February 2012 - Test - lists.nanog.org

Clued contact at Brighthouse
by James Milko 14 Feb '12

14 Feb '12

Brighthouse seems to be announcing one of our prefixes. Does anyone have a contact for them that doesn't end up in residential support? Thanks, James Milko Senior Network Engineer www.inetwork.com 4001 Weston Parkway Cary, NC 27513 inetwork is a division of Bandwidth

1 1

Does anyone know anything about intelishift.com?
by Landon Stewart 14 Feb '12

14 Feb '12

Does anyone know if intelishift.com has a reputation that is good or bad? I have never heard of them before but need to know some more about them. If you have anything to share please let me know off-list. We are seeing some unscrupulous behaviour from them regarding marketing and spam. --- Landon Stewart <lstewart(a)superb.net <mailto"LStewart(a)Superb.Net>> Manager of Systems and Engineering Superb Internet Corp - 888-354-6128 x 4199 Web hosting and more "Ahead of the Rest": www.superb.net

1 0

Re: IPv6 explicit BGP group configs
by Aleksi Suhonen 13 Feb '12

13 Feb '12

Hello, keith tokash wrote: > I'm prepping an environment for v6 and I'm wondering what, if > any, benefit there is to splitting v4 and v6 into separate groups. > We're running Junipers and things are fairly neat and ordered; I haven't really looked very hard, since I subscribe to the stated reasons for keeping v4 and v6 sessions apart. (migration, max-pfx, ...) BUT To my knowledge, JunOS doesn't even support using a single TCP session to exchange routes of all address families. If someone knows how to do this - if even for just IPv4 and IPv6 unicast - let me know ... ;-) -- Aleksi Suhonen / Axu TM Oy World Wide Web: www.axu.tm

2 1

Dear RIPE: Please don't encourage phishing
by Steven Bellovin 12 Feb '12

12 Feb '12

I received the enclosed note, apparently from RIPE (and the headers check out). Why are you sending messages with clickable objects that I'm supposed to use to change my password? ------- From: RIPE_DBannounce(a)ripe.net Subject: Advisory notice on passwords in the RIPE Database Date: February 9, 2012 1:16:15 PM EST To: XXXXXXXX [Apologies for duplicate e-mails] Dear Colleagues, We are contacting you with some advice on the passwords used in the RIPE Database. There is no immediate concern and this notice is only advisory. At the request of the RIPE community, the RIPE NCC recently deployed an MD5 password hash change. Before this change was implemented, there was a lot of discussion on the Database Working Group mailing list about the vulnerabilities of MD5 passwords with public hashes. The hashes can now only be seen by the user of the MNTNER object. As a precaution, now that the hashes are hidden, we strongly recommend that you change all MD5 passwords used by your MNTNER objects in the RIPE Database at your earliest convenience. When choosing new passwords, make them as strong as possible. To make it easier for you to change your password(s) we have improved Webupdates. On the modify page there is an extra button after the "auth:" attribute field. Click this button for a pop up window that will encrypt a password and enter it directly into the "auth:" field. Webupdates: https://apps.db.ripe.net/webupdates/search.html There is a RIPE Labs article explaining details of the security changes and the new process to modify a MNTNER object in the RIPE Database: https://labs.ripe.net/Members/denis/securing-md5-hashes-in-the-ripe-database We are sending you this email because this address is referenced in the MNTNER objects in the RIPE Database listed below. If you have any concerns about your passwords or need further advice please contact our Customer Services team at ripe-dbm(a)ripe.net. (You cannot reply to this email.) Regards, Denis Walker Business Analyst RIPE NCC Database Group Referencing MNTNER objects in the RIPE Database: maint-rgnet

18 35

Iran blocking essentially all encyrpted protocols
by Ryan Malayter 11 Feb '12

11 Feb '12

Haven't seen this come through on NANOG yet: http://arstechnica.com/tech-policy/news/2012/02/iran-reportedly-blocking-en… Can anyone with the ability confirm that TCP/443 traffic from Iran has stopped?

8 8

couple of questions regarding 'lifeline' and large scale nat...
by Eric J Esslinger 11 Feb '12

11 Feb '12

We're toying with the idea of a low bitrate 'lifeline' internet on our cable system, maybe even bundled with a certain level of cable service. First question, if you happen to be doing something like this, what bit rates are you providing. Second question, though 'real' internet customers all get real IP's, what would you think of doing something like this with 'large scale' nat instead. Understand, we're only talking about basic internet, something like a 256k/96k (or similar) connect, not something that would be used by a serious user. (One thing we are looking at is some older dial up users we still have, most of which could go onto cable just fine but don't want to pay the price). Also when I say large scale, I doubt I'd have more than a few thousand customers for this. We're not a large ISP/cable company by any means. __________________________ Eric Esslinger Information Services Manager - Fayetteville Public Utilities http://www.fpu-tn.com/ (931)433-1522 ext 165 This message may contain confidential and/or proprietary information and is intended for the person/entity to whom it was originally addressed. Any use by others is strictly prohibited.

5 6

BGP Update Report
by cidr-report＠potaroo.net 10 Feb '12

10 Feb '12

BGP Update Report Interval: 02-Feb-12 -to- 09-Feb-12 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS8402 53549 3.4% 29.9 -- CORBINA-AS OJSC "Vimpelcom" 2 - AS28683 32704 2.1% 536.1 -- BENINTELECOM 3 - AS9829 26878 1.7% 39.6 -- BSNL-NIB National Internet Backbone 4 - AS12479 26390 1.7% 303.3 -- UNI2-AS France Telecom Espana SA 5 - AS45271 23588 1.5% 168.5 -- ICLNET-AS-AP 5th Floor, Windsor Building, Off: CST Road 6 - AS32528 22752 1.4% 7584.0 -- ABBOTT Abbot Labs 7 - AS8452 21248 1.3% 52.7 -- TE-AS TE-AS 8 - AS23154 20456 1.3% 6818.7 -- SANMINA-SCI Sanmina-SCI Corporation 9 - AS5800 19469 1.2% 64.0 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 10 - AS7552 17101 1.1% 19.6 -- VIETEL-AS-AP Vietel Corporation 11 - AS24560 16978 1.1% 39.7 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 12 - AS20632 15343 1.0% 1180.2 -- PETERSTAR-AS PeterStar 13 - AS2118 15208 1.0% 17.4 -- RELCOM-AS OOO "NPO Relcom" 14 - AS17974 14308 0.9% 15.3 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia 15 - AS6503 12775 0.8% 7.6 -- Axtel, S.A.B. de C.V. 16 - AS6066 12372 0.8% 6186.0 -- VERIZON-BUSINESS-MAE-AS6066 - Verizon Business Network Services Inc. 17 - AS5976 11800 0.8% 119.2 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 18 - AS6713 11470 0.7% 25.9 -- IAM-AS 19 - AS29126 11373 0.7% 11373.0 -- DATIQ-AS Datiq B.V. 20 - AS12975 10309 0.7% 45.4 -- PALTEL-AS PALTEL Autonomous System TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS29126 11373 0.7% 11373.0 -- DATIQ-AS Datiq B.V. 2 - AS32528 22752 1.4% 7584.0 -- ABBOTT Abbot Labs 3 - AS23154 20456 1.3% 6818.7 -- SANMINA-SCI Sanmina-SCI Corporation 4 - AS6066 12372 0.8% 6186.0 -- VERIZON-BUSINESS-MAE-AS6066 - Verizon Business Network Services Inc. 5 - AS5868 1882 0.1% 1882.0 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 6 - AS8163 1257 0.1% 1257.0 -- METROTEL REDES S.A. 7 - AS20632 15343 1.0% 1180.2 -- PETERSTAR-AS PeterStar 8 - AS53362 882 0.1% 882.0 -- MIXIT-AS - Mixit, Inc. 9 - AS21271 810 0.1% 810.0 -- SOTELMABGP 10 - AS27704 595 0.0% 595.0 -- Tiendas Comercial Mexicana, S.A. de C.V. 11 - AS17408 3497 0.2% 582.8 -- ABOVE-AS-AP AboveNet Communications Taiwan 12 - AS51896 567 0.0% 567.0 -- HRINGDU-AS Hringdu ehf 13 - AS1997 1643 0.1% 547.7 -- IBMDES-AS - IBM Dallas Engineering & Scientific 14 - AS28683 32704 2.1% 536.1 -- BENINTELECOM 15 - AS36980 512 0.0% 512.0 -- JOHNHOLT-ASN 16 - AS39843 1415 0.1% 471.7 -- RATECOM-AS ZAO "Ratecom" 17 - AS48068 448 0.0% 448.0 -- VISONIC Visonic Ltd 18 - AS56886 440 0.0% 440.0 -- REDSTAR-AS OOO "Red Star" 19 - AS676 437 0.0% 437.0 -- United Nations Development Programme 20 - AS37296 432 0.0% 432.0 -- AFCOMSAT TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 148.164.14.0/24 20430 1.2% AS23154 -- SANMINA-SCI Sanmina-SCI Corporation 2 - 84.204.132.0/24 15228 0.9% AS20632 -- PETERSTAR-AS PeterStar 3 - 217.170.24.0/21 11373 0.7% AS29126 -- DATIQ-AS Datiq B.V. 4 - 130.36.34.0/24 11372 0.7% AS32528 -- ABBOTT Abbot Labs 5 - 130.36.35.0/24 11372 0.7% AS32528 -- ABBOTT Abbot Labs 6 - 122.161.0.0/16 10381 0.6% AS24560 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 7 - 62.36.252.0/22 8257 0.5% AS12479 -- UNI2-AS France Telecom Espana SA 8 - 202.92.235.0/24 8179 0.5% AS9498 -- BBIL-AP BHARTI Airtel Ltd. 9 - 190.67.172.0/22 6746 0.4% AS3816 -- COLOMBIA TELECOMUNICACIONES S.A. ESP 10 - 62.36.249.0/24 6209 0.4% AS12479 -- UNI2-AS France Telecom Espana SA 11 - 204.29.239.0/24 6186 0.4% AS6066 -- VERIZON-BUSINESS-MAE-AS6066 - Verizon Business Network Services Inc. 12 - 150.225.0.0/16 6186 0.4% AS6066 -- VERIZON-BUSINESS-MAE-AS6066 - Verizon Business Network Services Inc. 13 - 62.36.241.0/24 5685 0.3% AS12479 -- UNI2-AS France Telecom Espana SA 14 - 62.36.210.0/24 5463 0.3% AS12479 -- UNI2-AS France Telecom Espana SA 15 - 194.63.9.0/24 5322 0.3% AS1273 -- CW Cable and Wireless Worldwide plc 16 - 41.43.219.0/24 4202 0.2% AS8452 -- TE-AS TE-AS 17 - 41.43.222.0/24 4150 0.2% AS8452 -- TE-AS TE-AS 18 - 205.73.118.0/24 4059 0.2% AS5976 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 19 - 205.73.116.0/23 3969 0.2% AS5976 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 20 - 41.43.233.0/24 3643 0.2% AS8452 -- TE-AS TE-AS Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 10 Feb '12

10 Feb '12

This report has been generated at Fri Feb 10 21:12:37 2012 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 03-02-12 397625 230154 04-02-12 398129 229956 05-02-12 397792 230223 06-02-12 397996 230469 07-02-12 398139 230795 08-02-12 398862 230787 09-02-12 399071 230735 10-02-12 398957 231557 AS Summary 40190 Number of ASes in routing system 16851 Number of ASes announcing only one prefix 3442 Largest number of prefixes announced by an AS AS6389 : BELLSOUTH-NET-BLK - BellSouth.net Inc. 109981184 Largest address span announced by an AS (/32s) AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 10Feb12 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 399616 231551 168065 42.1% All ASes AS6389 3442 204 3238 94.1% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS7029 3432 1743 1689 49.2% WINDSTREAM - Windstream Communications Inc AS18566 2093 413 1680 80.3% COVAD - Covad Communications Co. AS4766 2475 1002 1473 59.5% KIXS-AS-KR Korea Telecom AS22773 1510 118 1392 92.2% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. AS2118 1385 14 1371 99.0% RELCOM-AS OOO "NPO Relcom" AS4323 1611 387 1224 76.0% TWTC - tw telecom holdings, inc. AS28573 1659 497 1162 70.0% NET Servicos de Comunicao S.A. AS4755 1531 402 1129 73.7% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS1785 1871 791 1080 57.7% AS-PAETEC-NET - PaeTec Communications, Inc. AS7552 1393 358 1035 74.3% VIETEL-AS-AP Vietel Corporation AS10620 1751 739 1012 57.8% Telmex Colombia S.A. AS19262 1386 397 989 71.4% VZGNI-TRANSIT - Verizon Online LLC AS7303 1263 371 892 70.6% Telecom Argentina S.A. AS26615 897 33 864 96.3% Tim Celular S.A. AS8402 1645 824 821 49.9% CORBINA-AS OJSC "Vimpelcom" AS4808 1149 342 807 70.2% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS8151 1477 675 802 54.3% Uninet S.A. de C.V. AS18101 952 156 796 83.6% RELIANCE-COMMUNICATIONS-IN Reliance Communications Ltd.DAKC MUMBAI AS24560 1014 329 685 67.6% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services AS9498 885 204 681 76.9% BBIL-AP BHARTI Airtel Ltd. AS9394 882 207 675 76.5% CRNET CHINA RAILWAY Internet(CRNET) AS7545 1643 979 664 40.4% TPG-INTERNET-AP TPG Internet Pty Ltd AS3356 1096 455 641 58.5% LEVEL3 Level 3 Communications AS30036 1384 761 623 45.0% MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communications Corp AS17974 1728 1119 609 35.2% TELKOMNET-AS2-AP PT Telekomunikasi Indonesia AS17676 681 75 606 89.0% GIGAINFRA Softbank BB Corp. AS15557 1095 510 585 53.4% LDCOMNET Societe Francaise du Radiotelephone S.A AS4804 660 95 565 85.6% MPX-AS Microplex PTY LTD AS3549 986 430 556 56.4% GBLX Global Crossing Ltd. Total 44976 14630 30346 67.5% Top 30 total Possible Bogus Routes 10.86.64.32/30 AS65530 -Private Use AS- 10.86.64.36/30 AS65530 -Private Use AS- 10.86.65.32/30 AS65530 -Private Use AS- 10.86.65.36/30 AS65530 -Private Use AS- 10.255.255.0/30 AS65530 -Private Use AS- 10.255.255.4/30 AS65530 -Private Use AS- 10.255.255.8/30 AS65530 -Private Use AS- 14.192.0.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.4.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.8.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.12.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.16.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.20.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.24.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.28.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 37.114.8.0/21 AS20608 T-SYSTEMS-ITALIA-AS T-Systems Italia Autonomous System 37.114.192.0/18 AS51074 MABNA Gostaresh Ertebatate Mabna Co. Ltd. 37.115.0.0/16 AS15895 KSNET-AS Kyivstar GSM 41.222.79.0/24 AS36938 AMSCOTELECOMS Amsco Telecommunications Nigeria Limited 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV 64.21.192.0/20 AS11610 INETNEBR-1 - Internet Nebraska Corporation 64.21.212.0/22 AS11610 INETNEBR-1 - Internet Nebraska Corporation 64.21.216.0/21 AS11610 INETNEBR-1 - Internet Nebraska Corporation 66.129.0.0/19 AS3901 ARRAKIS - Higher Technology Services 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.207.32.0/20 AS23011 66.245.176.0/20 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 66.251.128.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.133.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.134.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.136.0/21 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.140.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.141.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.142.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.143.0/24 AS3356 LEVEL3 Level 3 Communications 69.46.224.0/20 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.233.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.236.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 71.19.134.0/23 AS3313 INET-AS BT Italia S.p.A. 72.44.16.0/20 AS15054 HAMELTRONICS - Hameltronics, LLC 98.159.96.0/20 AS46975 110.34.44.0/22 AS12653 COMTONET KB Impuls Hellas S.A. 116.206.72.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.85.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.103.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 117.120.56.0/21 AS4755 TATACOMM-AS TATA Communications formerly VSNL is Leading ISP 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 142.54.0.0/19 AS23498 CDSI - Cogeco Data Services Inc. 172.45.1.0/24 AS3356 LEVEL3 Level 3 Communications 172.102.0.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 176.108.32.0/20 AS31042 SERBIA-BROADBAND-AS Serbia BroadBand-Srpske Kablovske mreze d.o.o. 190.104.32.0/21 AS27882 Telefónica Celular de Bolivia S.A. 193.0.22.0/23 AS3333 RIPE-NCC-AS RIPE Network Coordination Centre 200.6.93.0/24 AS6400 Compañía Dominicana de Teléfonos, C. por A. - CODETEL 200.6.94.0/24 AS6400 Compañía Dominicana de Teléfonos, C. por A. - CODETEL 200.6.95.0/24 AS6400 Compañía Dominicana de Teléfonos, C. por A. - CODETEL 200.23.84.0/24 AS8151 Uninet S.A. de C.V. 200.24.73.0/24 AS26061 Equant Colombia 200.33.40.0/24 AS11172 Alestra, S. de R.L. de C.V. 200.34.0.0/20 AS6342 Instituto Tecnológico y de Estudios Superiores de Monterrey 200.53.0.0/19 AS13878 Diveo do Brasil Telecomunicacoes Ltda 202.1.224.0/24 AS10097 FLOWCOM Flow Communications 2/541 Kent St Sydney NSW 2000 202.8.106.0/24 AS9530 SHINSEGAE-AS SHINSEGAE I&C Co., Ltd. 202.9.55.0/24 AS2764 AAPT AAPT Limited 202.58.113.0/24 AS19161 202.61.75.0/24 AS9927 PHILCOMNET-PH A Multihomed ISP Company 202.83.120.0/21 AS37972 202.83.124.0/24 AS37972 202.83.125.0/24 AS37972 202.83.126.0/24 AS37972 202.86.32.0/20 AS18255 BRISBANE-AP Brisbane City Council 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.133.70.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.140.128.0/19 AS9583 SIFY-AS-IN Sify Limited 202.160.152.0/22 AS10113 EFTEL-AS-AP Eftel Limited. 202.174.125.0/24 AS9498 BBIL-AP BHARTI Airtel Ltd. 202.176.1.0/24 AS9942 COMINDICO-AP SOUL Converged Communications Australia 202.179.134.0/24 AS23966 LDN-AS-PK LINKdotNET Telecom Limited 203.23.1.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.24.38.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.30.127.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/23 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.87.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.188.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 203.80.128.0/23 AS9260 MULTINET-PK NSP,ISP,HFC,DSL,DIALUP,Data Network Connectivity solutions, 203.80.130.0/23 AS9260 MULTINET-PK NSP,ISP,HFC,DSL,DIALUP,Data Network Connectivity solutions, 203.142.219.0/24 AS45149 205.150.0.0/15 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 205.175.214.0/24 AS5583 ORANGE-BUSINESS-SERVICES-BENELUX France Telecom S.A. 206.123.129.0/24 AS10790 INREACH-AS - InReach Internet 206.180.240.0/20 AS12083 KNOLOGY-NET - KNOLOGY, Inc. 206.197.184.0/24 AS23304 DATOTEL-STL-AS - Datotel LLC, a NetLabs LLC Company 207.174.131.0/24 AS26116 INDRA - Indra's Net Inc 207.174.132.0/23 AS26116 INDRA - Indra's Net Inc 207.174.152.0/23 AS26116 INDRA - Indra's Net Inc 207.174.154.0/24 AS26116 INDRA - Indra's Net Inc 207.174.155.0/24 AS26116 INDRA - Indra's Net Inc 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc. 207.174.248.0/21 AS6653 PRIVATEI - privateI, LLC 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 208.83.53.0/24 AS40569 YGOMI-AS - Ygomi LLC 208.91.56.0/21 AS22241 IC2NET - IC2NET 208.91.56.0/24 AS22241 IC2NET - IC2NET 208.91.57.0/24 AS22241 IC2NET - IC2NET 208.91.58.0/24 AS22241 IC2NET - IC2NET 208.91.59.0/24 AS22241 IC2NET - IC2NET 208.91.60.0/24 AS22241 IC2NET - IC2NET 208.91.61.0/24 AS22241 IC2NET - IC2NET 208.91.62.0/24 AS22241 IC2NET - IC2NET 208.91.63.0/24 AS22241 IC2NET - IC2NET 209.133.224.0/19 AS4323 TWTC - tw telecom holdings, inc. 209.148.64.0/19 AS13773 TELNETCOMM - Telnet Communications 209.177.64.0/20 AS6461 MFNX MFN - Metromedia Fiber Network 209.213.0.0/20 AS33005 ELTOPIA - Eltopia.com, LLC 209.222.240.0/22 AS19747 210.56.150.0/23 AS38138 INTECH-TRANSIT-BD InTech Online Limited, INTERNET SERVICE LIMITED 216.12.160.0/20 AS26627 AS-PILOSOFT - Pilosoft, Inc. 216.21.160.0/20 AS13818 PHX-INTL-TELEPORT - Phoenix International Teleport 216.194.160.0/20 AS13818 PHX-INTL-TELEPORT - Phoenix International Teleport Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 10 Feb '12

10 Feb '12

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 11 Feb, 2012 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 397602 Prefixes after maximum aggregation: 169606 Deaggregation factor: 2.34 Unique aggregates announced to Internet: 192311 Total ASes present in the Internet Routing Table: 40086 Prefixes per ASN: 9.92 Origin-only ASes present in the Internet Routing Table: 32739 Origin ASes announcing only one prefix: 15528 Transit ASes present in the Internet Routing Table: 5400 Transit-only ASes present in the Internet Routing Table: 147 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 33 Max AS path prepend of ASN (48687) 24 Prefixes from unregistered ASNs in the Routing Table: 328 Unregistered ASNs in the Routing Table: 127 Number of 32-bit ASNs allocated by the RIRs: 2272 Number of 32-bit ASNs visible in the Routing Table: 1947 Prefixes from 32-bit ASNs in the Routing Table: 4674 Special use prefixes present in the Routing Table: 2 Prefixes being announced from unallocated address space: 137 Number of addresses announced to Internet: 2513929424 Equivalent to 149 /8s, 215 /16s and 132 /24s Percentage of available address space announced: 67.8 Percentage of allocated address space announced: 67.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 92.0 Total number of prefixes smaller than registry allocations: 168841 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 98087 Total APNIC prefixes after maximum aggregation: 31681 APNIC Deaggregation factor: 3.10 Prefixes being announced from the APNIC address blocks: 94410 Unique aggregates announced from the APNIC address blocks: 39147 APNIC Region origin ASes present in the Internet Routing Table: 4652 APNIC Prefixes per ASN: 20.29 APNIC Region origin ASes announcing only one prefix: 1239 APNIC Region transit ASes present in the Internet Routing Table: 737 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 20 Number of APNIC region 32-bit ASNs visible in the Routing Table: 143 Number of APNIC addresses announced to Internet: 635706656 Equivalent to 37 /8s, 228 /16s and 29 /24s Percentage of available APNIC address space announced: 80.6 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 131072-132095, 132096-133119 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 148238 Total ARIN prefixes after maximum aggregation: 75329 ARIN Deaggregation factor: 1.97 Prefixes being announced from the ARIN address blocks: 120188 Unique aggregates announced from the ARIN address blocks: 49415 ARIN Region origin ASes present in the Internet Routing Table: 14905 ARIN Prefixes per ASN: 8.06 ARIN Region origin ASes announcing only one prefix: 5689 ARIN Region transit ASes present in the Internet Routing Table: 1576 Average ARIN Region AS path length visible: 4.0 Max ARIN Region AS path length visible: 22 Number of ARIN region 32-bit ASNs visible in the Routing Table: 15 Number of ARIN addresses announced to Internet: 804413120 Equivalent to 47 /8s, 242 /16s and 94 /24s Percentage of available ARIN address space announced: 63.9 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 173/8, 174/8, 184/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 98764 Total RIPE prefixes after maximum aggregation: 52358 RIPE Deaggregation factor: 1.89 Prefixes being announced from the RIPE address blocks: 90594 Unique aggregates announced from the RIPE address blocks: 56087 RIPE Region origin ASes present in the Internet Routing Table: 16308 RIPE Prefixes per ASN: 5.56 RIPE Region origin ASes announcing only one prefix: 7997 RIPE Region transit ASes present in the Internet Routing Table: 2598 Average RIPE Region AS path length visible: 4.7 Max RIPE Region AS path length visible: 33 Number of RIPE region 32-bit ASNs visible in the Routing Table: 1344 Number of RIPE addresses announced to Internet: 500587080 Equivalent to 29 /8s, 214 /16s and 90 /24s Percentage of available RIPE address space announced: 80.6 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 196608-198655 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 176/8, 178/8, 185/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 38648 Total LACNIC prefixes after maximum aggregation: 8064 LACNIC Deaggregation factor: 4.79 Prefixes being announced from the LACNIC address blocks: 38261 Unique aggregates announced from the LACNIC address blocks: 19517 LACNIC Region origin ASes present in the Internet Routing Table: 1572 LACNIC Prefixes per ASN: 24.34 LACNIC Region origin ASes announcing only one prefix: 439 LACNIC Region transit ASes present in the Internet Routing Table: 290 Average LACNIC Region AS path length visible: 4.4 Max LACNIC Region AS path length visible: 24 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 441 Number of LACNIC addresses announced to Internet: 96512392 Equivalent to 5 /8s, 192 /16s and 169 /24s Percentage of available LACNIC address space announced: 63.9 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 262144-263167 plus ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 9015 Total AfriNIC prefixes after maximum aggregation: 2096 AfriNIC Deaggregation factor: 4.30 Prefixes being announced from the AfriNIC address blocks: 7029 Unique aggregates announced from the AfriNIC address blocks: 2148 AfriNIC Region origin ASes present in the Internet Routing Table: 511 AfriNIC Prefixes per ASN: 13.76 AfriNIC Region origin ASes announcing only one prefix: 164 AfriNIC Region transit ASes present in the Internet Routing Table: 117 Average AfriNIC Region AS path length visible: 4.6 Max AfriNIC Region AS path length visible: 25 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 4 Number of AfriNIC addresses announced to Internet: 30893056 Equivalent to 1 /8s, 215 /16s and 100 /24s Percentage of available AfriNIC address space announced: 46.0 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 2471 11101 979 Korea Telecom (KIX) 17974 1729 503 36 PT TELEKOMUNIKASI INDONESIA 7545 1642 303 85 TPG Internet Pty Ltd 4755 1532 385 156 TATA Communications formerly 7552 1393 1064 7 Vietel Corporation 9829 1172 989 28 BSNL National Internet Backbo 4808 1149 2112 314 CNCGROUP IP network: China169 9583 1124 83 482 Sify Limited 24560 1014 385 167 Bharti Airtel Ltd., Telemedia 18101 950 130 155 Reliance Infocom Ltd Internet Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3442 3807 201 bellsouth.net, inc. 7029 3391 1014 159 Windstream Communications Inc 18566 2093 382 177 Covad Communications 1785 1868 680 125 PaeTec Communications, Inc. 20115 1625 1550 631 Charter Communications 4323 1610 1062 385 Time Warner Telecom 22773 1511 2910 109 Cox Communications, Inc. 30036 1392 244 751 Mediacom Communications Corp 19262 1386 4687 396 Verizon Global Networks 7018 1307 6995 849 AT&T WorldNet Services Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8402 1719 480 15 Corbina telecom 2118 1385 97 13 EUnet/RELCOM Autonomous Syste 15557 1095 2161 63 LDCOM NETWORKS 34984 650 188 172 BILISIM TELEKOM 6830 644 1927 413 UPC Distribution Services 20940 608 195 470 Akamai Technologies European 12479 584 642 53 Uni2 Autonomous System 31148 538 37 9 FreeNet ISP 3320 533 8450 399 Deutsche Telekom AG 8551 530 360 81 Bezeq International Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 1751 324 162 TVCABLE BOGOTA 28573 1655 1085 69 NET Servicos de Comunicao S.A 8151 1475 3003 342 UniNet S.A. de C.V. 7303 1263 758 182 Telecom Argentina Stet-France 26615 896 664 33 Tim Brasil S.A. 11172 694 95 75 Servicios Alestra S.A de C.V 27947 655 67 105 Telconet S.A 22047 581 322 17 VTR PUNTO NET S.A. 3816 551 237 91 Empresa Nacional de Telecomun 7738 550 1050 31 Telecomunicacoes da Bahia S.A Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 8452 1235 958 13 TEDATA 24863 829 155 43 LINKdotNET AS number 6713 485 649 18 Itissalat Al-MAGHRIB 3741 278 939 229 The Internet Solution 15706 238 32 6 Sudatel Internet Exchange Aut 33776 236 13 14 Starcomms Nigeria Limited 12258 197 28 62 Vodacom Internet Company 24835 193 80 8 RAYA Telecom - Egypt 29571 189 17 11 Ci Telecom Autonomous system 16637 163 664 82 MTN Network Solutions Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3442 3807 201 bellsouth.net, inc. 7029 3391 1014 159 Windstream Communications Inc 4766 2471 11101 979 Korea Telecom (KIX) 18566 2093 382 177 Covad Communications 1785 1868 680 125 PaeTec Communications, Inc. 10620 1751 324 162 TVCABLE BOGOTA 17974 1729 503 36 PT TELEKOMUNIKASI INDONESIA 8402 1719 480 15 Corbina telecom 28573 1655 1085 69 NET Servicos de Comunicao S.A 7545 1642 303 85 TPG Internet Pty Ltd Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 7029 3391 3232 Windstream Communications Inc 18566 2093 1916 Covad Communications 1785 1868 1743 PaeTec Communications, Inc. 8402 1719 1704 Corbina telecom 17974 1729 1693 PT TELEKOMUNIKASI INDONESIA 10620 1751 1589 TVCABLE BOGOTA 28573 1655 1586 NET Servicos de Comunicao S.A 7545 1642 1557 TPG Internet Pty Ltd 4766 2471 1492 Korea Telecom (KIX) 22773 1511 1402 Cox Communications, Inc. Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.14.170.0/24 4323 Time Warner Telecom 32567 UNALLOCATED 12.25.107.0/24 4323 Time Warner Telecom 25639 UNALLOCATED 12.41.169.0/24 7018 AT&T WorldNet Servic 13317 UNALLOCATED 12.44.10.0/24 7018 AT&T WorldNet Servic 23502 UNALLOCATED 12.44.44.0/24 7018 AT&T WorldNet Servic 17300 UNALLOCATED 12.45.103.0/24 7018 AT&T WorldNet Servic 17300 UNALLOCATED 12.45.110.0/24 701 UUNET Technologies, 16476 UNALLOCATED 12.46.27.0/24 7018 AT&T WorldNet Servic 32873 UNALLOCATED 12.46.100.0/23 10912 InterNAP Network Ser Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 128.0.0.0/21 12654 RIPE NCC RIS Project 128.0.24.0/24 12654 RIPE NCC RIS Project Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 14.192.0.0/22 45464 Room 201, TGU Bldg 14.192.4.0/22 45464 Room 201, TGU Bldg 14.192.8.0/22 45464 Room 201, TGU Bldg 14.192.12.0/22 45464 Room 201, TGU Bldg 14.192.16.0/22 45464 Room 201, TGU Bldg 14.192.20.0/22 45464 Room 201, TGU Bldg 14.192.24.0/22 45464 Room 201, TGU Bldg 14.192.28.0/22 45464 Room 201, TGU Bldg 37.98.200.0/21 56687 Nimad Rah Khoozestan PLC 37.98.208.0/20 8374 Polkomtel S.A. Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:19 /9:12 /10:27 /11:80 /12:231 /13:458 /14:816 /15:1469 /16:12130 /17:6197 /18:10311 /19:20471 /20:28291 /21:29233 /22:39842 /23:37018 /24:207333 /25:1195 /26:1434 /27:775 /28:169 /29:59 /30:14 /31:0 /32:18 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 7029 3047 3391 Windstream Communications Inc 6389 2112 3442 bellsouth.net, inc. 18566 2042 2093 Covad Communications 8402 1698 1719 Corbina telecom 10620 1645 1751 TVCABLE BOGOTA 30036 1351 1392 Mediacom Communications Corp 11492 1118 1155 Cable One 1785 1065 1868 PaeTec Communications, Inc. 15557 1045 1095 LDCOM NETWORKS 8452 1041 1235 TEDATA Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:505 2:689 4:14 5:1 6:3 8:385 12:1958 13:1 14:596 15:11 16:3 17:7 20:9 23:133 24:1724 27:1197 31:901 32:65 33:2 34:2 36:9 37:177 38:776 40:115 41:3174 42:93 43:1 44:3 46:1281 47:3 49:322 50:512 52:13 54:2 55:9 56:3 57:38 58:962 59:491 60:344 61:1195 62:949 63:2008 64:4130 65:2285 66:4426 67:2039 68:1174 69:3159 70:927 71:412 72:1795 74:2654 75:463 76:322 77:976 78:936 79:502 80:1228 81:881 82:569 83:529 84:582 85:1154 86:742 87:919 88:334 89:1547 90:271 91:4479 92:538 93:1328 94:1357 95:1084 96:418 97:310 98:814 99:38 100:4 101:141 103:776 106:65 107:152 108:150 109:1486 110:694 111:848 112:432 113:530 114:597 115:763 116:868 117:727 118:899 119:1254 120:361 121:683 122:1621 123:1071 124:1337 125:1369 128:542 129:189 130:212 131:589 132:164 133:21 134:231 135:60 136:216 137:153 138:286 139:145 140:488 141:262 142:385 143:411 144:520 145:70 146:484 147:242 148:728 149:274 150:165 151:196 152:447 153:170 154:7 155:403 156:211 157:368 158:156 159:515 160:322 161:244 162:341 163:187 164:529 165:391 166:556 167:457 168:762 169:147 170:832 171:111 172:2 173:1733 174:603 175:416 176:515 177:481 178:1247 180:1180 181:65 182:715 183:278 184:425 185:1 186:2050 187:842 188:1031 189:1169 190:5474 192:5970 193:5525 194:4327 195:3393 196:1299 197:181 198:3619 199:4378 200:5718 201:1736 202:8496 203:8625 204:4346 205:2440 206:2736 207:2804 208:4069 209:3566 210:2747 211:1477 212:2042 213:1847 214:864 215:96 216:5000 217:1477 218:548 219:340 220:1252 221:558 222:325 223:280 End of report

1 0

UDP port 80 DDoS attack
by Ray Gasnick III 10 Feb '12

10 Feb '12

We just saw a huge flux of traffic occur this morning that spiked one of our upstream ISPs gear and killed the layer 2 link on another becuase of a DDoS attack on UDP port 80. Wireshark shows this appears to be from a compromised game server (call of duty) with source IPs in a variety of different prefixes. Only solution thus far was to dump the victim IP address in our block into the BGP Black hole community with one of our 2 providers and completely stop advertising to the other. Anybody see this recently and have any tips on mitigation, reply on or off list. Thank You, Ray Gasnick III CISSP, Technology Specialist: Network Security & Infrastructure Miles Technologies www.milestechnologies.com<http://www.milestechnologies.com/> Phone: (856) 439-0999 x127 Direct: (856) 793-3821 How am I doing? Email my manager at itmanager(a)milestechnologies.com<mailto:itmanager@milestechnologies.com> Computer Networking – IT Support – Business Software – Website Design – Online Marketing & PR

16 46