November 2018 - Test - lists.nanog.org

DWDM forums
by Ben Cannon 25 Nov '18

25 Nov '18

Apologies for the noise, but can anyone recommend some DWDM or other glass/laser/amplifier communities or forums? There has to be a ton of overlap with this group. -Ben.

1 0

Virtualization of everything
by Mehmet Akcin 23 Nov '18

23 Nov '18

hey there, I provide some free vm/hosting for my friends and family but i am trying to shutdown this (or move from physical infra to virtual) and move everything to on premise virtual servers/kubernetes infastructure and have a front/back end which allows my friends and me to give them things they need such as virtual servers, etc. for me i want to get bunch of identical (or identicalish) pizza boxes in future and grow what i have built as needed. i want to be able to make this as self service as possible. so now, if I could just pay someone to go do everything for me as turn key, that would be the ideal way as I am alone and don't really have all the clues I need in order to deliver the end result in a timely manner which makes sense. if you are providing such services , please let me know or if you know people please ping me offlist. thank you

1 0

Weekly Routing Table Report
by cscora＠apnic.net 23 Nov '18

23 Nov '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 24 Nov, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 726367 Prefixes after maximum aggregation (per Origin AS): 279703 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 348863 Total ASes present in the Internet Routing Table: 62493 Prefixes per ASN: 11.62 Origin-only ASes present in the Internet Routing Table: 53932 Origin ASes announcing only one prefix: 23432 Transit ASes present in the Internet Routing Table: 8561 Transit-only ASes present in the Internet Routing Table: 252 Average AS path length visible in the Internet Routing Table: 4.0 Max AS path length visible: 40 Max AS path prepend of ASN ( 22394) 37 Prefixes from unregistered ASNs in the Routing Table: 34 Number of instances of unregistered ASNs: 34 Number of 32-bit ASNs allocated by the RIRs: 24970 Number of 32-bit ASNs visible in the Routing Table: 20203 Prefixes from 32-bit ASNs in the Routing Table: 86579 Number of bogon 32-bit ASNs visible in the Routing Table: 17 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 246 Number of addresses announced to Internet: 2863306529 Equivalent to 170 /8s, 170 /16s and 151 /24s Percentage of available address space announced: 77.3 Percentage of allocated address space announced: 77.3 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.1 Total number of prefixes smaller than registry allocations: 242174 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 198658 Total APNIC prefixes after maximum aggregation: 56566 APNIC Deaggregation factor: 3.51 Prefixes being announced from the APNIC address blocks: 196048 Unique aggregates announced from the APNIC address blocks: 80608 APNIC Region origin ASes present in the Internet Routing Table: 9245 APNIC Prefixes per ASN: 21.21 APNIC Region origin ASes announcing only one prefix: 2600 APNIC Region transit ASes present in the Internet Routing Table: 1380 Average APNIC Region AS path length visible: 4.0 Max APNIC Region AS path length visible: 29 Number of APNIC region 32-bit ASNs visible in the Routing Table: 4240 Number of APNIC addresses announced to Internet: 768530944 Equivalent to 45 /8s, 206 /16s and 218 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-139577 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 215580 Total ARIN prefixes after maximum aggregation: 102443 ARIN Deaggregation factor: 2.10 Prefixes being announced from the ARIN address blocks: 214924 Unique aggregates announced from the ARIN address blocks: 102491 ARIN Region origin ASes present in the Internet Routing Table: 18302 ARIN Prefixes per ASN: 11.74 ARIN Region origin ASes announcing only one prefix: 6792 ARIN Region transit ASes present in the Internet Routing Table: 1831 Average ARIN Region AS path length visible: 3.6 Max ARIN Region AS path length visible: 40 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2508 Number of ARIN addresses announced to Internet: 1103264672 Equivalent to 65 /8s, 194 /16s and 123 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 198248 Total RIPE prefixes after maximum aggregation: 94720 RIPE Deaggregation factor: 2.09 Prefixes being announced from the RIPE address blocks: 194692 Unique aggregates announced from the RIPE address blocks: 115221 RIPE Region origin ASes present in the Internet Routing Table: 25652 RIPE Prefixes per ASN: 7.59 RIPE Region origin ASes announcing only one prefix: 11488 RIPE Region transit ASes present in the Internet Routing Table: 3538 Average RIPE Region AS path length visible: 4.1 Max RIPE Region AS path length visible: 36 Number of RIPE region 32-bit ASNs visible in the Routing Table: 7616 Number of RIPE addresses announced to Internet: 715984000 Equivalent to 42 /8s, 173 /16s and 12 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 94259 Total LACNIC prefixes after maximum aggregation: 21774 LACNIC Deaggregation factor: 4.33 Prefixes being announced from the LACNIC address blocks: 95642 Unique aggregates announced from the LACNIC address blocks: 41823 LACNIC Region origin ASes present in the Internet Routing Table: 7809 LACNIC Prefixes per ASN: 12.25 LACNIC Region origin ASes announcing only one prefix: 2144 LACNIC Region transit ASes present in the Internet Routing Table: 1482 Average LACNIC Region AS path length visible: 4.8 Max LACNIC Region AS path length visible: 30 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 5353 Number of LACNIC addresses announced to Internet: 172627712 Equivalent to 10 /8s, 74 /16s and 23 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 19587 Total AfriNIC prefixes after maximum aggregation: 4172 AfriNIC Deaggregation factor: 4.69 Prefixes being announced from the AfriNIC address blocks: 24815 Unique aggregates announced from the AfriNIC address blocks: 8490 AfriNIC Region origin ASes present in the Internet Routing Table: 1212 AfriNIC Prefixes per ASN: 20.47 AfriNIC Region origin ASes announcing only one prefix: 408 AfriNIC Region transit ASes present in the Internet Routing Table: 239 Average AfriNIC Region AS path length visible: 4.4 Max AfriNIC Region AS path length visible: 19 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 486 Number of AfriNIC addresses announced to Internet: 102513408 Equivalent to 6 /8s, 28 /16s and 59 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 4640 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4621 518 516 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 3004 1153 93 VIETEL-AS-AP Viettel Group, VN 45899 2958 1689 111 VNPT-AS-VN VNPT Corp, VN 4766 2826 11130 764 KIXS-AS-KR Korea Telecom, KR 9829 2747 1496 551 BSNL-NIB National Internet Backbone, IN 9808 2442 8699 26 CMNET-GD Guangdong Mobile Communication 9394 2431 4907 31 CTTNET China TieTong Telecommunications 17974 2247 968 51 TELKOMNET-AS2-AP PT Telekomunikasi Indo 4755 2121 421 171 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3495 1324 84 SHAW - Shaw Communications Inc., CA 11492 3465 224 626 CABLEONE - CABLE ONE, INC., US 22773 3280 2973 166 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 16509 2543 5241 959 AMAZON-02 - Amazon.com, Inc., US 16625 2222 1205 1659 AKAMAI-AS - Akamai Technologies, Inc., 18566 2154 405 109 MEGAPATH5-US - MegaPath Corporation, US 20115 2144 2740 538 CHARTER-20115 - Charter Communications, 5650 2087 3074 1462 FRONTIER-FRTR - Frontier Communications 30036 2070 347 137 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 209 2047 5079 593 CENTURYLINK-US-LEGACY-QWEST - CenturyLi Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 5145 1616 134 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 8551 3039 378 43 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2579 565 1917 AKAMAI-ASN1, US 12389 2185 2194 615 ROSTELECOM-AS, RU 34984 2021 336 537 TELLCOM-AS, TR 9121 1872 1691 17 TTNET, TR 13188 1605 100 42 TRIOLAN, UA 8402 1289 544 14 CORBINA-AS OJSC "Vimpelcom", RU 6849 1218 355 21 UKRTELNET, UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5440 3313 605 Uninet S.A. de C.V., MX 10620 3124 475 887 Telmex Colombia S.A., CO 11830 2675 371 71 Instituto Costarricense de Electricidad 6503 1662 449 55 Axtel, S.A.B. de C.V., MX 7303 1439 962 217 Telecom Argentina S.A., AR 28573 1190 2239 187 CLARO S.A., BR 6147 1115 377 29 Telefonica del Peru S.A.A., PE 3816 1024 513 117 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 947 145 70 Alestra, S. de R.L. de C.V., MX 13999 922 537 260 Mega Cable, S.A. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 37611 907 107 9 Afrihost, ZA 36903 796 400 142 MT-MPLS, MA 36992 783 1411 44 ETISALAT-MISR, EG 24863 735 393 22 LINKdotNET-AS, EG 24835 657 634 21 RAYA-AS, EG 8452 641 1728 15 TE-AS TE-AS, EG 37492 467 470 57 ORANGE-, TN 29571 464 70 12 ORANGE-COTE-IVOIRE, CI 37342 421 32 1 MOVITEL, MZ 15399 411 45 11 WANANCHI-, KE Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5440 3313 605 Uninet S.A. de C.V., MX 12479 5145 1616 134 UNI2-AS, ES 4538 4640 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4621 518 516 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 203 20 ALJAWWALSTC-AS, SA 6327 3495 1324 84 SHAW - Shaw Communications Inc., CA 11492 3465 224 626 CABLEONE - CABLE ONE, INC., US 22773 3280 2973 166 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 10620 3124 475 887 Telmex Colombia S.A., CO 8551 3039 378 43 BEZEQ-INTERNATIONAL-AS Bezeqint Interne Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 12479 5145 5011 UNI2-AS, ES 4538 4640 4566 ERX-CERNET-BKB China Education and Research Net 7545 4621 4105 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3495 3411 SHAW - Shaw Communications Inc., CA 22773 3280 3114 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 3039 2996 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 7552 3004 2911 VIETEL-AS-AP Viettel Group, VN 45899 2958 2847 VNPT-AS-VN VNPT Corp, VN 11492 3465 2839 CABLEONE - CABLE ONE, INC., US Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 64121 UNALLOCATED 98.159.9.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64121 UNALLOCATED 98.159.12.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64140 UNALLOCATED 98.159.14.0/24 64121 UNKNOWN 65001 PRIVATE 109.161.56.0/24 13118 ASN-YARTELECOM PJSC Rostelecom 92937 UNALLOCATED 110.49.72.0/24 45458 SBN-AWN-AS-02-AP SBN-ISP/AWN-I 4230060012 PRIVATE 132.190.106.0/24 64673 -Private Use AS-, ZZ 4230060012 PRIVATE 132.190.232.0/24 64673 -Private Use AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 198.18.1.19/32 7497 CSTNET-AS-AP Computer Network Information Cente Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ 41.78.92.0/22 14988 BTC-GATE1, BW 41.78.180.0/23 37265 -Reserved AS-, ZZ 43.255.80.0/24 36351 SOFTLAYER - SoftLayer Technologies Inc., US 43.255.82.0/24 36351 SOFTLAYER - SoftLayer Technologies Inc., US 43.255.83.0/24 36351 SOFTLAYER - SoftLayer Technologies Inc., US 45.121.32.0/22 134356 UNKNOWN 45.124.164.0/22 38803 GTELECOM-AUSTRALIA Gtelecom-AUSTRALIA, AU Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:14 /9:11 /10:36 /11:99 /12:290 /13:566 /14:1117 /15:1897 /16:13314 /17:7884 /18:13881 /19:25487 /20:39516 /21:46126 /22:90120 /23:74168 /24:409596 /25:824 /26:638 /27:645 /28:39 /29:20 /30:21 /31:4 /32:54 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 3961 5145 UNI2-AS, ES 6327 3267 3495 SHAW - Shaw Communications Inc., CA 39891 2946 3778 ALJAWWALSTC-AS, SA 11492 2754 3465 CABLEONE - CABLE ONE, INC., US 22773 2532 3280 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 2495 3039 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 18566 2048 2154 MEGAPATH5-US - MegaPath Corporation, US 11830 2020 2675 Instituto Costarricense de Electricidad y Telec 30036 1819 2070 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 5650 1761 2087 FRONTIER-FRTR - Frontier Communications of Amer Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1628 2:890 4:18 5:2720 6:43 7:1 8:1149 12:1873 13:259 14:1872 15:35 16:3 17:195 18:58 20:48 23:2564 24:2405 25:2 27:2534 31:2003 32:86 35:31 36:531 37:2939 38:1576 39:275 40:120 41:3137 42:730 43:1977 44:134 45:6125 46:3044 47:239 49:1320 50:1068 51:318 52:1109 54:362 55:1 56:6 57:41 58:1693 59:1071 60:463 61:2108 62:1877 63:1800 64:5064 65:2173 66:4778 67:2651 68:1157 69:3349 70:1152 71:600 72:2244 74:2716 75:408 76:495 77:1690 78:1749 79:2214 80:1581 81:1409 82:1057 83:819 84:1074 85:2108 86:548 87:1467 88:947 89:2400 90:210 91:6473 92:1273 93:2397 94:2395 95:3089 96:910 97:348 98:941 99:167 100:87 101:1160 102:288 103:19265 104:3608 105:242 106:890 107:1832 108:705 109:3407 110:1635 111:1827 112:1405 113:1330 114:1146 115:1705 116:1665 117:1882 118:2219 119:1669 120:1117 121:1032 122:2354 123:1695 124:1455 125:1948 128:1198 129:692 130:514 131:1631 132:717 133:193 134:1043 135:224 136:532 137:668 138:1972 139:746 140:564 141:758 142:805 143:998 144:844 145:498 146:1240 147:768 148:1696 149:790 150:769 151:985 152:897 153:327 154:2069 155:958 156:1592 157:843 158:656 159:1881 160:1460 161:883 162:2648 163:760 164:1121 165:1600 166:459 167:1342 168:3139 169:864 170:4019 171:499 172:1056 173:2105 174:987 175:865 176:2208 177:3963 178:2516 179:1309 180:2128 181:2365 182:2600 183:1320 184:1143 185:14405 186:3618 187:2494 188:2931 189:2057 190:8345 191:1380 192:9920 193:6410 194:5252 195:4034 196:2995 197:1765 198:5674 199:5982 200:7401 201:5017 202:10262 203:10188 204:4611 205:3008 206:3259 207:3218 208:3965 209:4181 210:3870 211:2022 212:3024 213:2801 214:1055 215:55 216:6046 217:2179 218:871 219:577 220:1827 221:999 222:969 223:1400 End of report

1 0

350 E Cermak
by Jason Lixfeld 22 Nov '18

22 Nov '18

Hey all, Looking for some clue on how things work, and who’s who for colo at 350 E Cermak. Looking at possibly putting a rack in somewhere there for a Peering/Transit/PNI POP. Is there a list somewhere of colo facilities in that building? Also, how does it work there in terms if inter-colo, intra-building connectivity, or is that a mixed bag? Thanks!

2 1

Internet diameter?
by William Herrin 22 Nov '18

22 Nov '18

Hi folks, Does anybody have more or less recent data on the average, median and maximum diameter (ip hop count) of the Internet? My google fu is failing me: I've only found stuff from the '90s. Thanks, Bill Herrin -- William Herrin ................ herrin(a)dirtside.com bill(a)herrin.us Dirtside Systems ......... Web: <http://www.dirtside.com/>

16 20

Crooks on the Intrernet: Episode 6,427
by Ronald F. Guilmette 21 Nov '18

21 Nov '18

I just thought that y'all might want to be aware of this. My attention was called recently to a RIPE-issued block of IPv4 addresses assigned to a particular Polish firm (Marton Media: https://martonmedia.pl/) that appears to sell digital TV services. The block in question is 91.149.192.0/18 aka "PL-MARTON-20061120". It appears that perhaps this company didn't quite need all of that /18 that it got from RIPE, so it looks like they parceled out some sub-parts of that /18 to at least a couple of other parties, to wit: "Hostermatrix LLC" aka "ORG-HL183-RIPE": 91.149.232.0/22 91.149.252.0/22 "Real Tone Hosting LLC" aka "ORG-RTHL1-RIPE" 91.149.224.0/21 91.149.236.0/22 91.149.240.0/21 91.149.248.0/22 Ignoring, for the moment, the fact that neither of these companies actually seem to exist anywhere... at least not on -this- planet... my attention was further called to the pair of /22 blocks that have been sub-allocated by Marton Media (Poland) to this thing they are calling "Hostermatrix LLC". The reverse DNS for those blocks looked like this, just a few short days ago, on November 16th: https://pastebin.com/raw/hjWG5KxA But apparently, that all has been changed rather substantially, just in the past few days, so now it all looks like this instead: https://pastebin.com/raw/58qCdPrc (You might call this the "Schrodinger Effect". When researching bad guys on the Internet, their stuff may change, even as you are looking at it, and perhaps even -because- you are looking at it.) Anyway, the rDNS listing, as it was on the 16th, looked more than a little fishy. Why would anyone need quite this many different outbound SMTP servers? The one and only second-level domain name that appeared in the rDNS listing as of the 16th was "sm-smtp.net". I did a bit of research on that domain name and found that historical passive DNS associates that domain, quite unambiguously, with another domain name, sendermatrix.net. It didn't take much more research for me to find out that a company called Sender Matrix, LLC is in fact registered in the State of Florida to a Mr. Jay Passerino. Mr. Passerino appears to have registered a number of different Florida companies: Haggle USA Corp. Mahem Partners, Inc. Sourcehire, LLC Boat App, LLC, All In Nutraceuticals, LLC Miami Suppliments, LLC Balladex Enterprises, LLC Sender Matrix, LLC (http://sendermatrix.com/) Gasher, Inc. Digital Platinum, Inc. (http://digital-platinum.com/) BB&M Ventures, Inc. Of course, there's nothing at all wrong with Mr. Passerino having prolific and multiple business interests, however a fellow who also, coincidentally, has the name Jay Passerino, and who also, coincidentally, hails from the State of Florida seems to have gotten into what the Brits might call "a spot of bother" with respect to not one but -two- U.S. federal regulatory agencies of late, specifically the SEC and the CFTC, both of which appear to have taken serious issue with this Mr. Jay Passerino's business practices, along with those of several of his cohorts: CFTC Press Release: https://www.cftc.gov/PressRoom/PressReleases/7807-18 SEC Press Release: https://www.sec.gov/news/press-release/2018-216 As you can see, both the SEC and the CFTC elected to take issue... on the exact same day, by the way... with this Mr. Jay Passerino's activities on the Internet, and specifically relating to "pump and dump" email scams. Returning now to the subject of the two /22 sub-allocations that were made by this Polish outfit, Marton Media, to this apparently non-existant corporate entity called "Hostermatrix LLC", i hope that it will not escape anoyone's notice that whereas the IPv4 blocks in question have been provided... seemingly to an Internet crook named Jay Passerino... by a Polish company, the actual -routing- of each of these blocks shows the participation of some other actors within two more (different) European countries: 91.149.232.0/22 - routed by AS51765 (Oy Creanova Hosting Solutions Ltd. - Finland) 91.149.252.0/22 - routed by AS24768 (ALMOUROLTEC SERVICOS DE INFORMATICA E INTERNET LDA - Portugal) The only observation I can offer with respect to all of the forgoing, is the rather obvious one: All of this is, to say the least, rather suspicious. But wait! There's more! It appears that Mr. Passerino's IPv4 assets are not strictly limited to RIPEland. Theres also a Direct Allocation block of ARIN IPv4 space (138.128.224.0/22) that is explicitly registered to Sender Matrix LLC of Miami, Florida: https://pastebin.com/raw/cZcsPYrL This block is routed by AS62519, Netrouting Inc., also, according to ARIN records, of Miami, Florida: https://pastebin.com/raw/mJKnJX6w Curiously, the one and only route being announced by AS62519 is for the /22 registered to Mr. Passerino's Sender Matrix LLC: https://bgp.he.net/AS62519#_prefixes It appears that the only current reason for this ASN to even exist is to provide routing to Mr. Passerino's ARINland /22 IPv4 block. And interestingly, AS62519 has only one IPv4 peer, i.e. AS47869: https://bgp.he.net/AS62519#_peers AS47869 meanwhile appears to belong to a major Dutch connectivity provider, also, not coincidentally, called "Netrouting". And unlike its Miami peer, AS62519, this Dutch network, AS47869, appears to have numerous different peers and to provide routing to numerous different entities, all apparently above board, unlike Mr. Passerino's Sender Matrix LLC: https://bgp.he.net/AS47869#_peers https://bgp.he.net/AS47869#_prefixes So, you know, this kind of begs the question: Did Netrouting realize that Mr. Passerino and/or Sender Matrix LLC were carrying on some rather dubious activites, and did the principals of Netrouting decide to attempt to distance themselves, and their main ASN (AS47869) from this activity, by putting a "cut out" ASN between them and Mr. Passerino (AS62519), just in case anybody ever clued in to what was really going here? Was this extra layer of AS numbers delibrately engineered to provide Netrouting with an extra layer of plausible deniability? I frankly don't know the answer to that question, but the peering and routing arrangement I've just described, together with the apparent nature of Mr. Passerino's Internet activities (as can be construed from the SEC and CFTC press releases) certainly does make one wonder about what the principals of Netrouting knew, and when they knew it. In contrast, I have fewer doubts about the Polish, Finnish, and Portuguese companies that are, apparently, aiding and abetting Mr. Passerino over in RIPEland. The evidence suggests that none of them bothered in the slightest to find out if there even really was any such corporate entity as "Hostermatrix, LLC" registered in -any- jurisdiction on planet earth. (The very helpful opencorporates.com web site suggests that there is no such entity, anywhere on earth.) Or perhaps they all knew full well that this name, "Hostermatrix, LLC", was just a made-up bullcrap name intended to hide the real identity of thhe real registrant of both of these /22 blocks. Either way, these three companies, in Poland, Finland, and Portugal, appear to be actively.. even iof perhaps unwittingly... aiding and abetting a Florida pump-and-dump spammer/scammer. Bottom line: I recommend to all to cease accepting any and all packets from at least the following: 91.149.232.0/22 - "Hostermatrix LLC" 91.149.252.0/22 - "Hostermatrix LLC" 138.128.224.0/22 - "Sender Matrix LLC" Anyone who may feel inclined towards an even more through defense should certainly consider also a complete block of packlets to/from 91.149.192.0/18, or at least blocking that CIDR from your mail server. (After all, Polish digital TV customers are unlikely to be doing much in the way of outbound email anyway.) Regards, rfg

2 1

Colombian Internet
by Mehmet Akcin 20 Nov '18

20 Nov '18

Hello there, I am looking for individuals who are experienced in colombian internet ecosystem who can do due diligence work and answer couple of questions. If you know about Colombian Internet ecosystem and please contact me offlist Mehmet -- Mehmet +1-424-298-1903

1 0

Networkatlas
by Mehmet Akcin 20 Nov '18

20 Nov '18

Hello there, This month has been incredible in so many ways for NetworkAtlas project. You can see how incredible progress we have made by visiting https://dev.networkatlas.org You can also see where we are missing data! We are getting close to having self service ui/api ready which will allow you to register, and upload your own kmz. You can also request to be able to manage (like up/down) cables you own. With that said, we are looking for people who can help in following areas. 1) we are looking for experienced editors who know and can validate the requests which will come from people uploding cable kmzs and also help clean up existing data we have. 2) looking for people who want to demo submitting actual kmzs of network they own and operate. 3) dc providers who want to provide more details of their datacenters (we have 3D buildings now in the map) If you want to help in any other way, please let us know! As always thank you and we will report back in december with more progress! Mehmet -- Mehmet +1-424-298-1903

1 0

at&t abuse
by Erik Montemer 20 Nov '18

20 Nov '18

Hello,Can some from at&t rbl abuse please contact me off list? Having difficulty with RBL delisting through the appropriate and recommended channels.Thank you,Erik

1 0

Amazon now controls 3.0.0.0/8
by Eric Kuhnke 20 Nov '18

20 Nov '18

https://news.ycombinator.com/item?id=18407173 Quoting from the post: " Apparently bought in two chunks: 3.0.0.0/9 and 3.128.0.0/9. Previous owner was GE. Anecdotal reports across the Internet that AWS EIPs are now being assigned in that range. https://whois.arin.net/rest/net/NET-3-0-0-0-1.html https://whois.arin.net/rest/net/NET-3-128-0-0-1.html "

16 18