- Test - lists.nanog.org

BGP Update Report
by cidr-report＠potaroo.net 18 Apr '08

18 Apr '08

BGP Update Report Interval: 17-Mar-08 -to- 17-Apr-08 (32 days) Observation Point: BGP Peering with AS2.0 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS9498 94221 1.4% 73.3 -- BBIL-AP BHARTI BT INTERNET LTD. 2 - AS24731 79959 1.2% 929.8 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 3 - AS9583 64652 1.0% 54.6 -- SIFY-AS-IN Sify Limited 4 - AS8866 57991 0.9% 191.4 -- BTC-AS Bulgarian Telecommunication Company Plc. 5 - AS9121 53147 0.8% 21.1 -- TTNET TTnet Autonomous System 6 - AS17974 49387 0.7% 109.5 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia 7 - AS8151 45233 0.7% 27.7 -- Uninet S.A. de C.V. 8 - AS26829 43980 0.7% 43980.0 -- YKK-USA - YKK USA,INC 9 - AS18306 42440 0.6% 1147.0 -- MASANHANANET-AS-KR HANANET 10 - AS2386 41792 0.6% 28.7 -- INS-AS - AT&T Data Communications Services 11 - AS9198 34239 0.5% 77.6 -- KAZTELECOM-AS Kazakhtelecom Corporate Sales Administration 12 - AS6140 33856 0.5% 49.6 -- IMPSAT-USA - ImpSat USA, Inc. 13 - AS7738 33643 0.5% 130.9 -- Telecomunicacoes da Bahia S.A. 14 - AS6306 31605 0.5% 672.4 -- Telcel, C.A 15 - AS24863 29916 0.5% 64.1 -- LINKdotNET-AS 16 - AS7018 28370 0.4% 18.4 -- ATT-INTERNET4 - AT&T WorldNet Services 17 - AS17487 26508 0.4% 26508.0 -- ICBCASIA-AP Industrial and Commercial Bank 18 - AS20115 26004 0.4% 20.8 -- CHARTER-NET-HKY-NC - Charter Communications 19 - AS9829 25944 0.4% 38.7 -- BSNL-NIB National Internet Backbone 20 - AS4755 25887 0.4% 15.8 -- VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS26829 43980 0.7% 43980.0 -- YKK-USA - YKK USA,INC 2 - AS17487 26508 0.4% 26508.0 -- ICBCASIA-AP Industrial and Commercial Bank 3 - AS19334 24548 0.4% 24548.0 -- SPORTLINE-DBC - SPORTLINE 4 - AS19017 15781 0.2% 15781.0 -- QUALCOMM-QWBS-LV - Qualcomm Wireless Business Solutions 5 - AS30929 9144 0.1% 9144.0 -- HUTCB Hidrotechnical Faculty - Technical University 6 - AS42787 22009 0.3% 7336.3 -- MMIP-AS MultiMedia IP Ltd. 7 - AS14895 18749 0.3% 6249.7 -- LAWSON-SOFTWARE - Lawson Software 8 - AS13495 6135 0.1% 6135.0 -- NTT do Brasil Telecomunicaoes Ltda 9 - AS15136 5672 0.1% 5672.0 -- AS-NSPOF - NSPOF Communications Inc 10 - AS44656 5560 0.1% 5560.0 -- HOLOSFIND-ROMANIA HOLOSFIND SRL 11 - AS21291 5185 0.1% 5185.0 -- OMEGABANK 8 Dragatsaniou str 12 - AS7257 9437 0.1% 4718.5 -- PREMIERE-GLOBAL-SERVICES-INC - Premiere Global Services, Inc. 13 - AS29225 3862 0.1% 3862.0 -- TAIF-TELCOM-AS JSC TAIF-TELCOM 14 - AS25024 3279 0.1% 3279.0 -- DECEUNINCK-PLASTICS Deceuninck Plastics Autonomous System 15 - AS39105 2867 0.0% 2867.0 -- CLASS-AS SC Class Computers And Service SRL 16 - AS23082 12832 0.2% 2566.4 -- MPHI - Michigan Public health Institute 17 - AS28282 2142 0.0% 2142.0 -- DW7 CENTRO DE DADOS LTDA 18 - AS36975 2067 0.0% 2067.0 -- CBA-AS 19 - AS15821 6050 0.1% 2016.7 -- ASTRAL-AS JV "Astral-Kiev Ltd." Autonomous System 20 - AS9747 14436 0.2% 1804.5 -- EZINTERNET-AS-AP EZInternet Pty Ltd TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 125.23.208.0/20 63640 0.9% AS9498 -- BBIL-AP BHARTI BT INTERNET LTD. 2 - 213.91.175.0/24 49863 0.7% AS8866 -- BTC-AS Bulgarian Telecommunication Company Plc. 3 - 12.108.254.0/24 43980 0.6% AS26829 -- YKK-USA - YKK USA,INC 4 - 220.241.83.0/24 26508 0.4% AS17487 -- ICBCASIA-AP Industrial and Commercial Bank 5 - 84.23.96.0/19 25412 0.4% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) AS34400 -- ASN-ETTIHADETISALAT Etihad Etisalat 6 - 64.79.128.0/19 25194 0.4% AS23005 -- SWITCH-COMMUNICATIONS - SWITCH Communications Group LLC 7 - 63.169.11.0/24 24548 0.3% AS19334 -- SPORTLINE-DBC - SPORTLINE 8 - 221.135.80.0/24 23563 0.3% AS9583 -- SIFY-AS-IN Sify Limited 9 - 193.33.184.0/23 21981 0.3% AS42787 -- MMIP-AS MultiMedia IP Ltd. 10 - 125.57.60.0/24 21655 0.3% AS18306 -- MASANHANANET-AS-KR HANANET 11 - 124.7.192.0/24 21390 0.3% AS9583 -- SIFY-AS-IN Sify Limited 12 - 211.175.148.0/24 19452 0.3% AS18306 -- MASANHANANET-AS-KR HANANET 13 - 221.128.192.0/18 17513 0.2% AS18231 -- EXATT-AS-AP Exatt Technologies Private Ltd. 14 - 63.82.84.0/24 15781 0.2% AS19017 -- QUALCOMM-QWBS-LV - Qualcomm Wireless Business Solutions 15 - 203.63.26.0/24 14379 0.2% AS9747 -- EZINTERNET-AS-AP EZInternet Pty Ltd 16 - 89.4.128.0/24 11920 0.2% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 17 - 89.4.130.0/24 11481 0.2% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 18 - 89.4.131.0/24 11404 0.2% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 19 - 63.87.163.0/24 9428 0.1% AS7257 -- PREMIERE-GLOBAL-SERVICES-INC - Premiere Global Services, Inc. 20 - 81.180.108.0/24 9144 0.1% AS30929 -- HUTCB Hidrotechnical Faculty - Technical University Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 18 Apr '08

18 Apr '08

This report has been generated at Fri Apr 18 21:33:51 2008 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 11-04-08 257025 161793 12-04-08 257320 162375 13-04-08 257308 162847 14-04-08 257510 162672 15-04-08 257503 164095 16-04-08 257786 164155 17-04-08 257824 164757 18-04-08 257852 163801 AS Summary 28074 Number of ASes in routing system 11833 Number of ASes announcing only one prefix 1630 Largest number of prefixes announced by an AS AS4755 : VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System 88503040 Largest address span announced by an AS (/32s) AS721 : DISA-ASNBLK - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 18Apr08 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 258065 164210 93855 36.4% All ASes AS4755 1630 201 1429 87.7% VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System AS6389 1420 244 1176 82.8% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS9498 1161 66 1095 94.3% BBIL-AP BHARTI BT INTERNET LTD. AS18566 1043 34 1009 96.7% COVAD - Covad Communications Co. AS22773 917 85 832 90.7% CCINET-2 - Cox Communications Inc. AS4323 1423 609 814 57.2% TWTC - Time Warner Telecom, Inc. AS11492 1211 467 744 61.4% CABLEONE - CABLE ONE AS19262 899 225 674 75.0% VZGNI-TRANSIT - Verizon Internet Services Inc. AS8151 1187 539 648 54.6% Uninet S.A. de C.V. AS17488 1013 385 628 62.0% HATHWAY-NET-AP Hathway IP Over Cable Internet AS1785 1011 394 617 61.0% AS-PAETEC-NET - PaeTec Communications, Inc. AS6478 911 367 544 59.7% ATT-INTERNET3 - AT&T WorldNet Services AS2386 1394 874 520 37.3% INS-AS - AT&T Data Communications Services AS18101 681 172 509 74.7% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS6197 985 508 477 48.4% BATI-ATL - BellSouth Network Solutions, Inc AS4766 852 392 460 54.0% KIXS-AS-KR Korea Telecom AS19916 555 99 456 82.2% ASTRUM-0001 - OLM LLC AS7011 1094 641 453 41.4% FRONTIER-AND-CITIZENS - Frontier Communications of America, Inc. AS4812 544 98 446 82.0% CHINANET-SH-AP China Telecom (Group) AS855 645 200 445 69.0% CANET-ASN-4 - Bell Aliant AS17676 508 68 440 86.6% GIGAINFRA BB TECHNOLOGY Corp. AS22047 558 138 420 75.3% VTR BANDA ANCHA S.A. AS8103 566 153 413 73.0% STATE-OF-FLA - Florida Department of Management Services - Technology Program AS7018 1428 1023 405 28.4% ATT-INTERNET4 - AT&T WorldNet Services AS6140 609 217 392 64.4% IMPSAT-USA - ImpSat USA, Inc. AS9443 455 78 377 82.9% INTERNETPRIMUS-AS-AP Primus Telecommunications AS3602 453 78 375 82.8% AS3602-RTI - Rogers Telecom Inc. AS4808 517 154 363 70.2% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS5668 685 334 351 51.2% AS-5668 - CenturyTel Internet Holdings, Inc. AS16814 426 75 351 82.4% NSS S.A. Total 26781 8918 17863 66.7% Top 30 total Possible Bogus Routes 24.38.0.0/17 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 24.48.0.0/13 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 24.51.159.0/24 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 24.54.224.0/19 AS20001 ROADRUNNER-WEST - Road Runner HoldCo LLC 24.75.160.0/19 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 24.75.192.0/18 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 24.142.40.0/21 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.142.160.0/19 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.0.0/17 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV - Wireless Broadband via Satellite 63.140.213.0/24 AS22555 UTC - Universal Talkware Corporation 63.141.42.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 63.143.71.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 63.143.115.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 63.248.0.0/16 AS3356 LEVEL3 Level 3 Communications 64.5.64.0/22 AS7228 MCLEOD - McLeod, Inc. 64.5.68.0/24 AS7228 MCLEOD - McLeod, Inc. 64.5.69.0/24 AS7228 MCLEOD - McLeod, Inc. 64.5.70.0/23 AS7228 MCLEOD - McLeod, Inc. 64.5.72.0/24 AS7228 MCLEOD - McLeod, Inc. 64.5.73.0/24 AS7228 MCLEOD - McLeod, Inc. 64.5.74.0/23 AS7228 MCLEOD - McLeod, Inc. 64.5.76.0/22 AS7228 MCLEOD - McLeod, Inc. 64.5.80.0/20 AS7228 MCLEOD - McLeod, Inc. 64.5.96.0/22 AS7228 MCLEOD - McLeod, Inc. 64.5.100.0/23 AS7228 MCLEOD - McLeod, Inc. 64.5.102.0/24 AS7228 MCLEOD - McLeod, Inc. 64.5.103.0/24 AS7228 MCLEOD - McLeod, Inc. 64.5.104.0/21 AS7228 MCLEOD - McLeod, Inc. 64.5.112.0/20 AS7228 MCLEOD - McLeod, Inc. 64.7.112.0/21 AS6453 GLOBEINTERNET TATA Communications 64.7.120.0/21 AS6453 GLOBEINTERNET TATA Communications 64.50.128.0/18 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 64.64.159.0/24 AS32004 BIG-ASN - Business Information Group, Inc. 64.144.0.0/15 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 64.188.0.0/16 AS3356 LEVEL3 Level 3 Communications 65.36.8.0/24 AS5696 65.36.9.0/24 AS5696 65.36.33.0/24 AS5696 65.36.52.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 66.6.34.0/24 AS14935 MONTICELLO - Monticello Networks, Inc. 66.11.32.0/20 AS6261 VISINET - Visionary Systems, Inc. 66.11.40.0/21 AS6261 VISINET - Visionary Systems, Inc. 66.54.91.0/24 AS30506 BLACKSUN-1 - Blacksun Technologies LLC 66.55.160.0/19 AS29994 66.64.96.0/20 AS3790 RADIGRAFICA COSTARRICENSE 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.199.32.0/20 AS10397 WISP-AS - Wispnet, LLC 66.206.32.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.33.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.34.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.35.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.40.0/22 AS174 COGENT Cogent/PSI 66.206.44.0/23 AS174 COGENT Cogent/PSI 66.206.47.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 66.207.32.0/20 AS23011 66.219.192.0/18 AS5048 FIBER - FIBERNET Corp. 67.20.0.0/14 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 67.22.64.0/21 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 68.64.0.0/13 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 68.64.58.0/24 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 68.168.0.0/14 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 68.232.0.0/14 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 69.71.192.0/20 AS13818 PHX-INTL-TELEPORT - Phoenix International Teleport 69.80.0.0/17 AS3043 AMPHIB-AS - Amphibian Media Corporation 69.160.0.0/12 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 69.169.0.0/17 AS20001 ROADRUNNER-WEST - Road Runner HoldCo LLC 70.32.0.0/13 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 80.88.0.0/21 AS33774 DJAWEB 80.88.8.0/22 AS33774 DJAWEB 80.88.10.0/24 AS33774 DJAWEB 80.88.11.0/24 AS33774 DJAWEB 80.88.12.0/24 AS33779 wataniya-telecom-as 92.43.104.0/21 AS33891 CORE-BACKBONE Core-Backbone GmbH 95.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 95.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 137.0.0.0/13 AS721 DISA-ASNBLK - DoD Network Information Center 151.135.0.0/16 AS4768 CLIX-NZ TelstraClear Ltd 159.3.211.0/24 AS2687 ASATTCA AT&T Global Network Services - AP 163.142.0.0/16 AS2500 WIDE-BB WIDE Project 172.10.1.0/30 AS18305 POSNET POSDATA Co.,Ltd 192.9.200.0/24 AS3602 AS3602-RTI - Rogers Telecom Inc. 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.40.105.0/24 AS12582 TSF-DATANET-NGD-AS TSF MPLS VPN Services 192.64.85.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.107.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.108.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.177.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.96.36.0/24 AS5713 SAIX-NET 192.96.37.0/24 AS10474 NETACTIVE 192.96.135.0/24 AS2018 TENET-1 192.96.136.0/23 AS2018 TENET-1 192.96.141.0/24 AS5713 SAIX-NET 192.96.143.0/24 AS2018 TENET-1 192.96.145.0/24 AS2018 TENET-1 192.96.177.0/24 AS6083 POSIX-AFRICA 192.101.45.0/24 AS2905 TICSA-ASN 192.101.46.0/24 AS6503 Avantel, S.A. 192.101.47.0/24 AS6503 Avantel, S.A. 192.101.64.0/21 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.67.0/24 AS21775 192.101.70.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.71.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.72.0/24 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.73.0/24 AS4765 WORLDNET-AS World Net & Services Co., Ltd. 192.101.74.0/24 AS1239 SPRINTLINK - Sprint 192.122.212.0/24 AS209 ASN-QWEST - Qwest 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.131.233.0/24 AS7891 BELLSOUTH-NET-BLK2 - Bellsouth.Net 192.133.6.0/24 AS10282 EQUANT-CEEUR EQUANT AS for Central and Eastern Europe region 192.153.144.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 192.188.208.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 193.200.114.0/23 AS31530 SERVERCREW-AS Servercrew LTD Autonomes System 194.31.227.0/24 AS21461 TRANSFAIRNET Transfair-net GmbH Krefeld 194.246.72.0/23 AS8893 ARTFILES-AS Artfiles New Media GmbH 196.6.108.0/24 AS5713 SAIX-NET 196.10.119.0/24 AS2018 TENET-1 196.10.122.0/23 AS2018 TENET-1 196.10.251.0/24 AS2018 TENET-1 196.10.252.0/23 AS2018 TENET-1 196.10.254.0/24 AS2018 TENET-1 196.13.101.0/24 AS2018 TENET-1 196.13.102.0/23 AS2018 TENET-1 196.13.104.0/24 AS2018 TENET-1 196.13.121.0/24 AS2018 TENET-1 196.13.125.0/24 AS2018 TENET-1 196.13.126.0/24 AS2018 TENET-1 196.13.169.0/24 AS2018 TENET-1 196.13.174.0/23 AS2018 TENET-1 196.13.176.0/21 AS2018 TENET-1 196.13.192.0/22 AS2018 TENET-1 196.13.196.0/24 AS2018 TENET-1 196.201.98.0/24 AS29571 CITelecom-AS 196.216.132.0/24 AS9207 TAIDE-KE-NAIROBI Taide - Kenya POP 196.216.134.0/24 AS9207 TAIDE-KE-NAIROBI Taide - Kenya POP 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.54.82.0/24 AS2018 TENET-1 198.54.92.0/24 AS2018 TENET-1 198.54.222.0/24 AS2018 TENET-1 198.97.72.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.80.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.96.0/19 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.240.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 198.144.96.0/20 AS12185 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.168.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 198.169.0.0/16 AS803 SASKTEL - Saskatchewan Telecommunications 198.180.198.0/24 AS23715 SEOUL-INTGW-GXS-AP Global Exchange Services 199.9.128.0/17 AS668 ASN-ASNET-NET-AS - Defense Research and Engineering Network 199.10.0.0/16 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.0.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.128.0/18 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.130.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.131.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.132.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DoD Network Information Center 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DoD Network Information Center 199.114.142.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.144.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.148.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.150.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.114.156.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.114.160.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.121.0.0/16 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.0.0/18 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.16.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.80.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 199.246.116.0/24 AS813 UUNET-CANADA - MCI Communications Services, Inc. d/b/a Verizon Business 202.45.132.0/22 AS24314 202.58.113.0/24 AS19161 INNOCOM-TELECOM - INNOCOM TELECOM 202.73.144.0/20 AS4788 TMNET-AS-AP TM Net, Internet Service Provider 202.86.252.0/22 AS4748 RESOLINK-AS-AP Resources Link Network Limited 202.86.252.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.90.33.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.40.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.41.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.42.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.43.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.44.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.94.70.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.124.195.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.207.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 202.136.254.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.136.255.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.164.100.0/24 AS18101 RIL-IDC Reliance Infocom Ltd Internet Data Centre, 202.176.224.0/24 AS17988 SINOSAT-AS-AP SINOSAT (HONG KONG) LIMITED 202.176.228.0/24 AS17988 SINOSAT-AS-AP SINOSAT (HONG KONG) LIMITED 202.176.232.0/24 AS17988 SINOSAT-AS-AP SINOSAT (HONG KONG) LIMITED 202.181.32.0/24 AS4645 ASN-HKNET-AP HKNet Co. Ltd 203.2.128.0/17 AS17175 NSS-UK New Skies Satellites UK AS 203.12.45.0/24 AS4854 NETSPACE-AS-AP Netspace Online Systems 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.89.139.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 203.111.192.0/20 AS7473 SINGTEL-AS-AP Singapore Telecom 203.112.97.0/24 AS9942 COMINDICO-AP SOUL Converged Communications Australia 203.112.111.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.113.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.114.0/24 AS4802 ASN-IINET iiNet Limited 203.112.116.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.117.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.118.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.119.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.120.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.121.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.127.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.128.128.0/19 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 203.128.128.0/24 AS23849 CNNIC-NET263-AP Beijing Capital-online science development Co.,Ltd. 203.152.136.0/23 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.138.0/23 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.142.0/24 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.143.0/24 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.160.110.0/23 AS7643 VNN-AS-AP Vietnam Posts and Telecommunications (VNPT) 204.9.216.0/23 AS7893 BELLSOUTH-NET-BLK2 - Bellsouth.Net 204.9.217.0/24 AS4323 TWTC - Time Warner Telecom, Inc. 204.9.218.0/23 AS7893 BELLSOUTH-NET-BLK2 - Bellsouth.Net 204.13.140.0/22 AS7270 NET2PHONE - Net2Phone Corp. 204.16.120.0/23 AS12077 204.16.122.0/23 AS12077 204.19.14.0/23 AS577 BACOM - Bell Canada 204.29.196.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 204.29.197.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 204.48.58.0/24 AS4323 TWTC - Time Warner Telecom, Inc. 204.48.60.0/24 AS4323 TWTC - Time Warner Telecom, Inc. 204.154.125.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 205.150.0.0/15 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 206.28.176.0/21 AS1273 CW Cable and Wireless plc 206.162.224.0/19 AS23464 ILCSNET - Interlink Computer Services 206.180.240.0/20 AS12083 KNOLOGY-NET - Knology Holdings 206.220.240.0/24 AS10764 STARTAP - National Center for Supercomputing Applications 206.220.240.64/26 AS22335 MREN - Metropolitan Research and Education Network 206.220.240.128/25 AS10764 STARTAP - National Center for Supercomputing Applications 206.220.240.160/30 AS10764 STARTAP - National Center for Supercomputing Applications 206.220.240.220/32 AS10764 STARTAP - National Center for Supercomputing Applications 206.220.241.0/24 AS10764 STARTAP - National Center for Supercomputing Applications 207.98.192.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 207.98.209.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 207.98.223.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 207.191.128.0/19 AS10887 BPSI-AS - BPSI Internet Services 207.204.168.0/24 AS15150 BELLTECH-AS - BELLWETHER TECHNOLOGY CORPORATION 207.204.222.0/24 AS22773 CCINET-2 - Cox Communications Inc. 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 207.254.192.0/19 AS11881 208.38.192.0/18 AS3043 AMPHIB-AS - Amphibian Media Corporation 208.38.192.0/21 AS14237 BEAMSPEED1 - Beamspeed 208.38.202.0/24 AS14237 BEAMSPEED1 - Beamspeed 208.38.203.0/24 AS14237 BEAMSPEED1 - Beamspeed 208.38.204.0/22 AS14237 BEAMSPEED1 - Beamspeed 208.89.100.0/22 AS36547 AS-001 - Atlantic Nexus, LLC 209.54.93.0/24 AS22773 CCINET-2 - Cox Communications Inc. 209.54.111.0/24 AS22773 CCINET-2 - Cox Communications Inc. 209.54.123.0/24 AS6062 NETPLEX - NETPLEX 209.54.142.0/24 AS12284 IPNS-AS - Internet Professionals & Network Solutions 209.54.240.0/21 AS10887 BPSI-AS - BPSI Internet Services 209.105.224.0/19 AS20074 209.140.90.0/24 AS14461 NTSL - NET SOLUTIONS 209.140.224.0/21 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.234.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.235.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.236.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.237.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.238.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.239.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.141.16.0/21 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.141.48.0/22 AS14461 NTSL - NET SOLUTIONS 209.141.104.0/24 AS6653 PRIVATEI - privateI, LLC 209.145.192.0/18 AS3043 AMPHIB-AS - Amphibian Media Corporation 209.145.204.0/22 AS14237 BEAMSPEED1 - Beamspeed 209.207.24.0/24 AS21829 JADETECH-NET - Jade Technologies, Inc. 209.207.36.0/24 AS21829 JADETECH-NET - Jade Technologies, Inc. 210.5.128.0/20 AS4837 CHINA169-BACKBONE CNCGROUP China169 Backbone 213.150.192.0/21 AS29571 CITelecom-AS 213.150.200.0/22 AS29571 CITelecom-AS 213.150.201.0/24 AS29338 AFOL-AS Used by Africaonline Operations 213.150.202.0/24 AS41042 SKYVISION SkyVision Network Services 216.37.114.0/23 AS3549 GBLX Global Crossing Ltd. 216.37.120.0/23 AS13377 216.59.0.0/17 AS3356 LEVEL3 Level 3 Communications 216.99.16.0/24 AS6395 LVLT-6395 - Level 3 Communications, Inc. 216.99.20.0/24 AS6395 LVLT-6395 - Level 3 Communications, Inc. 216.119.128.0/24 AS14345 CRESCENT-TECH - Crescent Technology 216.119.131.0/24 AS14345 CRESCENT-TECH - Crescent Technology 216.119.141.0/24 AS14345 CRESCENT-TECH - Crescent Technology 216.162.96.0/19 AS7393 CYBERCON - CYBERCON, INC. 216.172.198.0/24 AS22773 CCINET-2 - Cox Communications Inc. 216.172.199.0/24 AS22773 CCINET-2 - Cox Communications Inc. 216.210.86.0/24 AS577 BACOM - Bell Canada 216.240.240.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.241.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.242.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.251.207.0/24 AS1239 SPRINTLINK - Sprint 217.78.71.0/24 AS12491 IPPLANET-AS IPPlanet 217.78.72.0/24 AS12491 IPPLANET-AS IPPlanet 217.78.73.0/24 AS12491 IPPLANET-AS IPPlanet Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

RE: Cogent Router dropping packets
by Mike Fedyk 17 Apr '08

17 Apr '08

I spoke too soon: Host Loss% Snt Last Avg Best Wrst StDev 1. adsl-63-194-XXX-XXX.dsl.lsan03.pacbell.net 0.0% 109 9.2 19.2 8.4 57.9 11.0 2. dist3-vlan60.irvnca.sbcglobal.net 0.9% 109 8.4 16.7 8.3 45.6 9.6 3. bb1-p6-7.emhril.ameritech.net 0.0% 109 8.6 36.3 8.5 256.6 44.2 4. ex2-p14-0.eqlaca.sbcglobal.net 0.0% 109 10.3 39.4 9.3 209.3 46.2 5. te8-1.mpd01.lax05.atlas.cogentco.com 0.0% 108 32.4 34.3 9.3 238.6 45.1 6. vl3491.ccr02.lax01.atlas.cogentco.com 3.7% 108 17.0 23.4 12.9 98.9 13.4 7. te3-4.ccr01.lax04.atlas.cogentco.com 17.6% 108 39.1 28.8 16.4 198.9 22.1 8. vl3805.na21.b002695-2.lax04.atlas.cogentco.com 12.0% 108 34.1 27.6 17.0 68.7 11.2 9. PAETEC_Communications_Inc.demarc.cogentco.com 10.2% 108 22.4 35.3 17.0 168.7 27.8 10. gi-4-0-1-3.core01.lsajca01.paetec.net 18.5% 108 21.2 34.2 21.0 188.6 20.6 11. po-5-0-0.core01.anhmca01.paetec.net 10.3% 108 35.7 33.9 20.5 232.7 23.9 12. gi-3-0-0.edge03.anhmca01.paetec.net 13.0% 108 21.0 31.6 20.2 157.9 16.6 13. 74.10.xxx.xxx 11.1% 108 25.7 33.9 25.2 55.2 8.9 14. 74.10.xxx.xxx 15.7% 108 26.7 35.7 25.0 70.8 11.7 -----Original Message----- From: Mike Fedyk Sent: Thursday, April 17, 2008 2:15 PM To: Ryan Harden Cc: nanog(a)merit.edu Subject: RE: Cogent Router dropping packets Thank you, the issue seems to be fixed now at Cogent.

1 0

Anyone from Verio here?
by Jake Matthews 17 Apr '08

17 Apr '08

I've sent repeated emails to abuse(a)verio.net/com/*, no response yet. There is an IRC DDoS bot on EFnet actively attacking users - and has been for quite a while, as you can see from the signon date. I am one of those being hit - any idea how to "take care of it?" g is ~sharon(a)eul0600157-pip.eu.verio.net * sharon stone g on @#tcp @#ping @#nsa.gov @#london @#jupe @#dust g using irc.wh.verio.net ooh omnipotence. mm yes gotta get me some of that. g actually using host 81.19.98.235 g has been idle 2mins 12secs, signed on Thu Apr 03 23:53:18

11 11

Bell Canada/Bellnexxia ignoring MX records, anybody else?
by Mark Jeftovic 17 Apr '08

17 Apr '08

We've been working on this for about a week, we are in touch with some network folks at Bell but I'd like to see if this is something a bit more widespread than domains hosted on our nameservers. (We have had a report of similar behavior from another DNS host) At any rate, what it looks like to us is that customers using Bell SMB outbound mail servers, possibly other outbound mail servers on Bell (Nexxia, Sympatico?) to destination domains whose NS are hosted on our nameservers seem to have the MX record *ignored* and the mail is delivered to the A record for the domain. We also suspect that it happens when the MX record points at a host back inside the Bell network/address space. Is anybody else noticing this? -mark -- Mark Jeftovic <markjr(a)easydns.com> Founder / President, easyDNS Technologies Inc. Company Website: http://www.easyDNS.com I ramble pointlessly from my blog: http://www.PrivateWorld.com

3 2

Re: Abuse response [Was: RE: Yahoo Mail Update]
by Paul Ferguson 17 Apr '08

17 Apr '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- "Suresh Ramasubramanian" <ops.lists(a)gmail.com> wrote: >If you send reports with lots of legal boilerplate, or reports with >long lectures on why you expect an INSTANT TAKEDOWN, and send them to >a busy abuse queue, there is no way - and zero reason - for the ISP >people to prioritize your complaint above all the other complaints >coming in. In fact, we have done just that -- develop a standard boilerplate very similar to what PIRT uses in its notification(s) to the stakeholders in phishing incidents. Again, our success rate is somewhere in the 50% neighborhood. And that is after a few months of fine-tuning -- and 15 years of experience in these matters. :-) Nothing to write home about... - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFIBD5wq1pz9mNUZTMRAtyzAJ9yeVdLNPQYgCoacK5sNwe3N9xZ9QCeLSlS /JALeFX6VwD6Qb430CSt6yI= =f3fI -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

15 27

List Transistion
by Betty J. Burke 17 Apr '08

17 Apr '08

Attention NANOG Community: As we have been discussing for months. The day is here. The NANOG Email List is moving to a new machine using new tools!!! Everyone receiving this email message will be affected by the NANOG(a)nanog.org List Transition. This is NOT a new community list, just a list management change. Merits goal is to better serve the community and allow each of you to have better control over your subscription to the NANOG community list. Effective April 18, 2008 (scheduled for 8 AM EST) NANOG(a)nanog.org subscribers (you) will receive an invitation to join the NANOG community list. This email message will point subscribers (you) to a mailman web interface where you can choose email receive options. In addition you can choose to also set a password to manage your subscription. NANOG-Post(a)nanog.org subscribers will be added to the new mailman NANOG list service. Meaning these subscribers will receive the same message as stated above. NANOG-Announce(a)nanog.org subscribers will also be added to the new mailman NANOG-Announce list service. Meaning these subscribers will receive the same message as stated above. NANOG-Digest(a)nanog.org subscribers will be added to the new mailman NANOG list service with a digest option highlighted. These subscribers will receive the same message as stated above. The old NANOG list archives will remain at - http://www.merit.edu/mail.archives/nanog The new NANOG list archives will be found at - http://mailman.nanog.org/mailman/private/nanog Additional useful resources can be found at – ALL NANOG Lists available to public: http://mailman.nanog.org/mailman/listinfo/ NANOG list start page: http://mailman.nanog.org/mailman/listinfo/nanog Again, the NANOG list transition is scheduled for 8:00 AM EST. on Friday April 18, 2008. If you are in need of additional information and/or are concerned regarding this transition, please send an email to NANOG-support(a)nanog.org or feel free to contact Merit directly via our Network Operations Center at NOC(a)merit.edu. Sincerely, Betty Burke Merit NANOG Project Manager

1 0

Re: Abuse response [Was: RE: Yahoo Mail Update]
by Robert Bonomi 16 Apr '08

16 Apr '08

> Subject: Re: Abuse response [Was: RE: Yahoo Mail Update] > From: Valdis.Kletnieks(a)vt.edu > Date: Wed, 16 Apr 2008 12:02:02 -0400 > > On Wed, 16 Apr 2008 00:38:33 CDT, Chris Boyd said: > > > - I'd like to see an actual response beyond an autoreply saying that you > > can't tell me who the customer is or what actions were taken. > > Well, let's see. If you're reporting abuse coming from my AS, it's almost > certainly one of 2 things: [[ sneck causations ]] > Basically, 99.8% of the time, no response other than "We found it and dealt > with it" is actually suitable, and the other 0.2% of the time, you're about > to get dragged into an ongoing investigation, so expect a "Hold Evidence" > order on your fax in a few minutes.. ;) > > So what sort of response did you actually *want*? Speaking strictly for myself, the wish-list for an ack is (not necessarily in priority order): 1) appreciation for my contributed time/effort in helping them keep _their_ network clean. 2) an ack that they _have_found_ the source. I generally don't care 'who' it was, just that they *have* been found, and STOPPED. 3) an indication that the immediate issue has been fixed, and that steps have been taken to prevent future recurrance. Again, the actual 'details' of what has been done are relatively unimportant. 4) *WHEN* the 'fix' was implemented. Then I know if I see 'more of the same _before_ that time, I don't need to report it, =AND= if I see stuff occuring _after_ that time, that it is a 'new and different' problem that _does_ need to be reported. This is more about _how_ you say things, than the details of what you actually say. Replies -- _days_ later -- along the lines of "thanks for the report, due to volume of complaints we won't be able to tell you anything about what we find, or do" cause much grinding of teeth. Replies that say: "This appears to be the same as something that has already been reported to us by others. We have looked into things, confirmed it was happening, and put a stop to it as of {timestamp}. If you see any more of this activity from that source _after_ that time please email us immediately with the string "{token}" in the subject line." _do_ give the originater 'warm fuzzies', and can be more-or-less trivially generated by a good trouble- ticket system. Especially with reasonable front-end automation for recognizing 'duplicate' complaints. At the good end, I've gotten replies saying: "the customer has been contacted, and they immediately took the affected machine off-line for sterilization"; even "we have been unable to contact the customer, and have pulled their circuit until they *do* contact us." Note: that last message was received about 4 hours after sending the problem notice, and about 2 hours after what would have been the normal 'start of business' in the locale of the problem. That provider wears a *BIG* white hat in my books. Not so much for telling me what they did, but for the speed of reaction. Contrast those responses with a major national who doesn't send any responses *and* has an admitted policy of giving customers _a_week_after_notification_ of having an infected machine on their network to get the machine off-line or otherwise dealt with. And it can take _days_ to get the notification to the customer. (they just send an email to the business contact -- notify them late friday and the clock doesn't start running until Monday morning. *sigh*)

1 0

Re: Abuse response [Was: RE: Yahoo Mail Update]
by Paul Ferguson 16 Apr '08

16 Apr '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- Valdis.Kletnieks(a)vt.edu wrote: > So what sort of response did you actually *want*? Actually, I'm more concerned with alerting you that someone inserted a nasty .js or iFrame on one of your websites and I'd like to you to clean it up, thanks. ;-) I'm not so concerned about alerting you to botted student computers... that's another issue entirely. :-) - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFIBj/nq1pz9mNUZTMRAmlKAJ4v/KIvHlKvO1MDF97Ed1T9RkpnjgCgvvRC CLUNjfK4mZcQOga42UgY9og= =7OPB -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

Abuse response [Was: RE: Yahoo Mail Update]
by Paul Ferguson 16 Apr '08

16 Apr '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- "Frank Bulk - iNAME" <frnkblk(a)iname.com> wrote: >72 hours to respond to e-mail sent to the abuse account? That's much too long -- it should be at least a 4 hour response time during business hours, and for service providers and operators large enough to staff their network 24x7 for other reasons, 4 hour response time all the time. > Right. You're dreaming. As I mentioned in my presentation at NANOG 42 in San Jose, the biggest barrier we face in shrinking the "time-to-exploit" window with regards to contacting people responsible for assisting in mitigating malicious issues is finding someone to actually respond. I'd personally jump for joy if I could count on 72 hours, or less. Unfortunately, most abuse requests/inquiries fall into a black-hole, or bounce. Very rarely do I find a helpful individual at the end of an abuse address, and that is truly unfortunate. Me, I have pretty much given up on any domain-related avenues, since they generally end up in disappointment, and found more successes in going directly to the owners of the IP allocation, and upstream ISP, a regional/national CERT/CSIRT, or law enforcement. Mow, this has no bearing on the original subject (which I have now forgotten what it is -- oh yeah, something about Yahoo! mail), but it should be additional proof that the Bad Guys know how to manipulate the system, the system is broken, and the Bad Guys are now making much more money than we are. :-) - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFIBDMNq1pz9mNUZTMRAtuVAJ9dP9ptygn/OrEWu7XsrffzorB5NACgz6dg vGCfQkUgbyB3QMfcR076VO0= =0fOY -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

8 7