April 2019 - Test - lists.nanog.org

Re: SoftLayer NOC contact to get two IP prefixes de-announced
by Katie Holly 26 Apr '19

26 Apr '19

Hi, the prefixes in question (144.48.82.0/24 and 185.121.178.0/24) are no longer announced today after forwarding the original email to NetworkSupportEngineers-SoftLayer-WW(a)wwpdl.vnet.ibm.com and peering(a)softlayer.com Thanks Best regards Katie Holly On 4/26/19 10:57 PM, Sandra Murphy wrote: > Hi! > > I try to keep track of prefix mis-originations that I see announced publicly. > > For this one, you did not mention the prefixes involved, so I tried to discover the prefixes you might hold, based only on the info gleaned from your message. > > I’ve found a handful of prefixes associated in some way. None of them seem to be originated by AS36351. They are all originated by AS204136. > > Would you be willing to confirm whether any of these are the prefixes in question? > > 185.121.177.0/24 > 185.121.163.0/24 > 5.253.85.0/24 > 103.230.141.0/24 > > 185.140.114.0/24 > 185.140.115.0/24 > 169.239.202.0/24 > > —Sandy Murphy > > (6 of the 7 are protected by an RPKI ROA, which is good.) > > btw. I typed meo.ws into a web browser, expecting only to receive a list web search results, but I found that meo.ws replies - with what looks like a set of info and references you find generally useful. > >> On Apr 26, 2019, at 7:25 AM, Katie Holly <t0pe5p0h(a)meo.ws> wrote: >> >> Hi, >> >> anyone from SoftLayer (AS36351) around or someone with a contact to their NOC? They have been announcing two /24's from us without permission and we'd like them to remove the announcement immediately. >> >> Emails were sent to ipadmin(a)softlayer.com, abuse(a)ibm.com and ipreg(a)us.ibm.com without success hence I'm reaching out to this list as a last resort. >> >> Thanks >> >> -- >> Best regards >> >> Katie Holly >

1 0

Re: Comcast storing WiFi passwords in cleartext?
by Benjamin Sisco 26 Apr '19

26 Apr '19

I think we all understand the value of using one’s own equipment and keeping the firmware up to date if one is in any way concerned about security. We all should also understand that in a managed environment such as an ISP there should be no reasonable expectation of privacy regarding the configuration of the equipment attached to the ISP's network (rented or customer owned). The bigger concern should be the cleartext portion of the subject. There’s ZERO reason to store or transmit any credentials (login, service, keys, etc.), in any location, in an unencrypted fashion regardless of their perceived value or purpose. Unless you like risk. -- Ben Confidentiality Notice: This e-mail communication and any attachments may contain confidential and privileged information for the use of the designated recipients named above. If you are not the intended recipient, you are hereby notified that you have received this communication in error and that any review, disclosure, dissemination, distribution or copying of it or its contents is prohibited. If you have received this communication in error, please notify me immediately by replying to this message and deleting it from your computer. Thank you.

15 26

SoftLayer NOC contact to get two IP prefixes de-announced
by Katie Holly 26 Apr '19

26 Apr '19

Hi, anyone from SoftLayer (AS36351) around or someone with a contact to their NOC? They have been announcing two /24's from us without permission and we'd like them to remove the announcement immediately. Emails were sent to ipadmin(a)softlayer.com, abuse(a)ibm.com and ipreg(a)us.ibm.com without success hence I'm reaching out to this list as a last resort. Thanks -- Best regards Katie Holly

2 1

Weekly Routing Table Report
by cscora＠apnic.net 26 Apr '19

26 Apr '19

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 27 Apr, 2019 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 748157 Prefixes after maximum aggregation (per Origin AS): 287073 Deaggregation factor: 2.61 Unique aggregates announced (without unneeded subnets): 360249 Total ASes present in the Internet Routing Table: 63999 Prefixes per ASN: 11.69 Origin-only ASes present in the Internet Routing Table: 55033 Origin ASes announcing only one prefix: 23727 Transit ASes present in the Internet Routing Table: 8966 Transit-only ASes present in the Internet Routing Table: 278 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 40 Max AS path prepend of ASN ( 22394) 37 Prefixes from unregistered ASNs in the Routing Table: 24 Number of instances of unregistered ASNs: 27 Number of 32-bit ASNs allocated by the RIRs: 26729 Number of 32-bit ASNs visible in the Routing Table: 21812 Prefixes from 32-bit ASNs in the Routing Table: 95805 Number of bogon 32-bit ASNs visible in the Routing Table: 20 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 236 Number of addresses announced to Internet: 2850096512 Equivalent to 169 /8s, 225 /16s and 5 /24s Percentage of available address space announced: 77.0 Percentage of allocated address space announced: 77.0 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.2 Total number of prefixes smaller than registry allocations: 250340 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 201578 Total APNIC prefixes after maximum aggregation: 58375 APNIC Deaggregation factor: 3.45 Prefixes being announced from the APNIC address blocks: 198234 Unique aggregates announced from the APNIC address blocks: 82785 APNIC Region origin ASes present in the Internet Routing Table: 9678 APNIC Prefixes per ASN: 20.48 APNIC Region origin ASes announcing only one prefix: 2708 APNIC Region transit ASes present in the Internet Routing Table: 1440 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 29 Number of APNIC region 32-bit ASNs visible in the Routing Table: 4677 Number of APNIC addresses announced to Internet: 773820800 Equivalent to 46 /8s, 31 /16s and 145 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-139577 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 222607 Total ARIN prefixes after maximum aggregation: 104561 ARIN Deaggregation factor: 2.13 Prefixes being announced from the ARIN address blocks: 221648 Unique aggregates announced from the ARIN address blocks: 105453 ARIN Region origin ASes present in the Internet Routing Table: 18445 ARIN Prefixes per ASN: 12.02 ARIN Region origin ASes announcing only one prefix: 6851 ARIN Region transit ASes present in the Internet Routing Table: 1907 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 40 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2678 Number of ARIN addresses announced to Internet: 1078683008 Equivalent to 64 /8s, 75 /16s and 101 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 206049 Total RIPE prefixes after maximum aggregation: 98153 RIPE Deaggregation factor: 2.10 Prefixes being announced from the RIPE address blocks: 202399 Unique aggregates announced from the RIPE address blocks: 120183 RIPE Region origin ASes present in the Internet Routing Table: 25990 RIPE Prefixes per ASN: 7.79 RIPE Region origin ASes announcing only one prefix: 11533 RIPE Region transit ASes present in the Internet Routing Table: 3705 Average RIPE Region AS path length visible: 4.6 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 8042 Number of RIPE addresses announced to Internet: 718891648 Equivalent to 42 /8s, 217 /16s and 106 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 96408 Total LACNIC prefixes after maximum aggregation: 21667 LACNIC Deaggregation factor: 4.45 Prefixes being announced from the LACNIC address blocks: 97780 Unique aggregates announced from the LACNIC address blocks: 42467 LACNIC Region origin ASes present in the Internet Routing Table: 8315 LACNIC Prefixes per ASN: 11.76 LACNIC Region origin ASes announcing only one prefix: 2194 LACNIC Region transit ASes present in the Internet Routing Table: 1537 Average LACNIC Region AS path length visible: 5.0 Max LACNIC Region AS path length visible: 25 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 5861 Number of LACNIC addresses announced to Internet: 173704448 Equivalent to 10 /8s, 90 /16s and 133 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-270748 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 21490 Total AfriNIC prefixes after maximum aggregation: 4298 AfriNIC Deaggregation factor: 5.00 Prefixes being announced from the AfriNIC address blocks: 27860 Unique aggregates announced from the AfriNIC address blocks: 9142 AfriNIC Region origin ASes present in the Internet Routing Table: 1277 AfriNIC Prefixes per ASN: 21.82 AfriNIC Region origin ASes announcing only one prefix: 441 AfriNIC Region transit ASes present in the Internet Routing Table: 245 Average AfriNIC Region AS path length visible: 4.9 Max AfriNIC Region AS path length visible: 24 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 554 Number of AfriNIC addresses announced to Internet: 104743936 Equivalent to 6 /8s, 62 /16s and 68 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 4733 546 552 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4708 4192 74 ERX-CERNET-BKB China Education and Rese 7552 3134 1307 54 VIETEL-AS-AP Viettel Group, VN 45899 3014 1738 112 VNPT-AS-VN VNPT Corp, VN 9829 2733 1496 551 BSNL-NIB National Internet Backbone, IN 4766 2547 11120 761 KIXS-AS-KR Korea Telecom, KR 9808 2448 8699 27 CMNET-GD Guangdong Mobile Communication 9394 2176 4898 27 CTTNET China TieTong Telecommunications 4755 2147 429 185 TATACOMM-AS TATA Communications formerl 9498 2049 427 171 BBIL-AP BHARTI Airtel Ltd., IN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 11492 3645 238 584 CABLEONE - CABLE ONE, INC., US 6327 3615 1325 93 SHAW - Shaw Communications Inc., CA 22773 3399 2976 161 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 16509 2677 5944 1122 AMAZON-02 - Amazon.com, Inc., US 16625 2409 1320 1821 AKAMAI-AS - Akamai Technologies, Inc., 7155 2239 280 25 VIASAT-SP-BACKBONE - ViaSat,Inc., US 30036 2174 356 112 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 20115 2148 2751 525 CHARTER-20115 - Charter Communications, 18566 2107 405 108 MEGAPATH5-US - MegaPath Corporation, US 5650 2086 3074 1462 FRONTIER-FRTR - Frontier Communications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 5432 1629 140 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 8551 3233 378 45 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2634 525 1908 AKAMAI-ASN1, US 12389 2247 2222 650 ROSTELECOM-AS, RU 34984 2078 343 540 TELLCOM-AS, TR 9121 1669 1692 18 TTNET, TR 13188 1605 100 47 TRIOLAN, UA 9009 1422 148 773 M247, GB 8402 1236 545 15 CORBINA-AS OJSC "Vimpelcom", RU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5708 3346 599 Uninet S.A. de C.V., MX 10620 3446 538 377 Telmex Colombia S.A., CO 11830 2708 384 34 Instituto Costarricense de Electricidad 7303 1475 1012 251 Telecom Argentina S.A., AR 28573 1344 2226 202 CLARO S.A., BR 6503 1258 433 53 Axtel, S.A.B. de C.V., MX 6147 1158 377 30 Telefonica del Peru S.A.A., PE 3816 1083 515 141 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 955 144 64 Alestra, S. de R.L. de C.V., MX 13999 952 512 241 Mega Cable, S.A. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1225 393 21 LINKdotNET-AS, EG 37611 896 107 9 Afrihost, ZA 24835 888 648 21 RAYA-AS, EG 36992 852 1531 68 ETISALAT-MISR, EG 36903 827 416 126 MT-MPLS, MA 8452 705 1731 19 TE-AS TE-AS, EG 29571 514 70 12 ORANGE-COTE-IVOIRE, CI 37492 470 470 57 ORANGE-, TN 15706 421 32 6 Sudatel, SD 37342 420 32 1 MOVITEL, MZ Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5708 3346 599 Uninet S.A. de C.V., MX 12479 5432 1629 140 UNI2-AS, ES 7545 4733 546 552 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4708 4192 74 ERX-CERNET-BKB China Education and Rese 39891 3778 203 20 ALJAWWALSTC-AS, SA 11492 3645 238 584 CABLEONE - CABLE ONE, INC., US 6327 3615 1325 93 SHAW - Shaw Communications Inc., CA 10620 3446 538 377 Telmex Colombia S.A., CO 22773 3399 2976 161 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 8551 3233 378 45 BEZEQ-INTERNATIONAL-AS Bezeqint Interne Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 12479 5432 5292 UNI2-AS, ES 4538 4708 4634 ERX-CERNET-BKB China Education and Research Net 7545 4733 4181 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3615 3522 SHAW - Shaw Communications Inc., CA 22773 3399 3238 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 3233 3188 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 7552 3134 3080 VIETEL-AS-AP Viettel Group, VN 10620 3446 3069 Telmex Colombia S.A., CO 11492 3645 3061 CABLEONE - CABLE ONE, INC., US Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65550 DOCUMENT 81.8.34.0/24 15924 BORUSANTELEKOM-AS, TR 65550 DOCUMENT 81.8.35.0/24 15924 BORUSANTELEKOM-AS, TR 65549 DOCUMENT 117.239.163.0/24 65544 UNKNOWN 64339 UNALLOCATED 143.0.108.0/22 18747 IFX18747 - IFX Corporation, US 64355 UNALLOCATED 156.40.196.0/24 30387 NIH-NET-NCCS - National Instit 64011 UNALLOCATED 166.133.128.0/18 20057 ATT-MOBILITY-LLC-AS20057 - AT& 64011 UNALLOCATED 166.133.192.0/18 20057 ATT-MOBILITY-LLC-AS20057 - AT& 64011 UNALLOCATED 166.184.9.0/24 20057 ATT-MOBILITY-LLC-AS20057 - AT& Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 27.126.156.0/22 55827 UNKNOWN 27.126.156.0/23 55827 UNKNOWN 27.126.158.0/23 55827 UNKNOWN 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ 41.78.92.0/22 14988 BTC-GATE1, BW 41.78.180.0/23 37265 -Reserved AS-, ZZ 41.220.48.0/20 36900 -Reserved AS-, ZZ 41.242.92.0/24 37643 -Reserved AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:12 /9:10 /10:37 /11:100 /12:294 /13:569 /14:1131 /15:1908 /16:13381 /17:7974 /18:13916 /19:25655 /20:40189 /21:46290 /22:93515 /23:75952 /24:426191 /25:1033 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 4356 5432 UNI2-AS, ES 6327 3390 3615 SHAW - Shaw Communications Inc., CA 39891 2946 3778 ALJAWWALSTC-AS, SA 11492 2854 3645 CABLEONE - CABLE ONE, INC., US 8551 2687 3233 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 22773 2634 3399 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 11830 2053 2708 Instituto Costarricense de Electricidad y Telec 18566 2002 2107 MEGAPATH5-US - MegaPath Corporation, US 30036 1921 2174 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 7155 1913 2239 VIASAT-SP-BACKBONE - ViaSat,Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1597 2:984 3:6 4:21 5:3124 6:45 7:1 8:1286 9:1 12:1802 13:334 14:1981 15:36 16:4 17:252 18:58 20:50 23:2673 24:2497 25:2 27:2483 31:1977 32:100 35:36 36:853 37:3031 38:1735 39:297 40:121 41:3293 42:780 43:2026 44:149 45:7378 46:3261 47:262 49:1366 50:1109 51:322 52:1015 54:283 55:704 56:6 57:43 58:1792 59:1075 60:501 61:2124 62:2128 63:1831 64:4948 65:2226 66:4836 67:2760 68:1178 69:3530 70:1335 71:617 72:2521 74:2754 75:693 76:543 77:1762 78:1811 79:2290 80:1807 81:1510 82:1127 83:934 84:1134 85:2275 86:523 87:1543 88:1054 89:2597 90:216 91:6571 92:1378 93:2476 94:2516 95:3248 96:941 97:344 98:956 99:508 100:87 101:1157 102:544 103:21062 104:3545 105:256 106:782 107:1787 108:686 109:3723 110:1655 111:1973 112:1486 113:1404 114:1142 115:1723 116:1749 117:1904 118:2189 119:1626 120:1021 121:1042 122:2356 123:1650 124:1470 125:1958 128:1232 129:832 130:536 131:1805 132:794 133:222 134:1088 135:241 136:570 137:749 138:2056 139:864 140:645 141:875 142:801 143:1048 144:890 145:494 146:1261 147:831 148:1717 149:831 150:788 151:1012 152:1059 153:335 154:2901 155:917 156:1635 157:964 158:657 159:1948 160:1602 161:927 162:2757 163:811 164:1198 165:1589 166:434 167:1392 168:3269 169:876 170:4115 171:579 172:1251 173:2211 174:1041 175:923 176:2325 177:4150 178:2544 179:1396 180:2092 181:2418 182:2676 183:1090 184:1709 185:14999 186:3683 187:2445 188:2949 189:1981 190:8272 191:1594 192:10063 193:6654 194:5419 195:4116 196:3151 197:1777 198:5897 199:5989 200:7134 201:5092 202:10413 203:10091 204:4554 205:3039 206:3232 207:3232 208:3959 209:4241 210:3923 211:2009 212:3145 213:2919 214:1108 215:55 216:5922 217:2235 218:882 219:584 220:1857 221:968 222:992 223:1369 End of report

1 0

Re: Comcast storing WiFi passwords in cleartext?
by Brandon Jackson 25 Apr '19

25 Apr '19

That is not related to the Gateway at all, nor done on the local network are missing with the local network as I was describing. That is further Upstream. Brandon Jackson On Thu, Apr 25, 2019, 14:50 Mel Pilgrim <list_nanog(a)bluerosetech.com> wrote: > On 2019-04-23 18:32, Brandon Jackson via NANOG wrote: > > I'm not saying they are doing anything nefarious or packet capping the > > local network or anything of that nature that is a little on the tin > > foil hat side for me personally, > Except they (Comcast) are doing literally that. When you get close to > your data cap for the month, they inject a warning popup into > unencrypted webpages. They also modify DNS replies in flight even when > you don't use their resolvers. > > Source: direct observation >

1 0

Brocade GRE Tunnel
by Fawcett, Nick 24 Apr '19

24 Apr '19

I have an MLX8e on ver 5.6.0. I am trying to establish a GRE tunnel, but I'm having an issue because the source is not in the default VRF. Any Brocade gurus out there? (config-tnif-10)#tunnel source ve 410 Error - Tunnel source interface v410 is not part of default-vrf If I try using the IP I get: (config-tnif-10)#tunnel source 1.2.3.4 Error - Tunnel Source IP 1.2.3.4 is not configured on any interface ~Nick -- Checked by SOPHOS http://www.sophos.com

2 2

Comcast storing WiFi passwords in cleartext?
by Töma Gavrichenkov 24 Apr '19

24 Apr '19

Hi NANOG, Here's an issue raised today: https://security.stackexchange.com/questions/207895/how-does-comcast-know-m… Apparently there's a concern with customers that their seemingly private passphrases, entered in their own boxes, are being shared with the upstream ISP without an explicit customer consent, and are kept in the ISP database for an unspecified period of time. Is it there by design? if so, then maybe some tweaks are necessary? -- Töma

15 19

who attacks the weather channel?
by Kain, Rebecca (.) 24 Apr '19

24 Apr '19

https://www.cnn.com/2019/04/18/media/weather-channel-hack/index.html

10 11

Cisco SCTP response packet from global instead of vrf
by Karsten Thomann 24 Apr '19

24 Apr '19

Hello, I've an interessting problem I've never saw before. We have two Routers (19xx and 4451) with the same configuration design: Dialer 1 and 1 LAN Interface in global table with default route over the LAN Dialer 2 and 1 LAN Interface in vrf internet, default via dialer 2 towards the core. The router is receiving a SCTP packet destined to the dialer 2 IP and sends a response packet not via the expected dialer 2 interface within the internet vrf where it was received, but sends it via the default route in global table... Does anyone know why the response is send from another routing table? The configuration is pretty basic without any leaking, just a global table for a vpn service and an internet vrf for an internet connection. Thanks in Advance Karsten

1 0

OffTopic: Telecom Fraud
by Dovid Bender 23 Apr '19

23 Apr '19

Hi All, I am wondering if a bit of public shaming may help. I every so often get calls from the "verizon wireless fraud prevention dept". It's scammers calling me (and others) telling them there was fraud on their account. This gets people worked up and fooled into giving out data that they normally wouldn't. This allows the fraudsters to then order devices under the victims name. They spoof their caller ID to that of Verizons. I understand there is currently no fix (though lets hope that SHAKEN/STIR fixes it one day). but at the very least why can't Verizon drop these calls at their edge. If they see the B-Number as being their client and the A number being theirs but coming from elsewhere why can't they just drop the call? If anyone has any insight I would love to hear it. TIA. Regards, Dovid

4 5