July 2013 - Test - lists.nanog.org

[security-officer@isc.org: Notice: BIND Security Jul2013 CVE2013-4854]
by staticsafe 27 Jul '13

27 Jul '13

----- Forwarded message from ISC Security Officer <security-officer(a)isc.org> ----- Date: Fri, 26 Jul 2013 13:46:50 -0700 From: ISC Security Officer <security-officer(a)isc.org> To: bind-announce(a)lists.isc.org, bind-workers(a)lists.isc.org, bind-users(a)lists.isc.org Subject: Notice: BIND Security Jul2013 CVE2013-4854 IMPORTANT: The security issue described below has been confirmed by ISC to be 'in the wild' as of 18:00UTC July 26, and exploitation of this vulnerability against production servers has been reported by multiple organizations. Please be advised that immediate action is recommended. A specially crafted query can cause BIND to terminate CVE: CVE-2013-4854 Document Version: 2.0 Posting date: 26 July 2013 Program Impacted: BIND Versions affected: Open source: 9.7.0->9.7.7, 9.8.0->9.8.5-P1, 9.9.0->9.9.3-P1, 9.8.6b1 and 9.9.4b1; Subscription: 9.9.3-S1 and 9.9.4-S1b1 Severity: Critical Exploitable: Remotely Description: A specially crafted query that includes malformed rdata can cause named to terminate with an assertion failure while rejecting the malformed query. BIND 9.6 and BIND 9.6-ESV are unaffected by this problem. Earlier branches of BIND 9 are believed to be unaffected but have not been tested. BIND 10 is also unaffected by this issue. Please Note: All versions of BIND 9.7 are known to be affected, but these branches are beyond their "end of life" (EOL) and no longer receive testing or security fixes from ISC. For current information on which versions are actively supported, please see http://www.isc.org/downloads/software-support-policy/bind-software-status/. Impact: Authoritative and recursive servers are equally vulnerable. Intentional exploitation of this condition can cause a denial of service in all nameservers running affected versions of BIND 9. Access Control Lists do not provide any protection from malicious clients. In addition to the named server, applications built using libraries from the affected source distributions may crash with assertion failures triggered in the same fashion. CVSS Score: 7.8 CVSS Equation: (AV:N/AC:L/Au:N/C:N/I:N/A:C) For more information on the Common Vulnerability Scoring System and to obtain your specific environmental score please visit: http://nvd.nist.gov/cvss.cfm?calculator&adv&version=2&vector=(AV:N/AC:L/Au:… Workarounds: No known workarounds at this time. Active exploits: Crashes have been reported by multiple ISC customers. First observed in the wild on 26 July 2013, 18:00 UTC. Solution: Upgrade to the patched release most closely related to your current version of BIND. Open source versions can all be downloaded from http://www.isc.org/downloads. Subscription version customers will be contacted directly by ISC Support regarding delivery. BIND 9 version 9.8.5-P2 BIND 9 version 9.9.3-P2 BIND 9 version 9.9.3-S1-P1 (Subscription version available via DNSco) Acknowledgements: ISC would like to thank Maxim Shudrak and the HP Zero Day Initiative for reporting this issue. Document Revision History: 1.0 Phase One Advance Notification, 18 July 2013 1.1 Phases Two and Three Advance Notification, 26 July 2013 2.0 Notification to public (Phase Four), 26 July 2013 Related Documents: Spanish Translation: planned Japanese Translation: https://kb.isc.org/article/AA-01023 Portuguese Translation: https://kb.isc.org/article/AA-01021 See our BIND Security Matrix for a complete listing of Security Vulnerabilities and versions affected. This Knowledge Base article https://kb.isc.org/article/AA-01016 provides additional information and Frequently Asked Questions about this advisory. If you'd like more information on our product support or about our Subscription versions of BIND, please visit http://www.dns-co.com/solutions Do you still have questions? Questions regarding this advisory should go to security-officer(a)isc.org. To report a new issue, please encrypt your message using security-officer(a)isc.org's PGP key which can be found here: https://www.isc.org/downloads/software-support-policy/openpgp-key If you are unable to use encrypted email, you may also report new issues at: https://www.isc.org/mission/contact/. Note: ISC patches only currently supported versions. When possible we indicate EOL versions affected. ISC Security Vulnerability Disclosure Policy: Details of our current security advisory policy and practice can be found here: ISC Software Defect and Security Vulnerability Disclosure Policy This Knowledge Base article https://kb.isc.org/article/AA-01015 is the complete and official security advisory document. Legal Disclaimer: Internet Systems Consortium (ISC) is providing this notice on an "AS IS" basis. No warranty or guarantee of any kind is expressed in this notice and none should be implied. ISC expressly excludes and disclaims any warranties regarding this notice or materials referred to in this notice, including, without limitation, any implied warranty of merchantability, fitness for a particular purpose, absence of hidden defects, or of non-infringement. Your use or reliance on this notice or materials referred to in this notice is at your own risk. ISC may change this notice at any time. A stand-alone copy or paraphrase of the text of this document that omits the document URL is an uncontrolled copy. Uncontrolled copies may lack important information, be out of date, or contain factual errors. (c) 2001-2013 Internet Systems Consortium _______________________________________________ bind-announce mailing list bind-announce(a)lists.isc.org https://lists.isc.org/mailman/listinfo/bind-announce ----- End forwarded message ----- -- staticsafe O< ascii ribbon campaign - stop html mail - www.asciiribbon.org Please don't top post. Please don't CC! I'm subscribed to whatever list I just posted on.

1 0

RE: ARIN WHOIS for leads
by Scott Weeks 26 Jul '13

26 Jul '13

--- wbailey(a)satelliteintelligencegroup.com wrote: From: Warren Bailey <wbailey(a)satelliteintelligencegroup.com> It's called retargeting and they are using cookies to do it. ---------------------------------------------------------- So, properly manage your cookies and this will stop: Flash cookies: https://en.wikipedia.org/wiki/Local_Shared_Object firefox: http://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-pref… scott

2 1

BGP Update Report
by cidr-report＠potaroo.net 26 Jul '13

26 Jul '13

BGP Update Report Interval: 18-Jul-13 -to- 25-Jul-13 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS18403 52054 1.7% 86.9 -- FPT-AS-AP The Corporation for Financing & Promoting Technology 2 - AS9829 41878 1.4% 27.2 -- BSNL-NIB National Internet Backbone 3 - AS10620 38236 1.2% 14.1 -- Telmex Colombia S.A. 4 - AS8402 34166 1.1% 18.8 -- CORBINA-AS OJSC "Vimpelcom" 5 - AS27738 31782 1.0% 55.2 -- Ecuadortelecom S.A. 6 - AS28573 30482 1.0% 10.1 -- NET Serviços de Comunicação S.A. 7 - AS15003 24421 0.8% 28.6 -- NOBIS-TECH - Nobis Technology Group, LLC 8 - AS10428 22779 0.7% 3254.1 -- CWV-NETWORKS - The College of West Virginia 9 - AS50710 21019 0.7% 87.9 -- EARTHLINK-AS EarthLink Ltd. Communications&Internet Services 10 - AS17974 19021 0.6% 7.2 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia 11 - AS33770 18402 0.6% 242.1 -- KDN 12 - AS9416 17973 0.6% 345.6 -- MULTIMEDIA-AS-AP Hoshin Multimedia Center Inc. 13 - AS4775 17165 0.6% 201.9 -- GLOBE-TELECOM-AS Globe Telecoms 14 - AS14287 15121 0.5% 240.0 -- TRIAD-TELECOM - Triad Telecom, Inc. 15 - AS8151 14566 0.5% 11.3 -- Uninet S.A. de C.V. 16 - AS52280 13218 0.4% 2203.0 -- INTERNEXA Chile S.A. 17 - AS36998 13085 0.4% 7.2 -- SDN-MOBITEL 18 - AS3356 12927 0.4% 11.7 -- LEVEL3 Level 3 Communications 19 - AS7552 12202 0.4% 10.2 -- VIETEL-AS-AP Vietel Corporation 20 - AS13188 11816 0.4% 14.1 -- BANKINFORM-AS TOV "Bank-Inform" TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS6174 7163 0.2% 3581.5 -- SPRINTLINK8 - Sprint 2 - AS10428 22779 0.7% 3254.1 -- CWV-NETWORKS - The College of West Virginia 3 - AS3 2567 0.1% 1508.0 -- CMED-AS Cmed Technology Ltd 4 - AS36976 2288 0.1% 2288.0 -- SONANGOL 5 - AS52280 13218 0.4% 2203.0 -- INTERNEXA Chile S.A. 6 - AS31421 1528 0.1% 1528.0 -- YUG-SVYAZ-SERVICE-AS Yug Sviaz Service Ltd 7 - AS9854 2960 0.1% 1480.0 -- KTO-AS-KR KTO 8 - AS34969 10400 0.3% 1300.0 -- PASJONET-AS Pasjo.Net Sp, z o.o. 9 - AS37367 1273 0.0% 1273.0 -- CALLKEY 10 - AS57483 868 0.0% 868.0 -- JBM-AS "J.B.M. Distribution" LLC 11 - AS53197 784 0.0% 784.0 -- Meta Telecomunicações Ltda 12 - AS48612 10172 0.3% 726.6 -- RTC-ORENBURG-AS CJSC "Comstar-Regions" 13 - AS50099 657 0.0% 657.0 -- VKB-AS Volkskreditbank AG 14 - AS4 1299 0.0% 269.0 -- BEMAR TECNOLOGIA LTDA - ME 15 - AS37584 1142 0.0% 571.0 -- FastNetAS 16 - AS49076 508 0.0% 508.0 -- COMPASS-EOS COMPASS ELECTRO-OPTICAL SYSTEMS LTD 17 - AS3976 502 0.0% 502.0 -- ERX-NURI-ASN I.Net Technologies Inc. 18 - AS42953 492 0.0% 492.0 -- MOSCOWCAPITALBANK-AS Bank Moscowskiy Kapital Ltd. 19 - AS37577 893 0.0% 446.5 -- Airtel-BF 20 - AS2 435 0.0% 292.0 -- ABBVIEINC-AS-AP AbbVie, Inc. TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 190.211.175.0/24 13607 0.4% AS28032 -- INTERNEXA S.A. AS52280 -- INTERNEXA Chile S.A. 2 - 92.246.207.0/24 9996 0.3% AS48612 -- RTC-ORENBURG-AS CJSC "Comstar-Regions" 3 - 203.118.232.0/21 9025 0.2% AS9416 -- MULTIMEDIA-AS-AP Hoshin Multimedia Center Inc. 4 - 203.118.224.0/21 8784 0.2% AS9416 -- MULTIMEDIA-AS-AP Hoshin Multimedia Center Inc. 5 - 192.58.232.0/24 8579 0.2% AS6629 -- NOAA-AS - NOAA 6 - 222.127.0.0/24 8267 0.2% AS4775 -- GLOBE-TELECOM-AS Globe Telecoms 7 - 120.28.62.0/24 8264 0.2% AS4775 -- GLOBE-TELECOM-AS Globe Telecoms 8 - 12.43.218.0/24 7567 0.2% AS10428 -- CWV-NETWORKS - The College of West Virginia 9 - 199.248.240.0/24 7565 0.2% AS10428 -- CWV-NETWORKS - The College of West Virginia 10 - 205.166.165.0/24 7565 0.2% AS10428 -- CWV-NETWORKS - The College of West Virginia 11 - 65.90.49.0/24 7243 0.2% AS3356 -- LEVEL3 Level 3 Communications 12 - 62.84.76.0/24 6364 0.2% AS42334 -- BBP-AS Broadband Plus s.a.l. 13 - 115.170.128.0/17 5045 0.1% AS4847 -- CNIX-AP China Networks Inter-Exchange 14 - 69.38.178.0/24 4653 0.1% AS19406 -- TWRS-MA - Towerstream I, Inc. 15 - 64.187.64.0/23 4159 0.1% AS16608 -- KENTEC - Kentec Communications, Inc. 16 - 208.16.110.0/24 3582 0.1% AS6174 -- SPRINTLINK8 - Sprint 17 - 206.105.75.0/24 3581 0.1% AS6174 -- SPRINTLINK8 - Sprint 18 - 64.187.64.0/24 3200 0.1% AS16608 -- KENTEC - Kentec Communications, Inc. 19 - 208.73.244.0/22 2967 0.1% AS14287 -- TRIAD-TELECOM - Triad Telecom, Inc. 20 - 208.88.232.0/21 2965 0.1% AS14287 -- TRIAD-TELECOM - Triad Telecom, Inc. Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 26 Jul '13

26 Jul '13

This report has been generated at Fri Jul 26 21:13:25 2013 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 19-07-13 470686 267677 20-07-13 470966 267992 21-07-13 470849 265755 22-07-13 471142 266003 23-07-13 470970 266883 24-07-13 471645 267187 25-07-13 471515 266939 26-07-13 471541 267118 AS Summary 44738 Number of ASes in routing system 18459 Number of ASes announcing only one prefix 4234 Largest number of prefixes announced by an AS AS7029 : WINDSTREAM - Windstream Communications Inc 117330144 Largest address span announced by an AS (/32s) AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 26Jul13 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 471601 267231 204370 43.3% All ASes AS6389 2982 69 2913 97.7% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS28573 2956 489 2467 83.5% NET Serviços de Comunicação S.A. AS17974 2618 187 2431 92.9% TELKOMNET-AS2-AP PT Telekomunikasi Indonesia AS7029 4234 2100 2134 50.4% WINDSTREAM - Windstream Communications Inc AS4766 2908 932 1976 68.0% KIXS-AS-KR Korea Telecom AS22773 2001 228 1773 88.6% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. AS18566 2067 468 1599 77.4% COVAD - Covad Communications Co. AS10620 2639 1055 1584 60.0% Telmex Colombia S.A. AS4323 2984 1534 1450 48.6% TWTC - tw telecom holdings, inc. AS36998 1815 386 1429 78.7% SDN-MOBITEL AS7545 2040 757 1283 62.9% TPG-INTERNET-AP TPG Telecom Limited AS7303 1730 453 1277 73.8% Telecom Argentina S.A. AS18881 1247 43 1204 96.6% Global Village Telecom AS2118 1235 51 1184 95.9% RELCOM-AS OOO "NPO Relcom" AS4755 1763 584 1179 66.9% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS7552 1141 159 982 86.1% VIETEL-AS-AP Vietel Corporation AS22561 1207 225 982 81.4% DIGITAL-TELEPORT - Digital Teleport Inc. AS1785 2007 1160 847 42.2% AS-PAETEC-NET - PaeTec Communications, Inc. AS18101 1003 182 821 81.9% RELIANCE-COMMUNICATIONS-IN Reliance Communications Ltd.DAKC MUMBAI AS33363 1915 1125 790 41.3% BHN-TAMPA - BRIGHT HOUSE NETWORKS, LLC AS4808 1173 396 777 66.2% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS701 1527 807 720 47.2% UUNET - MCI Communications Services, Inc. d/b/a Verizon Business AS13977 841 139 702 83.5% CTELCO - FAIRPOINT COMMUNICATIONS, INC. AS8151 1276 575 701 54.9% Uninet S.A. de C.V. AS855 733 55 678 92.5% CANET-ASN-4 - Bell Aliant Regional Communications, Inc. AS6983 1147 480 667 58.2% ITCDELTA - ITC^Deltacom AS24560 1086 436 650 59.9% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services AS17676 747 121 626 83.8% GIGAINFRA Softbank BB Corp. AS31148 976 352 624 63.9% FREENET-AS Freenet Ltd. AS3356 1098 512 586 53.4% LEVEL3 Level 3 Communications Total 53096 16060 37036 69.8% Top 30 total Possible Bogus Routes 10.86.64.32/30 AS65530 -Private Use AS- 10.86.64.36/30 AS65530 -Private Use AS- 10.86.65.32/30 AS65530 -Private Use AS- 10.86.65.36/30 AS65530 -Private Use AS- 10.255.255.0/30 AS65530 -Private Use AS- 10.255.255.4/30 AS65530 -Private Use AS- 10.255.255.8/30 AS65530 -Private Use AS- 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV 64.185.224.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.225.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.226.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.227.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.228.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.229.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.230.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.231.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.232.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.233.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.234.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.235.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.236.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.237.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.238.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.239.0/24 AS27431 JTLNET - JTL Networks Inc. 65.75.216.0/23 AS10494 AAI - Accurate Automation, Inc. 65.75.217.0/24 AS10494 AAI - Accurate Automation, Inc. 65.111.1.0/24 AS32258 SDNGLOBAL - SDN Global 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.185.0.0/20 AS36219 66.205.224.0/19 AS16526 BIRCH-TELECOM - Birch Telecom, Inc. 66.251.128.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.133.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.134.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.136.0/21 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.140.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.141.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.142.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 69.46.224.0/20 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.233.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.236.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 71.19.134.0/23 AS3313 INET-AS BT Italia S.p.A. 72.19.0.0/19 AS16526 BIRCH-TELECOM - Birch Telecom, Inc. 72.35.224.0/22 AS30097 NUWAVE - NuWave 72.35.229.0/24 AS30188 TELEVERGENCE - Televergence Solutions Inc. 72.35.232.0/21 AS30097 NUWAVE - NuWave 72.44.16.0/20 AS15054 NORTHEAST-TEXAS-BROADBAND-LLC - Northeast Texas Broadband, LLC 74.115.124.0/23 AS46540 NARSASN - National Asset Recovery Services, Inc 80.68.144.0/20 AS33982 82.103.0.0/18 AS30901 91.197.36.0/22 AS43359 91.205.188.0/22 AS47983 91.207.200.0/23 AS48523 91.209.93.0/24 AS48523 91.209.163.0/24 AS48445 91.212.54.0/24 AS21409 IKOULA Ikoula Net SAS 93.190.10.0/24 AS47254 96.45.48.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.49.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.50.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.51.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.52.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.53.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.54.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.55.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.56.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.57.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.58.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.59.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.60.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.61.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.62.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.63.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 100.100.0.0/24 AS4847 CNIX-AP China Networks Inter-Exchange 102.2.88.0/22 AS38456 PACTEL-AS-AP Pacific Teleports. 103.224.163.0/24 AS13251 ASIAN-AS-AP Asian Broadcasting Network (M) Sdn Bhd 103.224.188.0/23 AS13251 ASIAN-AS-AP Asian Broadcasting Network (M) Sdn Bhd 116.206.72.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.85.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.103.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 117.120.56.0/21 AS4755 TATACOMM-AS TATA Communications formerly VSNL is Leading ISP 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 142.54.0.0/19 AS23498 CDSI - Cogeco Data Services LP 172.102.0.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 172.111.111.0/24 AS8039 CCC-ASN-1 - Cinergy Communications 172.116.0.0/24 AS7018 ATT-INTERNET4 - AT&T Services, Inc. 173.45.192.0/19 AS6461 MFNX MFN - Metromedia Fiber Network 174.138.144.0/20 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 190.3.160.0/21 AS27975 SYNAPSIS COLOMBIA LTDA 190.15.72.0/21 AS15146 CABLEBAHAMAS - Cable Bahamas 190.124.252.0/22 AS7303 Telecom Argentina S.A. 193.111.125.0/24 AS44581 SE-ALLTELE AllTele Allmanna Svenska Telefonaktiebolaget 193.111.155.0/24 AS44581 SE-ALLTELE AllTele Allmanna Svenska Telefonaktiebolaget 193.164.152.0/24 AS3356 LEVEL3 Level 3 Communications 194.79.48.0/22 AS39117 194.169.237.0/24 AS12968 CDP Netia SA 195.238.120.0/22 AS33837 PRQ-AS PeRiQuito AB 200.1.112.0/24 AS29754 GO2TEL GO2TEL.COM INC. 200.24.76.0/24 AS7195 Telecorp Colombia S.A. 200.58.248.0/21 AS27849 201.71.16.0/20 AS28638 EMTEC EMPRESA DE TECNOLOGIA EMPREENDIMENTOS DE COM 201.77.96.0/20 AS28639 Daniela Ropke da Rosa 202.8.106.0/24 AS9530 SHINSEGAE-AS SHINSEGAE I&C Co., Ltd. 202.58.113.0/24 AS19161 202.83.120.0/21 AS37972 202.83.124.0/24 AS37972 202.83.125.0/24 AS37972 202.83.126.0/24 AS37972 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.174.125.0/24 AS9498 BBIL-AP BHARTI Airtel Ltd. 202.179.134.0/24 AS23966 LDN-AS-PK LINKdotNET Telecom Limited 203.23.1.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.24.38.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.30.127.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/23 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.87.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.142.219.0/24 AS45149 203.191.48.0/20 AS24175 VINAREN-AS-AP VietNam Research and Education Network 203.191.56.0/21 AS38042 INCOMNET-MONGOLIA-AS-AP Incomnet LLC, Mongolia, VSAT and Wireless service 204.9.116.0/22 AS30097 NUWAVE - NuWave 204.10.88.0/21 AS3356 LEVEL3 Level 3 Communications 204.10.92.0/23 AS30097 NUWAVE - NuWave 204.10.94.0/23 AS30097 NUWAVE - NuWave 204.10.112.0/21 AS27027 ANBELL ASN-ANBELL 204.11.112.0/22 AS14745 INTERNAP-BLOCK-4 - Internap Network Services Corporation 204.15.208.0/22 AS13706 COMPLETEWEBNET - CompleteWeb.Net LLC 204.187.11.0/24 AS51113 ELEKTA-AS Elekta 205.211.160.0/24 AS30045 UHN-ASN - University Health Network 206.81.112.0/20 AS32618 ADKNO-KC - Adknowledge, Inc. 206.123.17.0/24 AS27363 SWISSRE-US-AS Swiss Re America Holding Corporation 206.197.184.0/24 AS23304 DATOTEL-STL-AS - Datotel LLC, a NetLabs LLC Company 206.221.176.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.177.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.178.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.179.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.180.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.181.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.182.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.183.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.184.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.185.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.186.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.187.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.188.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.189.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.190.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.191.0/24 AS27431 JTLNET - JTL Networks Inc. 207.174.131.0/24 AS26116 INDRA - Indra's Net Inc 207.174.132.0/23 AS26116 INDRA - Indra's Net Inc 207.174.152.0/23 AS26116 INDRA - Indra's Net Inc 207.174.154.0/24 AS26116 INDRA - Indra's Net Inc 207.174.155.0/24 AS26116 INDRA - Indra's Net Inc 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc. 207.174.248.0/21 AS6653 PRIVATEI - privateI, LLC 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 207.254.128.0/21 AS30689 FLOW-NET - FLOW 207.254.128.0/24 AS30689 FLOW-NET - FLOW 207.254.136.0/21 AS30689 FLOW-NET - FLOW 208.76.20.0/24 AS31812 208.76.21.0/24 AS31812 208.77.164.0/24 AS22659 208.77.165.0/24 AS22659 208.77.166.0/24 AS22659 208.77.167.0/24 AS22659 208.83.53.0/24 AS40569 YGOMI-AS - Ygomi LLC 208.85.116.0/23 AS25956 ALPHEUS - Alpheus Data Services, L.L.C. 208.85.212.0/22 AS32618 ADKNO-KC - Adknowledge, Inc. 208.89.32.0/24 AS27431 JTLNET - JTL Networks Inc. 208.89.33.0/24 AS27431 JTLNET - JTL Networks Inc. 208.89.34.0/24 AS27431 JTLNET - JTL Networks Inc. 208.89.35.0/24 AS27431 JTLNET - JTL Networks Inc. 208.90.64.0/22 AS16415 PRCNET-DOM - Precision Response Corporation 208.91.72.0/24 AS21681 ANDOVER-TRADING - ANDOVER TRADING 208.91.73.0/24 AS17361 BRASS - Sungard Trading System (ASC) 208.91.76.0/23 AS21681 ANDOVER-TRADING - ANDOVER TRADING 209.160.81.0/24 AS36184 209.160.83.0/24 AS36184 209.160.84.0/24 AS36184 209.160.86.0/24 AS36184 209.177.64.0/20 AS6461 MFNX MFN - Metromedia Fiber Network 209.209.51.0/24 AS18687 MPOWER-2 - MPOWER COMMUNICATIONS CORP. 209.209.64.0/20 AS46851 IPARADIGMS - iParadigms, LLC 209.209.67.0/24 AS46851 IPARADIGMS - iParadigms, LLC 209.212.63.0/24 AS16467 ASN-NEXTWEB-R1 - Nextweb, Inc 209.213.0.0/20 AS33005 ELTOPIA - Eltopia.com, LLC 209.234.112.0/23 AS32252 209.234.114.0/23 AS32252 209.234.116.0/24 AS32252 209.234.117.0/24 AS32252 209.234.118.0/24 AS32252 209.234.119.0/24 AS32252 209.234.120.0/24 AS32252 209.234.121.0/24 AS32252 209.234.122.0/24 AS32252 213.150.204.0/24 AS29338 AFOL-AS Used by Africaonline Operations 216.12.163.0/24 AS26627 AS-PILOSOFT - Pilosoft, Inc. 216.127.192.0/24 AS22166 216.127.193.0/24 AS22166 216.127.194.0/24 AS22166 216.127.195.0/24 AS22166 216.127.196.0/24 AS22166 216.127.196.64/26 AS22166 216.127.197.0/24 AS22166 216.127.198.0/24 AS22166 216.127.199.0/24 AS22166 216.127.200.0/24 AS22166 216.127.201.0/24 AS22166 216.127.202.0/24 AS22166 216.127.203.0/24 AS22166 216.127.204.0/24 AS22166 216.127.205.0/24 AS22166 216.127.206.0/24 AS22166 216.127.207.0/24 AS22166 216.127.208.0/24 AS22166 216.127.209.0/24 AS22166 216.127.210.0/24 AS22166 216.127.211.0/24 AS22166 216.127.212.0/24 AS22166 216.127.213.0/24 AS22166 216.127.214.0/24 AS22166 216.127.215.0/24 AS22166 216.127.216.0/24 AS22166 216.127.217.0/24 AS22166 216.127.218.0/24 AS22166 216.127.219.0/24 AS22166 216.127.220.0/24 AS22166 216.127.221.0/24 AS22166 216.127.222.0/24 AS22166 216.146.0.0/19 AS11915 TELWEST-NETWORK-SVCS-STATIC - TEL WEST COMMUNICATIONS LLC 216.151.192.0/21 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 216.151.200.0/21 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 216.152.24.0/22 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 216.170.96.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 216.170.101.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 216.170.104.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 216.170.105.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 216.234.128.0/22 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC. 216.234.132.0/24 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC. 216.234.139.0/24 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC. Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 26 Jul '13

26 Jul '13

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 27 Jul, 2013 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 460435 Prefixes after maximum aggregation: 186881 Deaggregation factor: 2.46 Unique aggregates announced to Internet: 228600 Total ASes present in the Internet Routing Table: 44598 Prefixes per ASN: 10.32 Origin-only ASes present in the Internet Routing Table: 34884 Origin ASes announcing only one prefix: 16214 Transit ASes present in the Internet Routing Table: 5907 Transit-only ASes present in the Internet Routing Table: 148 Average AS path length visible in the Internet Routing Table: 4.6 Max AS path length visible: 29 Max AS path prepend of ASN ( 36992) 22 Prefixes from unregistered ASNs in the Routing Table: 3375 Unregistered ASNs in the Routing Table: 1298 Number of 32-bit ASNs allocated by the RIRs: 4901 Number of 32-bit ASNs visible in the Routing Table: 3807 Prefixes from 32-bit ASNs in the Routing Table: 11468 Special use prefixes present in the Routing Table: 29 Prefixes being announced from unallocated address space: 259 Number of addresses announced to Internet: 2631203148 Equivalent to 156 /8s, 212 /16s and 249 /24s Percentage of available address space announced: 71.1 Percentage of allocated address space announced: 71.1 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 94.8 Total number of prefixes smaller than registry allocations: 161515 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 110492 Total APNIC prefixes after maximum aggregation: 33889 APNIC Deaggregation factor: 3.26 Prefixes being announced from the APNIC address blocks: 112225 Unique aggregates announced from the APNIC address blocks: 46027 APNIC Region origin ASes present in the Internet Routing Table: 4863 APNIC Prefixes per ASN: 23.08 APNIC Region origin ASes announcing only one prefix: 1221 APNIC Region transit ASes present in the Internet Routing Table: 828 Average APNIC Region AS path length visible: 4.7 Max APNIC Region AS path length visible: 23 Number of APNIC region 32-bit ASNs visible in the Routing Table: 614 Number of APNIC addresses announced to Internet: 726272224 Equivalent to 43 /8s, 74 /16s and 8 /24s Percentage of available APNIC address space announced: 84.9 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 131072-133119 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 159674 Total ARIN prefixes after maximum aggregation: 80509 ARIN Deaggregation factor: 1.98 Prefixes being announced from the ARIN address blocks: 160279 Unique aggregates announced from the ARIN address blocks: 74140 ARIN Region origin ASes present in the Internet Routing Table: 15804 ARIN Prefixes per ASN: 10.14 ARIN Region origin ASes announcing only one prefix: 5999 ARIN Region transit ASes present in the Internet Routing Table: 1653 Average ARIN Region AS path length visible: 4.1 Max ARIN Region AS path length visible: 27 Number of ARIN region 32-bit ASNs visible in the Routing Table: 19 Number of ARIN addresses announced to Internet: 1068179008 Equivalent to 63 /8s, 171 /16s and 30 /24s Percentage of available ARIN address space announced: 56.5 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 117958 Total RIPE prefixes after maximum aggregation: 60387 RIPE Deaggregation factor: 1.95 Prefixes being announced from the RIPE address blocks: 121771 Unique aggregates announced from the RIPE address blocks: 78842 RIPE Region origin ASes present in the Internet Routing Table: 17315 RIPE Prefixes per ASN: 7.03 RIPE Region origin ASes announcing only one prefix: 8222 RIPE Region transit ASes present in the Internet Routing Table: 2833 Average RIPE Region AS path length visible: 5.1 Max RIPE Region AS path length visible: 29 Number of RIPE region 32-bit ASNs visible in the Routing Table: 2378 Number of RIPE addresses announced to Internet: 656056228 Equivalent to 39 /8s, 26 /16s and 159 /24s Percentage of available RIPE address space announced: 95.4 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 196608-199679 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 49151 Total LACNIC prefixes after maximum aggregation: 9509 LACNIC Deaggregation factor: 5.17 Prefixes being announced from the LACNIC address blocks: 53708 Unique aggregates announced from the LACNIC address blocks: 25426 LACNIC Region origin ASes present in the Internet Routing Table: 1993 LACNIC Prefixes per ASN: 26.95 LACNIC Region origin ASes announcing only one prefix: 584 LACNIC Region transit ASes present in the Internet Routing Table: 366 Average LACNIC Region AS path length visible: 4.8 Max LACNIC Region AS path length visible: 25 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 790 Number of LACNIC addresses announced to Internet: 133823624 Equivalent to 7 /8s, 249 /16s and 252 /24s Percentage of available LACNIC address space announced: 79.8 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 262144-263679 plus ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 11601 Total AfriNIC prefixes after maximum aggregation: 2546 AfriNIC Deaggregation factor: 4.56 Prefixes being announced from the AfriNIC address blocks: 12193 Unique aggregates announced from the AfriNIC address blocks: 3924 AfriNIC Region origin ASes present in the Internet Routing Table: 640 AfriNIC Prefixes per ASN: 19.05 AfriNIC Region origin ASes announcing only one prefix: 188 AfriNIC Region transit ASes present in the Internet Routing Table: 131 Average AfriNIC Region AS path length visible: 4.7 Max AfriNIC Region AS path length visible: 25 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 6 Number of AfriNIC addresses announced to Internet: 46542848 Equivalent to 2 /8s, 198 /16s and 48 /24s Percentage of available AfriNIC address space announced: 46.2 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 2908 11560 919 Korea Telecom (KIX) 17974 2618 871 92 PT TELEKOMUNIKASI INDONESIA 7545 2033 320 109 TPG Internet Pty Ltd 4755 1765 392 195 TATA Communications formerly 9829 1537 1221 45 BSNL National Internet Backbo 9583 1224 92 505 Sify Limited 4808 1173 2153 339 CNCGROUP IP network: China169 9498 1169 309 71 BHARTI Airtel Ltd. 7552 1160 1080 13 Vietel Corporation 24560 1086 394 164 Bharti Airtel Ltd., Telemedia Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 2982 3690 65 bellsouth.net, inc. 18566 2067 382 184 Covad Communications 1785 2007 678 127 PaeTec Communications, Inc. 22773 2000 2927 124 Cox Communications, Inc. 20115 1670 1623 622 Charter Communications 4323 1616 1118 405 Time Warner Telecom 701 1524 11120 801 UUNET Technologies, Inc. 30036 1339 302 659 Mediacom Communications Corp 7018 1304 11036 821 AT&T WorldNet Services 11492 1221 218 363 Cable One Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8402 1578 544 16 Corbina telecom 34984 1296 244 222 BILISIM TELEKOM 2118 1235 97 13 EUnet/RELCOM Autonomous Syste 31148 976 43 22 FreeNet ISP 20940 939 327 738 Akamai Technologies European 13188 838 98 81 Educational Network 6830 831 2372 441 UPC Distribution Services 8551 779 370 45 Bezeq International 12479 685 793 56 Uni2 Autonomous System 34744 602 159 114 SC GVM SISTEM 2003 SRL Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 28573 2957 1591 110 NET Servicos de Comunicao S.A 10620 2639 420 226 TVCABLE BOGOTA 7303 1730 1155 220 Telecom Argentina Stet-France 8151 1273 2750 385 UniNet S.A. de C.V. 18881 1247 844 20 Global Village Telecom 27947 833 94 91 Telconet S.A 6503 818 434 63 AVANTEL, S.A. 3816 719 306 85 Empresa Nacional de Telecomun 7738 698 1370 35 Telecomunicacoes da Bahia S.A 11172 621 88 65 Servicios Alestra S.A de C.V Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 36998 1815 112 5 MOBITEL 24863 881 274 30 LINKdotNET AS number 6713 542 617 25 Itissalat Al-MAGHRIB 8452 437 956 9 TEDATA 24835 345 80 8 RAYA Telecom - Egypt 3741 259 922 218 The Internet Solution 15706 221 32 6 Sudatel Internet Exchange Aut 29571 220 17 12 Ci Telecom Autonomous system 36992 206 527 22 Etisalat MISR 12258 193 28 71 Vodacom Internet Company Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 2982 3690 65 bellsouth.net, inc. 28573 2957 1591 110 NET Servicos de Comunicao S.A 4766 2908 11560 919 Korea Telecom (KIX) 10620 2639 420 226 TVCABLE BOGOTA 17974 2618 871 92 PT TELEKOMUNIKASI INDONESIA 18566 2067 382 184 Covad Communications 7545 2033 320 109 TPG Internet Pty Ltd 1785 2007 678 127 PaeTec Communications, Inc. 22773 2000 2927 124 Cox Communications, Inc. 36998 1815 112 5 MOBITEL Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 28573 2957 2847 NET Servicos de Comunicao S.A 17974 2618 2526 PT TELEKOMUNIKASI INDONESIA 10620 2639 2413 TVCABLE BOGOTA 4766 2908 1989 Korea Telecom (KIX) 7545 2033 1924 TPG Internet Pty Ltd 18566 2067 1883 Covad Communications 1785 2007 1880 PaeTec Communications, Inc. 22773 2000 1876 Cox Communications, Inc. 36998 1815 1810 MOBITEL 4755 1765 1570 TATA Communications formerly Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 30031 UNALLOCATED 12.27.122.0/24 7018 AT&T WorldNet Servic 13317 UNALLOCATED 12.44.10.0/24 7018 AT&T WorldNet Servic 23502 UNALLOCATED 12.44.44.0/24 7018 AT&T WorldNet Servic 17300 UNALLOCATED 12.45.103.0/24 209 Qwest 17300 UNALLOCATED 12.45.110.0/24 701 UUNET Technologies, 16476 UNALLOCATED 12.46.27.0/24 7018 AT&T WorldNet Servic 14764 UNALLOCATED 12.108.237.0/24 7018 AT&T WorldNet Servic 33649 UNALLOCATED 12.111.112.0/24 19029 New Edge Networks 30621 UNALLOCATED 12.151.74.0/23 7018 AT&T WorldNet Servic Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 128.0.0.0/24 2541 >>UNKNOWN<< 128.0.16.0/21 43568 RIPE Network Coordination Cen 128.0.24.0/21 41794 Altline LLC 128.0.40.0/24 60449 >>UNKNOWN<< 128.0.42.0/24 60619 >>UNKNOWN<< 128.0.43.0/24 60619 >>UNKNOWN<< 128.0.45.0/24 60657 >>UNKNOWN<< 128.0.46.0/23 39743 Mobimax Telecom SRL 128.0.53.0/24 60993 Totalsoft SA 128.0.54.0/24 60972 Carpatair SA Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 62.61.220.0/24 24974 Tachyon Europe BV - Wireless 62.61.221.0/24 24974 Tachyon Europe BV - Wireless 64.185.224.0/24 27431 JTL Networks Inc. 64.185.225.0/24 27431 JTL Networks Inc. 64.185.226.0/24 27431 JTL Networks Inc. 64.185.227.0/24 27431 JTL Networks Inc. 64.185.228.0/24 27431 JTL Networks Inc. 64.185.229.0/24 27431 JTL Networks Inc. 64.185.230.0/24 27431 JTL Networks Inc. 64.185.231.0/24 27431 JTL Networks Inc. Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:11 /10:30 /11:92 /12:251 /13:478 /14:906 /15:1602 /16:12732 /17:6643 /18:11081 /19:22505 /20:32121 /21:34670 /22:48474 /23:42550 /24:242336 /25:1298 /26:1641 /27:848 /28:44 /29:71 /30:17 /31:0 /32:18 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 2018 2067 Covad Communications 36998 1780 1815 MOBITEL 6389 1714 2982 bellsouth.net, inc. 22773 1302 2000 Cox Communications, Inc. 8402 1270 1578 Corbina telecom 30036 1205 1339 Mediacom Communications Corp 11492 1182 1221 Cable One 1785 1074 2007 PaeTec Communications, Inc. 6983 1020 1147 ITC^Deltacom 10620 984 2639 TVCABLE BOGOTA Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:827 2:711 3:3 4:19 5:843 6:17 8:572 12:1912 13:2 14:864 15:11 16:3 17:10 20:17 23:296 24:1769 27:1504 31:1305 32:45 33:2 34:5 36:60 37:1849 38:890 39:2 40:175 41:3282 42:247 44:8 46:1946 47:2 49:673 50:817 52:12 54:35 55:8 57:26 58:1161 59:581 60:331 61:1424 62:1166 63:2009 64:4357 65:2149 66:4190 67:2022 68:1096 69:3285 70:797 71:490 72:1918 74:2500 75:324 76:306 77:1117 78:1022 79:601 80:1294 81:1009 82:635 83:584 84:581 85:1206 86:468 87:1027 88:543 89:1801 90:150 91:5538 92:623 93:1745 94:1925 95:1613 96:518 97:344 98:1026 99:43 100:30 101:347 103:3036 105:522 106:140 107:208 108:520 109:1856 110:945 111:1071 112:564 113:817 114:700 115:1014 116:953 117:822 118:1142 119:1288 120:372 121:740 122:1802 123:1241 124:1374 125:1390 128:643 129:223 130:309 131:669 132:360 133:160 134:268 135:72 136:239 137:242 138:342 139:190 140:211 141:329 142:533 143:382 144:512 145:98 146:527 147:401 148:662 149:351 150:147 151:552 152:414 153:189 154:27 155:414 156:267 157:394 158:278 159:744 160:350 161:452 162:498 163:225 164:583 165:507 166:252 167:596 168:1027 169:127 170:1065 171:184 172:23 173:1595 174:557 175:497 176:1129 177:2174 178:1864 179:74 180:1485 181:564 182:1273 183:419 184:668 185:696 186:2290 187:1375 188:1894 189:1286 190:6755 192:6832 193:5711 194:4713 195:3588 196:1344 197:942 198:4554 199:5364 200:6015 201:2241 202:8832 203:8886 204:4511 205:2600 206:2825 207:2874 208:4001 209:3575 210:2923 211:1523 212:2225 213:2019 214:915 215:99 216:5266 217:1610 218:615 219:313 220:1283 221:552 222:321 223:449 End of report

1 0

BGPmon.net /32 hijack alerts
by NetSecGuy 26 Jul '13

26 Jul '13

BGPMon.net has alerted me to /32 hijacks. Does anyone have thoughts on what this might be and if it's malicious or misconfiguration? Date OriginAS Prefix Type ASPath 2013.07.24 25459 72.52.11.117/32 A 286 25459 25459 25459 2013.07.24 25459 72.52.11.117/32 A 3333 1103 286 25459 25459 25459 2013.07.24 25459 74.120.64.17/32 A 286 25459 25459 25459 2013.07.24 25459 74.120.64.17/32 A 3333 1103 286 25459 25459 25459 2013.07.24 25459 77.243.235.57/32 A 286 25459 25459 25459 2013.07.24 25459 77.243.235.57/32 A 3333 1103 286 25459 25459 25459 2013.07.24 25459 79.110.92.75/32 A 286 25459 25459 25459 2013.07.24 25459 79.110.92.75/32 A 3333 1103 286 25459 25459 25459 2013.07.24 25459 79.170.88.67/32 A 286 25459 25459 25459 2013.07.24 25459 79.170.88.67/32 A 3333 1103 286 25459 25459 25459 2013.07.24 25459 83.84.194.112/32 A 286 25459 25459 25459 2013.07.24 25459 83.84.194.112/32 A 3333 1103 286 25459 25459 25459 2013.07.24 25459 89.33.242.99/32 A 286 25459 25459 25459 2013.07.24 25459 89.33.242.99/32 A 3333 1103 286 25459 25459 25459 2013.07.24 25459 91.121.183.228/32 A 286 25459 25459 25459 2013.07.24 25459 91.121.183.228/32 A 3333 1103 286 25459 25459 25459 2013.07.24 25459 91.121.82.179/32 A 286 25459 25459 25459 2013.07.24 25459 91.121.82.179/32 A 3333 1103 286 25459 25459 25459 2013.07.24 25459 94.126.8.26/32 A 286 25459 25459 25459 2013.07.24 25459 94.126.8.26/32 A 3333 1103 286 25459 25459 25459 2013.07.24 25459 94.23.207.222/32 A 286 25459 25459 25459 2013.07.24 25459 94.23.207.222/32 A 3333 1103 286 25459 25459 25459 2013.07.24 25459 94.23.40.106/32 A 286 25459 25459 25459 2013.07.24 25459 94.23.40.106/32 A 3333 1103 286 25459 25459 25459 2013.07.24 25459 94.236.46.240/32 A 286 25459 25459 25459 2013.07.24 25459 94.236.46.240/32 A 3333 1103 286 25459 25459 25459 2013.07.24 25459 95.211.113.200/32 A 286 25459 25459 25459 2013.07.24 25459 95.211.113.200/32 A 3333 1103 286 25459 25459 25459 2013.07.24 25459 95.211.211.76/32 A 286 25459 25459 25459 2013.07.24 25459 95.211.211.76/32 A 3333 1103 286 25459 25459 25459 My first thought is leaked null routes. Is this even worth alerting on?

3 2

Re: ARIN WHOIS for leads
by Scott Weeks 26 Jul '13

26 Jul '13

--- justin.vocke(a)gmail.com wrote: From: Justin Vocke <justin.vocke(a)gmail.com> My guess is someone is using your mass whois database, looking at the most recently issued/created AS numbers, and cold calling. -------------------------------------------- I'd be interested in knowing who it is, so I can be sure to never buy from them. scott

2 1

Re: ARIN WHOIS for leads
by Scott Weeks 25 Jul '13

25 Jul '13

--- wbailey(a)satelliteintelligencegroup.com wrote: From: Warren Bailey <wbailey(a)satelliteintelligencegroup.com> ...this list has a lot of valuable eyes looking at it - so it's often a <insert snake oil o' the month> sales guy's wet dream. ... ----------------------------------------------------------------- And when they see their names on this list as spammers they freak out. Trust me. It has happened in the past where I named-n-shamed and got immediate response from the sales droid's manager apologizing and letting me know it won't happen again. And it didn't. Don't let a $10 bribe skew the ugliness of spammers. scott

1 0

RE: ARIN WHOIS for leads
by Scott Weeks 25 Jul '13

25 Jul '13

--- wbailey(a)satelliteintelligencegroup.com wrote: From: Warren Bailey <wbailey(a)satelliteintelligencegroup.com> We registered a few domains and get the same thing, I think it's something that people are going to have to live with. :/ ----------------------------------------------------------- No, we don't have to live with it. Name-n-shame and let us vote with our dollars. As I've said in the past, the ONLY thing they'll understand is negative impact to their bottom line... scott

3 3

Homegrown SIP load testing platform
by Jon Chleboun 25 Jul '13

25 Jul '13

I am interested to see if y'all have recommendations for putting together a SIP load testing platform using general purpose hardware and open-source (or inexpensive) software. We are aware of Empirix Hammer and similar solutions, and we are looking to see if there is an alternative option. Goals: - Generate somewhere on the order of 20k phone calls with real SIP and RTP. - Route the flows through our VoIP infrastructure to test performance limits. - Receive and analyze the SIP and RTP on the other end to find out at what load the signaling and/or media start to break down. Attempted already: - SIPp spread across many servers. Here the limiting factor seemed to be the CPU load from the interrupts from each packet. The CPU on the servers sending and receiving the phone calls got bogged down before the VoIP core. - We have dabbled with interrupt moderation in the NIC drivers, but this has not seemed to help very much. Looks interesting: - Has anyone had success using PF_RING with Direct NIC Access and libzero from the folks at ntop? Has anyone been able to use this with SIPp or some other SIP and RTP generator? Many thanks, Jon Chleboun

2 1