- NANOG - lists.nanog.org

WiT Mixer to Occur Before N91 Conference, Sponsorships, Talk of the Week + More
by Nanog News 28 Mar '24

28 Mar '24

*Women in Tech Mixer to Occur Before Conference* *Plan your Travel to Arrive Early to NANOG 91* *The NANOG 91 Women in Tech Mixer will take place Sunday, 09, June in Kansas City, MO.* The Women In Tech Mixer welcomes all attendees that identify as female with she/her pronouns.Take advantage of this incredible opportunity to make career-changing relationships with other women in the industry. *MORE INFO <https://nanog.org/events/nanog-91/socials/>* *Sponsorships Available for NANOG 91 + Beyond! **Invest in the Strength of the Community We Have Built* *Sponsoring NANOG Conferences has many benefits: * - Showcase your newest technologies + solutions - Increase your brand’s visibility + reach - Amplify your organization’s message - Connect with industry influencers + decision makers - Empower people + inspire change *MORE INFO <https://nanog.org/events/sponsorship/sponsorship-opportunities/>* *NANOG Talk of the Week* *Alerts Don't Suck, YOUR Alerts Suck! w/ Kentik's Leon Adato* *Why it's worth your time:* With 775 views in the last month, this talk is one of our most viewed videos from NANOG 90. *Description:* Nobody "likes" getting alerts. In the best-case scenario, an alert is received because something went (or is about to go) wrong. In those cases, recipients can at least be grateful they found out before things worsened. Far more often, however, people hate getting alerts for the exact opposite reason: They are meaningless, trivial, or just plain wrong—a source of constant interruptions, false alarms, unplanned work, and "noise." While many are convinced that this is the inherent nature of alerts (and monitoring in general), it can be so much better... *WATCH NOW <https://www.youtube.com/watch?v=cNMwvX4aoic>* *Early Bird Gets the Worm* *Take Advantage of Discounted Registration Prices + Access to Hotel Info* Early registration prices will end on 08, April. Those who register early will also have early access to hotel details. *REGISTER NOW * <https://nanog.org/events/nanog-91/>

1 0

Re: AWS Web Application Firewall blocks ISP ranges?
by G 26 Mar '24

26 Mar '24

Endured a similar problem last year. The company I was with migrated prod to Global Accelerator, ALBs, and WAF with Shield Advanced on an accelerated timeline. Several of our customer networks were blocked in AWS's default blocklists. The path to resolution was meeting with our AWS account executive and their internal WAF team to expedite the removal of the addresses. -G On 2024-03-21 18:44, Aaron Wendel wrote: > Yes. > > our network is a mix of content and eyeballs and they listed the whole > thing. This has prevented the local school district from using their > text to speech application (for their deaf students) as well as > others. This has also affected the local library and residences. > > It's a PITA. > > Thanks Amazon. > > Aaron > > > On 3/21/2024 12:16 PM, Jonathan Kalbfeld via NANOG wrote: >> Hi All, >> >> I just became aware that AWS has a list of hosting IP providers and >> that list is blocked by their WAF? (!?!?). None of my VM or colo >> customers can reach anything in AWS, such as Docker, Twilio, etc. I >> confirmed through source routing that when I access it using one of my >> peering partners as a source IP it is reachable, but using one of my >> net blocks, it is not reachable and times out. Checked all of my >> routing tables and those AWS blocks are definitely visible. Also >> confirmed from looking glass that my IP ranges are showing up. >> >> Has anyone else encountered that? If so, is there a way to get removed >> from that list? I have a very curated list of clients and I know all >> of them personally and none of them have been abusing AWS, so I was >> wondering if it was some kind of blanket ban? >> >> If you're internal to AWS, my ASN is 54380, IP ranges affected are >> 199.33.244.0/24, 199.79.202.0/24, 199.188.96.0/22, 45.59.144.0/22 and >> 206.197.110.0/24 >> >> Feel free to reach out off-list. >> >> Thanks, >> >> Jonathan Kalbfeld >> >> Jonathan Kalbfeld >> >> office: +1 310 317 7933 <tel:%28310%29%20317-7933> >> fax: +1 310 317 7901 <tel:%28310%29%20317-7901> >> home: +1 310 317 7909 <tel:%28310%29%20317-7909> >> mobile: +1 310 227 1662 <tel:%28310%29%20227-1662> >> >> ThoughtWave Technologies, Inc. >> Studio City, CA 91604 >> https://thoughtwave.com >> >> View our network at >> https://bgp.he.net/AS54380 >> >> +1 844 42-LINUX >>

2 1

AT&T ARIN Contact
by John Conley 26 Mar '24

26 Mar '24

I have a few old netblocks that were allocated to my company back in the early 2010s that our security vendor is requiring us to either secure or remove from being registered to us. I've been unable to reach anyone at ipadmin-bell(a)att.com, and the number listed isn't connected anymore. does anyone have some contact info at ATT/Bell for getting these records corrected? John Conley - Covenant - Network Engineer - 423.463.3342 ______________________________________________________________________ This communication and the information transmitted is intended solely for the individual or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of or taking action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you have received this email in error please contact the sender immediately and delete the material from any computer. As a recipient of this email, you are responsible for screening its contents and the contents of any attachments for the presence of viruses. The organization sending this communication and its affiliates accept no liability for any damages caused by any virus transmitted by this email. Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. This email has been scanned for viruses and malware, and may have been automatically archived by Mimecast Ltd, an innovator in Software as a Service (SaaS) for business. Providing a safer and more useful place for your human generated data. Specializing in; Security, archiving and compliance. To find out more visit the Mimecast website.

2 1

All crickets at HE
by Pascal Masha 25 Mar '24

25 Mar '24

Seems like the good folks at noc@he are no longer responding to emails!! Is anyone else on the list experiencing this? Regards, Paschal Masha

3 3

Who is security-research.org ?
by John Levine 24 Mar '24

24 Mar '24

I noticed them in my DNS logs, trying to do AXFRs of random zones I host. The probes are coming from Hetzner, a low-cost German hosting provider with a history of tolerating dodgy customer behavior. Their website, which is hosted at Vultr, airly assures us it's nothing personal, they scan everyone to make the Internet better, just filter us, but if you insist, you can send objections to noc(a)m-d.net. Any idea who they are? I expect it's more likely that they're self-important than evil. but still, sigh. R's, John

2 1

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 22 Mar '24

22 Mar '24

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG UKNOF, TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 23 Mar, 2024 BGP Table (Global) as seen in Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 940133 Prefixes after maximum aggregation (per Origin AS): 359192 Deaggregation factor: 2.62 Unique aggregates announced (without unneeded subnets): 458582 Total ASes present in the Internet Routing Table: 75531 Prefixes per ASN: 12.45 Origin-only ASes present in the Internet Routing Table: 64777 Origin ASes announcing only one prefix: 26587 Transit ASes present in the Internet Routing Table: 10754 Transit-only ASes present in the Internet Routing Table: 492 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 55 Max AS path prepend of ASN (265020) 50 Prefixes from unregistered ASNs in the Routing Table: 1062 Number of instances of unregistered ASNs: 1064 Number of 32-bit ASNs allocated by the RIRs: 43892 Number of 32-bit ASNs visible in the Routing Table: 36072 Prefixes from 32-bit ASNs in the Routing Table: 183349 Number of bogon 32-bit ASNs visible in the Routing Table: 19 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 593 Number of addresses announced to Internet: 3028765568 Equivalent to 180 /8s, 135 /16s and 75 /24s Percentage of available address space announced: 81.8 Percentage of allocated address space announced: 81.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.6 Total number of prefixes smaller than registry allocations: 310128 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 249324 Total APNIC prefixes after maximum aggregation: 73160 APNIC Deaggregation factor: 3.41 Prefixes being announced from the APNIC address blocks: 241895 Unique aggregates announced from the APNIC address blocks: 100148 APNIC Region origin ASes present in the Internet Routing Table: 14062 APNIC Prefixes per ASN: 17.20 APNIC Region origin ASes announcing only one prefix: 4250 APNIC Region transit ASes present in the Internet Routing Table: 1881 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 32 Number of APNIC region 32-bit ASNs visible in the Routing Table: 9436 Number of APNIC addresses announced to Internet: 760850304 Equivalent to 45 /8s, 89 /16s and 167 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-153913 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 274554 Total ARIN prefixes after maximum aggregation: 124106 ARIN Deaggregation factor: 2.21 Prefixes being announced from the ARIN address blocks: 279363 Unique aggregates announced from the ARIN address blocks: 132698 ARIN Region origin ASes present in the Internet Routing Table: 19123 ARIN Prefixes per ASN: 14.61 ARIN Region origin ASes announcing only one prefix: 6963 ARIN Region transit ASes present in the Internet Routing Table: 1983 Average ARIN Region AS path length visible: 3.7 Max ARIN Region AS path length visible: 25 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4868 Number of ARIN addresses announced to Internet: 1269832448 Equivalent to 75 /8s, 176 /16s and 27 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 263560 Total RIPE prefixes after maximum aggregation: 126198 RIPE Deaggregation factor: 2.09 Prefixes being announced from the RIPE address blocks: 258582 Unique aggregates announced from the RIPE address blocks: 162667 RIPE Region origin ASes present in the Internet Routing Table: 28562 RIPE Prefixes per ASN: 9.05 RIPE Region origin ASes announcing only one prefix: 12098 RIPE Region transit ASes present in the Internet Routing Table: 3974 Average RIPE Region AS path length visible: 4.5 Max RIPE Region AS path length visible: 39 Number of RIPE region 32-bit ASNs visible in the Routing Table: 11666 Number of RIPE addresses announced to Internet: 714792704 Equivalent to 42 /8s, 154 /16s and 223 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-216475 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 121039 Total LACNIC prefixes after maximum aggregation: 28895 LACNIC Deaggregation factor: 4.19 Prefixes being announced from the LACNIC address blocks: 119402 Unique aggregates announced from the LACNIC address blocks: 49606 LACNIC Region origin ASes present in the Internet Routing Table: 11061 LACNIC Prefixes per ASN: 10.79 LACNIC Region origin ASes announcing only one prefix: 2624 LACNIC Region transit ASes present in the Internet Routing Table: 2377 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 55 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8918 Number of LACNIC addresses announced to Internet: 177260032 Equivalent to 10 /8s, 144 /16s and 198 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-273820 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 30594 Total AfriNIC prefixes after maximum aggregation: 6127 AfriNIC Deaggregation factor: 4.99 Prefixes being announced from the AfriNIC address blocks: 40298 Unique aggregates announced from the AfriNIC address blocks: 12989 AfriNIC Region origin ASes present in the Internet Routing Table: 1819 AfriNIC Prefixes per ASN: 22.15 AfriNIC Region origin ASes announcing only one prefix: 652 AfriNIC Region transit ASes present in the Internet Routing Table: 358 Average AfriNIC Region AS path length visible: 4.9 Max AfriNIC Region AS path length visible: 28 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 1184 Number of AfriNIC addresses announced to Internet: 105718272 Equivalent to 6 /8s, 77 /16s and 34 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 9860 8742 66 CHINAMOBILE-CN China Mobile Communicati 7545 5655 777 674 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4932 4192 76 ERX-CERNET-BKB China Education and Rese 7552 3859 1330 20 VIETEL-AS-AP Viettel Group, VN 7713 3594 1043 64 TELKOMNET-AS-AP PT Telekomunikasi Indon 9498 3523 495 253 BBIL-AP BHARTI Airtel Ltd., IN 45899 3320 1870 95 VNPT-AS-VN VNPT Corp, VN 24560 2764 864 363 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd 4766 2309 11259 573 KIXS-AS-KR Korea Telecom, KR 4755 2192 434 194 TATACOMM-AS TATA Communications formerl Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 9723 11352 3409 AMAZON-02, US 11492 4593 305 622 CABLEONE, US 7155 4181 288 96 VIASAT-SP-BACKBONE, US 22773 3608 3063 301 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3603 1320 75 SHAW, CA 174 3386 6652 699 COGENT-174, US 749 3191 54916 2443 DNIC-AS-00749, US 16625 3174 1365 2266 AKAMAI-AS, US 367 2924 3631 1389 DNIC-ASBLK-00306-00371, US 396982 2762 3641 411 GOOGLE-CLOUD-PLATFORM, US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 7701 1714 147 UNI2-AS, ES 39891 4758 286 60 ALJAWWALSTC-AS, SA 20940 3873 3396 128 AKAMAI-ASN1, NL 9009 3263 283 1597 M247, RO 12389 2977 2303 903 ROSTELECOM-AS, RU 8551 2646 368 35 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 34984 2341 363 589 TELLCOM-AS, TR 13188 1607 100 26 TRIOLAN, UA 8452 1524 1852 14 TE-AS TE-AS, EG 44477 1496 98 708 STARK-INDUSTRIES, GB Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 12363 3320 489 UNINET, MX 10620 3526 497 892 Telmex Colombia S.A., CO 13999 2514 342 658 Mega Cable, S.A. de C.V., MX 11830 2000 369 64 Instituto Costarricense de Electricidad 28573 1344 2319 241 Claro NXT Telecomunicacoes Ltda, BR 3816 1312 788 199 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6503 1204 348 492 Axtel, S.A.B. de C.V., MX 11664 1142 179 431 Techtel LMDS Comunicaciones Interactiva 6147 1089 369 22 Telefonica del Peru S.A.A., PE 26615 1071 2503 53 TIM SA, BR Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24835 1522 505 26 RAYA-AS, EG 24863 1504 389 20 LINKdotNET-AS, EG 36992 1368 1519 281 ETISALAT-MISR, EG 36903 1249 554 96 MT-MPLS, MA 29571 1203 76 60 ORANGE-COTE-IVOIRE, CI 36935 836 521 42 Vodafone-, EG 6713 554 1861 34 IAM-AS, MA 15399 529 56 54 WANANCHI-, KE 36914 490 82 3 KENET-AS, KE 24757 428 73 5 EthioNet-AS, ET Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 12363 3320 489 UNINET, MX 9808 9860 8742 66 CHINAMOBILE-CN China Mobile Communicati 16509 9723 11352 3409 AMAZON-02, US 12479 7701 1714 147 UNI2-AS, ES 7545 5655 777 674 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4932 4192 76 ERX-CERNET-BKB China Education and Rese 39891 4758 286 60 ALJAWWALSTC-AS, SA 11492 4593 305 622 CABLEONE, US 7155 4181 288 96 VIASAT-SP-BACKBONE, US 20940 3873 3396 128 AKAMAI-ASN1, NL Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 9860 9794 CHINAMOBILE-CN China Mobile Communications Grou 12479 7701 7554 UNI2-AS, ES 16509 9723 6314 AMAZON-02, US 7545 5655 4981 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4932 4856 ERX-CERNET-BKB China Education and Research Net 39891 4758 4698 ALJAWWALSTC-AS, SA 7155 4181 4085 VIASAT-SP-BACKBONE, US 11492 4593 3971 CABLEONE, US 7552 3859 3839 VIETEL-AS-AP Viettel Group, VN 20940 3873 3745 AKAMAI-ASN1, NL Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 65536 DOCUMENT 5.102.30.0/24 65512 -Private Use AS-, ZZ 33123 UNALLOCATED 8.10.69.0/24 174 COGENT-174, US 12169 UNALLOCATED 8.15.207.0/24 32787 PROLEXIC-TECHNOLOGIES-DDOS-M 40493 UNALLOCATED 8.17.26.0/24 3356 LEVEL3, US 46639 UNALLOCATED 8.17.66.0/24 701 UUNET, US 53775 UNALLOCATED 8.20.88.0/24 7029 WINDSTREAM, US 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 CROWNCASTLE-AS46887, US 396894 UNALLOCATED 8.28.201.0/24 46887 CROWNCASTLE-AS46887, US 394936 UNALLOCATED 8.33.224.0/24 22442 HOU-PHONOSCOPE, US Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.140.216.0/24 Origin: 27176 DATAWAGON, US 23.140.216.0/24 Transit: 20278 NEXEON, US 23.141.0.0/24 Origin: 395350 RESERVED, ZZ 23.141.0.0/24 Transit: 11426 TWC-11426-CAROLINAS, US 23.176.160.0/24 Origin: 397327 RESERVED, ZZ 23.176.160.0/24 Transit: 19108 SUDDENLINK-COMMUNICATIONS, US 27.0.192.0/22 Origin: 138415 HENGDA-HK HENGDA NETWORK LIMITED, HK 27.0.192.0/22 Transit: 51847 NEAROUTE, HK 27.0.192.0/24 Origin: 138195 MOACKCOLTD-AS-AP MOACK.Co.LTD, KR 27.0.192.0/24 Transit: 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:14 /10:37 /11:95 /12:298 /13:582 /14:1192 /15:2066 /16:13285 /17:8243 /18:13750 /19:24867 /20:44061 /21:51575 /22:111016 /23:98421 /24:569884 /25:731 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 6815 7701 UNI2-AS, ES 8151 6382 12363 UNINET, MX 11492 3506 4593 CABLEONE, US 39891 3440 4758 ALJAWWALSTC-AS, SA 6327 3400 3603 SHAW, CA 7155 3125 4181 VIASAT-SP-BACKBONE, US 22773 2645 3608 ASN-CXA-ALL-CCI-22773-RDC, US 30036 2148 2491 MEDIACOM-ENTERPRISE-BUSINESS, US 10620 2132 3526 Telmex Colombia S.A., CO 8551 2122 2646 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1641 2:1476 3:316 4:6 5:4516 6:162 7:6 8:1525 9:1 11:172 12:1467 13:379 14:2405 15:318 16:210 17:370 18:750 20:355 21:4 22:188 23:6631 24:2711 25:2 27:2569 29:19 31:2625 32:49 34:60 35:126 36:2228 37:4495 38:7103 39:894 40:125 41:4083 42:983 43:2353 44:312 45:16925 46:4390 47:297 49:1944 50:1902 51:573 52:1578 54:308 55:973 56:5 57:159 58:1878 59:1185 60:1025 61:2587 62:2694 63:1908 64:5527 65:2318 66:4723 67:3065 68:1334 69:4078 70:1198 71:574 72:2894 74:2588 75:1550 76:628 77:2420 78:1844 79:2471 80:2160 81:1939 82:1511 83:1287 84:1651 85:3076 86:826 87:2265 88:1241 89:4042 90:686 91:8030 92:2191 93:2647 94:3655 95:4147 96:1303 97:312 98:1045 99:743 100:92 101:1179 102:3064 103:32557 104:4797 105:631 106:941 107:2758 108:1133 109:4077 110:2141 111:3255 112:2069 113:1560 114:1789 115:1999 116:1891 117:2616 118:2379 119:1959 120:1814 121:1334 122:2698 123:2225 124:1622 125:2877 126:32 128:1474 129:942 130:1089 131:1821 132:806 133:410 134:1721 135:314 136:944 137:1054 138:2802 139:1565 140:1381 141:1361 142:1580 143:1488 144:1013 145:345 146:2025 147:1717 148:2492 149:2583 150:1034 151:1339 152:1981 153:523 154:5906 155:1377 156:2232 157:1628 158:1078 159:2264 160:2604 161:1638 162:3598 163:1723 164:1629 165:2124 166:1071 167:1767 168:3937 169:790 170:4713 171:1024 172:3826 173:3042 174:908 175:1199 176:3677 177:4510 178:3582 179:2239 180:2362 181:3668 182:3410 183:1805 184:2267 185:20637 186:4894 187:4451 188:4044 189:4075 190:9325 191:1467 192:11002 193:9051 194:7459 195:5260 196:3162 197:2391 198:6017 199:7531 200:8007 201:6330 202:10514 203:10167 204:4572 205:3761 206:4497 207:3488 208:4138 209:5045 210:4661 211:2578 212:4293 213:3377 214:1088 215:50 216:6772 217:2815 218:1361 219:581 220:2053 221:1030 222:876 223:2238 End of report

1 0

v4 and v6 BOGON list
by Gabriel Terry 22 Mar '24

22 Mar '24

All, I was researching BOGON prefixes and found a reference from IANA listing special-purpose addresses, URLs listed below. Based on my understanding of the list I think I should be able to block all of the entries from my upstream peerings without affecting normal internet traffic. I assume that there would only be special scenarios that the addresses listed in the special-purpose entry would be used. I am interested to hear what others are doing when it comes to blocking BOGON NLRI from their upstream BGP peerings. If anyone has any insight into this please let me know your thoughts, I would love to discuss more on the topic. URLs: https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-speci… https://www.iana.org/assignments/iana-ipv6-special-registry/iana-ipv6-speci… Thanks, Gabriel L. Terry

5 4

Snapchat CDN/network contact
by Clinton Work 22 Mar '24

22 Mar '24

I'm looking for a Snapchat CDN/network contact to discuss some non-optimal traffic delivery into our network. I couldn't find a peerindb entry for their AS395291. -- Clinton Work

2 1

AWS Web Application Firewall blocks ISP ranges?
by Jonathan Kalbfeld 21 Mar '24

21 Mar '24

Hi All, I just became aware that AWS has a list of hosting IP providers and that list is blocked by their WAF? (!?!?). None of my VM or colo customers can reach anything in AWS, such as Docker, Twilio, etc. I confirmed through source routing that when I access it using one of my peering partners as a source IP it is reachable, but using one of my net blocks, it is not reachable and times out. Checked all of my routing tables and those AWS blocks are definitely visible. Also confirmed from looking glass that my IP ranges are showing up. Has anyone else encountered that? If so, is there a way to get removed from that list? I have a very curated list of clients and I know all of them personally and none of them have been abusing AWS, so I was wondering if it was some kind of blanket ban? If you're internal to AWS, my ASN is 54380, IP ranges affected are 199.33.244.0/24, 199.79.202.0/24, 199.188.96.0/22, 45.59.144.0/22 and 206.197.110.0/24 Feel free to reach out off-list. Thanks, Jonathan Kalbfeld Jonathan Kalbfeld office: +1 310 317 7933 <tel:%28310%29%20317-7933> fax: +1 310 317 7901 <tel:%28310%29%20317-7901> home: +1 310 317 7909 <tel:%28310%29%20317-7909> mobile: +1 310 227 1662 <tel:%28310%29%20227-1662> ThoughtWave Technologies, Inc. Studio City, CA 91604 https://thoughtwave.com <https://thoughtwave.com/> View our network at https://bgp.he.net/AS54380 <https://bgp.he.net/AS54380> +1 844 42-LINUX

3 2

Akamai contact
by Liviu Danicel 21 Mar '24

21 Mar '24

Hello, Anyone from Akamai on the list ? I have a banned /24 subnet and would like to discuss it. Liviu

2 1