- Test - lists.nanog.org

SunTrust Network Ops
by Eric C. Miller 25 Oct '18

25 Oct '18

Is there anyone on-list from SunTrust Bank? I have a CGNAT address getting periodic TCP Resets from the online banking portal, and I suspect it's in response to a threat detector. Thank you! Eric

1 0

Cogent and HE feedback [was Re: Whats going on at Cogent]
by John Kristoff 24 Oct '18

24 Oct '18

[ I've largely ignored this thread based on the Subject, but saw this so I'll change the subject to better reflect where I'm taking it. Sorry if this is a rehashing things others my have already said. - jtk ] On Tue, 23 Oct 2018 15:32:34 +0000 Ross Tajvar <ross(a)tajvar.io> wrote: > I am also interested in hearing about this. I think it's relevant to > the current thread. DePaul has been a customer of Cogent for over 15 years, since the time they were selling 100 Mb/s or $1000/month. In my opinion from the view of an end user net, nothing fancy, just budget commodity Internet. DePaul has had HE for many years as well. We can see some of the rich peering that Owen suggested they have more of. HE and Cogent are amongst the lowest price providers in my experience. Note, if you're a network like DePaul's and getting transit from one, it would be advisable to get transit from the other (or at least someone else who can reliably reach them). There is plenty of peering dispute history to read up on I won't try to summarize here. If you care about traffic engineering with community tags, you might be disappointed that HE really only support RTBH. However in my experience, support and sales for both organizations seem just fine for what they deliver. I recently had an opportunity to use both (e.g. upgrades and enabling BFD) and things went swimmingly. Just so they get a nod, we also use ServerCentral as a sort of full-service provider. We rely on them for all sorts of things. They, like Cogent and HE are also a good value for DePaul in my opinion. That said, what is right for one organization is not necessarily right for another. That's just my experience and opinion. John

1 0

Lots of compromized routers found in thailand
by Alexander Maassen 24 Oct '18

24 Oct '18

Hi all, I know this would belong in THNOG, but since their email turns out to be unroutable, and APNIC never replied to a ticket I filed a week ago, I hope some thai network operators are listening here as well. (True's IRT team contact has however been established already) Since a week I've seen a lot of compromized connections on my personal IRC net from network ranges owned by asiasnet.co.th, 3bb.co.th, totbb.co.th and ais.co.th (and probably others). The issue seems to be limited to TH space at the moment. After investigating some of those bots ip sources, it turns out they all are from clients with routers that have the admin port open to everyone and the routers have the default login (BAD BAD BAD). ACS url's have been changed to http://255.255.255.255. New connections arrive in an estimate of 1 every 3 minutes at the moment. All connections found being affected will and have been added to my dnsbl (dronebl) as type 15 (compromized router/127.0.0.15), if you need a list, contact me off list with your AS number in order to get a dump. Kind regards, Alexander Maassen Maintainer DroneBL

1 0

Rogers Cable TPIA interconnections
by Eric Dugas 23 Oct '18

23 Oct '18

Hello, I have one or two questions for networks currently interconnected with Rogers Cable at 855 York Mills. Please respond off-list if you do. Thank you Eric

1 0

Performance monitoring
by Mehmet Akcin 23 Oct '18

23 Oct '18

hi there, I am trying to find out what everyone is using nowadays for performance monitoring. Thousandeyes, Perfops, Ripe Atlas, Cedexis are some common stuff I have used in the recent past to see DNS/CDN performance , anything new out there that is worth giving it a try specifically focusing on distributed DNS performance? Mehmet

1 0

Hurricane Michael: Communications restoration status
by Sean Donelan 23 Oct '18

23 Oct '18

39 deaths in the US, at least 15 deaths in Honduras, Nicaragua, El Salvador After 12 days, most wireless service is restored in Florida. It took over 6 months to restore wireless service across Puerto Rico/US Virgin Islands. Today, Oct 22 2018, Verizon Wireless reported wireless services has been restored throughout the area. AT&T Wireless reports 99.9% wireless service restoration. T-Mobile reports service restored or temporary solutions in place. FCC Status Reporting Cellular service: Bay County: 103 cell sites out of service (29.7%) Gadsden County: 12 cell sites out of service (19.4%) Gulf County: 6 cell sites out of service (26.1%) 55,006 wireline and cable customers are reported out of service. 1 TV, 7 FM and 2 AM broadcasters reported out of service.

3 3

GGSN/PGW to LNS recommendations
by Jérôme Nicolle 23 Oct '18

23 Oct '18

Hi ! I'm looking for a GGSN/PGW implementation that would act as a LAC, to re-encapsulate PPP sessions into L2TP tunnels to some LNS already deployed for traditional IP-ADSL collects. I found that feature available in Cisco ASR5000 but couldn't yet find any other. Would you have any pointer or references ? Thanks ! -- Jérôme Nicolle +33 6 19 31 27 14

1 0

What a FEMA Primary Entry Point emergency alert radio station looks like
by Sean Donelan 23 Oct '18

23 Oct '18

Almost 100% use of the Emergency Alert System is for local and weather alerts. Nevertheless, there are people who plan for the worst case scenario (i.e. "the really bad, bad day"). If you wonder what a hardened Primary Entry Point station for the Emergency Alert System looks like... a rare media event. https://www.radioworld.com/news-and-business/wlw-pep-station-to-test-new-st… [...] The Federal Emergency Management Agency expects to reveal new studio capabilities at WLW(AM) in Cincinnati on Wednesday during a first of its kind broadcast from a shelter at the transmitter site of the National Public Warning System (NWPS) Primary Entry Point (PEP) radio station. The iHeartMedia radio station is one of 77 PEP radio stations across the country and the second to have added modernized emergency studio facilities. Enhanced studio capabilities were completed at WJR(AM) in Detroit earlier this year, according to Manny Centeno, FEMA’s NPWS program manager. The upgrades include increased sheltering capabilities, expanded broadcast capacity, and sustainable power generation for all types of hazardous events. [...] Why does the federal government spend money to harden a few radio stations around the country? An example of a "bad day" (but not a really bad, bad day) was Hurricane Maria and Irma in Puerto Rico and US Virgin Islands. Manny Centeno was just one of 15,000 federal employees, and over 100,000 industry, volunteer and local government responders. WSTA and WKAQ are the two hardened PEP stations serving the islands. https://www.hstoday.us/federal-pages/dhs/fema-dhs-federal-pages/hstoday-pro… [...] Nowhere was this challenge more apparent than in Puerto Rico when Hurricane Maria slammed into the island just over a year ago. When the Category 4 hurricane struck the island with 150-mph winds and rain measured in feet – not inches – it knocked out just about every imaginable infrastructure from being usable. Those roads, bridges, airports, harbors, utilities, essential services and communications that were not destroyed or operable post-storm were crippled to a point that they could not provide the capacities necessary for the demands of the response and recovery conditions. [...]

1 0

Re: Whats going on at Cogent
by Aaron1 21 Oct '18

21 Oct '18

Yes I noticed that last week, it is very slow Aaron > On Oct 19, 2018, at 4:43 PM, Ryan Gelobter <ryan.g(a)andthenwegotpaycuts.com> wrote: > > Has anyone else noticed their ecogent portal is super fucking slow? Back in the day it used to be fast > >> On Thu, Oct 18, 2018 at 2:12 PM Troy Mursch <troy(a)wolvtech.com> wrote: >> Cogent has done well to remediate the compromised MikroTik routers on their network. 3,000 IPv4 hosts were found on Aug. 25 (https://twitter.com/bad_packets/status/1033256704941514752) and today, only a hundred: https://censys.io/ipv4?q=%28%28%28%22CoinHive.Anonymous%22%29+AND+%28MikroT… >> __ >> >> Troy Mursch >> >> >> >>> On Thu, Oct 18, 2018 at 12:05 PM Aaron Gould <aaron1(a)gvtc.com> wrote: >>> I guess those bots have to sit somewhere. I don’t know that they would be in routers as much as they would be in Microsoft Windows… so if that’s what you meant, then I see what you mean Michael >>> >>> >>> >>> Niels, I like my cogent and telia internet connections… I just recall seeing more ddos on cogent then I did on my previous att, and current spectrum… telia is showing a good bit of ddos also >>> >>> >>> >>> Let’s put it this way, I can thank Cogent and Telia for helping my get better in my ddos mitigation skills J … there’s a bright side to everything huh >>> >>> >>> >>> Aaron >>> >>> >>> >>> >>> >>> >>> >>> From: NANOG [mailto:nanog-bounces@nanog.org] On Behalf Of Michael Crapse >>> Sent: Tuesday, October 16, 2018 8:37 PM >>> To: NANOG list >>> Subject: Re: Whats going on at Cogent >>> >>> >>> >>> Or he's saying that cogent has the biggest network of compromised users. Usually ipv4 only eyeball networks tend to have the most bots on net. >>> >>> >>> >>> >>> >>> On Tue, 16 Oct 2018 at 19:22, Niels Bakker <niels=nanog(a)bakker.net> wrote: >>> >>> * aaron1(a)gvtc.com (Aaron1) [Wed 17 Oct 2018, 00:17 CEST]: >>> >However Cogent seems to be the dirtiest in regards to DDOS... >>> >however Telia might be catching up... in times past when I receive >>> >volumetric DDOS, Cogent typically ranks with the highest on my >>> >providers ... AT&T and spectrum seem to be a bit cleaner >>> >>> So you're saying, Cogent and Telia have the best backbones and >>> interconnects and thus deliver the most of your traffic to you, >>> even at times of peak utilization? >>> >>> >>> -- Niels.

3 3

Weekly Routing Table Report
by cscora＠apnic.net 19 Oct '18

19 Oct '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 20 Oct, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 720932 Prefixes after maximum aggregation (per Origin AS): 277736 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 346559 Total ASes present in the Internet Routing Table: 62172 Prefixes per ASN: 11.60 Origin-only ASes present in the Internet Routing Table: 53659 Origin ASes announcing only one prefix: 23351 Transit ASes present in the Internet Routing Table: 8513 Transit-only ASes present in the Internet Routing Table: 258 Average AS path length visible in the Internet Routing Table: 4.0 Max AS path length visible: 36 Max AS path prepend of ASN ( 30873) 34 Prefixes from unregistered ASNs in the Routing Table: 45 Number of instances of unregistered ASNs: 45 Number of 32-bit ASNs allocated by the RIRs: 24512 Number of 32-bit ASNs visible in the Routing Table: 19802 Prefixes from 32-bit ASNs in the Routing Table: 83276 Number of bogon 32-bit ASNs visible in the Routing Table: 15 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 265 Number of addresses announced to Internet: 2855841539 Equivalent to 170 /8s, 56 /16s and 175 /24s Percentage of available address space announced: 77.1 Percentage of allocated address space announced: 77.1 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.1 Total number of prefixes smaller than registry allocations: 240937 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 196031 Total APNIC prefixes after maximum aggregation: 55976 APNIC Deaggregation factor: 3.50 Prefixes being announced from the APNIC address blocks: 193756 Unique aggregates announced from the APNIC address blocks: 80180 APNIC Region origin ASes present in the Internet Routing Table: 9173 APNIC Prefixes per ASN: 21.12 APNIC Region origin ASes announcing only one prefix: 2566 APNIC Region transit ASes present in the Internet Routing Table: 1366 Average APNIC Region AS path length visible: 4.0 Max APNIC Region AS path length visible: 29 Number of APNIC region 32-bit ASNs visible in the Routing Table: 4141 Number of APNIC addresses announced to Internet: 767770050 Equivalent to 45 /8s, 195 /16s and 61 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-139577 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 214759 Total ARIN prefixes after maximum aggregation: 101898 ARIN Deaggregation factor: 2.11 Prefixes being announced from the ARIN address blocks: 214148 Unique aggregates announced from the ARIN address blocks: 101956 ARIN Region origin ASes present in the Internet Routing Table: 18276 ARIN Prefixes per ASN: 11.72 ARIN Region origin ASes announcing only one prefix: 6787 ARIN Region transit ASes present in the Internet Routing Table: 1819 Average ARIN Region AS path length visible: 3.6 Max ARIN Region AS path length visible: 23 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2468 Number of ARIN addresses announced to Internet: 1098652576 Equivalent to 65 /8s, 124 /16s and 27 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 197098 Total RIPE prefixes after maximum aggregation: 94122 RIPE Deaggregation factor: 2.09 Prefixes being announced from the RIPE address blocks: 193556 Unique aggregates announced from the RIPE address blocks: 114401 RIPE Region origin ASes present in the Internet Routing Table: 25565 RIPE Prefixes per ASN: 7.57 RIPE Region origin ASes announcing only one prefix: 11475 RIPE Region transit ASes present in the Internet Routing Table: 3540 Average RIPE Region AS path length visible: 4.1 Max RIPE Region AS path length visible: 36 Number of RIPE region 32-bit ASNs visible in the Routing Table: 7497 Number of RIPE addresses announced to Internet: 714892672 Equivalent to 42 /8s, 156 /16s and 101 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 93394 Total LACNIC prefixes after maximum aggregation: 21481 LACNIC Deaggregation factor: 4.35 Prefixes being announced from the LACNIC address blocks: 94805 Unique aggregates announced from the LACNIC address blocks: 41433 LACNIC Region origin ASes present in the Internet Routing Table: 7667 LACNIC Prefixes per ASN: 12.37 LACNIC Region origin ASes announcing only one prefix: 2118 LACNIC Region transit ASes present in the Internet Routing Table: 1445 Average LACNIC Region AS path length visible: 4.8 Max LACNIC Region AS path length visible: 26 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 5216 Number of LACNIC addresses announced to Internet: 172298784 Equivalent to 10 /8s, 69 /16s and 18 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 19604 Total AfriNIC prefixes after maximum aggregation: 4219 AfriNIC Deaggregation factor: 4.65 Prefixes being announced from the AfriNIC address blocks: 24402 Unique aggregates announced from the AfriNIC address blocks: 8345 AfriNIC Region origin ASes present in the Internet Routing Table: 1207 AfriNIC Prefixes per ASN: 20.22 AfriNIC Region origin ASes announcing only one prefix: 405 AfriNIC Region transit ASes present in the Internet Routing Table: 243 Average AfriNIC Region AS path length visible: 4.4 Max AfriNIC Region AS path length visible: 26 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 480 Number of AfriNIC addresses announced to Internet: 101797120 Equivalent to 6 /8s, 17 /16s and 77 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 4638 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4471 496 489 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 2985 1153 93 VIETEL-AS-AP Viettel Group, VN 45899 2839 1674 159 VNPT-AS-VN VNPT Corp, VN 4766 2809 11130 764 KIXS-AS-KR Korea Telecom, KR 9829 2734 1495 548 BSNL-NIB National Internet Backbone, IN 9394 2503 4907 31 CTTNET China TieTong Telecommunications 9808 2252 8699 26 CMNET-GD Guangdong Mobile Communication 17974 2240 968 51 TELKOMNET-AS2-AP PT Telekomunikasi Indo 4755 2133 422 172 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 11492 3495 226 581 CABLEONE - CABLE ONE, INC., US 6327 3454 1324 84 SHAW - Shaw Communications Inc., CA 22773 3268 2971 161 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 16509 2325 5005 834 AMAZON-02 - Amazon.com, Inc., US 18566 2156 405 109 MEGAPATH5-US - MegaPath Corporation, US 20115 2148 2737 515 CHARTER-NET-HKY-NC - Charter Communicat 5650 2085 3074 1461 FRONTIER-FRTR - Frontier Communications 16625 2081 1118 1555 AKAMAI-AS - Akamai Technologies, Inc., 209 2036 5079 594 CENTURYLINK-US-LEGACY-QWEST - CenturyLi 30036 2033 343 228 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 4996 1616 132 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 8551 3045 378 50 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2569 578 1913 AKAMAI-ASN1, US 12389 2119 2067 686 ROSTELECOM-AS, RU 34984 2030 336 527 TELLCOM-AS, TR 9121 1862 1691 17 TTNET, TR 13188 1604 100 45 TRIOLAN, UA 8402 1284 544 14 CORBINA-AS OJSC "Vimpelcom", RU 6849 1241 355 21 UKRTELNET, UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5424 3305 609 Uninet S.A. de C.V., MX 10620 3199 490 804 Telmex Colombia S.A., CO 11830 2661 370 83 Instituto Costarricense de Electricidad 6503 1651 449 55 Axtel, S.A.B. de C.V., MX 7303 1432 956 206 Telecom Argentina S.A., AR 6147 1092 377 29 Telefonica del Peru S.A.A., PE 28573 1083 2234 192 CLARO S.A., BR 3816 1025 508 115 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 937 145 72 Alestra, S. de R.L. de C.V., MX 18881 919 1114 28 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 949 395 41 LINKdotNET-AS, EG 37611 902 107 9 Afrihost, ZA 36903 794 399 146 MT-MPLS, MA 36992 753 1411 41 ETISALAT-MISR, EG 24835 682 758 20 RAYA-AS, EG 8452 612 1728 15 TE-AS TE-AS, EG 29571 462 70 12 ORANGE-COTE-IVOIRE, CI 37492 440 467 62 ORANGE-, TN 23889 394 231 15 MauritiusTelecom, MU 37342 394 32 1 MOVITEL, MZ Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5424 3305 609 Uninet S.A. de C.V., MX 12479 4996 1616 132 UNI2-AS, ES 4538 4638 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4471 496 489 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 203 20 ALJAWWALSTC-AS, SA 11492 3495 226 581 CABLEONE - CABLE ONE, INC., US 6327 3454 1324 84 SHAW - Shaw Communications Inc., CA 22773 3268 2971 161 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 10620 3199 490 804 Telmex Colombia S.A., CO 8551 3045 378 50 BEZEQ-INTERNATIONAL-AS Bezeqint Interne Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 12479 4996 4864 UNI2-AS, ES 4538 4638 4564 ERX-CERNET-BKB China Education and Research Net 7545 4471 3982 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3454 3370 SHAW - Shaw Communications Inc., CA 22773 3268 3107 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 3045 2995 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 3495 2914 CABLEONE - CABLE ONE, INC., US 7552 2985 2892 VIETEL-AS-AP Viettel Group, VN 45899 2839 2680 VNPT-AS-VN VNPT Corp, VN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 64500 DOCUMENT 45.43.56.0/24 45474 NEXUSGUARD-AS-AP Suite 2101~02 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 64121 UNALLOCATED 98.159.9.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64121 UNALLOCATED 98.159.12.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64140 UNALLOCATED 98.159.14.0/24 64121 UNKNOWN 65551 DOCUMENT 103.112.64.0/23 58889 ZOL-BD Zx Online Ltd, BD 65001 PRIVATE 109.161.56.0/24 13118 ASN-YARTELECOM PJSC Rostelecom 92937 UNALLOCATED 110.49.72.0/24 45458 SBN-AWN-AS-02-AP SBN-ISP/AWN-I Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 198.18.1.19/32 7497 CSTNET-AS-AP Computer Network Information Cente Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 41.76.140.0/22 37500 -Reserved AS-, ZZ 41.78.92.0/22 14988 BTC-GATE1, BW 41.78.180.0/23 37265 -Reserved AS-, ZZ 45.121.32.0/22 134356 UNKNOWN 45.124.164.0/22 38803 GTELECOM-AUSTRALIA Gtelecom-AUSTRALIA, AU 45.252.236.0/22 38803 GTELECOM-AUSTRALIA Gtelecom-AUSTRALIA, AU 64.28.160.0/20 20475 AS20475 - Global Capacity, LLC, US 64.29.240.0/20 27279 -Reserved AS-, ZZ 64.30.152.0/24 15830 TELECITY-LON, GB Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:14 /9:11 /10:36 /11:98 /12:289 /13:566 /14:1105 /15:1889 /16:13326 /17:7890 /18:13785 /19:25401 /20:39569 /21:45929 /22:89486 /23:73423 /24:405894 /25:822 /26:625 /27:639 /28:36 /29:21 /30:22 /31:4 /32:52 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 3779 4996 UNI2-AS, ES 6327 3239 3454 SHAW - Shaw Communications Inc., CA 39891 2946 3778 ALJAWWALSTC-AS, SA 11492 2764 3495 CABLEONE - CABLE ONE, INC., US 22773 2527 3268 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 2501 3045 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 18566 2050 2156 MEGAPATH5-US - MegaPath Corporation, US 11830 2011 2661 Instituto Costarricense de Electricidad y Telec 30036 1781 2033 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 5650 1762 2085 FRONTIER-FRTR - Frontier Communications of Amer Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1612 2:892 4:18 5:2676 6:43 7:1 8:1142 12:1869 13:222 14:1848 15:33 16:3 17:192 18:58 20:50 23:2471 24:2434 25:2 27:2512 31:2013 32:84 35:30 36:546 37:2918 38:1560 39:262 40:122 41:3179 42:717 43:1959 44:126 45:5808 46:3112 47:222 49:1352 50:1062 51:318 52:1089 54:361 55:1 56:12 57:38 58:1608 59:985 60:417 61:2084 62:1954 63:1805 64:5053 65:2204 66:4817 67:2665 68:1156 69:3345 70:1166 71:590 72:2245 74:2730 75:416 76:458 77:1658 78:1746 79:2226 80:1584 81:1422 82:1052 83:787 84:1048 85:2063 86:568 87:1468 88:942 89:2368 90:215 91:6446 92:1272 93:2392 94:2451 95:3026 96:924 97:353 98:944 99:145 100:86 101:1174 102:252 103:18935 104:3569 105:235 106:769 107:1831 108:710 109:3375 110:1658 111:1815 112:1329 113:1306 114:1143 115:1681 116:1660 117:1802 118:2192 119:1666 120:1083 121:1036 122:2319 123:1664 124:1451 125:1939 128:1206 129:689 130:503 131:1616 132:723 133:191 134:1036 135:237 136:527 137:658 138:1961 139:695 140:553 141:752 142:840 143:988 144:851 145:496 146:1249 147:769 148:1665 149:775 150:763 151:991 152:871 153:325 154:1882 155:941 156:1533 157:813 158:660 159:1867 160:1494 161:852 162:2650 163:735 164:1092 165:1565 166:454 167:1288 168:3138 169:859 170:3982 171:495 172:1040 173:2077 174:997 175:817 176:2107 177:3980 178:2507 179:1305 180:2122 181:2430 182:2596 183:1303 184:1135 185:14239 186:3591 187:2449 188:2930 189:2010 190:8269 191:1361 192:9864 193:6304 194:5153 195:4047 196:2838 197:1618 198:5692 199:5954 200:7407 201:5017 202:10249 203:10199 204:4612 205:2982 206:3217 207:3196 208:3931 209:4160 210:3834 211:1985 212:2983 213:2800 214:1041 215:54 216:6022 217:2181 218:866 219:575 220:1812 221:992 222:967 223:1400 End of report

1 0