- NANOG - lists.nanog.org

Russian diplomats lingering near fiber optic cables
by Sean Donelan 11 Jun '17

11 Jun '17

There must be a perfectly logical explanation.... Yes, people in the industry know where the choke points are. But the choke points aren't always the most obvious places. Its kinda a weird for diplomats to show up there. On the other hand, I've been a fiber optic tourist. I've visited many critical choke points in the USA and other countries, and even took selfies :-) http://www.politico.com/story/2017/06/01/russia-spies-espionage-trump-239003 In the throes of the 2016 campaign, the FBI found itself with an escalating problem: Russian diplomats, whose travel was supposed to be tracked by the State Department, were going missing. The diplomats, widely assumed to be intelligence operatives, would eventually turn up in odd places, often in middle-of-nowhere USA. One was found on a beach, nowhere near where he was supposed to be. In one particularly bizarre case, relayed by a U.S. intelligence official, another turned up wandering around in the middle of the desert. Interestingly, both seemed to be lingering where underground fiber-optic cables tend to run. According to another U.S. intelligence official, “They find these guys driving around in circles in Kansas. It’s a pretty aggressive effort.” It’s a trend that has led intelligence officials to conclude that the Kremlin is waging a quiet effort to map the United States’ telecommunications infrastructure, perhaps preparing for an opportunity to disrupt it.

21 44

IP Hijacking For Dummies
by Ronald F. Guilmette 11 Jun '17

11 Jun '17

Late last night, I put together the following simple annotated listing of the routes being announced by AS34991. Beyond the quite apparent fact that this "Bulgarian" network is announcing a bunch of routes for blocks of IPv4 space allocated to various parties within the nation of Columbia (including the National University thereof) the other thing that struck me about this was the apparent relevance of a company called "host-offshore.com". Looking at the web site for that, it provides only a single contact phone number which is unambiguously a -Pakistani- phone number. But of course, that makes perfect sense, because Pakistan is just down the street from Bulgaria (NOT!) It did also strike me as passing strange that this company has apparently elected to not actually put its own web server, name servers, or mail server anywhere within its own duly allocated IPv4 blocks. Things got even a bit more interesting when I tried to actually order a server from this company. Apparently, all of their virtual servers are "sold out". However... and please, somebody check me on this... I guess that all of the browsers on all of the platforms I have ready access to are broken or something, because try as I might, I could never quite succeed at reaching any page on this company's web site where I could order up -any- kind of server, virtual, dedicated, or otherwise. So, you know, this hosting company appears somewhat unique and unusual, at least from where I am sitting, in the sense that it is perhaps the only such "hosting" company that I've ever run across in my travels that doesn't actually have -anything- for sale. Personally, I don't really give a rat's ass if this site is just a cover for some inept criminals, or for Panstani ISI, or for the FSB, or for some of Putin's patriots, or even if it belongs to the NSA. But I cannot help but bemoan the fact that here we are, and it is 2017 already, and yet, whichever bunch of lame-ass jerks are in fact behind this thing, apparently aren't even capable of slapping together a cover web site that is more than just some entirely shallow and not very effective false front. As a researcher and student of such things, I just think that by now, in 2017, we should have a somewhat more skilled class of frauds, rogues, criminals and spies on the Internet. I mean this is just baby stuff, and it only takes a couple of minutes and few clicks to see past such transparent gibberish. So c'mon all ye criminals, rogues and spys! You need to up your game fer cryin' out loud! At least present us with something a bit more challenging than -this- kind of very superflous crap. I mean, have you no self-respect? Geeeessshhh! Regards, rfg ======================================================================= 79.124.77.0/24 -- Bulgaria -- host-offshore.com 82.118.233.0/24 -- Blugaria -- wirelessnetbg.info 91.92.144.0/24 -- Bulgaria -- host-offshore.com 130.185.254.0/24 -- Belize? -- host-offshore.com - formerly routed by Verdina) 152.204.132.0/24 -- Columbia 152.204.133.0/24 -- Columbia 152.231.25.0/24 -- Columbia 152.231.28.0/24 -- Columbia 168.176.187.0/24 -- Columbia, National University of 168.176.192.0/24 -- Columbia, National University of 168.176.194.0/24 -- Columbia, National University of 168.176.218.0/24 -- Columbia, National University of 168.176.219.0/24 -- Columbia, National University of 179.1.71.0/24 -- Columbia 181.57.40.0/24 -- Columbia 186.113.13.0/24 -- Columbia 186.113.15.0/24 -- Columbia 186.147.230.0/24 -- Columbia 190.90.31.0/24 -- Columbia 190.90.88.0/24 -- Columbia 200.1.65.0/24 -- Columbia 200.14.44.0/24 -- Columbia 200.24.3.0/24 -- Columbia 200.24.5.0/24 -- Columbia

5 6

plea for increase participation in v6ops/IETF
by JORDI PALET MARTINEZ 11 Jun '17

11 Jun '17

Hello all, At the last LACNIC event, I mentioned on a couple of occasions the need for ISPs in the region, especially small and medium-sized ones, to participate in the decisions taken in the IETF IPv6 Operations Working Group (v6ops). I’m sending this here as well, as I believe the situation also apply to this region. When I asked among the attendees how many participate in v6ops, only one person raised his hand. What does it mean to participate in the mailing list? Follow some emails (sometimes only 1-2 a week, sometimes they can be several in a day), and therefore learn about what is being discussed and give your opinion and, given that decisions are made by Consensus, influence them. What consequences has NOT participating? That decisions against your interests/opinions could be taken, and obviously do not consider your perspective in the standards. Generally large operators are involved, which implies that your interests are not sufficiently represented, and in general are contrary to yours. Your "vote/opinion" is not worth more than yours, but the big one is present and the small/medium NO! I give you a very concrete example. The serious problem that small and medium ISPs have, is to continue offering IPv6 and IPv4 services to their customers, when they already do not have IPv4 addresses. Only the biggest ISPs have a great purchasing power and can influence the manufacturers to do for them what they need. One possibility to solve it, extending the life of IPv4, but not necessarily deploying IPv6, is using CGN, which is also very expensive, and breaks many things. The solution is simple. Deploying IPv6-only services in the last mile, which involves using transition mechanisms, such as 464XLAT that has been deployed on millions of smartphones worldwide, so that applications continue to operate transparently as they "believe" they have IPv4. What is the problem, then? That manufacturers of CPEs are based on an old specification (RFC7084) that does not contemplate these transition mechanisms, so when a small/medium ISP asks a manufacturer for a firmware upgrade or a new CPE, they do not include that solution and perhaps they offer it with an extra cost. In my view, this should change, and that is why I am working on a number of documents, including RFC7084-bis (https://datatracker.ietf.org/doc/draft-ietf-v6ops-rfc7084-bis/) To update this situation, but there is opposition from large ISPs and virtually no small/medium "talks" about it, and in fact these large ISPs deny the situation. In addition, the document also specifies the "automated" support of those cases in which the user installs other routers (which is very common as we all know, and will be more and more in IPv6, IoT, etc.), behind the router installed by the ISP, through homenet (HNCP). I am not asking for your support for my documents, but for understanding the problem and the solution that is being proposed and/or possible new ones, and for the opinion of not only those very few “big ones”, but also of many small and medium, who are most affected. If you want to subscribe to this list, search for "subscribing" at: https://www.ietf.org/mailman/listinfo/v6ops You can see the files of the discussion in: https://mailarchive.ietf.org/arch/search/?email_list=v6ops I remind you that participating in the IETF does not require a presence in the meetings, as consensus is agreed in the list. Regards, Jordi ********************************************** IPv4 is over Are you ready for the new Internet ? http://www.consulintel.es The IPv6 Company This electronic message contains information which may be privileged or confidential. The information is intended to be for the use of the individual(s) named above. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, including attached files, is prohibited.

1 0

Weekly Routing Table Report
by cscora＠apnic.net 09 Jun '17

09 Jun '17

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, MENOG, SAFNOG, SdNOG, BJNOG, CaribNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 10 Jun, 2017 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 650823 Prefixes after maximum aggregation (per Origin AS): 253584 Deaggregation factor: 2.57 Unique aggregates announced (without unneeded subnets): 314080 Total ASes present in the Internet Routing Table: 57448 Prefixes per ASN: 11.33 Origin-only ASes present in the Internet Routing Table: 49725 Origin ASes announcing only one prefix: 21980 Transit ASes present in the Internet Routing Table: 7723 Transit-only ASes present in the Internet Routing Table: 224 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 45 Max AS path prepend of ASN ( 55644) 41 Prefixes from unregistered ASNs in the Routing Table: 54 Numnber of instances of unregistered ASNs: 58 Number of 32-bit ASNs allocated by the RIRs: 18953 Number of 32-bit ASNs visible in the Routing Table: 14709 Prefixes from 32-bit ASNs in the Routing Table: 59673 Number of bogon 32-bit ASNs visible in the Routing Table: 65 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 369 Number of addresses announced to Internet: 2848626788 Equivalent to 169 /8s, 202 /16s and 152 /24s Percentage of available address space announced: 76.9 Percentage of allocated address space announced: 76.9 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 98.6 Total number of prefixes smaller than registry allocations: 217103 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 178366 Total APNIC prefixes after maximum aggregation: 51373 APNIC Deaggregation factor: 3.47 Prefixes being announced from the APNIC address blocks: 177587 Unique aggregates announced from the APNIC address blocks: 73377 APNIC Region origin ASes present in the Internet Routing Table: 8152 APNIC Prefixes per ASN: 21.78 APNIC Region origin ASes announcing only one prefix: 2278 APNIC Region transit ASes present in the Internet Routing Table: 1159 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 45 Number of APNIC region 32-bit ASNs visible in the Routing Table: 2980 Number of APNIC addresses announced to Internet: 763641700 Equivalent to 45 /8s, 132 /16s and 63 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-137529 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 197893 Total ARIN prefixes after maximum aggregation: 94548 ARIN Deaggregation factor: 2.09 Prefixes being announced from the ARIN address blocks: 199901 Unique aggregates announced from the ARIN address blocks: 91948 ARIN Region origin ASes present in the Internet Routing Table: 17891 ARIN Prefixes per ASN: 11.17 ARIN Region origin ASes announcing only one prefix: 6615 ARIN Region transit ASes present in the Internet Routing Table: 1765 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 23 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2011 Number of ARIN addresses announced to Internet: 1110673568 Equivalent to 66 /8s, 51 /16s and 136 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-397212 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 175540 Total RIPE prefixes after maximum aggregation: 85525 RIPE Deaggregation factor: 2.05 Prefixes being announced from the RIPE address blocks: 171131 Unique aggregates announced from the RIPE address blocks: 102774 RIPE Region origin ASes present in the Internet Routing Table: 24103 RIPE Prefixes per ASN: 7.10 RIPE Region origin ASes announcing only one prefix: 11101 RIPE Region transit ASes present in the Internet Routing Table: 3402 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 33 Number of RIPE region 32-bit ASNs visible in the Routing Table: 5887 Number of RIPE addresses announced to Internet: 711837824 Equivalent to 42 /8s, 109 /16s and 200 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 81750 Total LACNIC prefixes after maximum aggregation: 18287 LACNIC Deaggregation factor: 4.47 Prefixes being announced from the LACNIC address blocks: 83002 Unique aggregates announced from the LACNIC address blocks: 38736 LACNIC Region origin ASes present in the Internet Routing Table: 6001 LACNIC Prefixes per ASN: 13.83 LACNIC Region origin ASes announcing only one prefix: 1653 LACNIC Region transit ASes present in the Internet Routing Table: 1113 Average LACNIC Region AS path length visible: 5.4 Max LACNIC Region AS path length visible: 32 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 3514 Number of LACNIC addresses announced to Internet: 170730208 Equivalent to 10 /8s, 45 /16s and 34 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-266652 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 17174 Total AfriNIC prefixes after maximum aggregation: 3805 AfriNIC Deaggregation factor: 4.51 Prefixes being announced from the AfriNIC address blocks: 18833 Unique aggregates announced from the AfriNIC address blocks: 6915 AfriNIC Region origin ASes present in the Internet Routing Table: 1048 AfriNIC Prefixes per ASN: 17.97 AfriNIC Region origin ASes announcing only one prefix: 332 AfriNIC Region transit ASes present in the Internet Routing Table: 198 Average AfriNIC Region AS path length visible: 4.8 Max AfriNIC Region AS path length visible: 21 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 317 Number of AfriNIC addresses announced to Internet: 91322368 Equivalent to 5 /8s, 113 /16s and 120 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5545 4190 74 ERX-CERNET-BKB China Education and Rese 7545 3942 403 376 TPG-INTERNET-AP TPG Telecom Limited, AU 17974 2975 902 73 TELKOMNET-AS2-AP PT Telekomunikasi Indo 4766 2783 11137 760 KIXS-AS-KR Korea Telecom, KR 9829 2747 1499 540 BSNL-NIB National Internet Backbone, IN 9808 2216 8699 34 CMNET-GD Guangdong Mobile Communication 4755 2090 422 222 TATACOMM-AS TATA Communications formerl 45899 1984 1392 107 VNPT-AS-VN VNPT Corp, VN 7552 1620 1100 66 VIETEL-AS-AP Viettel Corporation, VN 9498 1582 360 138 BBIL-AP BHARTI Airtel Ltd., IN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 22773 3822 2969 154 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 6327 3400 1333 80 SHAW - Shaw Communications Inc., CA 18566 2128 405 109 MEGAPATH5-US - MegaPath Corporation, US 6389 2066 3671 39 BELLSOUTH-NET-BLK - BellSouth.net Inc., 20115 2009 2172 413 CHARTER-NET-HKY-NC - Charter Communicat 209 1816 5069 639 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 16509 1810 3441 585 AMAZON-02 - Amazon.com, Inc., US 30036 1781 324 315 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 6983 1696 854 232 ITCDELTA - Earthlink, Inc., US 701 1562 10578 636 UUNET - MCI Communications Services, In Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 39891 3338 187 22 ALJAWWALSTC-AS, SA 8551 3208 377 40 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2915 989 2097 AKAMAI-ASN1, US 34984 2020 328 390 TELLCOM-AS, TR 9121 1977 1691 17 TTNET, TR 12479 1598 1044 52 UNI2-AS, ES 13188 1597 99 55 TRIOLAN, UA 12389 1524 1408 625 ROSTELECOM-AS, RU 9198 1325 352 25 KAZTELECOM-AS, KZ 6849 1225 355 21 UKRTELNET, UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 3545 545 153 Telmex Colombia S.A., CO 8151 2543 3404 573 Uninet S.A. de C.V., MX 11830 2084 369 57 Instituto Costarricense de Electricidad 7303 1568 1010 247 Telecom Argentina S.A., AR 6503 1538 437 53 Axtel, S.A.B. de C.V., MX 6147 1267 377 27 Telefonica del Peru S.A.A., PE 3816 1013 494 186 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 28573 998 2300 175 CLARO S.A., BR 11172 906 126 81 Alestra, S. de R.L. de C.V., MX 18881 895 1052 23 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1260 398 48 LINKdotNET-AS, EG 37611 715 67 7 Afrihost, ZA 36903 713 358 123 MT-MPLS, MA 36992 627 1375 26 ETISALAT-MISR, EG 24835 495 850 15 RAYA-AS, EG 29571 419 36 10 CITelecom-AS, CI 37492 407 320 75 ORANGE-, TN 8452 388 1730 17 TE-AS TE-AS, EG 15399 353 35 7 WANANCHI-, KE 2018 298 327 74 TENET-1, ZA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5545 4190 74 ERX-CERNET-BKB China Education and Rese 7545 3942 403 376 TPG-INTERNET-AP TPG Telecom Limited, AU 22773 3822 2969 154 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 10620 3545 545 153 Telmex Colombia S.A., CO 6327 3400 1333 80 SHAW - Shaw Communications Inc., CA 39891 3338 187 22 ALJAWWALSTC-AS, SA 8551 3208 377 40 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 17974 2975 902 73 TELKOMNET-AS2-AP PT Telekomunikasi Indo 20940 2915 989 2097 AKAMAI-ASN1, US 4766 2783 11137 760 KIXS-AS-KR Korea Telecom, KR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 22773 3822 3668 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 7545 3942 3566 TPG-INTERNET-AP TPG Telecom Limited, AU 10620 3545 3392 Telmex Colombia S.A., CO 6327 3400 3320 SHAW - Shaw Communications Inc., CA 39891 3338 3316 ALJAWWALSTC-AS, SA 8551 3208 3168 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 17974 2975 2902 TELKOMNET-AS2-AP PT Telekomunikasi Indonesia, I 9829 2747 2207 BSNL-NIB National Internet Backbone, IN 9808 2216 2182 CMNET-GD Guangdong Mobile Communication Co.Ltd. 11830 2084 2027 Instituto Costarricense de Electricidad y Telec Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 65602 UNALLOCATED 8.225.192.0/24 30372 SUNESYS2 - Sunesys, LLC, US 65000 PRIVATE 31.219.177.0/25 8966 ETISALAT-AS P.O. Box 1150, Dub 65000 PRIVATE 31.219.177.128/25 8966 ETISALAT-AS P.O. Box 1150, Dub 66255 UNALLOCATED 45.6.244.0/22 16735 ALGAR TELECOM S/A, BR 66255 UNALLOCATED 45.6.245.0/24 16735 ALGAR TELECOM S/A, BR 66255 UNALLOCATED 45.6.246.0/24 16735 ALGAR TELECOM S/A, BR 66255 UNALLOCATED 45.6.247.0/24 16735 ALGAR TELECOM S/A, BR 65010 PRIVATE 46.56.192.0/21 42772 VELCOM-AS, BY 65010 PRIVATE 46.56.224.0/21 42772 VELCOM-AS, BY 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 14.192.48.0/24 134833 LIHGL-HK LANLIAN INTERNATIONAL HOLDING GROUP LIMITE 14.192.49.0/24 134833 LIHGL-HK LANLIAN INTERNATIONAL HOLDING GROUP LIMITE 14.192.50.0/24 134833 LIHGL-HK LANLIAN INTERNATIONAL HOLDING GROUP LIMITE 14.192.51.0/24 134833 LIHGL-HK LANLIAN INTERNATIONAL HOLDING GROUP LIMITE 27.100.7.0/24 56096 UNKNOWN 36.255.248.0/24 64091 UNKNOWN 36.255.250.0/24 64091 UNKNOWN 41.76.232.0/21 62878 XLITT - Xlitt, US 41.77.248.0/21 62878 XLITT - Xlitt, US 41.78.12.0/23 62878 XLITT - Xlitt, US Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:15 /9:13 /10:36 /11:104 /12:280 /13:546 /14:1045 /15:1850 /16:13492 /17:7626 /18:13428 /19:24669 /20:38590 /21:41145 /22:77218 /23:64196 /24:364348 /25:835 /26:612 /27:643 /28:43 /29:32 /30:26 /31:3 /32:28 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6327 3193 3400 SHAW - Shaw Communications Inc., CA 22773 2971 3822 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 39891 2898 3338 ALJAWWALSTC-AS, SA 8551 2673 3208 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 18566 2021 2128 MEGAPATH5-US - MegaPath Corporation, US 30036 1577 1781 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 11830 1474 2084 Instituto Costarricense de Electricidad y Telec 10620 1471 3545 Telmex Colombia S.A., CO 6389 1373 2066 BELLSOUTH-NET-BLK - BellSouth.net Inc., US 9121 1369 1977 TTNET, TR Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1604 2:841 4:18 5:2429 6:34 8:1038 12:1828 13:122 14:1771 15:27 16:2 17:123 18:121 20:57 23:2329 24:1828 25:2 27:2426 31:1904 32:83 33:9 35:20 36:414 37:2589 38:1325 39:42 40:98 41:2991 42:470 43:1935 44:72 45:2755 46:2780 47:122 49:1214 50:983 51:18 52:824 54:360 55:5 56:4 57:42 58:1600 59:1047 60:391 61:1947 62:1595 63:1913 64:4549 65:2208 66:4509 67:2247 68:1229 69:3361 70:1148 71:584 72:2179 74:2690 75:387 76:430 77:1469 78:1448 79:2503 80:1402 81:1386 82:995 83:720 84:877 85:1751 86:483 87:1156 88:766 89:2065 90:176 91:6204 92:1027 93:2389 94:2373 95:2758 96:622 97:352 98:1054 99:89 100:154 101:1270 103:14931 104:2913 105:191 106:483 107:1651 108:818 109:2964 110:1427 111:1727 112:1187 113:1237 114:1034 115:1697 116:1788 117:1717 118:2164 119:1590 120:1031 121:1111 122:2257 123:1817 124:1515 125:1891 128:780 129:645 130:440 131:1389 132:530 133:199 134:647 135:221 136:455 137:436 138:1947 139:486 140:394 141:568 142:759 143:923 144:800 145:181 146:1032 147:672 148:1433 149:580 150:713 151:976 152:797 153:291 154:814 155:746 156:591 157:636 158:452 159:1464 160:661 161:745 162:2521 163:530 164:792 165:1225 166:385 167:1254 168:2658 169:777 170:3363 171:318 172:1020 173:1908 174:800 175:748 176:1848 177:4038 178:2500 179:1162 180:2214 181:1886 182:2361 183:995 184:864 185:9850 186:3101 187:2170 188:2698 189:1831 190:8184 191:1310 192:9433 193:5786 194:4651 195:3891 196:2114 197:1281 198:5494 199:5883 200:7435 201:4326 202:10366 203:9994 204:4480 205:2812 206:3025 207:3167 208:3981 209:4021 210:3968 211:2147 212:2854 213:2484 214:880 215:67 216:5738 217:2102 218:851 219:600 220:1649 221:912 222:761 223:1178 End of report

2 1

Google Security Contact
by Ken Gilmour 09 Jun '17

09 Jun '17

Hi, There is a potential vulnerability in Gmail / Google Inbox which I need to discuss and verify with the Google Security Team. Is there anyone on that team here on NANOG who can contact me off-list please? Best to contact me at kg(a)invinsec.com. Thanks! Ken

1 0

Re: IPv4 Hijacking For Idiots
by Scott Weeks 08 Jun '17

08 Jun '17

--- s(a)xopher.net wrote: From: Scott Christopher <s(a)xopher.net> I think the solution is legislation + regulations. --------------------------------- For sure dude, because, you know, they do such a great job of all the other stuff they touch! scott ps. NOT!

2 1

DMCA processing software
by Jason Baugher 08 Jun '17

08 Jun '17

I'm curious what people are using to manage DMCA takedown notices in mid-sized networks. I've been searching, and have found the ACNS spec, and a few obscure references to an RT plugin, but not much else. As the ISP I work for grows, manual handling of notices is starting to be a problem. I'd prefer something open-source so we can extend it to hook into our other systems, but primarily I need something to parse the notice emails, store the information, track the number of incidents over time, and generate letters to users. If nothing exists, and everyone just has in-house proprietary systems, then we'll start down the same road, but I don't like to re-invent the wheel if I can help it. Thanks

4 3

Proxying NetFlow traffic correctly
by Sami 08 Jun '17

08 Jun '17

Hello, I have been searching for a solution that collects/duplicates NetFlow traffic properly for a while but i couldn't find any. Do you know any good unix alternative to ntopng, flowd, flow-tools? nprobe of netflow seems to be the closest one to fit my needs but i want to see if there are any other solution. My goal is to centralize NetFlow traffic into a single machine and then proxy some flows to other destinations for further analysis Best Regards, Sami

8 8

Re: Merit RADB support
by Chuck Anderson 07 Jun '17

07 Jun '17

On Wed, Jun 07, 2017 at 12:08:50PM -0400, Chuck Anderson wrote: > On Wed, Jun 07, 2017 at 10:41:16AM -0500, Kaiser, Erich wrote: > > Anyone gonna email me back from RADB support? > > In my experience, no. Apologies to Merit RADB, it was BGPmon that never responds. Merit RADB actually does respond--my frustration is more about the difficulty in getting them to delete stale objects that others registered, although I was finally able to get my objects cleaned up.

4 3

Spectrum TV authentication failures
by Jay R. Ashworth 07 Jun '17

07 Jun '17

NANOG is probably not the optimal venue for looking into auth failures on the IPTV service which Spectrum/Charter/TWC/BH's TV app for Android uses (which are legion), even though it probably uses RADIUS to get the work done. Anyone got a pointer to a better venue for such questions? Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274

1 1