October 2019 - Test - lists.nanog.org

Video Streaming Wars
by Rod Beck 15 Oct '19

15 Oct '19

https://www.lightreading.com/video/ott/whats-at-stake-as-the-streaming-batt… [https://img.lightreading.com/2019/10/754841/3383.jpg]<https://www.lightreading.com/video/ott/whats-at-stake-as-the-streaming-batt…> What's at Stake as the Streaming Battle Builds | Light Reading<https://www.lightreading.com/video/ott/whats-at-stake-as-the-streaming-batt…> Netflix, Amazon and Hulu have staked out their turf in the subscription VoD market, but will they be able to hold that coveted ground as Disney, Apple, WarnerMedia and NBCU enter the streaming fray? www.lightreading.com Roderick Beck VP of Business Development United Cable Company www.unitedcablecompany.com<http://www.unitedcablecompany.com> New York City & Budapest rod.beck(a)unitedcablecompany.com 36-70-605-5144 [1467221477350_image005.png]

3 2

lots of traffic starting at 3 a.m. central time
by Aaron Gould 15 Oct '19

15 Oct '19

Anyone else see lots of traffic coming down starting at 3 a.m. central time ? all of my internet connections showed strangely larger load for a few early morning hours. I have some info that tells me what it was but wanted to hear it from others too. -Aaron

7 6

Problems sending emails to AT&T
by Grzegorz Janoszka 15 Oct '19

15 Oct '19

Hi, Whenever I try to send something to emails in @att.net I get a reply: host ff-ip4-mx-vip1.prodigy.net[144.160.159.21] said: 553 5.3.0 flph831 DNSBL:RBL 521< MY.IP4.ADD.RES >_is_blocked.For assistance forward this error to abuse_rbl(a)abuse-att.net (in reply to MAIL FROM command) Of course emails to abuse_rbl go unanswered. My IP turns clean on https://www.dnsbl.info/ (all green and one blue timeout). Anyone had such issues? Any working contacts to AT&T email? Any help appreciated. -- Grzegorz Janoszka

1 0

APRICOT 2020 Call for PC Volunteers
by Mark Tinka 14 Oct '19

14 Oct '19

Hi everyone, The APRICOT 2020 Programme Committee is responsible for the solicitation and selection of suitable presentation and tutorial content for the APRICOT 2020 conference (https://2020.apricot.net/) The APRICOT PC Chairs are now seeking nominations from the community to join the APRICOT 2020 PC to assist with the development of the programme for APRICOT 2020. Eligible PC candidates are those who have attended APRICOT conferences in the recent past, have broad technical knowledge of Internet operations, and have reasonable familiarity with the format of APRICOT conferences. Having constructive opinions and ideas about how the programme content might be improved is of high value too. PC members are expected to work actively to solicit content and review submissions for technical merit. The PC meets by conference call, weekly in frequency during the three months prior to APRICOT. If you are interested in joining the PC and meet the above eligibility criteria, please send a brief note to "pc-chairs at apricot.net". The note should include affiliation (if any) and contact details (including e-mail address), and a brief description of why you would make a good addition to the PC. PC members who are active, successfully solicit content, contribute to regular PC meetings and submit reviews receive complimentary registration for APRICOT 2020. The PC Chairs will accept nominations received by 17:00 UTC+8 on Monday 21st October, 2019, and will announce the new PC shortly thereafter. Many thanks! Mark Tinka, Marijana Novakovic & Philip Smith APRICOT 2020 PC Chairs

1 0

.COM Zone DNSSEC Operational Update -- ZSK length change
by Wessels, Duane 14 Oct '19

14 Oct '19

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 All, Verisign is in the process of increasing the size and strength of the DNSSEC Zone Signing Keys (ZSKs) for the top-level domains that it operates. As part of this process, the ZSK for the .COM zone will be increased in size from 1024 to 1280 bits. On October 10, 2019 the 1280 bit ZSK was pre-published in the .COM zone. On October 15, we plan to sign the .COM zone with the 1280 bit ZSK. On October 20, we plan to remove the old 1024 bit ZSK from the zone. We do not anticipate any problems from this upgrade. In accordance with our normal operating procedures we have a rollback process should it become necessary to revert to the 1024 bit ZSK. DW -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQEcBAEBCAAGBQJdpL5zAAoJEGyZpGmowJiNKZsH/3D1uNJ959pOoZjiRWHd/bZ5 V6mNXkKA34jKudC0ugPt1RQGEExspsNHBTjSK//SO+nayKl8GQUdrnL5AINJKQjU C61nhFORQXxhrE7JTbbbLeiVWVMwBhWmefi9zNIi/2MANWhX0UzuKREfsAnUgyVL 9mbfxxFCmAC6HPVkE3wZS5Z8h+3AP4zkctLOWQv/wi0aCd6o6/k9fejpmN2YhFQy 7OrFqKpTq0wa7K1zx8xXyBNPstWlH0709zn3Cm6aYkQ7mLoCNl2H6ODJCmvtTZeo BYVKGojABUWXAurOiPSaljGHRAEC1sN5cV5rkeWmXjoRo+dGPOA60bzbdNsTfss= =J3+s -----END PGP SIGNATURE-----

1 0

New telemetry system ideas
by Chris Misa 14 Oct '19

14 Oct '19

I am a researcher working on developing a new switch-based on-the-fly telemetry system that takes a flow chart as input to describe a particular detection task (rather than just features or information elements as in IPFIX). For an example of what I mean by "flow chart" see the figure here: https://ieeexplore.ieee.org/mediastore_new/IEEE/content/media/8048782/80488…. Might anyone have pointers to a source of more such flow charts? The other issue I'm worried about is that it might take a couple rounds before an event is detected (since the system has to step through the flow chart and possibly look at different traffic features in the process). What is a typical duration of the types of events people might want to catch with a telemetry system like this? Do these kind of events generate the same type of traffic throughout their durations, or do traffic features change as the event progresses? Thanks! Chris

1 0

IP Geolocation
by Travis Garrison 14 Oct '19

14 Oct '19

Anyone else have issues where their IP block gets randomly set to China? We have been trying to track down this issue for months and our customers are starting to get upset. We get a /29 from our upstream provider that we CGNAT (yeah I know, working on implementing IPV6) to all of our customers at 1 particular site. No other sites have any issues. We had our upstream provider allocate us a new IP block from a different subnet which fixed the issue for a while but now it's back. The state and town are correct but the country states China. This is having issues with Speedtests, NetFlix and others. The upstream is claiming that we are purposely using a proxy or VPN to china which causes this. We have checked all our configurations and even replaced all hardware in case something was hacked. Any ideas? Thanks Travis Garrison

4 3

Cogent & FDCServers: Knowingly aiding and abetting fraud and theft?
by Vivek Nigam 12 Oct '19

12 Oct '19

Hi Ronald, APNIC has contacted the custodians of 139.44.0.0/16 and 168.198.0.0/16 and brought this matter to their attention. Regards, Vivek Member Services Manager, APNIC From: Ronald F. Guilmette <rfg(a)tristatelogic.com> Date: Fri, Sep 6, 2019 at 6:30 PM Subject: Cogent & FDCServers: Knowingly aiding and abetting fraud and theft? To: <nanog(a)nanog.org> Few of you here probably know about this, but nearly a week ago now an article appeared in South Africa's largest and most popular online tech publication, MyBroadband.co.za. It detailed many, but certainly not all of the results of my multi-month investigation of a massive and ongoing fraud involving the theft of large numbers of large (generally /16 or larger) abandoned legacy blocks, taken from the AFRINIC region and beyond: https://mybroadband.co.za/news/internet/318205-the-big-south-african-ip-add… For various editorial reasons, the article that was published actually downplayed the magnitude of the of the thefts quite dramatically. The totality of the IPv4 space that has been stolen or squatted, primarily but not exclusively, from South African companies and South African national goverment agencies and departments is actually at least 5x bigger than what was reported in the MyBroadband.co.za article. The overwhelming majority of this stolen and squatted IPv4 space has been helpfully routed by Cogent (AS174), to their customer, FDCServers of Chicago, and then on to the prefered destinations of a certain Mr. Elad Cohen of Israel, and his company Netstyle Atarim, Ltd. (I have saved traceroutes up the wazoo that prove the involvement of FDCServers, in particular, in all of this.) Mr. Cohen has been exceptionally prolific in his IPv4 theft and squatting activities, basically grabbing everything that wasn't nailed down, both within the AFRINIC region and also within the APNIC region. In order to try to legitimize all of these thefts and squats, Mr. Cohen created quite a sizable number of fradulent route: objects within the Merit/RADB data base which, as most here should already know, has essentially zero authentication of any kind before it allows J. Random Luser to add pretty much any any route: object he wants to the RADB. Here's a full listing of all of Mr. Cohen's RADB route: objects as they existed as recently as August 17th: https://pastebin.com/raw/ZNgNuvtt And here is the short summary version showing just all of the prefixes/CIDRs that Mr. Cohen was effectively claiming rights and/or title to as of that same date: https://pastebin.com/raw/4LTaCg5R Plese do note the numerous blocks of size /16 or greater. The bottom line is that this one tiny little Israeli company was effectively claiming rights to a total of no fewer than 1,015,808 IPv4 addresses as of August 17th, 2019. (Not too shabby for one lone guy who teaches programming classes as a side job!) Vitrually all of the space is "legacy" IPv4 space, and generally consists of blocks having sizes of /16 or larger. Some of Mr. Cohen claims in his RADB entries are as humorous as they are pathetically fradulent. For example, Mr. Cohen has effectively claimed rights to 139.44.0.0/16 which unambiguously belongs to the Port Authority of the City of Melbourne, Australia. But hell! That's merely city property! Mr. Cohen's limitless appetite for other people's IPv4 space is more vividly on display in his claims to ownerhip over the 168.198.0.0/16 block, which actually belongs to the Department of Finance of the Australian national government. And I haven't even mentioned yet another of Mr. Cohen volumous IPv4 acqusitions, the 165.25.0.0/16 block, which he did not see fit to create an RADB entry for, but which he's been squatting on for for quite some time now, quite clearly with the aid and assistance of both Cogent and FDCServers. That one belongs to th City of Cape Town, South Africa. That city's engineers have been struggling to regain control of their block back from Cogent, from FDCServers, and from Mr. Cohen for some time now. I know because I've personally spoken to them about it. Cogent, in its infinite wisdom, is continuing to fight the city for control over property that clearly and righfully belongs to the City of Cape Town, even as we speak: https://drive.google.com/file/d/1ytRj1CtuVhDa0eGu4BT-oEz593y5EwJa/view When asked for LOAs attesting to his legitimate authority to route at least a few of these blocks, Mr. Cohen has produced blatantly forged documents, many of which appeared in the MyBroadband.co.za story. And when I say "blatant" that's a gross understatement. Any half-way decent forger would consider these documents an embarrasment. The documents all bear identical signatures, and identical and vaguely official looking stamps, and purport to actually be sales reciepts attesting to the alleged purchases, by Mr. Cohen's offshore Seychelles Islands shell company, Afri Holdings, Ltd., of various /16 blocks from a mysterious company called Afrivestment, Ltd., which may actually exist in some faraway galaxy, or in Mr. Cohen's active imagination, but which both Google and OpenCorporates.com seem to agree exists exactly noplace on this planet. Here are the manufactured LOAs supplied by Mr. Cohen: https://drive.google.com/file/d/1hVjmR6u0ANltuXtZ-Kng8io-EGFyevTR/view https://drive.google.com/file/d/1x_44_H5hkcFLhEwpkwfFoR5PJUyXHzxJ/view https://drive.google.com/file/d/1yQyqn4q_f3bt-wDVoN1FzbXf1k58DXtK/view Recently, Cohen started to move some, but not all, of his stolen and squatted IPv4 blocks off of Cogent/FDCServers and onto a friendly little bullet-proof hosting company in the Netherlands named IP Volume, Inc. (AS202425) and/or to its several sister networks, e.g. AS204655 - Novogara Ltd., all of which, coincidently, just happen to be owned by the exact same pair of Dutch gentlemen who previously owned the notorious Ecatel, follwed by the notorious Quasi Networks. (IP Volume, Inc. appears to have intherited all or nearly all of its legitimately assigned IP space from its predecessor entities, Ecatel and Quasi Networks.) Despite these relocations, many of Mr. Cohen's stolen and squatted blocks are still helpfully being routed to Mr. Cohen's preferred desitnations by his good friends at Cogent and FDCServers, even as we speak. The current set of such routes that Cogent is maintaining, at the moment, apparently on behalf of their customer, Mr. Cohen, consists of the prefixes listed here: https://pastebin.com/raw/EA3xJVLF When I noticed two days ago that all of these routes were still up I was deeply confused. Did both Cogent and FDCServrs not get the memo?? Do they not know yet that Cohen is stealing stuff, left, right, and sideways? Did nobody even tell them about the MyBroadband.co.za article which was published this past Sunday? I decided that it was incumbant upon me to find out. Thus, more that 48 hours ago now I sent the following polite but firm inquiry to Cogent, and a separate nearly identical one directly to the CEO of FDCServers, Mr. Petr Kral (petr(at)fdcservers.net) https://pastebin.com/raw/ztipqE96 A full forty eight hours later, I have received no reply whatsoever from either Cogent or FDCServers, not even a "Go pound sand" type of response. More importantly, most of the stolen IPv4 space that I called out, very specifically, to both Cogent and FDCservers two+ days ago now is still being routed by Cogent/FDCservers to their fun-loving and, I'm sure, promptly paying customer, Mr. Cohen. If neither Cogent nor FDCServers still do not know now that Mr. Cohen is a crook, and that he has glommed onto quite a lot of stolen and squatted IPv4 space... which they have been helpfully routing for him, no doubt in exchange for some handsome payments... then I am foreced to say that it appears to be a reasonable conclusion that it must be because neither Cogent nor FDCServers really wants to know what sort of a character Cohen is, or what he has been up to, specifically with their ongoing and material assistance. But you all be the judges. What does it look like to you? Regards, rfg

7 11

Weekly Routing Table Report
by cscora＠apnic.net 11 Oct '19

11 Oct '19

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 12 Oct, 2019 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 777809 Prefixes after maximum aggregation (per Origin AS): 297091 Deaggregation factor: 2.62 Unique aggregates announced (without unneeded subnets): 374612 Total ASes present in the Internet Routing Table: 65830 Prefixes per ASN: 11.82 Origin-only ASes present in the Internet Routing Table: 56598 Origin ASes announcing only one prefix: 24228 Transit ASes present in the Internet Routing Table: 9232 Transit-only ASes present in the Internet Routing Table: 278 Average AS path length visible in the Internet Routing Table: 4.5 Max AS path length visible: 44 Max AS path prepend of ASN ( 27978) 31 Prefixes from unregistered ASNs in the Routing Table: 26 Number of instances of unregistered ASNs: 26 Number of 32-bit ASNs allocated by the RIRs: 29021 Number of 32-bit ASNs visible in the Routing Table: 23771 Prefixes from 32-bit ASNs in the Routing Table: 108141 Number of bogon 32-bit ASNs visible in the Routing Table: 16 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 390 Number of addresses announced to Internet: 2841790080 Equivalent to 169 /8s, 98 /16s and 70 /24s Percentage of available address space announced: 76.8 Percentage of allocated address space announced: 76.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.4 Total number of prefixes smaller than registry allocations: 259262 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 208984 Total APNIC prefixes after maximum aggregation: 60980 APNIC Deaggregation factor: 3.43 Prefixes being announced from the APNIC address blocks: 203440 Unique aggregates announced from the APNIC address blocks: 85088 APNIC Region origin ASes present in the Internet Routing Table: 10088 APNIC Prefixes per ASN: 20.17 APNIC Region origin ASes announcing only one prefix: 2809 APNIC Region transit ASes present in the Internet Routing Table: 1506 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 25 Number of APNIC region 32-bit ASNs visible in the Routing Table: 5110 Number of APNIC addresses announced to Internet: 770945664 Equivalent to 45 /8s, 243 /16s and 178 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-141625 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 228800 Total ARIN prefixes after maximum aggregation: 106664 ARIN Deaggregation factor: 2.15 Prefixes being announced from the ARIN address blocks: 226991 Unique aggregates announced from the ARIN address blocks: 108048 ARIN Region origin ASes present in the Internet Routing Table: 18601 ARIN Prefixes per ASN: 12.20 ARIN Region origin ASes announcing only one prefix: 6885 ARIN Region transit ASes present in the Internet Routing Table: 1917 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 42 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2956 Number of ARIN addresses announced to Internet: 1068638080 Equivalent to 63 /8s, 178 /16s and 31 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 218169 Total RIPE prefixes after maximum aggregation: 101809 RIPE Deaggregation factor: 2.14 Prefixes being announced from the RIPE address blocks: 214353 Unique aggregates announced from the RIPE address blocks: 126612 RIPE Region origin ASes present in the Internet Routing Table: 26531 RIPE Prefixes per ASN: 8.08 RIPE Region origin ASes announcing only one prefix: 11689 RIPE Region transit ASes present in the Internet Routing Table: 3756 Average RIPE Region AS path length visible: 4.5 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 8560 Number of RIPE addresses announced to Internet: 722265728 Equivalent to 43 /8s, 12 /16s and 230 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 100334 Total LACNIC prefixes after maximum aggregation: 23268 LACNIC Deaggregation factor: 4.31 Prefixes being announced from the LACNIC address blocks: 101527 Unique aggregates announced from the LACNIC address blocks: 44908 LACNIC Region origin ASes present in the Internet Routing Table: 8981 LACNIC Prefixes per ASN: 11.30 LACNIC Region origin ASes announcing only one prefix: 2373 LACNIC Region transit ASes present in the Internet Routing Table: 1673 Average LACNIC Region AS path length visible: 5.3 Max LACNIC Region AS path length visible: 44 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 6527 Number of LACNIC addresses announced to Internet: 173939712 Equivalent to 10 /8s, 94 /16s and 28 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-270748 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 21495 Total AfriNIC prefixes after maximum aggregation: 4349 AfriNIC Deaggregation factor: 4.94 Prefixes being announced from the AfriNIC address blocks: 31108 Unique aggregates announced from the AfriNIC address blocks: 9621 AfriNIC Region origin ASes present in the Internet Routing Table: 1335 AfriNIC Prefixes per ASN: 23.30 AfriNIC Region origin ASes announcing only one prefix: 472 AfriNIC Region transit ASes present in the Internet Routing Table: 261 Average AfriNIC Region AS path length visible: 4.9 Max AfriNIC Region AS path length visible: 23 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 618 Number of AfriNIC addresses announced to Internet: 105673216 Equivalent to 6 /8s, 76 /16s and 114 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 5018 620 594 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 3831 4192 74 ERX-CERNET-BKB China Education and Rese 7552 3231 1331 26 VIETEL-AS-AP Viettel Group, VN 45899 3074 1767 112 VNPT-AS-VN VNPT Corp, VN 9829 2734 1493 546 BSNL-NIB National Internet Backbone, IN 7713 2625 801 487 TELKOMNET-AS-AP PT Telekomunikasi Indon 9808 2607 9043 63 CMNET-GD Guangdong Mobile Communication 4766 2556 11123 766 KIXS-AS-KR Korea Telecom, KR 9498 2190 432 208 BBIL-AP BHARTI Airtel Ltd., IN 4755 2145 442 197 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7155 4056 280 27 VIASAT-SP-BACKBONE - ViaSat,Inc., US 11492 3741 246 704 CABLEONE - CABLE ONE, INC., US 22773 3480 2973 157 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 6327 3412 1324 93 SHAW - Shaw Communications Inc., CA 16509 3208 7157 1546 AMAZON-02 - Amazon.com, Inc., US 16625 2829 1490 2031 AKAMAI-AS - Akamai Technologies, Inc., 30036 2224 353 132 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 20115 2150 2770 524 CHARTER-20115 - Charter Communications, 18566 2078 405 104 MEGAPATH5-US - MegaPath Corporation, US 5650 2061 3073 1454 FRONTIER-FRTR - Frontier Communications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 5570 1617 135 UNI2-AS, ES 39891 4034 219 19 ALJAWWALSTC-AS, SA 8551 3114 379 46 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2763 483 1936 AKAMAI-ASN1, US 31334 2619 484 13 KABELDEUTSCHLAND-AS, DE 12389 2399 2232 690 ROSTELECOM-AS, RU 9121 2223 1692 18 TTNET, TR 34984 2158 350 535 TELLCOM-AS, TR 9009 1848 199 1012 M247, GB 13188 1604 100 47 TRIOLAN, UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6257 3349 587 Uninet S.A. de C.V., MX 10620 3362 534 453 Telmex Colombia S.A., CO 11830 2696 370 54 Instituto Costarricense de Electricidad 6503 1632 378 405 Axtel, S.A.B. de C.V., MX 7303 1476 1023 278 Telecom Argentina S.A., AR 28573 1181 2231 197 CLARO S.A., BR 6147 1095 380 37 Telefonica del Peru S.A.A., PE 13999 1080 488 255 Mega Cable, S.A. de C.V., MX 3816 1063 548 127 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 931 110 59 Alestra, S. de R.L. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1163 394 24 LINKdotNET-AS, EG 36992 985 1535 73 ETISALAT-MISR, EG 24835 899 618 25 RAYA-AS, EG 36903 868 438 95 MT-MPLS, MA 8452 672 1857 19 TE-AS TE-AS, EG 6713 626 1863 34 IAM-AS, MA 29571 529 68 11 ORANGE-COTE-IVOIRE, CI 15399 415 45 10 WANANCHI-, KE 37342 402 32 1 MOVITEL, MZ 23889 365 231 15 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6257 3349 587 Uninet S.A. de C.V., MX 12479 5570 1617 135 UNI2-AS, ES 7545 5018 620 594 TPG-INTERNET-AP TPG Telecom Limited, AU 7155 4056 280 27 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 4034 219 19 ALJAWWALSTC-AS, SA 4538 3831 4192 74 ERX-CERNET-BKB China Education and Rese 11492 3741 246 704 CABLEONE - CABLE ONE, INC., US 22773 3480 2973 157 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 6327 3412 1324 93 SHAW - Shaw Communications Inc., CA 10620 3362 534 453 Telmex Colombia S.A., CO Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 12479 5570 5435 UNI2-AS, ES 7545 5018 4424 TPG-INTERNET-AP TPG Telecom Limited, AU 7155 4056 4029 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 4034 4015 ALJAWWALSTC-AS, SA 4538 3831 3757 ERX-CERNET-BKB China Education and Research Net 22773 3480 3323 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 6327 3412 3319 SHAW - Shaw Communications Inc., CA 7552 3231 3205 VIETEL-AS-AP Viettel Group, VN 8551 3114 3068 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 3741 3037 CABLEONE - CABLE ONE, INC., US Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 260984 UNALLOCATED 45.175.186.0/23 16735 ALGAR TELECOM S/A, BR 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65550 DOCUMENT 81.8.34.0/24 15924 BORUSANTELEKOM-AS, TR 65550 DOCUMENT 81.8.35.0/24 15924 BORUSANTELEKOM-AS, TR 65549 DOCUMENT 117.239.163.0/24 65544 UNKNOWN 64339 UNALLOCATED 143.0.108.0/22 18747 IFX18747 - IFX Corporation, US 64355 UNALLOCATED 156.40.196.0/24 30387 NIH-NET-NCCS - National Instit 64011 UNALLOCATED 166.133.128.0/18 20057 ATT-MOBILITY-LLC-AS20057 - AT& 64011 UNALLOCATED 166.133.192.0/18 20057 ATT-MOBILITY-LLC-AS20057 - AT& Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 23.136.224.0/24 15206 6X7 - 6x7 Networks LLC, ZZ 27.100.7.0/24 56096 UNKNOWN 27.126.156.0/22 55827 UNKNOWN 27.126.156.0/23 55827 UNKNOWN 27.126.158.0/23 55827 UNKNOWN 41.67.192.0/18 15964 CAMNET-AS, CM 41.67.192.0/24 15964 CAMNET-AS, CM 41.67.200.0/24 15964 CAMNET-AS, CM 41.67.201.0/24 15964 CAMNET-AS, CM 41.67.202.0/24 15964 CAMNET-AS, CM Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:10 /9:11 /10:38 /11:100 /12:291 /13:572 /14:1148 /15:1925 /16:13231 /17:8080 /18:13960 /19:25701 /20:40423 /21:47463 /22:97094 /23:78687 /24:447972 /25:1103 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 4531 5570 UNI2-AS, ES 6327 3199 3412 SHAW - Shaw Communications Inc., CA 7155 3148 4056 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 2946 4034 ALJAWWALSTC-AS, SA 11492 2914 3741 CABLEONE - CABLE ONE, INC., US 22773 2703 3480 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 2573 3114 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 31334 2475 2619 KABELDEUTSCHLAND-AS, DE 11830 2043 2696 Instituto Costarricense de Electricidad y Telec 8151 1978 6257 Uninet S.A. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1540 2:1108 3:6 4:21 5:3085 6:49 7:1 8:1361 9:1 12:1795 13:426 14:2129 15:49 16:7 17:272 18:78 20:56 23:2963 24:2597 25:4 27:2477 31:2742 32:108 35:37 36:920 37:3146 38:1814 39:305 40:126 41:3398 42:641 43:2095 44:179 45:11503 46:3347 47:268 49:1434 50:1117 51:348 52:1064 54:263 55:689 56:6 57:48 58:2034 59:1112 60:616 61:2226 62:2104 63:1873 64:5013 65:2267 66:4807 67:2732 68:1223 69:3590 70:1393 71:671 72:2707 74:2689 75:1290 76:596 77:2570 78:2014 79:2323 80:1824 81:1526 82:1188 83:924 84:1193 85:2391 86:567 87:1597 88:1142 89:2582 90:234 91:6657 92:1443 93:2467 94:2615 95:3700 96:959 97:339 98:967 99:833 100:82 101:1094 102:695 103:22364 104:3637 105:327 106:828 107:1811 108:682 109:3615 110:1793 111:2036 112:1554 113:1380 114:1298 115:1804 116:1804 117:1956 118:2166 119:1658 120:1096 121:1053 122:2315 123:1848 124:1532 125:2003 128:1392 129:869 130:539 131:1808 132:757 133:241 134:1103 135:258 136:607 137:817 138:2117 139:954 140:663 141:890 142:793 143:1083 144:895 145:288 146:1423 147:900 148:1836 149:1032 150:826 151:1269 152:1413 153:361 154:4455 155:887 156:2679 157:1060 158:704 159:1940 160:1627 161:1002 162:3009 163:848 164:1303 165:1161 166:524 167:1442 168:3563 169:484 170:4219 171:703 172:1760 173:2290 174:1035 175:999 176:2530 177:4046 178:2768 179:1407 180:2150 181:2370 182:2810 183:1155 184:2285 185:15581 186:3761 187:2533 188:3417 189:2064 190:8296 191:1450 192:10090 193:6787 194:5552 195:4206 196:3155 197:1819 198:6055 199:5966 200:7179 201:5204 202:10445 203:10222 204:4574 205:3082 206:3229 207:3273 208:3956 209:4312 210:3926 211:2048 212:3297 213:2975 214:1147 215:54 216:5867 217:2265 218:881 219:604 220:1927 221:972 222:1000 223:1400 End of report

1 0

California public safety power shutdowns
by Sean Donelan 11 Oct '19

11 Oct '19

Pacific Gas & Electric and Southern California Edison have started Public Safety Power Shut-offs (PSPS) in California wildfire high-risk areas. Shut-offs are taking place in three phases. PG&E began shutoffs at midnight in Northern California and the North Bay counties, while the rest of the Bay Area is scheduled to begin losing power in waves at noon. A possible third phase will occur later in the day in the southernmost parts of the PG&E service area in the San Joaquin Valley and Central Coast. Southern California Edison said it's considering cutting power to more than 100,000 customers in eight counties. The utilities haven't said how many people the outages will affect in all.

13 27