June 2018 - Test - lists.nanog.org

AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3
by Ronald F. Guilmette 10 Jul '18

10 Jul '18

Sometimes I see stuff that just makes me shake my head in disbelief. Here is a good example: https://bgp.he.net/AS3266#_prefixes I mean seriously, WTF? As should be blatantly self-evident to pretty much everyone who has ever looked at any of the Internet's innumeriable prior incidents of very deliberately engineered IP space hijackings, all of the routes currently being announced by AS3266 (Bitcanal, Portugal) except for the ones in 213/8 are bloody obvious hijacks. (And to their credit, even Spamhaus has a couple of the U.S. legacy /16 blocks explicitly listed as such.) That's 39 deliberately hijacked routes, at least going by the data visible on bgp.he.net. But even that data from bgp.he.net dramatically understates the case, I'm sorry to say. According to the more complete and up-to-the-minute data that I just now fetched from RIPEstat, the real number of hijacked routes is more on the order of 130 separate hijacked routes for a total of 224,512 IPv4 addresses: https://pastebin.com/raw/Jw1my9Bb In simpler terms, Bitcanal has made off with the rough equivalent of an entire /14 block of IPv4 addresses that never belonged to them. (And of course, they haven't paid a dime to anyone for any of that space.) Of couse we could all be shocked (Shocked!) at this turn of events if it were not for the fact that Bitcanal already has a rich, longstanding, and sordid history of involvement with IP space hijacks. All one has to do is google for "Bitcanal" and "hijack" to find that out. This isn't exactly a state secret. In fact if you lookup "IP space hijacking" in any modern Internet dictionary you'll find Mr. Joao Silveira's picture next to the definition: https://twitter.com/bitcanal :-) This guy Silveira has obviously decided that he is a law unto himself, and can grab whatever IP space happens to be lying around for his own purposes... and no need to fill out any tedious forms -or- pay any fees for using any of this space to any of those annoying Regional Internet Registries. As usual, and as I have said here previously, I generally don't mind too much when these kinds of greedy idiots decide to color outside the lines. As long as they just confine themselves to hijacking abandoned IP blocks belonging to banks and/or government agencies, well then it's no skin off my nose. But when they start reselling their stolen IP space to spammers, as Mr. Silveira is apparently in the habit of doing, then I get ticked off. And actually, Mr. Silveira must be *exceptionally* greedy in that he is apparently not satisfied to just sub-lease his own legitimate IP space to snowshoe spammers, as he is clearly doing: https://pastebin.com/raw/5P5rnQ2y Obviously, merely hosting snowshoe spammers in his own IP space isn't enough to keep Mr. Silveira in the style to which he has become accustomned, so he has to go out and rip off other people's IP space and then resell that to spammers also. The fact that there exists a jerk like this on the Internet isn't really all that surprising. What I personally -do- find rather surprising is that three companies that each outght to know better, namely Cogent, GTT, and Level3 are collectively supplying more than 3/4ths of this guy's IPv4 connectivity, at least according to the graph displayed here: https://bgp.he.net/AS197426 Without the generous support of Cogent, GTT, and Level3 this dumbass lowlife IP address space thief would be largely if not entirely toast. So what are they waiting for? Why don't their turf this jackass? Are they waiting for an engraved invitation or what? As I always ask, retorically, in cases like this: Where are the grownups? I would like everyone reading this who is a customer of Cogent, GTT, or Level3 to try to contact these companies and ask them why they are providing connectivity/peering to a hijacking jerk like this Silveira character. Ask them why -you- have to endure more spam in your inbox just so that -they- can make another one tenth of one percent profit by peering with this hijacking, spammer-loving miscreant. I would ask them myself, but I personally am not a direct customer of any of them, so they would all, most probably, just tell me to go pound sand. If you do manage to make contact, please be sure to mention all three of Mr. Silveira's ASNs, i.e. AS42229, AS197426, and AS3266. And don't let whoever you talk to try to weasel out of responsibility for this travesty, e.g. by claiming that they don't know anything about what's been going on with all those hijacks announced by AS3266, and/or that they only provide peering for AS197426. The hijacks may all be originating from Mr. Silveira's AS3266, but bgp.he.net makes clear that AS3266 has one, and only one peer, i.e. Mr. Silveira's AS197426: https://bgp.he.net/AS3266 So basically, Cogent, GTT, and Level3 are the prime enablers of this massive theft of IP space. (They might try to claim that BitCanal's historical propensity to engage in hijacks is sonmething "brand new" or at least that -they- may not have been aware of it until now, in which case you should ask them if they have anybody on staff who is paying attention. As noted above, it isn't as if Bitcanal just started pulling this crap yesterday. Far from it.) Oh! And you might also mention the fact that Spamhaus, and, I would guess, at least a few of the oether public blacklists already have most or all of Mr. Silveira's IP space... hijacked or otherwise... blacklisted, presumably for good and ample cause. As long as Cogent, GTT, and Level3 are willing to go along with this nonsense, i.e. by selling peering to this Silveira thief, crime on the Internet -does- pay, and the theft of other people's IP space will continue to be rewarded rather than punished, as it should be. If that becomes the new normal for Internet behavior, then god help us all. Regards, rfg

20 29

Re: [c-nsp] Leaked Video or Not (Linux and Cisco for internal Sales folks)
by Tails Pipes 09 Jul '18

09 Jul '18

No, things changed there as well. Lookup merchant sillicon, and revise this post every 6 months. have you heard of Barefoot networks? The days of ASICs from Cisco are gone and we are glad, we tested the P4 DSL (cisco never got that right with mantel) on Nexus and its wonderful. The asics you speak of are no longer important or valuable because people realized that in many networking planets and galaxies, the asic is reflects the network design, they are related, and specifically for the data center, the clos fabric design won, and that does not require fancy asics. I guess your knowledge is out dated a bit. Cisco itself is using those merchant sillicon ASICs happily. (lookup Chuck's comments on nexus9000, best selling cisco switch ever)...guess it is a good switch, because bright box pushed cisco to do that, and if any one on this list can disagree with me here, i'm up to that challenge. What i have discovered recently is that things happen in following way. Your boss or his boss picks a work culture (no one gets fired for buying IBM/Cisco), that culture (buying the shiny suits) impacts how you do work, it makes you select vendors (the ones that sends me to vegas every year) and not the right network design, you select cisco and you are stuck there for life, because once they tell you how things should work (aka : certificates), things are worse, now every time you make a new network purchase (afraid of new CLI ), you will not be able to look the other way because you just dont know any thing else (and loosing your certificate value). I wish the culture would change to, no one got fired for buying closed but didnt get promoted either. change requires boldness. https://toolr.io/2018/06/18/stop-abusing-the-word-open/ On Wed, Jun 27, 2018 at 9:41 AM, <adamv0025(a)netconsultings.com> wrote: > > Tails Pipes > > Sent: Friday, June 22, 2018 3:00 PM > > > > can you easily answer this question ? why packets are not pushed in > linux ? > > is it because of big switch, cumulus, pica8 ? > > > > can you push packets in linux without writing code to do that ? who is > writing > > that code ? > > > > this is supposedly a community effort, something that older generations > > dont understand. > > > If pure linux as NOS has some legs it'll fly regardless of cisco blessing, > don't worry no single company owns the whole industry. > Also we can argue that this is only about the OS but in reality it's also > the quality of apps running on top and the quality of the underlying HW > that plays a major role. > The quality of BGP app for instance, or the ability of the forwarding ASIC > to deliver the stated pps rate even if multiple features are enabled or > protect high priority traffic even if ASIC is overloaded. > > > Oh and with regards to: > < I am sick of having to learn all the cisco specific terms to all sorts > of different boxes and technologies > I'd recommend you read all the cisco books on networking to get yourself > educated on the topic and to get the difference between SW and HW > forwarding ( -on why packets are not routed in linux) > And while on that I suggest you read all Stanford university lectures on > how routers work too, it'll help you understand why Cisco and Juniper ASICs > are so much more expensive than white-box ASICs. > > adam > > netconsultings.com > ::carrier-class solutions for the telecommunications industry:: > > >

4 3

Time to add 2002::/16 to bogon filters?
by Job Snijders 06 Jul '18

06 Jul '18

Dear all, TL;DR: Perhaps it is time to add 2002::/16 to our EBGP bogon filters? It is kind of strange that in the default-free zone (where we don’t announce defaults to each other) - we will propagate what is effectively an IPv4 default-route, in the IPv6 DFZ. IETF has politely abandoned the prefix: https://tools.ietf.org/html/rfc7526 Wes George highlighted operational problems from accepting 2002::/16 on the data-plane slide 6: http://iepg.org/2018-03-18-ietf101/wes.pdf Is there still really any legit reason left to accept, or propagate, 2002::/16 on EBGP sessions in the DFZ? Kind regards, Job

6 7

Weekly Routing Table Report
by cscora＠apnic.net 29 Jun '18

29 Jun '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 30 Jun, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 704428 Prefixes after maximum aggregation (per Origin AS): 270513 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 338397 Total ASes present in the Internet Routing Table: 61088 Prefixes per ASN: 11.53 Origin-only ASes present in the Internet Routing Table: 52749 Origin ASes announcing only one prefix: 23016 Transit ASes present in the Internet Routing Table: 8339 Transit-only ASes present in the Internet Routing Table: 279 Average AS path length visible in the Internet Routing Table: 4.0 Max AS path length visible: 35 Max AS path prepend of ASN ( 30873) 28 Prefixes from unregistered ASNs in the Routing Table: 59 Number of instances of unregistered ASNs: 60 Number of 32-bit ASNs allocated by the RIRs: 23121 Number of 32-bit ASNs visible in the Routing Table: 18629 Prefixes from 32-bit ASNs in the Routing Table: 77713 Number of bogon 32-bit ASNs visible in the Routing Table: 19 Special use prefixes present in the Routing Table: 2 Prefixes being announced from unallocated address space: 256 Number of addresses announced to Internet: 2858486211 Equivalent to 170 /8s, 97 /16s and 9 /24s Percentage of available address space announced: 77.2 Percentage of allocated address space announced: 77.2 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 98.9 Total number of prefixes smaller than registry allocations: 235143 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 192169 Total APNIC prefixes after maximum aggregation: 54695 APNIC Deaggregation factor: 3.51 Prefixes being announced from the APNIC address blocks: 190813 Unique aggregates announced from the APNIC address blocks: 78049 APNIC Region origin ASes present in the Internet Routing Table: 8917 APNIC Prefixes per ASN: 21.40 APNIC Region origin ASes announcing only one prefix: 2517 APNIC Region transit ASes present in the Internet Routing Table: 1335 Average APNIC Region AS path length visible: 4.0 Max APNIC Region AS path length visible: 29 Number of APNIC region 32-bit ASNs visible in the Routing Table: 3884 Number of APNIC addresses announced to Internet: 767652354 Equivalent to 45 /8s, 193 /16s and 114 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-137529 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 209432 Total ARIN prefixes after maximum aggregation: 99692 ARIN Deaggregation factor: 2.10 Prefixes being announced from the ARIN address blocks: 209864 Unique aggregates announced from the ARIN address blocks: 99446 ARIN Region origin ASes present in the Internet Routing Table: 18191 ARIN Prefixes per ASN: 11.54 ARIN Region origin ASes announcing only one prefix: 6733 ARIN Region transit ASes present in the Internet Routing Table: 1817 Average ARIN Region AS path length visible: 3.6 Max ARIN Region AS path length visible: 20 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2370 Number of ARIN addresses announced to Internet: 1102961056 Equivalent to 65 /8s, 189 /16s and 217 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-397212 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 192778 Total RIPE prefixes after maximum aggregation: 92071 RIPE Deaggregation factor: 2.09 Prefixes being announced from the RIPE address blocks: 188916 Unique aggregates announced from the RIPE address blocks: 112121 RIPE Region origin ASes present in the Internet Routing Table: 25232 RIPE Prefixes per ASN: 7.49 RIPE Region origin ASes announcing only one prefix: 11360 RIPE Region transit ASes present in the Internet Routing Table: 3507 Average RIPE Region AS path length visible: 4.1 Max RIPE Region AS path length visible: 30 Number of RIPE region 32-bit ASNs visible in the Routing Table: 7118 Number of RIPE addresses announced to Internet: 715915648 Equivalent to 42 /8s, 172 /16s and 1 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 91081 Total LACNIC prefixes after maximum aggregation: 19997 LACNIC Deaggregation factor: 4.55 Prefixes being announced from the LACNIC address blocks: 92503 Unique aggregates announced from the LACNIC address blocks: 40846 LACNIC Region origin ASes present in the Internet Routing Table: 7275 LACNIC Prefixes per ASN: 12.72 LACNIC Region origin ASes announcing only one prefix: 2021 LACNIC Region transit ASes present in the Internet Routing Table: 1347 Average LACNIC Region AS path length visible: 4.7 Max LACNIC Region AS path length visible: 35 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 4818 Number of LACNIC addresses announced to Internet: 172429728 Equivalent to 10 /8s, 71 /16s and 17 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 18908 Total AfriNIC prefixes after maximum aggregation: 4007 AfriNIC Deaggregation factor: 4.72 Prefixes being announced from the AfriNIC address blocks: 22076 Unique aggregates announced from the AfriNIC address blocks: 7713 AfriNIC Region origin ASes present in the Internet Routing Table: 1163 AfriNIC Prefixes per ASN: 18.98 AfriNIC Region origin ASes announcing only one prefix: 385 AfriNIC Region transit ASes present in the Internet Routing Table: 232 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 23 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 439 Number of AfriNIC addresses announced to Internet: 99088128 Equivalent to 5 /8s, 231 /16s and 247 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5424 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4313 424 442 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 2880 1150 79 VIETEL-AS-AP Viettel Group, VN 4766 2849 11134 761 KIXS-AS-KR Korea Telecom, KR 9829 2812 1497 543 BSNL-NIB National Internet Backbone, IN 9394 2539 4907 31 CTTNET China TieTong Telecommunications 45899 2532 1603 158 VNPT-AS-VN VNPT Corp, VN 17974 2261 930 70 TELKOMNET-AS2-AP PT Telekomunikasi Indo 9808 2245 8699 26 CMNET-GD Guangdong Mobile Communication 4755 2108 417 205 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3415 1324 84 SHAW - Shaw Communications Inc., CA 22773 3287 2968 147 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 11492 2365 242 474 CABLEONE - CABLE ONE, INC., US 16509 2197 4716 708 AMAZON-02 - Amazon.com, Inc., US 18566 2170 405 109 MEGAPATH5-US - MegaPath Corporation, US 20115 2107 2573 472 CHARTER-NET-HKY-NC - Charter Communicat 209 2034 5070 611 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 30036 2000 343 161 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 16625 1953 979 1388 AKAMAI-AS - Akamai Technologies, Inc., 7018 1744 20203 1273 ATT-INTERNET4 - AT&T Services, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 4417 1604 118 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 8551 2641 377 43 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2543 627 1874 AKAMAI-ASN1, US 34984 2017 335 496 TELLCOM-AS, TR 12389 2013 1877 708 ROSTELECOM-AS, RU 9121 1894 1692 19 TTNET, TR 13188 1601 100 43 TRIOLAN, UA 8402 1247 544 14 CORBINA-AS OJSC "Vimpelcom", RU 6849 1241 355 21 UKRTELNET, UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 4995 3299 584 Uninet S.A. de C.V., MX 10620 3565 542 251 Telmex Colombia S.A., CO 11830 2655 369 78 Instituto Costarricense de Electricidad 6503 1666 443 60 Axtel, S.A.B. de C.V., MX 7303 1507 1026 188 Telecom Argentina S.A., AR 28573 1035 2245 180 CLARO S.A., BR 3816 1008 505 129 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 931 377 31 Telefonica del Peru S.A.A., PE 11172 928 127 86 Alestra, S. de R.L. de C.V., MX 18881 913 1078 30 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1153 396 48 LINKdotNET-AS, EG 37611 878 107 9 Afrihost, ZA 36903 766 385 138 MT-MPLS, MA 36992 752 1411 39 ETISALAT-MISR, EG 8452 633 1730 18 TE-AS TE-AS, EG 24835 611 818 18 RAYA-AS, EG 37492 472 470 57 ORANGE-, TN 29571 453 68 11 ORANGE-COTE-IVOIRE, CI 37342 386 32 1 MOVITEL, MZ 15399 374 39 8 WANANCHI-, KE Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5424 4192 74 ERX-CERNET-BKB China Education and Rese 8151 4995 3299 584 Uninet S.A. de C.V., MX 12479 4417 1604 118 UNI2-AS, ES 7545 4313 424 442 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 203 20 ALJAWWALSTC-AS, SA 10620 3565 542 251 Telmex Colombia S.A., CO 6327 3415 1324 84 SHAW - Shaw Communications Inc., CA 22773 3287 2968 147 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 7552 2880 1150 79 VIETEL-AS-AP Viettel Group, VN 4766 2849 11134 761 KIXS-AS-KR Korea Telecom, KR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 8151 4995 4411 Uninet S.A. de C.V., MX 12479 4417 4299 UNI2-AS, ES 7545 4313 3871 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3415 3331 SHAW - Shaw Communications Inc., CA 10620 3565 3314 Telmex Colombia S.A., CO 22773 3287 3140 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 7552 2880 2801 VIETEL-AS-AP Viettel Group, VN 8551 2641 2598 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11830 2655 2577 Instituto Costarricense de Electricidad y Telec Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 64513 PRIVATE 62.150.101.0/24 9155 QNET Kuwait, KW 65537 DOCUMENT 62.162.120.0/24 6821 MT-AS-OWN bul. Orce Nikolov bb 419333 UNALLOCATED 84.17.91.0/24 41933 IPRAGAZ-AS Istanbul/ TURKEY, T 64121 UNALLOCATED 98.159.9.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64121 UNALLOCATED 98.159.12.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64140 UNALLOCATED 98.159.14.0/24 64121 UNKNOWN 65544 DOCUMENT 103.197.121.0/24 65542 UNKNOWN 4259905537 PRIVATE 103.250.48.0/24 132917 YELLOWPAGESGROUP-AS-AP Yellow Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 100.66.224.0/19 209 CENTURYLINK-US-LEGACY-QWEST - Qwest Communicati 198.18.1.19/32 7497 CSTNET-AS-AP Computer Network Information Cente Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.136.0/24 37500 -Reserved AS-, ZZ 41.76.138.0/24 37500 -Reserved AS-, ZZ 41.76.139.0/24 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ 41.76.140.0/24 37500 -Reserved AS-, ZZ 41.76.141.0/24 37500 -Reserved AS-, ZZ 41.76.142.0/24 37500 -Reserved AS-, ZZ 41.76.143.0/24 37500 -Reserved AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:14 /9:11 /10:37 /11:99 /12:290 /13:568 /14:1097 /15:1898 /16:13360 /17:7933 /18:13761 /19:25252 /20:39302 /21:45486 /22:87624 /23:71032 /24:394474 /25:820 /26:613 /27:628 /28:35 /29:20 /30:18 /31:4 /32:52 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6327 3202 3415 SHAW - Shaw Communications Inc., CA 12479 3160 4417 UNI2-AS, ES 39891 2946 3778 ALJAWWALSTC-AS, SA 22773 2549 3287 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 2103 2641 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 18566 2063 2170 MEGAPATH5-US - MegaPath Corporation, US 11830 2003 2655 Instituto Costarricense de Electricidad y Telec 11492 1916 2365 CABLEONE - CABLE ONE, INC., US 30036 1752 2000 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 10620 1612 3565 Telmex Colombia S.A., CO Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1578 2:849 4:18 5:2817 6:41 7:1 8:1124 12:1874 13:196 14:1748 15:30 16:3 17:213 18:54 20:49 23:2625 24:2224 25:2 27:2424 31:2022 32:92 35:27 36:494 37:2771 38:1460 39:229 40:122 41:3104 42:675 43:1932 44:118 45:4832 46:3040 47:201 49:1329 50:1056 51:316 52:1067 54:372 55:3 56:12 57:39 58:1622 59:1000 60:389 61:2102 62:1858 63:1803 64:5066 65:2208 66:4663 67:2438 68:1168 69:3239 70:1158 71:567 72:2112 74:2716 75:422 76:457 77:1553 78:1712 79:1693 80:1510 81:1381 82:1069 83:789 84:1065 85:2012 86:569 87:1307 88:928 89:2343 90:212 91:6387 92:1211 93:2375 94:2389 95:2880 96:731 97:357 98:947 99:133 100:83 101:1232 102:105 103:18036 104:3569 105:213 106:655 107:1780 108:695 109:3396 110:1606 111:1776 112:1283 113:1270 114:1124 115:1661 116:1640 117:1755 118:2160 119:1675 120:992 121:1054 122:2470 123:1778 124:1440 125:1922 128:1080 129:672 130:458 131:1610 132:690 133:195 134:1016 135:224 136:500 137:562 138:1984 139:649 140:453 141:724 142:801 143:980 144:800 145:481 146:1196 147:721 148:1629 149:760 150:735 151:1095 152:793 153:317 154:1213 155:765 156:1120 157:789 158:653 159:1739 160:1168 161:789 162:2589 163:595 164:1064 165:1492 166:449 167:1314 168:3058 169:815 170:3783 171:461 172:1077 173:2007 174:908 175:776 176:1982 177:4050 178:2534 179:1216 180:2191 181:2304 182:2370 183:1193 184:1029 185:13715 186:3599 187:2347 188:2852 189:2114 190:8122 191:1405 192:9829 193:5985 194:4858 195:3978 196:2602 197:1574 198:5545 199:5918 200:7332 201:5006 202:10459 203:10120 204:4581 205:2898 206:3108 207:3187 208:3982 209:3974 210:4047 211:2106 212:3000 213:2768 214:983 215:57 216:5984 217:2122 218:896 219:634 220:1773 221:983 222:1022 223:1297 End of report

1 0

Comcast
by Daniel Corbe 29 Jun '18

29 Jun '18

Can someone from Comcast contact me off list? Your customers can’t reach my network right now.

10 10

Submarine Cable Status Map Experiment
by Mehmet Akcin 28 Jun '18

28 Jun '18

Hello NANOGers, Today i presented a lighting talk to ask for feedback on the submarine cable status project. I am still trying to work details on how the governance and sustainability of this project should be structured. I know there are more people in the list than those who attend in person to NANOG in Denver hence I want to share my slides here https://pc.nanog.org/static/published/meetings/NANOG73/1749/20180626_Akcin_… There seems to be tremendous amount of interest and support on this experiment. We are working on getting data (Kmz/Kml) from the operators of submarine cable systems so we can build our map and display cable status current demo page is available at https://map.kapany.net If you have ideas you want to share and help this map experiment become a reality, please don't hesitate to contact me directly or join our mailing list. at https://groups.google.com/a/kapany.net/forum/#!forum/subsea I would like to thank Aaron Hughes, Ognian Mitev, NANOG PC, Telegeography , Angola Cables, Alaska Communications and Seaborn Networks for their amazing support so far. ps: please feel free to pass this message to other groups / nogs to get the message to those who are interested. Thank you! Mehmet

1 1

RE: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3
by Scott Weeks 28 Jun '18

28 Jun '18

I suppose next you'll be telling me to get rid of my CRT when it works just fine? Black background, white text. :) scott

5 4

courtesy
by Scott Weeks 28 Jun '18

28 Jun '18

--- job(a)instituut.net wrote: People - please just stop the off topic chatter. It is ludicrous that a thread about bgp hijacks morphed into font discussions. Either contribute to the operational issue at hand by evaluating your terms & conditions (or abuse policies) and applying them to your operations, or remain silent. ------------------------------------- While I have to agree with what you said in the first paragraph (there was too much of off topic chatter on this thread), I disagree with the second paragraph. You are not the King of NANOG where you can demand folks contribute in the manner you expect or "remain silent". The "Please" is acceptable and we'd likely all comply. The "remain silent" demand is not and it's likely to not gain compliance. scott

2 1

General survey about situation of website blocking in your country/economy <by July 10th>
by Akira Shibuya 28 Jun '18

28 Jun '18

Dear nanog members, JPNIC - Japan Network Information Center is now soliciting your input about the situation of website blocking all over the world, especially from the viewpoint of copyright infringement. In order to cope with vicious infringements, the Japanese government is considering countermeasures including the legislation of website blocking, alleging that blocking technologies are already being operated in many countries and regions of the world(*). JPNIC wants to grasp the real situation of the world. We would be grateful if you could answer the survey below by July 10th. https://docs.google.com/forms/d/e/1FAIpQLSfgxaDgDwHbWOv7RNbHYTRbNHQa_HFCPv0… It would be highly appreciated if you could kindly provide us with your input. (*)Background: Japan calls for 'emergency measure’blocking access to websites that pirate manga and anime https://www.japantimes.co.jp/news/2018/04/13/national/japan-calls-emergency… If you have any question about the survey, please feel free to email us at: web-blocking(a)nic.ad.jp All the Best, Akira Shibuya (on behalf of JPNIC secretariat)

1 0

Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3
by Scott Weeks 27 Jun '18

27 Jun '18

On Mon, 25 Jun 2018 at 22:49, Ronald F. Guilmette <rfg(a)tristatelogic.com> wrote: > Without the generous support of Cogent, GTT, and Level3 this dumbass > lowlife IP address space thief would be largely if not entirely toast. > So what are they waiting for? Why don't their turf this jackass? Are > they waiting for an engraved invitation or what? > > As I always ask, retorically, in cases like this: Where are the grownups? --- ops.lists(a)gmail.com wrote: From: Suresh Ramasubramanian <ops.lists(a)gmail.com> "we are not the internet police" right? ( ----------------------------- So your answer is to let them hijack whatever/whenever they want? scott

6 5