December 2012 - Test - lists.nanog.org

Gmail and SSL
by Randy 30 Dec '12

30 Dec '12

I'm hoping to reach out to google's gmail engineers with this message, Today I noticed that for the past 3 days, email messages from my personal website's pop3 were not being received into my gmail inbox. Naturally, I figured that my pop3 service was down, but after some checking, every thing was working OK. I then checked gmail settings, and noticed some error. It explained that google is no longer accepting self signed ssl certificates. It claims that this change will "offer[s] a higher level of security to better protect your information". I don't believe that this change offers better security. In fact it is now unsecured - I am unable to use ssl with gmail, I have had to select the plain-text pop3 option. I don't have hundreds of dollars to get my ssl certificates signed, and to top it off, gmail never notified me of an error with fetching my mail. How many of email accounts trying to grab mail are failing now? I bet thousands, as a self signed certificate is a valid way of encrypting the traffic. Please google, remove this requirement. Source: http://support.google.com/mail/bin/answer.py?hl=en&answer=21291&ctx=gmail#s…

10 12

Re: Gmail and SSL
by Peter Kristolaitis 30 Dec '12

30 Dec '12

On 12/29/2012 7:41 PM, Mark - Syminet wrote: > On Dec 14, 2012, at 7:52 AM, Peter Kristolaitis <alter3d(a)alter3d.ca> wrote: > >> On 12/14/2012 10:47 AM, Randy wrote: >>> I don't have hundreds of dollars to get my ssl certificates signed >> You can get single-host certificates issued for free from StartSSL, or for very cheaply (under $10) from low-cost providers like CheapSSL.com. I've never had a problem having my StartSSL certs verified by anyone. >> > > So I guess the question really, is this: > > Is it bad, therefore - to *force* every holder of a self-signed certificate - to transmit in the clear? > There are plenty of good reasons for self-signed certs -- people stuck running a Microsoft environment might find it might difficult without it, since it's a fundamental feature of Active Directory. ;) Various F/OSS projects, like OpenVPN, generally recommend self-signed certs as a standard deployment scenario, because it actually provides an extra layer of security -- as the CA, you determine who gets a cert and who doesn't. The difficulty you'll run into is defining "self-signed". If you generate your own CA and put the certs in your /etc/ssl directory, it's still "self-signed" (as in you're the one signing the end-use certs), the only difference is that your browser, etc, won't pop up a warning because it's now "trusted". It's also important to not conflate "encryption" with "chain of trust validation". There are good reasons to encrypt without really caring who you're talking to. There are also good reasons to not necessarily trust an arbitrary list of CAs as provided by your SSL stack vendor and provide your own list, as mentioned above. Two entirely separate issues, IMHO. - Pete

1 0

really facebook?
by mike 29 Dec '12

29 Dec '12

I reloaded their app (yes, I know... sew me) and got this warning: IP address: 2600:100f:b119:c6bc:bd6f:fabb:ff30:2a3d Estimated location: Livingston, NJ, US Which seems pretty bizarre. I'm guessing they must be getting it from whois or something based on the address block for Verizon. The reverse map according to host 2600:100f:b119:c6bc:bd6f:fabb:ff30:2a3d comes back with NXDOMAIN. I suppose the real issue here is with Vz and why they don't have v6 reverse maps, but it did throw me thinking that somebody in New Jersey might have hacked my account. Mike

4 5

Netflix transit preference?
by randal k 29 Dec '12

29 Dec '12

Hey NANOG! I work at a datacenter in southern Colorado that is the upstream bandwidth provider for several regional ISPs. We have been investigating our ever-growing bandwidth usage and have found that out of transits (Level3,Cogent,HE) that Netflix always seems to come in via Hurricane Electric. (We move ~1.4gbps to Netflix, and are thus not a candidate for peering. And they have no POP close.) I tested this by advertising a /24 across all providers, then selectively removed the advertisement to certain carriers to see where the bandwidth goes. In order, it appears that if there is a HE route, Netflix uses it, period. If there isn't, it prefers Level3, and Cogent comes last. Since Netflix is a big hunk of our bandwidth (and obviously makes our customers happy), we are included to buy some more HE. However, if Netflix decides that they want to randomly switch to, say, Cogent, we may be under a year-long bandwidth contract that isn't particularly valuable anymore. With all of that, I am interested in finding out of any knowledge about Netflix transit preferences, be it inside information, anecdotal, or otherwise. I did email peering@ but haven't heard back, thus the public question. Thanks! Randal

8 11

BGP Update Report
by cidr-report＠potaroo.net 28 Dec '12

28 Dec '12

BGP Update Report Interval: 20-Dec-12 -to- 27-Dec-12 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS8402 36701 2.6% 55.5 -- CORBINA-AS OJSC "Vimpelcom" 2 - AS3909 36562 2.6% 4570.2 -- QWEST-AS-3908 - Qwest Communications Company, LLC 3 - AS9829 29062 2.1% 34.3 -- BSNL-NIB National Internet Backbone 4 - AS29256 24976 1.8% 1085.9 -- INT-PDN-STE-AS Syrian Telecommunications Establishment 5 - AS701 22541 1.6% 727.1 -- UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 6 - AS4198 16386 1.2% 1365.5 -- RADIXNET - RadixNet, Inc. 7 - AS1637 16301 1.2% 494.0 -- DNIC-AS-01637 - Headquarters, USAISC 8 - AS7552 14557 1.1% 15.4 -- VIETEL-AS-AP Vietel Corporation 9 - AS4538 10240 0.7% 22.5 -- ERX-CERNET-BKB China Education and Research Network Center 10 - AS9198 8248 0.6% 24.0 -- KAZTELECOM-AS JSC Kazakhtelecom 11 - AS29614 7576 0.6% 315.7 -- GHANATEL-AS 12 - AS45271 7556 0.6% 34.0 -- ICLNET-AS-AP 5th Floor, Windsor Building, Off: CST Road 13 - AS7029 7548 0.5% 6.9 -- WINDSTREAM - Windstream Communications Inc 14 - AS38142 7288 0.5% 455.5 -- UNAIR-AS-ID Universitas Airlangga 15 - AS48159 7270 0.5% 22.9 -- TIC-AS Telecommunication Infrastructure Company 16 - AS50710 6912 0.5% 47.0 -- EARTHLINK-AS EarthLink Ltd. Communications&Internet Services 17 - AS2033 6551 0.5% 6551.0 -- PANIX - Panix Network Information Center 18 - AS24057 6313 0.5% 6313.0 -- AIGL-AS-AP PT. AIA FINANCIAL, Insurance company, Indonesia 19 - AS9756 6046 0.4% 403.1 -- CHEONANVITSSEN-AS-KR Cheonan Broadcast Corporation 20 - AS2708 6000 0.4% 85.7 -- Universidad de Guanajuato TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS2033 6551 0.5% 6551.0 -- PANIX - Panix Network Information Center 2 - AS24057 6313 0.5% 6313.0 -- AIGL-AS-AP PT. AIA FINANCIAL, Insurance company, Indonesia 3 - AS37430 4818 0.3% 4818.0 -- vdctelecom 4 - AS3909 36562 2.6% 4570.2 -- QWEST-AS-3908 - Qwest Communications Company, LLC 5 - AS19406 4202 0.3% 4202.0 -- TWRS-MA - Towerstream I, Inc. 6 - AS9950 4150 0.3% 4150.0 -- PUBNETPLUS2-AS-KR DACOM 7 - AS42705 4120 0.3% 4120.0 -- TALIA Talia provides VSAT network and hosting services worldwide. 8 - AS33158 4022 0.3% 4022.0 -- DATA-SERVICES-INC - Data Services Incorporated 9 - AS57918 3437 0.2% 3437.0 -- ACOD-AS ACOD CJSC 10 - AS6174 5644 0.4% 2822.0 -- SPRINTLINK8 - Sprint 11 - AS6629 2494 0.2% 2494.0 -- NOAA-AS - NOAA 12 - AS6197 2349 0.2% 2349.0 -- BATI-ATL - BellSouth Network Solutions, Inc 13 - AS25527 1993 0.1% 1993.0 -- CARTELSISTEM-AS Cartel-Sistem SRL, Moldova, Chisinau 14 - AS17293 3852 0.3% 1926.0 -- VTXC - VTX Communications 15 - AS40931 1695 0.1% 1695.0 -- MOBITV - MobiTV, Inc 16 - AS14680 4951 0.4% 1650.3 -- REALE-6 - Auction.com 17 - AS4198 16386 1.2% 1365.5 -- RADIXNET - RadixNet, Inc. 18 - AS4826 1298 0.1% 1298.0 -- VOCUS-BACKBONE-AS Vocus Connect International Backbone 19 - AS36529 2496 0.2% 1248.0 -- AXXA-RACKCO - Rackco.com 20 - AS29256 24976 1.8% 1085.9 -- INT-PDN-STE-AS Syrian Telecommunications Establishment TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 151.118.255.0/24 12165 0.8% AS3909 -- QWEST-AS-3908 - Qwest Communications Company, LLC 2 - 151.118.254.0/24 12165 0.8% AS3909 -- QWEST-AS-3908 - Qwest Communications Company, LLC 3 - 151.118.18.0/24 12146 0.8% AS3909 -- QWEST-AS-3908 - Qwest Communications Company, LLC 4 - 209.48.168.0/24 6551 0.4% AS2033 -- PANIX - Panix Network Information Center 5 - 202.14.255.0/24 6313 0.4% AS24057 -- AIGL-AS-AP PT. AIA FINANCIAL, Insurance company, Indonesia 6 - 41.77.184.0/22 4818 0.3% AS37430 -- vdctelecom 7 - 194.63.9.0/24 4477 0.3% AS1273 -- CW Cable and Wireless Worldwide plc 8 - 69.38.178.0/24 4202 0.3% AS19406 -- TWRS-MA - Towerstream I, Inc. 9 - 12.139.133.0/24 4175 0.3% AS14680 -- REALE-6 - Auction.com 10 - 58.184.229.0/24 4150 0.3% AS9950 -- PUBNETPLUS2-AS-KR DACOM 11 - 80.251.10.0/24 4120 0.3% AS42705 -- TALIA Talia provides VSAT network and hosting services worldwide. 12 - 12.183.21.0/24 4022 0.3% AS33158 -- DATA-SERVICES-INC - Data Services Incorporated 13 - 91.236.24.0/24 3437 0.2% AS57918 -- ACOD-AS ACOD CJSC 14 - 115.170.128.0/17 2890 0.2% AS4847 -- CNIX-AP China Networks Inter-Exchange 15 - 208.16.110.0/24 2825 0.2% AS6174 -- SPRINTLINK8 - Sprint 16 - 206.105.75.0/24 2819 0.2% AS6174 -- SPRINTLINK8 - Sprint 17 - 205.156.28.0/24 2507 0.2% AS701 -- UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 18 - 205.156.27.0/24 2503 0.2% AS701 -- UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 19 - 198.206.32.0/20 2503 0.2% AS701 -- UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 20 - 198.206.48.0/21 2499 0.2% AS701 -- UUNET - MCI Communications Services, Inc. d/b/a Verizon Business Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 28 Dec '12

28 Dec '12

This report has been generated at Fri Dec 28 21:13:08 2012 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 21-12-12 440351 252593 22-12-12 440781 252719 23-12-12 440763 252676 24-12-12 440659 252626 25-12-12 440728 252757 26-12-12 440799 252807 27-12-12 440865 252753 28-12-12 440905 252699 AS Summary 43060 Number of ASes in routing system 17939 Number of ASes announcing only one prefix 3467 Largest number of prefixes announced by an AS AS7029 : WINDSTREAM - Windstream Communications Inc 115553760 Largest address span announced by an AS (/32s) AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 28Dec12 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 440989 252735 188254 42.7% All ASes AS6389 3118 136 2982 95.6% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS28573 2263 71 2192 96.9% NET Servicos de Comunicao S.A. AS17974 2485 448 2037 82.0% TELKOMNET-AS2-AP PT Telekomunikasi Indonesia AS4766 2946 931 2015 68.4% KIXS-AS-KR Korea Telecom AS7029 3467 1609 1858 53.6% WINDSTREAM - Windstream Communications Inc AS22773 1948 183 1765 90.6% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. AS18566 2081 423 1658 79.7% COVAD - Covad Communications Co. AS10620 2270 652 1618 71.3% Telmex Colombia S.A. AS7303 1674 397 1277 76.3% Telecom Argentina S.A. AS4323 1602 403 1199 74.8% TWTC - tw telecom holdings, inc. AS4755 1657 552 1105 66.7% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS2118 1052 53 999 95.0% RELCOM-AS OOO "NPO Relcom" AS7552 1147 163 984 85.8% VIETEL-AS-AP Vietel Corporation AS7545 1821 950 871 47.8% TPG-INTERNET-AP TPG Internet Pty Ltd AS8151 1552 700 852 54.9% Uninet S.A. de C.V. AS18101 1016 170 846 83.3% RELIANCE-COMMUNICATIONS-IN Reliance Communications Ltd.DAKC MUMBAI AS1785 1940 1156 784 40.4% AS-PAETEC-NET - PaeTec Communications, Inc. AS4808 1124 352 772 68.7% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS13977 852 118 734 86.2% CTELCO - FAIRPOINT COMMUNICATIONS, INC. AS18881 740 35 705 95.3% Global Village Telecom AS855 717 54 663 92.5% CANET-ASN-4 - Bell Aliant Regional Communications, Inc. AS9808 682 32 650 95.3% CMNET-GD Guangdong Mobile Communication Co.Ltd. AS17676 712 92 620 87.1% GIGAINFRA Softbank BB Corp. AS3356 1116 504 612 54.8% LEVEL3 Level 3 Communications AS3549 1038 439 599 57.7% GBLX Global Crossing Ltd. AS22561 1040 443 597 57.4% DIGITAL-TELEPORT - Digital Teleport Inc. AS19262 999 404 595 59.6% VZGNI-TRANSIT - Verizon Online LLC AS24560 1031 444 587 56.9% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services AS22047 579 22 557 96.2% VTR BANDA ANCHA S.A. AS4804 633 96 537 84.8% MPX-AS Microplex PTY LTD Total 45302 12032 33270 73.4% Top 30 total Possible Bogus Routes 10.86.64.32/30 AS65530 -Private Use AS- 10.86.64.36/30 AS65530 -Private Use AS- 10.86.65.32/30 AS65530 -Private Use AS- 10.86.65.36/30 AS65530 -Private Use AS- 10.255.255.0/30 AS65530 -Private Use AS- 10.255.255.4/30 AS65530 -Private Use AS- 10.255.255.8/30 AS65530 -Private Use AS- 27.112.114.0/24 AS23884 PROENNET-AS Proimage Engineering and Communication Co.,Ltd. 41.222.80.0/21 AS37110 moztel-as 41.223.108.0/22 AS36966 EDL_AS Edgenet AS 62.12.96.0/19 AS38478 SUNNYVISION-AS-AP SunnyVision Limited 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV 64.66.32.0/20 AS18864 64.185.224.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.225.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.226.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.227.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.228.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.229.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.230.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.231.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.232.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.233.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.234.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.235.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.236.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.237.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.238.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.239.0/24 AS27431 JTLNET - JTL Networks Inc. 64.187.208.0/24 AS174 COGENT Cogent/PSI 64.187.209.0/24 AS23005 SWITCH-COMMUNICATIONS - SWITCH Communications Group LLC 65.111.1.0/24 AS32258 SDNGLOBAL - SDN Global 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.245.176.0/20 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 66.251.128.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.133.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.134.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.136.0/21 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.140.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.141.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.142.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.143.0/24 AS3356 LEVEL3 Level 3 Communications 68.234.0.0/19 AS40430 COLO4JAX-AS - colo4jax, LLC 69.46.224.0/20 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.233.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.236.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.165.92.0/24 AS20077 IPNETZONE-ASN - IPNetZone 71.19.134.0/23 AS3313 INET-AS BT Italia S.p.A. 72.35.224.0/22 AS30097 NUWAVE - NuWave 72.35.229.0/24 AS30188 TELEVERGENCE - Televergence Solutions Inc. 72.35.232.0/21 AS30097 NUWAVE - NuWave 72.44.16.0/20 AS15054 NORTHEAST-TEXAS-BROADBAND-LLC - Northeast Texas Broadband, LLC 74.91.48.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.49.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.50.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.51.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.52.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.53.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.54.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.55.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.56.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.57.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.58.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.59.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.60.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.61.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.62.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.63.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.115.124.0/23 AS46540 NARSASN - National Asset Recovery Services, Inc 81.4.0.0/18 AS38478 SUNNYVISION-AS-AP SunnyVision Limited 81.22.64.0/20 AS5511 OPENTRANSIT France Telecom S.A. 82.101.160.0/19 AS5511 OPENTRANSIT France Telecom S.A. 91.217.250.0/24 AS43108 GARM-AS Garm Technologies Ltd. 100.100.0.0/24 AS4847 CNIX-AP China Networks Inter-Exchange 102.2.88.0/22 AS38456 PACTEL-AS-AP Pacific Teleports. 103.244.245.0/24 AS13176 110.34.44.0/22 AS12653 COMTONET KB Impuls Hellas S.A. 116.206.72.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.85.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.103.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 117.120.56.0/21 AS4755 TATACOMM-AS TATA Communications formerly VSNL is Leading ISP 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 142.54.0.0/19 AS23498 CDSI - Cogeco Data Services LP 172.102.0.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 172.116.0.0/24 AS7018 ATT-INTERNET4 - AT&T Services, Inc. 200.1.112.0/24 AS29754 GO2TEL GO2TEL.COM INC. 200.53.0.0/19 AS13878 Diveo do Brasil Telecomunicacoes Ltda 200.58.248.0/21 AS27849 202.8.106.0/24 AS9530 SHINSEGAE-AS SHINSEGAE I&C Co., Ltd. 202.58.113.0/24 AS19161 202.65.96.0/20 AS2706 PI-HK Pacnet Internet (Hong Kong) Limited 202.73.240.0/20 AS2706 PI-HK Pacnet Internet (Hong Kong) Limited 202.83.120.0/21 AS37972 202.83.124.0/24 AS37972 202.83.125.0/24 AS37972 202.83.126.0/24 AS37972 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.174.125.0/24 AS9498 BBIL-AP BHARTI Airtel Ltd. 202.176.1.0/24 AS9942 COMINDICO-AP SOUL Converged Communications Australia 202.179.134.0/24 AS23966 LDN-AS-PK LINKdotNET Telecom Limited 203.23.1.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.24.38.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.30.127.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/23 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.87.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.188.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 203.142.219.0/24 AS45149 204.9.116.0/22 AS30097 NUWAVE - NuWave 204.10.88.0/21 AS3356 LEVEL3 Level 3 Communications 204.10.92.0/23 AS30097 NUWAVE - NuWave 204.10.94.0/23 AS30097 NUWAVE - NuWave 204.10.112.0/21 AS27027 ANBELL ASN-ANBELL 205.175.214.0/24 AS5583 ORANGE-BUSINESS-SERVICES-BENELUX France Telecom S.A. 206.197.184.0/24 AS23304 DATOTEL-STL-AS - Datotel LLC, a NetLabs LLC Company 206.221.176.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.177.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.178.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.179.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.180.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.181.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.182.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.183.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.184.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.185.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.186.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.187.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.188.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.189.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.190.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.191.0/24 AS27431 JTLNET - JTL Networks Inc. 207.174.131.0/24 AS26116 INDRA - Indra's Net Inc 207.174.132.0/23 AS26116 INDRA - Indra's Net Inc 207.174.152.0/23 AS26116 INDRA - Indra's Net Inc 207.174.154.0/24 AS26116 INDRA - Indra's Net Inc 207.174.155.0/24 AS26116 INDRA - Indra's Net Inc 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc. 207.174.248.0/21 AS6653 PRIVATEI - privateI, LLC 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 207.254.128.0/21 AS30689 FLOW-NET - FLOW 207.254.128.0/24 AS30689 FLOW-NET - FLOW 207.254.136.0/21 AS30689 FLOW-NET - FLOW 207.254.138.0/24 AS30689 FLOW-NET - FLOW 207.254.140.0/24 AS30689 FLOW-NET - FLOW 208.83.53.0/24 AS40569 YGOMI-AS - Ygomi LLC 208.87.96.0/21 AS40638 208.89.32.0/24 AS27431 JTLNET - JTL Networks Inc. 208.89.33.0/24 AS27431 JTLNET - JTL Networks Inc. 208.89.34.0/24 AS27431 JTLNET - JTL Networks Inc. 208.89.35.0/24 AS27431 JTLNET - JTL Networks Inc. 209.148.64.0/19 AS13773 TELNETCOMM - Telnet Communications 209.177.64.0/20 AS6461 MFNX MFN - Metromedia Fiber Network 209.213.0.0/20 AS33005 ELTOPIA - Eltopia.com, LLC 213.150.204.0/24 AS29338 AFOL-AS Used by Africaonline Operations 216.12.160.0/20 AS26627 AS-PILOSOFT - Pilosoft, Inc. 216.146.0.0/19 AS11915 TELWEST-NETWORK-SVCS-STATIC - TEL WEST COMMUNICATIONS LLC 216.227.142.0/23 AS46856 GLOBAL-HOST-AS - The Global Host Exchange 216.227.144.0/21 AS46856 GLOBAL-HOST-AS - The Global Host Exchange 216.234.128.0/22 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC. 216.234.132.0/24 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC. 216.234.139.0/24 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC. Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 28 Dec '12

28 Dec '12

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 29 Dec, 2012 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 438252 Prefixes after maximum aggregation: 181041 Deaggregation factor: 2.42 Unique aggregates announced to Internet: 215672 Total ASes present in the Internet Routing Table: 42943 Prefixes per ASN: 10.21 Origin-only ASes present in the Internet Routing Table: 33998 Origin ASes announcing only one prefix: 15900 Transit ASes present in the Internet Routing Table: 5694 Transit-only ASes present in the Internet Routing Table: 137 Average AS path length visible in the Internet Routing Table: 4.5 Max AS path length visible: 31 Max AS path prepend of ASN ( 28730) 25 Prefixes from unregistered ASNs in the Routing Table: 373 Unregistered ASNs in the Routing Table: 132 Number of 32-bit ASNs allocated by the RIRs: 3609 Number of 32-bit ASNs visible in the Routing Table: 3251 Prefixes from 32-bit ASNs in the Routing Table: 8795 Special use prefixes present in the Routing Table: 15 Prefixes being announced from unallocated address space: 173 Number of addresses announced to Internet: 2620507916 Equivalent to 156 /8s, 49 /16s and 199 /24s Percentage of available address space announced: 70.8 Percentage of allocated address space announced: 70.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 94.1 Total number of prefixes smaller than registry allocations: 154887 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 105461 Total APNIC prefixes after maximum aggregation: 32809 APNIC Deaggregation factor: 3.21 Prefixes being announced from the APNIC address blocks: 106390 Unique aggregates announced from the APNIC address blocks: 43557 APNIC Region origin ASes present in the Internet Routing Table: 4810 APNIC Prefixes per ASN: 22.12 APNIC Region origin ASes announcing only one prefix: 1248 APNIC Region transit ASes present in the Internet Routing Table: 798 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 23 Number of APNIC region 32-bit ASNs visible in the Routing Table: 393 Number of APNIC addresses announced to Internet: 716761856 Equivalent to 42 /8s, 184 /16s and 235 /24s Percentage of available APNIC address space announced: 83.8 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 131072-133119 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 155868 Total ARIN prefixes after maximum aggregation: 78374 ARIN Deaggregation factor: 1.99 Prefixes being announced from the ARIN address blocks: 156536 Unique aggregates announced from the ARIN address blocks: 70647 ARIN Region origin ASes present in the Internet Routing Table: 15348 ARIN Prefixes per ASN: 10.20 ARIN Region origin ASes announcing only one prefix: 5807 ARIN Region transit ASes present in the Internet Routing Table: 1591 Average ARIN Region AS path length visible: 4.1 Max ARIN Region AS path length visible: 25 Number of ARIN region 32-bit ASNs visible in the Routing Table: 17 Number of ARIN addresses announced to Internet: 1089154688 Equivalent to 64 /8s, 235 /16s and 46 /24s Percentage of available ARIN address space announced: 57.6 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 112934 Total RIPE prefixes after maximum aggregation: 58409 RIPE Deaggregation factor: 1.93 Prefixes being announced from the RIPE address blocks: 115880 Unique aggregates announced from the RIPE address blocks: 74516 RIPE Region origin ASes present in the Internet Routing Table: 17011 RIPE Prefixes per ASN: 6.81 RIPE Region origin ASes announcing only one prefix: 8152 RIPE Region transit ASes present in the Internet Routing Table: 2755 Average RIPE Region AS path length visible: 5.0 Max RIPE Region AS path length visible: 31 Number of RIPE region 32-bit ASNs visible in the Routing Table: 2104 Number of RIPE addresses announced to Internet: 650459748 Equivalent to 38 /8s, 197 /16s and 58 /24s Percentage of available RIPE address space announced: 94.6 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 196608-199679 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 45330 Total LACNIC prefixes after maximum aggregation: 9040 LACNIC Deaggregation factor: 5.01 Prefixes being announced from the LACNIC address blocks: 48936 Unique aggregates announced from the LACNIC address blocks: 23162 LACNIC Region origin ASes present in the Internet Routing Table: 1766 LACNIC Prefixes per ASN: 27.71 LACNIC Region origin ASes announcing only one prefix: 503 LACNIC Region transit ASes present in the Internet Routing Table: 338 Average LACNIC Region AS path length visible: 4.7 Max LACNIC Region AS path length visible: 25 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 731 Number of LACNIC addresses announced to Internet: 120924712 Equivalent to 7 /8s, 53 /16s and 42 /24s Percentage of available LACNIC address space announced: 72.1 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 262144-263167 plus ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 9744 Total AfriNIC prefixes after maximum aggregation: 2356 AfriNIC Deaggregation factor: 4.14 Prefixes being announced from the AfriNIC address blocks: 10337 Unique aggregates announced from the AfriNIC address blocks: 3636 AfriNIC Region origin ASes present in the Internet Routing Table: 589 AfriNIC Prefixes per ASN: 17.55 AfriNIC Region origin ASes announcing only one prefix: 190 AfriNIC Region transit ASes present in the Internet Routing Table: 130 Average AfriNIC Region AS path length visible: 4.7 Max AfriNIC Region AS path length visible: 25 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 6 Number of AfriNIC addresses announced to Internet: 42905088 Equivalent to 2 /8s, 142 /16s and 174 /24s Percentage of available AfriNIC address space announced: 42.6 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 2946 11556 914 Korea Telecom (KIX) 17974 2485 829 54 PT TELEKOMUNIKASI INDONESIA 7545 1815 301 88 TPG Internet Pty Ltd 4755 1658 381 174 TATA Communications formerly 9829 1416 1156 42 BSNL National Internet Backbo 9583 1183 88 501 Sify Limited 7552 1147 1070 12 Vietel Corporation 4808 1123 2040 316 CNCGROUP IP network: China169 9498 1051 309 74 BHARTI Airtel Ltd. 24560 1037 385 161 Bharti Airtel Ltd., Telemedia Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7029 3468 1010 215 Windstream Communications Inc 6389 3118 3717 132 bellsouth.net, inc. 18566 2081 382 180 Covad Communications 22773 1947 2932 131 Cox Communications, Inc. 1785 1941 678 124 PaeTec Communications, Inc. 20115 1688 1603 618 Charter Communications 4323 1597 1155 397 Time Warner Telecom 30036 1356 287 705 Mediacom Communications Corp 7018 1294 10534 854 AT&T WorldNet Services 7011 1206 321 685 Citizens Utilities Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8402 1731 544 16 Corbina telecom 2118 1052 97 15 EUnet/RELCOM Autonomous Syste 34984 895 211 232 BILISIM TELEKOM 12479 869 777 64 Uni2 Autonomous System 13188 768 96 115 Educational Network 31148 743 38 15 FreeNet ISP 20940 734 241 571 Akamai Technologies European 6830 714 2313 435 UPC Distribution Services 8551 637 367 39 Bezeq International 58113 633 70 378 LIR DATACENTER TELECOM SRL Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 2270 387 207 TVCABLE BOGOTA 28573 2252 1299 70 NET Servicos de Comunicao S.A 7303 1674 1139 202 Telecom Argentina Stet-France 8151 1547 2936 352 UniNet S.A. de C.V. 6503 1454 435 67 AVANTEL, S.A. 27947 745 86 89 Telconet S.A 18881 740 716 18 Global Village Telecom 3816 672 309 71 Empresa Nacional de Telecomun 11172 601 86 66 Servicios Alestra S.A de C.V 7738 588 1242 34 Telecomunicacoes da Bahia S.A Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 872 275 36 LINKdotNET AS number 36998 749 48 3 MOBITEL 8452 549 958 13 TEDATA 6713 499 602 20 Itissalat Al-MAGHRIB 24835 291 80 8 RAYA Telecom - Egypt 3741 267 906 225 The Internet Solution 12258 193 28 67 Vodacom Internet Company 15706 191 32 6 Sudatel Internet Exchange Aut 29975 191 667 21 Vodacom 16637 181 697 88 MTN Network Solutions Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 7029 3468 1010 215 Windstream Communications Inc 6389 3118 3717 132 bellsouth.net, inc. 4766 2946 11556 914 Korea Telecom (KIX) 17974 2485 829 54 PT TELEKOMUNIKASI INDONESIA 10620 2270 387 207 TVCABLE BOGOTA 28573 2252 1299 70 NET Servicos de Comunicao S.A 18566 2081 382 180 Covad Communications 22773 1947 2932 131 Cox Communications, Inc. 1785 1941 678 124 PaeTec Communications, Inc. 7545 1815 301 88 TPG Internet Pty Ltd Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 6389 3118 2986 bellsouth.net, inc. 17974 2485 2431 PT TELEKOMUNIKASI INDONESIA 28573 2252 2182 NET Servicos de Comunicao S.A 10620 2270 2063 TVCABLE BOGOTA 4766 2946 2032 Korea Telecom (KIX) 18566 2081 1901 Covad Communications 1785 1941 1817 PaeTec Communications, Inc. 22773 1947 1816 Cox Communications, Inc. 7545 1815 1727 TPG Internet Pty Ltd 8402 1731 1715 Corbina telecom Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 30031 UNALLOCATED 12.27.122.0/24 7018 AT&T WorldNet Servic 13317 UNALLOCATED 12.44.10.0/24 7018 AT&T WorldNet Servic 23502 UNALLOCATED 12.44.44.0/24 7018 AT&T WorldNet Servic 17300 UNALLOCATED 12.45.103.0/24 209 Qwest 17300 UNALLOCATED 12.45.110.0/24 701 UUNET Technologies, 16476 UNALLOCATED 12.46.27.0/24 7018 AT&T WorldNet Servic 14764 UNALLOCATED 12.108.237.0/24 7018 AT&T WorldNet Servic 33649 UNALLOCATED 12.111.112.0/24 19029 New Edge Networks 26064 UNALLOCATED 12.149.37.0/24 7018 AT&T WorldNet Servic Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 128.0.0.0/24 2876 Jump Management SRL 128.0.24.0/21 41794 Altline LLC 128.0.64.0/22 49466 Declic Telecom SAS 128.0.68.0/22 49466 Declic Telecom SAS 128.0.72.0/21 23456 32-bit ASN transition 128.0.80.0/20 52041 Timer LTD 128.0.104.0/23 51848 FOP Gabidullina Ludmila Nikol 128.0.106.0/24 23456 32-bit ASN transition 128.0.128.0/20 29285 AMT closed joint-stock compan 128.0.144.0/22 59675 mywire Datentechnik GmbH Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.112.114.0/24 23884 Proimage Engineering and Comm 41.222.80.0/21 37110 Moztel LDA 41.223.108.0/22 36966 >>UNKNOWN<< 62.12.96.0/19 38478 SunnyVision Limited 62.61.220.0/24 24974 Tachyon Europe BV - Wireless 62.61.221.0/24 24974 Tachyon Europe BV - Wireless 64.66.32.0/20 18864 >>UNKNOWN<< 64.185.224.0/24 27431 JTL Networks Inc. 64.185.225.0/24 27431 JTL Networks Inc. 64.185.226.0/24 27431 JTL Networks Inc. Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:18 /9:13 /10:29 /11:87 /12:244 /13:477 /14:858 /15:1545 /16:12489 /17:6566 /18:10939 /19:21633 /20:31043 /21:33016 /22:44333 /23:40798 /24:230036 /25:1304 /26:1682 /27:869 /28:172 /29:69 /30:13 /31:0 /32:19 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 7029 2729 3468 Windstream Communications Inc 18566 2031 2081 Covad Communications 6389 1773 3118 bellsouth.net, inc. 8402 1455 1731 Corbina telecom 22773 1279 1947 Cox Communications, Inc. 30036 1261 1356 Mediacom Communications Corp 11492 1157 1194 Cable One 1785 1023 1941 PaeTec Communications, Inc. 6503 980 1454 AVANTEL, S.A. 7011 954 1206 Citizens Utilities Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:704 2:692 3:3 4:9 5:701 6:3 8:470 12:1929 13:3 14:701 15:11 16:3 17:6 20:27 23:221 24:1786 27:1467 31:1349 32:54 33:2 34:2 36:11 37:1145 38:841 39:2 40:141 41:2658 42:180 44:3 46:1726 47:3 49:527 50:656 52:12 54:28 55:8 56:1 57:28 58:1071 59:559 60:237 61:1317 62:1039 63:2015 64:4348 65:2200 66:4492 67:2086 68:1199 69:3330 70:940 71:557 72:1893 74:2622 75:475 76:293 77:1052 78:1030 79:524 80:1221 81:982 82:661 83:537 84:529 85:1164 86:457 87:970 88:362 89:1757 90:304 91:5381 92:613 93:1621 94:1988 95:1630 96:489 97:337 98:967 99:40 100:31 101:286 103:1974 105:501 106:117 107:203 108:510 109:1753 110:834 111:983 112:470 113:745 114:642 115:905 116:888 117:775 118:962 119:1265 120:372 121:707 122:1727 123:1182 124:1320 125:1299 128:811 129:199 130:307 131:643 132:319 133:142 134:254 135:62 136:216 137:235 138:344 139:169 140:182 141:300 142:516 143:351 144:490 145:89 146:518 147:327 148:728 149:335 150:158 151:245 152:399 153:188 154:23 155:424 156:231 157:379 158:257 159:681 160:335 161:421 162:371 163:193 164:584 165:458 166:471 167:569 168:1006 169:131 170:988 171:164 172:4 173:1641 174:631 175:466 176:947 177:1479 178:1713 180:1364 181:183 182:1147 183:287 184:650 185:147 186:2157 187:1449 188:1903 189:1566 190:6187 192:6082 193:5720 194:4485 195:3602 196:1244 197:289 198:4012 199:5159 200:6032 201:2027 202:8859 203:8751 204:4479 205:2543 206:2810 207:2808 208:4064 209:3648 210:2911 211:1559 212:2006 213:1883 214:859 215:91 216:5135 217:1571 218:596 219:321 220:1260 221:544 222:324 223:375 End of report

1 0

Level3/GC: IMMEDIATE: Trace request on TCP SYN attack traffic towards 217.149.58.35
by Kauto Huopio 28 Dec '12

28 Dec '12

Greetings, (my work hat @ CERT-FI on, work email kauto.huopio(a)ficora.fi) Several Finnish media sites (www.yle.fi, www.mtv3.fi, www.hs.fi etc) have been attacked since Dec 25th. Current target is www.ampparit.com (217.149.58.35). ISP reports traffic originating from Level3 transit. Traffic is > 2 Mpps TCP SYN. I'd like to request immediate trace support - we suspect this is a very small source footprint DOS. All observations to cert(a)ficora.fi, cc: to me at work address above. -- Kauto Huopio - kauto(a)huopio.fi

1 0

SSL Certificates and ... Providers
by Blake Pfankuch 28 Dec '12

28 Dec '12

Ok, so this might be a little off topic but I am trying to validate something a vendor is telling me and hoping some people here have expertise in this area... I am working with a SSL certificate provider. I am trying to purchase a quantity of wildcard SSL certificates to cover about 60 FQDN's across 4 domains. Vendor is telling me that the Wildcard certificates are licensed per physical device it is installed on. This means instead of using a single wildcard across 20 servers, I would have to buy 20 wildcard certs for 20 servers. This does not compute in my brain and also in my mind completely defeats the purpose of a wildcard cert as I know it. Has anyone run into this before? Thanks Blake

10 10

regions.com down??
by Positively Optimistic 27 Dec '12

27 Dec '12

Is http://www.regions.com down globally?

9 8