August 2019 - Test - lists.nanog.org

Re: Corporate Identity Theft: Azuki, LLC -- AS13389, 216.179.128.0/17
by Ronald F. Guilmette 14 Aug '19

14 Aug '19

In message <MWHPR09MB1504F1CDEEB104E38F66501AA4D60(a)MWHPR09MB1504.namprd09.prod. outlook.com>, Brandon Price <PriceB(a)SherwoodOregon.gov> wrote: ><snip> > > 1) On or about 02-17-2010 HHSI, Inc. (California) transfered the > registration of the 216.179.128.0/17 block from itself to the > 2009 vintage Delaware entity Azuki, LLC. If this is what happened, > then it is likely that the transfer was performed in violation > of the applicable ARIN trasfer policy that was in force at the time. > (Azuki, LLC did not simply buy-out HHSI, Inc., lock, stock, and > barrel in 2010. California records show that HHSI, Inc. continued > to be an active California corporation until at least 02/12/2014, > and probably well beyond that date.) > > >The Arin policy in affect at the time of the transfer would absolutely allow >this as an 8.2 mergers and acquisitions sale. There is no policy requirement >for a "lock, stock, and barrel" buy-out as you say. > >>From the 2010.1 version published 13 JAN 2010, ref: https://www.arin.net/va= >ult/policy/archive/nrpm_20100113.pdf > > >"ARIN will consider requests for the transfer of number resources >in the case of mergers and acquisitions upon receipt of >evidence that the new entity has acquired the assets which >had, as of the date of the acquisition or proposed >reorganization, justified the current entity's use of the number >resource. Examples of assets that justify use of the number >resource include, but are not limited to: >* Existing customer base >* Qualified hardware inventory" > >So they bought the customers and routers that were using that /17. What's >the big deal? Firstly, there is no clear evidence that I am aware of that there are any "customers" per se in this case. Spamhaus has, in effect, judged the entire 216.179.128.0/17 block as being just one big spamming operation, and I personally have no reason at this instant to take issue with that judgement. (Please note also that a generally reliable source informs me that Spamhaus has had this SBL listing for the entire 216.179.128.0/17 block active and in place since circa 2010-03-02, i.e. a full 9 years now.) So anyway, in this case we are really only talking about equipment and not "customers" per se. If I am wrong about that, please post the evidence. Second and more to the point, I think that you and I have dramatically different understandings of the plain meanings of the terms "merger" and "aquisition". The evidence indicates that HHSI, Inc. neither merged with nor was aquired by Azuki, LLC. Rather, HHSI continued to have, and to actively maintain its own separate legal existance through at least 2014... several years *after* the moment in time, on or about 02-17-2010, when the -apparent- ownership of the 216.179.128.0/17 block (going by the WHOIS records) somehow magically passed from HHSI, Inc. to Azuki, LLC. It is not my understanding of mergers and/or aquisitions that the merged (or acquired) entity continues to have and maintain a separate legal existance from the other merged (or acquiring) entity following the merger or acquisition. You, it seems, may have a different conception. Theoretically, HHSI, Inc may have been acquired by Azuki, LLC and may have then become a wholly owned subsidiary of Azuki, LLC. This would explain it's continued, simultaneous, and parallel legal existance in the years 2010 through 2014, along with Azuki, LLC. But even if this rather remote possibility applied, it would still not serve to explain the apparent 2010 transfer of the 216.179.128.0/17 block from the wholly owned subsidary to the parent entity. Why would such a transfer be either necessary or even desirable? And how would such a transfer comport with the ARIN transfer regulations in place at the time? Those regulations, as you have quoted them, DO NOT obviously sanction transfers from subsidiaries to parent entities in cases where both survive as separate legal entities. And it is not even in the least bit clear that there even was any such parent/subsididiary relationship between these two corporate entities at the time of the transfer. But in answer to your larger question, "What's the big deal?", the answer is that -all- WHOIS records for -all- IP address blocks adminstered by -all- RIRs are fundementally unvetted and thus untrustworthy. This one case is a clear and blatant example of that fundemental problem with the way all RIRs are behaving. As far as I am aware, no RIR makes any effort whatsoever to vet changes to WHOIS records, either for IP blocks or ASNs or ORG records. (And this fact was abundantly evident in the Micfo fraud case, where the man behind that fiddled the majority of the street address and other contact information appearing in the public-facing WHOIS records for the blocks assigned to his various phony baloney shell companies in a now-obvious attempt to mislead both the public and also anti-abuse investigators.) Someday soon, because of policies in place at all of the RIRs, you're going to get some spam, or a hack attempt from a specific IP address, and when you go to look up the registrant of the containing IP address block you're going to find out that it is registered to Bozo the Clown, whose mailing address is 1600 Pennsylvania Ave., Washington D.C. and whose contact office phone number is 1-734-930-3030. (Google it.) Worse, that utterly bogus information may appear in the WHOIS record for the ASN that is currently announcing more specifics for parts of YOUR address space. If you don't see any of this as an actual problem. then please just forget I mentioned it. Regards, rfg

2 2

Access to Level3 PoP?
by Nicholas Warren 14 Aug '19

14 Aug '19

We are needing access into Level3/Centurylink's PoP at Monett Missouri to test our fiber. Does anyone have an email, phone number, or smoke signal we could use to get access to test fiber? Support is, sadly, not being very helpful. Nich Warren

1 0

Protecting 1Gb Ethernet From Lightning Strikes
by Javier J 14 Aug '19

14 Aug '19

I'm working with a client site that has been hit twice, very close by lightening. I did lots of electrical work/upgrades/grounding but now I want to focus on protecting Ethernet connections between core switching/other devices that can't be migrated to fiber optic. I was looking for surge protection devices for Ethernet but have never shopped for anything like this before. Was wondering if anyone has deployed a solution? They don't have a large presence on site (I have been moving all of their core stuff to AWS) but they still have core networking / connectivity and PoE cameras / APs around the property. Since migrating their onsite servers/infra to the cloud, now their connectivity is even more important. This is a small site, maybe about 200 switch ports, but I would only need to protect maybe 12 core ones. but would be something I could use in the future with larger deployments. it's just a 1Gbe network BTW. Hope someone with more experience can help make hardware recommendations? Thanks in advance. - Javier

19 20

provider email maintenance standard
by Andrew Dampf 14 Aug '19

14 Aug '19

Hello nanog, I've heard second-hand there is an existing standard for provider maintenance emails that should be followed in the form of a calendar attachment, but I can't seem to find any information on it. Can anyone help me with the following: 1. Does this standard exist? If so, is there somewhere I can read more about it? 2. How many providers follow this standard? Thanks!

7 7

MAP-E
by Baldur Norddahl 10 Aug '19

10 Aug '19

Hello Are there any known public deployments of MAP-E? What about CPE routers with support? The pricing on IPv4 is now at USD 20/address so I am thinking we are forced to go the CGN route going forward. Of all the options, MAP-E appears to be the most elegant. Just add/remove some more headers on a packet and route it as normal. No need to invest in anything as our core routers can already do that. No worries about scale. BUT - our current CPE has zero support. We are too small that they will make this feature just for us, so I need to convince them there is going to be a demand. Alternatively I need to find a different CPE vendor that has MAP-E support, but are there any? What is holding MAP-E back? In my view MAP-E could be the end game for IPv4. Customers get full IPv6 and enough of IPv4 to be somewhat compatible. The ISP networks are not forced to do a lot of processing such as CGN otherwise requires. I read some posts from Japan where users are reporting a deployment of MAP-E. Anyone know about that? Regards, Baldur

18 41

Weekly Routing Table Report
by cscora＠apnic.net 09 Aug '19

09 Aug '19

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 10 Aug, 2019 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 767230 Prefixes after maximum aggregation (per Origin AS): 295222 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 369331 Total ASes present in the Internet Routing Table: 65109 Prefixes per ASN: 11.78 Origin-only ASes present in the Internet Routing Table: 55990 Origin ASes announcing only one prefix: 23960 Transit ASes present in the Internet Routing Table: 9119 Transit-only ASes present in the Internet Routing Table: 277 Average AS path length visible in the Internet Routing Table: 4.5 Max AS path length visible: 42 Max AS path prepend of ASN ( 27978) 31 Prefixes from unregistered ASNs in the Routing Table: 28 Number of instances of unregistered ASNs: 28 Number of 32-bit ASNs allocated by the RIRs: 28163 Number of 32-bit ASNs visible in the Routing Table: 22999 Prefixes from 32-bit ASNs in the Routing Table: 104209 Number of bogon 32-bit ASNs visible in the Routing Table: 15 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 319 Number of addresses announced to Internet: 2842564736 Equivalent to 169 /8s, 110 /16s and 24 /24s Percentage of available address space announced: 76.8 Percentage of allocated address space announced: 76.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.3 Total number of prefixes smaller than registry allocations: 256682 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 206978 Total APNIC prefixes after maximum aggregation: 61718 APNIC Deaggregation factor: 3.35 Prefixes being announced from the APNIC address blocks: 202028 Unique aggregates announced from the APNIC address blocks: 84218 APNIC Region origin ASes present in the Internet Routing Table: 9953 APNIC Prefixes per ASN: 20.30 APNIC Region origin ASes announcing only one prefix: 2753 APNIC Region transit ASes present in the Internet Routing Table: 1486 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 29 Number of APNIC region 32-bit ASNs visible in the Routing Table: 4951 Number of APNIC addresses announced to Internet: 771164416 Equivalent to 45 /8s, 247 /16s and 9 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-141625 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 226878 Total ARIN prefixes after maximum aggregation: 106045 ARIN Deaggregation factor: 2.14 Prefixes being announced from the ARIN address blocks: 225722 Unique aggregates announced from the ARIN address blocks: 107208 ARIN Region origin ASes present in the Internet Routing Table: 18543 ARIN Prefixes per ASN: 12.17 ARIN Region origin ASes announcing only one prefix: 6851 ARIN Region transit ASes present in the Internet Routing Table: 1911 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 42 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2846 Number of ARIN addresses announced to Internet: 1070644096 Equivalent to 63 /8s, 208 /16s and 187 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 213917 Total RIPE prefixes after maximum aggregation: 100258 RIPE Deaggregation factor: 2.13 Prefixes being announced from the RIPE address blocks: 210214 Unique aggregates announced from the RIPE address blocks: 123893 RIPE Region origin ASes present in the Internet Routing Table: 26313 RIPE Prefixes per ASN: 7.99 RIPE Region origin ASes announcing only one prefix: 11623 RIPE Region transit ASes present in the Internet Routing Table: 3738 Average RIPE Region AS path length visible: 4.6 Max RIPE Region AS path length visible: 35 Number of RIPE region 32-bit ASNs visible in the Routing Table: 8355 Number of RIPE addresses announced to Internet: 721023744 Equivalent to 42 /8s, 249 /16s and 243 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 98588 Total LACNIC prefixes after maximum aggregation: 22831 LACNIC Deaggregation factor: 4.32 Prefixes being announced from the LACNIC address blocks: 99842 Unique aggregates announced from the LACNIC address blocks: 44130 LACNIC Region origin ASes present in the Internet Routing Table: 8700 LACNIC Prefixes per ASN: 11.48 LACNIC Region origin ASes announcing only one prefix: 2277 LACNIC Region transit ASes present in the Internet Routing Table: 1608 Average LACNIC Region AS path length visible: 5.2 Max LACNIC Region AS path length visible: 39 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 6259 Number of LACNIC addresses announced to Internet: 173506048 Equivalent to 10 /8s, 87 /16s and 126 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-270748 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 20840 Total AfriNIC prefixes after maximum aggregation: 4347 AfriNIC Deaggregation factor: 4.79 Prefixes being announced from the AfriNIC address blocks: 29105 Unique aggregates announced from the AfriNIC address blocks: 9593 AfriNIC Region origin ASes present in the Internet Routing Table: 1306 AfriNIC Prefixes per ASN: 22.29 AfriNIC Region origin ASes announcing only one prefix: 456 AfriNIC Region transit ASes present in the Internet Routing Table: 251 Average AfriNIC Region AS path length visible: 4.7 Max AfriNIC Region AS path length visible: 27 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 588 Number of AfriNIC addresses announced to Internet: 105970944 Equivalent to 6 /8s, 80 /16s and 253 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 4876 595 572 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 3230 1459 31 VIETEL-AS-AP Viettel Group, VN 45899 3057 1766 113 VNPT-AS-VN VNPT Corp, VN 9829 2732 1494 547 BSNL-NIB National Internet Backbone, IN 9808 2730 9043 63 CMNET-GD Guangdong Mobile Communication 4766 2523 11118 756 KIXS-AS-KR Korea Telecom, KR 7713 2226 670 591 TELKOMNET-AS-AP PT Telekomunikasi Indon 4755 2156 442 192 TATACOMM-AS TATA Communications formerl 9498 2153 431 210 BBIL-AP BHARTI Airtel Ltd., IN 9394 2066 4898 24 CTTNET China TieTong Telecommunications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7155 4064 280 25 VIASAT-SP-BACKBONE - ViaSat,Inc., US 11492 3676 240 621 CABLEONE - CABLE ONE, INC., US 6327 3533 1324 90 SHAW - Shaw Communications Inc., CA 22773 3451 2974 158 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 16509 3069 6392 1455 AMAZON-02 - Amazon.com, Inc., US 16625 2678 1406 1939 AKAMAI-AS - Akamai Technologies, Inc., 30036 2171 348 213 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 20115 2150 2756 532 CHARTER-20115 - Charter Communications, 18566 2093 405 107 MEGAPATH5-US - MegaPath Corporation, US 5650 2073 3073 1451 FRONTIER-FRTR - Frontier Communications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 5489 1629 141 UNI2-AS, ES 39891 3780 219 19 ALJAWWALSTC-AS, SA 8551 3326 379 46 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2726 505 1929 AKAMAI-ASN1, US 31334 2612 484 13 KABELDEUTSCHLAND-AS, DE 12389 2363 2230 662 ROSTELECOM-AS, RU 34984 2116 346 545 TELLCOM-AS, TR 9009 1665 180 910 M247, GB 9121 1605 1692 18 TTNET, TR 13188 1604 100 47 TRIOLAN, UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6228 3370 597 Uninet S.A. de C.V., MX 10620 3384 533 455 Telmex Colombia S.A., CO 11830 2691 370 54 Instituto Costarricense de Electricidad 6503 1612 379 417 Axtel, S.A.B. de C.V., MX 7303 1477 1026 276 Telecom Argentina S.A., AR 28573 1178 2238 208 CLARO S.A., BR 6147 1092 377 31 Telefonica del Peru S.A.A., PE 3816 1046 526 119 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 13999 988 478 246 Mega Cable, S.A. de C.V., MX 11172 936 111 60 Alestra, S. de R.L. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1114 393 21 LINKdotNET-AS, EG 36992 923 1535 76 ETISALAT-MISR, EG 24835 888 634 22 RAYA-AS, EG 36903 843 424 112 MT-MPLS, MA 8452 669 1859 20 TE-AS TE-AS, EG 29571 523 68 11 ORANGE-COTE-IVOIRE, CI 37492 482 470 57 ORANGE-, TN 15399 414 45 11 WANANCHI-, KE 37342 414 32 1 MOVITEL, MZ 15706 361 32 6 Sudatel, SD Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6228 3370 597 Uninet S.A. de C.V., MX 12479 5489 1629 141 UNI2-AS, ES 7545 4876 595 572 TPG-INTERNET-AP TPG Telecom Limited, AU 7155 4064 280 25 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 3780 219 19 ALJAWWALSTC-AS, SA 11492 3676 240 621 CABLEONE - CABLE ONE, INC., US 6327 3533 1324 90 SHAW - Shaw Communications Inc., CA 22773 3451 2974 158 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 10620 3384 533 455 Telmex Colombia S.A., CO 8551 3326 379 46 BEZEQ-INTERNATIONAL-AS Bezeqint Interne Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 12479 5489 5348 UNI2-AS, ES 7545 4876 4304 TPG-INTERNET-AP TPG Telecom Limited, AU 7155 4064 4039 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 3780 3761 ALJAWWALSTC-AS, SA 6327 3533 3443 SHAW - Shaw Communications Inc., CA 22773 3451 3293 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 3326 3280 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 7552 3230 3199 VIETEL-AS-AP Viettel Group, VN 11492 3676 3055 CABLEONE - CABLE ONE, INC., US 45899 3057 2944 VNPT-AS-VN VNPT Corp, VN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 260984 UNALLOCATED 45.175.186.0/23 16735 ALGAR TELECOM S/A, BR 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 64511 DOCUMENT 66.154.208.0/21 32522 MULTNOMAH-ESD - Multnomah Educ 64511 DOCUMENT 66.154.216.0/23 32522 MULTNOMAH-ESD - Multnomah Educ 64511 DOCUMENT 66.154.218.0/24 32522 MULTNOMAH-ESD - Multnomah Educ 65550 DOCUMENT 81.8.34.0/24 15924 BORUSANTELEKOM-AS, TR 65550 DOCUMENT 81.8.35.0/24 15924 BORUSANTELEKOM-AS, TR 66088 UNALLOCATED 103.136.230.0/24 138903 KHILGAON-AS-AP KHILGAON DOT NE 65549 DOCUMENT 117.239.163.0/24 65544 UNKNOWN Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 27.126.156.0/22 55827 UNKNOWN 27.126.156.0/23 55827 UNKNOWN 27.126.158.0/23 55827 UNKNOWN 36.255.24.0/24 40676 AS40676 - Psychz Networks, US 36.255.25.0/24 40676 AS40676 - Psychz Networks, US 36.255.26.0/24 40676 AS40676 - Psychz Networks, US 36.255.27.0/24 40676 AS40676 - Psychz Networks, US 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:10 /9:11 /10:38 /11:102 /12:293 /13:571 /14:1131 /15:1896 /16:13262 /17:8045 /18:13922 /19:25818 /20:40411 /21:47312 /22:95599 /23:77522 /24:440215 /25:1072 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 4445 5489 UNI2-AS, ES 6327 3322 3533 SHAW - Shaw Communications Inc., CA 7155 3156 4064 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 2946 3780 ALJAWWALSTC-AS, SA 11492 2881 3676 CABLEONE - CABLE ONE, INC., US 8551 2779 3326 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 22773 2680 3451 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 31334 2501 2612 KABELDEUTSCHLAND-AS, DE 11830 2039 2691 Instituto Costarricense de Electricidad y Telec 18566 1988 2093 MEGAPATH5-US - MegaPath Corporation, US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1729 2:1068 3:6 4:20 5:3066 6:49 7:1 8:1343 9:1 12:1793 13:391 14:2081 15:41 16:7 17:265 18:80 20:57 23:2866 24:2586 25:4 27:2449 31:2703 32:106 35:38 36:920 37:3140 38:1798 39:294 40:107 41:3313 42:836 43:2072 44:169 45:9499 46:3401 47:264 49:1435 50:1096 51:340 52:1014 54:273 55:641 56:6 57:47 58:1889 59:1107 60:564 61:2186 62:1970 63:1848 64:5008 65:2236 66:4786 67:2731 68:1182 69:3575 70:1382 71:661 72:2677 74:2695 75:1294 76:572 77:2541 78:1855 79:2373 80:1822 81:1490 82:1148 83:943 84:1155 85:2315 86:550 87:1533 88:1055 89:2563 90:223 91:6604 92:1443 93:2482 94:2504 95:3633 96:946 97:341 98:944 99:815 100:88 101:1188 102:606 103:21861 104:3630 105:282 106:793 107:1783 108:700 109:3784 110:1726 111:2007 112:1541 113:1404 114:1278 115:1751 116:1759 117:1967 118:2217 119:1640 120:1060 121:1064 122:2293 123:1805 124:1513 125:2033 128:1383 129:855 130:554 131:1828 132:771 133:223 134:1089 135:258 136:584 137:799 138:2080 139:919 140:616 141:894 142:784 143:1088 144:887 145:276 146:1370 147:838 148:1762 149:1013 150:822 151:1019 152:1110 153:345 154:4368 155:886 156:1995 157:1051 158:678 159:1951 160:1605 161:955 162:2983 163:834 164:1239 165:1177 166:516 167:1407 168:3457 169:482 170:4207 171:614 172:1702 173:2218 174:1039 175:993 176:2458 177:4009 178:2740 179:1391 180:2151 181:2368 182:2757 183:1113 184:2285 185:15445 186:3695 187:2485 188:3501 189:2016 190:8228 191:1463 192:10101 193:6752 194:5501 195:4181 196:3081 197:1745 198:5943 199:5975 200:7160 201:5121 202:10380 203:10247 204:4559 205:3074 206:3232 207:3247 208:3948 209:4283 210:3942 211:2032 212:3245 213:2952 214:1127 215:54 216:5906 217:2241 218:875 219:607 220:1923 221:969 222:980 223:1374 End of report

1 0

Ookla geo IP data contact?
by TJ Trout 08 Aug '19

08 Aug '19

Has anyone had success with getting Ookla / Maxmind to update subnets whois data? I've submitted the correction request with Maxmind ten times over the last 5 years and all of our resources still show the previous allocation owner as the 'isp' when visiting speed test.net Thanks TJ Trout Volt Broadband

4 4

BGP router question
by Art Stephens 08 Aug '19

08 Aug '19

Hope this is not too off topic but can any one advise if a Dell S4048-ON can support full ebgp routes? -- Arthur Stephens Senior Network Administrator Ptera Inc. PO Box 135 24001 E Mission Suite 50 Liberty Lake, WA 99019 509-927-7837 ptera.com | facebook.com/PteraInc | twitter.com/Ptera ----------------------------------------------------------------------------- "This message may contain confidential and/or propriety information, and is intended for the person/entity to whom it was originally addressed. Any use by others is strictly prohibited. Please note that any views or opinions presented in this email are solely those of the author and are not intended to represent those of the company."

5 4

How often does Google's Safe Browsing system expire URLs that are 404?
by Landon Stewart 08 Aug '19

08 Aug '19

Hello, Numerous customers that have had phishing issues reported to them as a result of Google’s Safe Browsing program have taken care of said issues. The URL(s) reported to them either return a 404 or 5xx error but the URL stays listed, according to the GSB’s API, for weeks afterwards. Does anyone know: 1) Is there some kind of expiry time on URLs flagged as unsafe by GSB 2) Is there some way for *us* (the provider) to trigger a review of the URL to speed this process up? Harassing the client to login to the webmaster portal and request a review can be a cat herding exercise. Thanks for any info you might have. — Landon Stewart Lead Analyst - Abuse and Security Management INAP® 📧 lstewart(a)inap.com 🌍 www.inap.com

1 0

Research project on blacklists
by Anushah Hossain 08 Aug '19

08 Aug '19

Hi all, My colleagues and I at UC Berkeley and the International Computer Science Institute are working on a project evaluating third-party blacklists. As part of that, we're interested in hearing how you utilize them, and what you perceive as their strengths and weaknesses. If you have five to ten minutes and are interested in sharing your thoughts, you can fill out our anonymous survey here, or respond to me directly off-list: https://berkeley.qualtrics.com/jfe/form/SV_200mg5hnQiAOgUl There is also an option in the survey to opt-in to receiving a notification once the research is made public. Apologies if you received this message before! We've tried to minimize cross-posting as we realize several groups share members. Best, Anushah -- Anushah Hossain, PhD Student Energy and Resources Group, UC Berkeley

7 7