIAN INTERNATIONAL HOLDING GROUP LIMITE 14.192.50.0/24 134833 LIHGL-HK LANLIAN INTERNATIONAL HOLDING GROUP LIMITE 14.192.51.0/24 134833 LIHGL-HK LANLIAN INTERNATIONAL HOLDING GROUP LIMITE 27.100.7.0/24 56096 UNKNOWN 41.76.232.0/21 62878 XLITT - Xlitt, US 41.77.248.0/21 62878 XLITT - Xlitt, US 41.78.12.0/23 62878 XLITT - Xlitt, US 41.78.180.0/23 37265 -Reserved AS-, ZZ 41.79.12.0/22 37306 -Reserved AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:15 /9:13 /10:36 /11:104 /12:284 /13:553 /14:1049 /15:1851 /16:13445 /17:7650 /18:13436 /19:24671 /20:38968 /21:41614 /22:78456 /23:65015 /24:367890 /25:847 /26:624 /27:631 /28:37 /29:25 /30:18 /31:2 /32:27 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6327 3241 3445 SHAW - Shaw Communications Inc., CA 22773 2998 3830 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 39891 2946 3387 ALJAWWALSTC-AS, SA 18566 2091 2207 MEGAPATH5-US - MegaPath Corporation, US 8551 2019 2554 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 1605 1823 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 11830 1497 2107 Instituto Costarricense de Electricidad y Telec 10620 1493 3546 Telmex Colombia S.A., CO 11492 1402 1580 CABLEONE - CABLE ONE, INC., US 6389 1372 2066 BELLSOUTH-NET-BLK - BellSouth.net Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1580 2:818 4:18 5:2442 6:31 7:1 8:1055 12:1838 13:134 14:1712 15:27 16:2 17:186 18:90 20:61 23:2433 24:1911 25:2 27:2366 29:1 31:1918 32:84 33:18 35:21 36:392 37:2370 38:1327 39:65 40:97 41:2978 42:460 43:1964 44:78 45:3012 46:2807 47:161 49:1234 50:995 51:19 52:826 54:362 55:6 56:4 57:46 58:1564 59:1012 60:323 61:1928 62:1675 63:1910 64:4648 65:2215 66:4584 67:2302 68:1281 69:3362 70:1191 71:620 72:2229 74:2716 75:405 76:426 77:1481 78:1452 79:1952 80:1407 81:1390 82:1004 83:727 84:956 85:1793 86:464 87:1204 88:755 89:2186 90:164 91:6206 92:990 93:2406 94:2394 95:2662 96:653 97:355 98:1063 99:94 100:153 101:1218 103:15538 104:3024 105:187 106:568 107:1744 108:821 109:2895 110:1457 111:1744 112:1234 113:1253 114:1046 115:1555 116:1646 117:1749 118:2156 119:1651 120:723 121:1060 122:2330 123:1824 124:1485 125:1803 128:840 129:662 130:437 131:1452 132:564 133:191 134:681 135:226 136:453 137:468 138:1910 139:506 140:394 141:632 142:769 143:878 144:806 145:182 146:1094 147:696 148:1481 149:578 150:708 151:973 152:709 153:299 154:885 155:753 156:659 157:659 158:480 159:1540 160:730 161:741 162:2539 163:538 164:938 165:1386 166:383 167:1282 168:2989 169:839 170:3490 171:334 172:1024 173:1988 174:815 175:732 176:1891 177:4015 178:2548 179:1127 180:2203 181:1934 182:2379 183:776 184:876 185:10403 186:3290 187:2187 188:2613 189:1788 190:8345 191:1347 192:9524 193:5798 194:4683 195:3912 196:2099 197:1329 198:5546 199:5902 200:7577 201:4308 202:10329 203:9990 204:4500 205:2838 206:3070 207:3158 208:3945 209:3996 210:3949 211:2082 212:2879 213:2511 214:861 215:66 216:5899 217:2132 218:888 219:600 220:1696 221:892 222:743 223:1188 End of report

1 0

DHL - ASN2571 contact
by David S. 11 Aug '17

11 Aug '17

Dear All, I have problem accessing dhl.com from my network /23 since 2 days ago, is here any DHL (ASN 2571) person or contact? Thank you. Best regards, David S. ------------------------------------------------ e. david(a)zeromail.us

1 1

supermicro server visio templates
by Randy Bush 11 Aug '17

11 Aug '17

anyone can send $ubject? specifically 1ru & 2ru. one needs a supermicro sales rep, and their email addy to get from supermicro site, and i buy from a reseller. thanks randy

3 4

Re: US/Canada International border concerns for routing
by Clayton Zekelman 11 Aug '17

11 Aug '17

With the peering policies of the major Canadian ISPs, you're virtually guaranteed to hairpin through the US on most paths. Robellus (Rogers, Bell & Telus) will peer with you at any of their major Canadian peering points, such as NYC, Chicago or LA. At 10:01 AM 20/07/2017, Hiers, David wrote: >Hi, >We're looking to extend some services into Canada. While our >lawyers dig into it, I thought that I'd ask the hive mind about >border restrictions. > >For traffic routing, is anyone constraining cross-border routing >between Canada and the US? IOW, if you are routing from Toronto to >Montreal, do you have to guarantee that the path cannot go through, >say, Syracuse, New York? > >I'm asking network operators about packet routing; data storage is a >very different matter, of course. > >Thanks, > >David > >---------------------------------------------------------------------- >This message and any attachments are intended only for the use of >the addressee and may contain information that is privileged and >confidential. If the reader of the message is not the intended >recipient or an authorized representative of the intended recipient, >you are hereby notified that any dissemination of this communication >is strictly prohibited. If you have received this communication in >error, notify the sender immediately by return email and delete the >message and any attachments from your system. -- Clayton Zekelman Managed Network Systems Inc. (MNSi) 3363 Tecumseh Rd. E Windsor, Ontario N8W 1H4 tel. 519-985-8410 fax. 519-985-8409

4 4

(Network Orchestrators evaluation) : tail-f vs Anuta vs UBIqube vs OpenDaylight
by Kasper Adel 10 Aug '17

10 Aug '17

Hi, This is not a vendor bashing thread. We are a group of networking engineers less experience with software) in the middle of the process of procuring a network automation/orchestration controller, if that is even a good definition and we are clueless on how to evaluate them. Other than the obvious, which is to try them out, i wonder what else is important to consider/watch out for. We are presented with 3 different vendors and even OpenDayLight was considered as the open source alternative. My humble thoughts are given below and i would appreciate getting 'schooled' on what i need to ask the vendors: 1) Are they Model driven : But i still don't know how to evaluate that. 2) Do they parse Cisco/Juniper CLI or they are limited to SNMP and YANG. 3) If they do parse, we want to check if they'll hold us by the balls if the current parsers need to be updated, i.e: can we change the code ourselves and add new features to be parsed. 4) Can they work/orchestrate between CLI devices and Non CLI devices (SNMP) 5) How flexible are they to support different Vendors (Cisco, Juniper, some-weird-firewall...etc) thanks, Kim

4 3