June 2018 - Test - lists.nanog.org

Re: ICANN GDPR lawsuit
by Johnny Eriksson 04 Jun '18

04 Jun '18

Hank Nussbacher wrote: > The entire whois debacle will only get resolved when some hackers attack > www.eugdpr.org, ec.europa.eu and some other key .eu sites.Â When the > response they get will be "sorry, we can't determine who is attacking > you since that contravenes GDPR", will the EU light bulb go on that > something in GDPR needs to be tweaked. You seem to assume that said light bulb does in fact exist. > -Hank --Johnny /\_/\ ( *.* ) > ^ <

5 4

Weekly Routing Table Report
by cscora＠apnic.net 01 Jun '18

01 Jun '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 02 Jun, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 702696 Prefixes after maximum aggregation (per Origin AS): 269990 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 337923 Total ASes present in the Internet Routing Table: 60877 Prefixes per ASN: 11.54 Origin-only ASes present in the Internet Routing Table: 52561 Origin ASes announcing only one prefix: 22956 Transit ASes present in the Internet Routing Table: 8316 Transit-only ASes present in the Internet Routing Table: 278 Average AS path length visible in the Internet Routing Table: 4.0 Max AS path length visible: 30 Max AS path prepend of ASN ( 30873) 28 Prefixes from unregistered ASNs in the Routing Table: 50 Number of instances of unregistered ASNs: 50 Number of 32-bit ASNs allocated by the RIRs: 22804 Number of 32-bit ASNs visible in the Routing Table: 18382 Prefixes from 32-bit ASNs in the Routing Table: 76690 Number of bogon 32-bit ASNs visible in the Routing Table: 15 Special use prefixes present in the Routing Table: 2 Prefixes being announced from unallocated address space: 261 Number of addresses announced to Internet: 2860375619 Equivalent to 170 /8s, 125 /16s and 222 /24s Percentage of available address space announced: 77.3 Percentage of allocated address space announced: 77.3 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 98.9 Total number of prefixes smaller than registry allocations: 234878 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 191697 Total APNIC prefixes after maximum aggregation: 54440 APNIC Deaggregation factor: 3.52 Prefixes being announced from the APNIC address blocks: 190523 Unique aggregates announced from the APNIC address blocks: 78035 APNIC Region origin ASes present in the Internet Routing Table: 8841 APNIC Prefixes per ASN: 21.55 APNIC Region origin ASes announcing only one prefix: 2475 APNIC Region transit ASes present in the Internet Routing Table: 1329 Average APNIC Region AS path length visible: 4.0 Max APNIC Region AS path length visible: 29 Number of APNIC region 32-bit ASNs visible in the Routing Table: 3821 Number of APNIC addresses announced to Internet: 767462658 Equivalent to 45 /8s, 190 /16s and 141 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-137529 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 209013 Total ARIN prefixes after maximum aggregation: 99347 ARIN Deaggregation factor: 2.10 Prefixes being announced from the ARIN address blocks: 209718 Unique aggregates announced from the ARIN address blocks: 99231 ARIN Region origin ASes present in the Internet Routing Table: 18196 ARIN Prefixes per ASN: 11.53 ARIN Region origin ASes announcing only one prefix: 6726 ARIN Region transit ASes present in the Internet Routing Table: 1805 Average ARIN Region AS path length visible: 3.6 Max ARIN Region AS path length visible: 20 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2354 Number of ARIN addresses announced to Internet: 1105775648 Equivalent to 65 /8s, 232 /16s and 204 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-397212 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 192114 Total RIPE prefixes after maximum aggregation: 92247 RIPE Deaggregation factor: 2.08 Prefixes being announced from the RIPE address blocks: 188106 Unique aggregates announced from the RIPE address blocks: 111657 RIPE Region origin ASes present in the Internet Routing Table: 25194 RIPE Prefixes per ASN: 7.47 RIPE Region origin ASes announcing only one prefix: 11377 RIPE Region transit ASes present in the Internet Routing Table: 3516 Average RIPE Region AS path length visible: 4.1 Max RIPE Region AS path length visible: 30 Number of RIPE region 32-bit ASNs visible in the Routing Table: 7048 Number of RIPE addresses announced to Internet: 715829632 Equivalent to 42 /8s, 170 /16s and 177 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 90965 Total LACNIC prefixes after maximum aggregation: 19927 LACNIC Deaggregation factor: 4.56 Prefixes being announced from the LACNIC address blocks: 92410 Unique aggregates announced from the LACNIC address blocks: 41070 LACNIC Region origin ASes present in the Internet Routing Table: 7184 LACNIC Prefixes per ASN: 12.86 LACNIC Region origin ASes announcing only one prefix: 1992 LACNIC Region transit ASes present in the Internet Routing Table: 1322 Average LACNIC Region AS path length visible: 4.6 Max LACNIC Region AS path length visible: 26 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 4730 Number of LACNIC addresses announced to Internet: 172429728 Equivalent to 10 /8s, 71 /16s and 17 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 18855 Total AfriNIC prefixes after maximum aggregation: 3984 AfriNIC Deaggregation factor: 4.73 Prefixes being announced from the AfriNIC address blocks: 21678 Unique aggregates announced from the AfriNIC address blocks: 7703 AfriNIC Region origin ASes present in the Internet Routing Table: 1154 AfriNIC Prefixes per ASN: 18.79 AfriNIC Region origin ASes announcing only one prefix: 385 AfriNIC Region transit ASes present in the Internet Routing Table: 233 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 23 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 429 Number of AfriNIC addresses announced to Internet: 98440704 Equivalent to 5 /8s, 222 /16s and 22 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5424 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4409 419 435 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 2868 1154 79 VIETEL-AS-AP Viettel Group, VN 4766 2846 11133 757 KIXS-AS-KR Korea Telecom, KR 9829 2812 1498 543 BSNL-NIB National Internet Backbone, IN 9394 2541 4923 26 CTTNET China TieTong Telecommunications 45899 2495 1586 162 VNPT-AS-VN VNPT Corp, VN 17974 2217 928 79 TELKOMNET-AS2-AP PT Telekomunikasi Indo 9808 2207 8699 26 CMNET-GD Guangdong Mobile Communication 4755 2104 417 206 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3431 1324 85 SHAW - Shaw Communications Inc., CA 22773 3298 2968 147 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 11492 2201 245 409 CABLEONE - CABLE ONE, INC., US 18566 2171 405 109 MEGAPATH5-US - MegaPath Corporation, US 16509 2134 4705 669 AMAZON-02 - Amazon.com, Inc., US 20115 2106 2536 466 CHARTER-NET-HKY-NC - Charter Communicat 209 1985 5070 605 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 30036 1985 342 175 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 16625 1850 916 1325 AKAMAI-AS - Akamai Technologies, Inc., 7018 1722 20200 1262 ATT-INTERNET4 - AT&T Services, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 4230 1518 540 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 8551 2842 377 43 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2618 679 1922 AKAMAI-ASN1, US 34984 2031 335 494 TELLCOM-AS, TR 12389 2012 1877 707 ROSTELECOM-AS, RU 9121 1889 1692 19 TTNET, TR 13188 1609 100 43 TRIOLAN, UA 8402 1267 544 14 CORBINA-AS OJSC "Vimpelcom", RU 6849 1101 355 21 UKRTELNET, UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 4967 3309 582 Uninet S.A. de C.V., MX 10620 3599 541 248 Telmex Colombia S.A., CO 11830 2647 369 77 Instituto Costarricense de Electricidad 6503 1640 443 60 Axtel, S.A.B. de C.V., MX 7303 1516 1027 189 Telecom Argentina S.A., AR 28573 1031 2253 173 CLARO S.A., BR 3816 1008 505 130 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 993 377 31 Telefonica del Peru S.A.A., PE 11172 927 126 85 Alestra, S. de R.L. de C.V., MX 18881 911 1078 30 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1038 396 48 LINKdotNET-AS, EG 37611 852 107 9 Afrihost, ZA 36903 739 371 140 MT-MPLS, MA 36992 711 1412 43 ETISALAT-MISR, EG 8452 680 1730 18 TE-AS TE-AS, EG 24835 634 786 17 RAYA-AS, EG 37492 466 470 57 ORANGE-, TN 29571 455 68 11 ORANGE-COTE-IVOIRE, CI 37342 378 32 1 MOVITEL, MZ 23889 363 103 14 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5424 4192 74 ERX-CERNET-BKB China Education and Rese 8151 4967 3309 582 Uninet S.A. de C.V., MX 7545 4409 419 435 TPG-INTERNET-AP TPG Telecom Limited, AU 12479 4230 1518 540 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 10620 3599 541 248 Telmex Colombia S.A., CO 6327 3431 1324 85 SHAW - Shaw Communications Inc., CA 22773 3298 2968 147 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 7552 2868 1154 79 VIETEL-AS-AP Viettel Group, VN 4766 2846 11133 757 KIXS-AS-KR Korea Telecom, KR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 8151 4967 4385 Uninet S.A. de C.V., MX 7545 4409 3974 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 3758 ALJAWWALSTC-AS, SA 12479 4230 3690 UNI2-AS, ES 10620 3599 3351 Telmex Colombia S.A., CO 6327 3431 3346 SHAW - Shaw Communications Inc., CA 22773 3298 3151 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 2842 2799 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 7552 2868 2789 VIETEL-AS-AP Viettel Group, VN 11830 2647 2570 Instituto Costarricense de Electricidad y Telec Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 64513 PRIVATE 62.150.101.0/24 9155 QNET Kuwait, KW 65537 DOCUMENT 62.162.120.0/24 6821 MT-AS-OWN bul. Orce Nikolov bb 419333 UNALLOCATED 84.17.91.0/24 41933 IPRAGAZ-AS Istanbul/ TURKEY, T 64111 UNALLOCATED 98.159.5.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64111 UNALLOCATED 98.159.7.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64121 UNALLOCATED 98.159.9.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64121 UNALLOCATED 98.159.12.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64140 UNALLOCATED 98.159.14.0/24 64121 UNKNOWN Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 100.66.224.0/19 209 CENTURYLINK-US-LEGACY-QWEST - Qwest Communicati 198.18.1.19/32 7497 CSTNET-AS-AP Computer Network Information Cente Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.136.0/24 37500 -Reserved AS-, ZZ 41.76.138.0/24 37500 -Reserved AS-, ZZ 41.76.139.0/24 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ 41.76.140.0/24 37500 -Reserved AS-, ZZ 41.76.141.0/24 37500 -Reserved AS-, ZZ 41.76.142.0/24 37500 -Reserved AS-, ZZ 41.76.143.0/24 37500 -Reserved AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:14 /9:11 /10:37 /11:100 /12:290 /13:565 /14:1094 /15:1903 /16:13379 /17:7909 /18:13677 /19:25154 /20:39315 /21:45543 /22:87266 /23:70831 /24:393396 /25:828 /26:627 /27:628 /28:36 /29:20 /30:17 /31:4 /32:52 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6327 3218 3431 SHAW - Shaw Communications Inc., CA 12479 3023 4230 UNI2-AS, ES 39891 2946 3778 ALJAWWALSTC-AS, SA 22773 2553 3298 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 2304 2842 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 18566 2064 2171 MEGAPATH5-US - MegaPath Corporation, US 11830 1995 2647 Instituto Costarricense de Electricidad y Telec 11492 1942 2201 CABLEONE - CABLE ONE, INC., US 30036 1736 1985 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 10620 1612 3599 Telmex Colombia S.A., CO Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1586 2:854 4:19 5:2828 6:66 7:1 8:1123 9:1 12:1860 13:189 14:1747 15:28 16:3 17:208 18:56 20:49 21:8 23:2639 24:2225 25:2 27:2359 31:1995 32:92 35:27 36:508 37:2744 38:1468 39:264 40:121 41:3226 42:594 43:1938 44:118 45:4645 46:3038 47:199 49:1324 50:1058 51:314 52:1050 54:369 55:3 56:12 57:41 58:1615 59:1005 60:434 61:2166 62:1844 63:1797 64:5032 65:2220 66:4693 67:2435 68:1161 69:3203 70:1143 71:566 72:2103 74:2733 75:414 76:453 77:1522 78:1712 79:1828 80:1508 81:1400 82:1094 83:775 84:1095 85:2052 86:575 87:1321 88:928 89:2354 90:213 91:6354 92:1203 93:2369 94:2401 95:2828 96:731 97:356 98:947 99:133 100:83 101:1276 102:66 103:17829 104:3619 105:240 106:622 107:1894 108:700 109:3463 110:1636 111:1778 112:1264 113:1255 114:1120 115:1641 116:1652 117:1730 118:2151 119:1662 120:978 121:1051 122:2444 123:1793 124:1429 125:1900 128:1034 129:647 130:458 131:1590 132:665 133:196 134:1025 135:226 136:480 137:561 138:1976 139:602 140:403 141:712 142:821 143:1002 144:799 145:464 146:1194 147:734 148:1636 149:740 150:727 151:1059 152:783 153:312 154:1096 155:763 156:994 157:796 158:655 159:1738 160:968 161:776 162:2586 163:571 164:1057 165:1472 166:458 167:1414 168:3068 169:802 170:3722 171:437 172:1072 173:2007 174:910 175:776 176:1993 177:3969 178:2503 179:1232 180:2223 181:2237 182:2367 183:1180 184:1022 185:13540 186:3631 187:2374 188:2849 189:2079 190:8129 191:1422 192:9836 193:5960 194:4810 195:3983 196:2588 197:1530 198:5527 199:5938 200:7392 201:5032 202:10474 203:10204 204:4572 205:2889 206:3108 207:3195 208:4005 209:3959 210:4044 211:2106 212:3048 213:2745 214:972 215:61 216:5966 217:2132 218:909 219:627 220:1772 221:988 222:1026 223:1273 End of report

1 0

SoftLayer Contact
by Nikolas Geyer 01 Jun '18

01 Jun '18

Anybody from SoftLayer (AS36351) on list? You have been leaking 700,000+ routes to some AMSIX peers for a while now. Cheers, Nik. Sent from my iPhone

3 3

Re: BGP Hijack/Sickness with AS4637
by Alain Hebert 31 May '18

31 May '18

Hi, Well bad news on the ColoAU front, they refused to cooperate. We'll pushback thru our GTT accounts... But I'm running out of ideas. If anyone has any good ideas how to proceed at this point feel free to share =D. ----- Alain Hebert ahebert(a)pubnix.net PubNIX Inc. 50 boul. St-Charles P.O. Box 26770 Beaconsfield, Quebec H9W 6G7 Tel: 514-990-5911 http://www.pubnix.net Fax: 514-990-9443 On 05/29/18 16:31, Chris Conn wrote: > Hello, > > I am the contact for AS16532. > > We never announced nor are we currently advertising this prefix as we are not a transit AS for anyone. As well, it seems to appear and disappear from AS63956 looking glass. According to that LG, the route changed 6d ago, and is *still currently visible* at this very moment; > > https://lg.coloau.com.au/ > > Command: show route 18.29.238.0 protocol bgp table vrf-international.inet.0 active-path > > vrf-international.inet.0: 696764 destinations, 2288960 routes (696480 active, 0 holddown, 103994 hidden) > + = Active Route, - = Last Active, * = Both > > 18.29.238.0/23 *[BGP/170] 6d 01:06:11, localpref 90, from 103.97.52.2 > AS path: 4637 3257 29909 16532 16532 16532 16532 I, validation-state: unverified > > > AS16532 is not announcing this prefix. We have a strict prefix-list that is applied to all sessions. As well, AS29909 is filtering us using our announced AS-SETS/RPSL to avoid us the ability to do anything dumb. And lastly, our announcements are being filtered by AS3257 as we are required to provide them via LOA. > > There is still something wrong somewhere that is injecting this path, anyone have a LG pointed to AS4637 seeing this prefix announced with AS16532 in the AS path? > > I doubt that AS29909 bouncing its BGP session with AS3257 (GTT) would change anything, as I am not seeing this prefix in their route-server > > public(a)route-server.as3257.net-re0> show route 18.29.238.0 protocol bgp active-path > > inet.0: 691667 destinations, 11752983 routes (691665 active, 1 holddown, 1 hidden) > + = Active Route, - = Last Active, * = Both > > 18.29.0.0/16 *[BGP/170] 3w4d 11:42:33, MED 0, localpref 100, from 213.200.87.23 > AS path: 3257 174 3 I, validation-state: unverified > > to 141.136.111.13 via xe-1/0/0.0 > > {master} > public(a)route-server.as3257.net-re0> > > > {master} > public(a)route-server.as3257.net-re0> show route 18.29.238.0 protocol bgp | find 16532 > > Pattern not found > {master} > > > > So whatever is happening, its not at AS16532, AS29909 nor AS3257 that I can find. > > > Chris Conn > AS16532 > > > > > -----Original Message----- > From: NANOG [mailto:nanog-bounces@nanog.org] On Behalf Of Tom Paseka via NANOG > Sent: Friday, May 25, 2018 6:01 PM > To: Nikolas Geyer <nik(a)neko.id.au> > Cc: NANOG list <nanog(a)nanog.org> > Subject: Re: BGP Hijack/Sickness with AS4637 > > This looks like a route that has been cached by some ISPs/routers even though a withdrawal has actually happened. > > If you actually forward packets a long the path, you'll see its not following the AS Path suggested, instead the real route that it should be. > Bouncing your session with 4637 would likely clear this. > > -Tom > > On Fri, May 25, 2018 at 11:59 AM, Nikolas Geyer <nik(a)neko.id.au> wrote: > >> Greetings! >> >> Actually, what you have provided below shows the exact opposite. It >> shows ColoAU have received the route from 4637 who have received it >> from 3257 who have received it from 29909 who have received it from >> 16532 who originated it. It infers nothing about who 16532 found the route to come from. >> >> It is evident that GTT are advertising that route to Telstra Global :) >> >> Regards, >> Nik. >> >>> And I'm pretty sure AS3257 (GTT ) is in the same boat as us, >>> as >> they're not the one advertising those routes to AS4637 >>> AS16532 found it to come from AS4637 as you can see from this >>> ColoAU >> LG output below >>> >>> ----- https://lg.coloau.com.au/ >>> >>> vrf-international.inet.0: 696533 destinations, 2248101 routes >>> (696249 >> active, 0 holddown, 103835 hidden) >>> + = Active Route, - = Last Active, * = Both >>> >>> 18.29.238.0/23 *[BGP/170] 1d 19:57:28, localpref 90, from >> 103.97.52.2 >>> AS path: 4637 3257 29909 16532 16532 16532 >>> 16532 >> I, validation-state: unverified >>> -- >>> ----- >>> Alain Hebert ahebert(a)pubnix.net >>> PubNIX Inc. >>> 50 boul. St-Charles >>> P.O. Box 26770 Beaconsfield, Quebec H9W 6G7 >>> Tel: 514-990-5911 http://www.pubnix.net Fax: 514-990-9443 >>>

6 10