- Test - lists.nanog.org

RE: Customer-facing ACLs
by Paul Ferguson 08 Mar '08

08 Mar '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- "Scott Weeks" <surfer(a)mauigateway.com> wrote: >We need to take this off-line. All long timers are groaning, rolling >their eyes and putting this in their kill file. > >Try convincing your product managers to create a new product just to >appease 'sysadmin types'. > Or perhaps engage the discussion on a security-related mailing list. A couple of suggestions: The DShield list: http://lists.dshield.org/mailman/listinfo/list Funsec: https://linuxbox.org/cgi-bin/mailman/listinfo/funsec - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFH0fhsq1pz9mNUZTMRAkIxAKDs7DqstE6bDyNmAbRkqrCW78pAtwCdH1hm gKrRg7ZAkEat2zx7XzRG+Nk= =SRGz -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

Rogue traffic commonly perceived as "noise" (was: Scan traffic from 121.8.0.0/16)
by Justin Shore 07 Mar '08

07 Mar '08

Yeah, much of it is noise. However there is a a lot of coordination to much of what I'm seeing. Many of the scans stop at hosts with accessible SSH daemons and pound on them for minutes to hours. Others are more subtle. I'll see one host scan our ranges and pick out the IPs running SSH. Then, a short time later, those specific hosts are directly targeted from a different compromised host implying that there is communication on the back-end about IPs w/ SSH daemons. I tested the theory by disabling SSH on a few of the hosts picked up in earlier mass scans. The targeted attacks are still aimed at those hosts learned in the earlier scan even though their SSH daemons we effectively offline. Some scans are so slow they're barely noticeable (as was reports on the SANS ISC site recently). Even though much of this is simply noise and typical life on the Internet, I have to wonder how much of this noise is actual reconnaissance against SPs and their customers. A certain large SE Asian country's military is widely reported to be performing recon and attacks against IP resources around the globe. How much of what people believe is noise is actually malicious traffic or a prelude to some future event? Frankly the scans on my network have been significantly reduced by being a little more proactive with my monitoring. I've found that network generating SSH scans are also being used for telnet, MS-SQL and SMTP scans. Unfortunately the processes I'm utilizing are very labor intensive and I can't keep doing this forever. I would love to find a tool that could help me automate some of this process and hopefully react faster than I can. While typing this 69.13.181.99 just scanned one of our /19s. The flood of packets was so fast I wouldn't have been able to null route it even if I'd been actively watching the flows. The only way I could have slowed it down would have been to rate-limit SYNs. That leads to a good question for NANOG at large which I'll post separately. Justin Martin Hannigan wrote: > Scans are really a dime a dozen and noise that buries good data on > real problems. Be careful! > > > > On 3/6/08, Justin Shore <justin(a)justinshore.com> wrote: >> Rich Sena wrote: >>> Anyone seeing anything similar - trying to determine if this is spoofed >>> etc... >> I haven't picked up any SSH or telnet scans from that network. That's >> what I'm looking for at the moment. The amount of scans we're getting >> are quite impressive at times. I wish there was an easy way to automate >> the care and feeding of my RTBH with this data (and some sanity checks). >> >> Justin

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 07 Mar '08

07 Mar '08

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 08 Mar, 2008 Report Website: http://thyme.apnic.net Detailed Analysis: http://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 248227 Prefixes after maximum aggregation: 125224 Deaggregation factor: 1.98 Unique aggregates announced to Internet: 120307 Total ASes present in the Internet Routing Table: 27574 Prefixes per ASN: 9.00 Origin-only ASes present in the Internet Routing Table: 24019 Origin ASes announcing only one prefix: 11654 Transit ASes present in the Internet Routing Table: 3555 Transit-only ASes present in the Internet Routing Table: 78 Average AS path length visible in the Internet Routing Table: 3.6 Max AS path length visible: 19 Max AS path prepend of ASN (43380) 13 Prefixes from unregistered ASNs in the Routing Table: 38 Unregistered ASNs in the Routing Table: 16 Number of 32-bit ASNs allocated by the RIRs: 45 Prefixes from 32-bit ASNs in the Routing Table: 8 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 865 Number of addresses announced to Internet: 1857283104 Equivalent to 110 /8s, 179 /16s and 228 /24s Percentage of available address space announced: 50.1 Percentage of allocated address space announced: 61.5 Percentage of available address space allocated: 81.4 Percentage of address space in use by end-sites: 70.7 Total number of prefixes smaller than registry allocations: 117841 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 56724 Total APNIC prefixes after maximum aggregation: 20940 APNIC Deaggregation factor: 2.71 Prefixes being announced from the APNIC address blocks: 54145 Unique aggregates announced from the APNIC address blocks: 23140 APNIC Region origin ASes present in the Internet Routing Table: 3158 APNIC Prefixes per ASN: 17.15 APNIC Region origin ASes announcing only one prefix: 838 APNIC Region transit ASes present in the Internet Routing Table: 489 Average APNIC Region AS path length visible: 3.6 Max APNIC Region AS path length visible: 15 Number of APNIC addresses announced to Internet: 334801056 Equivalent to 19 /8s, 244 /16s and 168 /24s Percentage of available APNIC address space announced: 76.8 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079 APNIC Address Blocks 58/8, 59/8, 60/8, 61/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 116118 Total ARIN prefixes after maximum aggregation: 65373 ARIN Deaggregation factor: 1.78 Prefixes being announced from the ARIN address blocks: 84829 Unique aggregates announced from the ARIN address blocks: 33461 ARIN Region origin ASes present in the Internet Routing Table: 12188 ARIN Prefixes per ASN: 6.96 ARIN Region origin ASes announcing only one prefix: 4686 ARIN Region transit ASes present in the Internet Routing Table: 1152 Average ARIN Region AS path length visible: 3.4 Max ARIN Region AS path length visible: 15 Number of ARIN addresses announced to Internet: 356743808 Equivalent to 21 /8s, 67 /16s and 122 /24s Percentage of available ARIN address space announced: 73.3 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959 ARIN Address Blocks 24/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 173/8, 174/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 52904 Total RIPE prefixes after maximum aggregation: 33036 RIPE Deaggregation factor: 1.60 Prefixes being announced from the RIPE address blocks: 48005 Unique aggregates announced from the RIPE address blocks: 32257 RIPE Region origin ASes present in the Internet Routing Table: 11009 RIPE Prefixes per ASN: 4.36 RIPE Region origin ASes announcing only one prefix: 5750 RIPE Region transit ASes present in the Internet Routing Table: 1683 Average RIPE Region AS path length visible: 4.0 Max RIPE Region AS path length visible: 18 Number of RIPE addresses announced to Internet: 346944256 Equivalent to 20 /8s, 173 /16s and 243 /24s Percentage of available RIPE address space announced: 79.5 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055 RIPE Address Blocks 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 18849 Total LACNIC prefixes after maximum aggregation: 4739 LACNIC Deaggregation factor: 3.98 Prefixes being announced from the LACNIC address blocks: 17203 Unique aggregates announced from the LACNIC address blocks: 9412 LACNIC Region origin ASes present in the Internet Routing Table: 907 LACNIC Prefixes per ASN: 18.97 LACNIC Region origin ASes announcing only one prefix: 301 LACNIC Region transit ASes present in the Internet Routing Table: 156 Average LACNIC Region AS path length visible: 3.9 Max LACNIC Region AS path length visible: 19 Number of LACNIC addresses announced to Internet: 48970496 Equivalent to 2 /8s, 235 /16s and 59 /24s Percentage of available LACNIC address space announced: 48.6 LACNIC AS Blocks 26592-26623, 27648-28671, plus ERX transfers LACNIC Address Blocks 186/8, 187/8, 189/8, 190/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 3591 Total AfriNIC prefixes after maximum aggregation: 1120 AfriNIC Deaggregation factor: 3.21 Prefixes being announced from the AfriNIC address blocks: 4027 Unique aggregates announced from the AfriNIC address blocks: 1801 AfriNIC Region origin ASes present in the Internet Routing Table: 233 AfriNIC Prefixes per ASN: 17.28 AfriNIC Region origin ASes announcing only one prefix: 79 AfriNIC Region transit ASes present in the Internet Routing Table: 43 Average AfriNIC Region AS path length visible: 3.8 Max AfriNIC Region AS path length visible: 14 Number of AfriNIC addresses announced to Internet: 10017280 Equivalent to 0 /8s, 152 /16s and 218 /24s Percentage of available AfriNIC address space announced: 29.9 AfriNIC AS Blocks 36864-37887 & ERX transfers AfriNIC Address Blocks 41/8, 196/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4755 1539 381 125 Videsh Sanchar Nigam Ltd. Aut 9498 1155 550 66 BHARTI BT INTERNET LTD. 9583 1149 109 25 Sify Limited 17488 1007 65 90 Hathway IP Over Cable Interne 4134 853 12379 314 CHINANET-BACKBONE 4766 847 6005 340 Korea Telecom (KIX) 23577 813 34 697 Korea Telecom (ATM-MPLS) 18101 681 127 60 Reliance Infocom Ltd Internet 9829 595 449 11 BSNL National Internet Backbo 4812 560 951 90 China Telecom (Shanghai) Complete listing at http://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7018 1425 5928 999 AT&T WorldNet Services 4323 1385 1012 366 Time Warner Telecom 2386 1377 638 839 AT&T Data Communications Serv 11492 1218 144 26 Cable One 7011 1063 309 609 Citizens Utilities 18566 1043 296 10 Covad Communications 6197 996 729 476 BellSouth Network Solutions, 1785 975 479 107 AppliedTheory Corporation 174 968 6835 817 Cogent Communications 6478 930 237 109 AT&T Worldnet Services Complete listing at http://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 3292 398 1778 363 TDC Tele Danmark 8452 392 188 7 TEDATA 3301 338 1443 307 TeliaNet Sweden 3320 323 7045 268 Deutsche Telekom AG 8866 292 78 24 Bulgarian Telecommunication C 8551 279 267 42 Bezeq International 680 276 2046 256 DFN-IP service G-WiN 5462 275 666 26 Telewest Broadband 8708 275 421 245 Romania Data Systems S.A. 3215 271 2607 94 France Telecom Transpac Complete listing at http://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 1191 2449 221 UniNet S.A. de C.V. 11830 556 299 9 Instituto Costarricense de El 7303 449 218 59 Telecom Argentina Stet-France 16814 426 27 10 NSS, S.A. 6471 398 85 40 ENTEL CHILE S.A. 11172 398 115 66 Servicios Alestra S.A de C.V 10620 369 97 51 TVCABLE BOGOTA 14117 352 25 15 Telefonica del Sur S.A. 10481 325 124 10 Prima S.A. 22047 323 270 14 VTR PUNTO NET S.A. Complete listing at http://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 448 60 27 LINKdotNET AS number 3741 288 869 224 The Internet Solution 2018 252 276 111 Tertiary Education Network 20858 217 34 4 EgyNet 6713 143 135 11 Itissalat Al-MAGHRIB 33783 130 9 16 EEPAD TISP TELECOM & INTERNET 5536 121 8 16 Internet Egypt Network 33776 99 6 7 Starcomms Nigeria Limited 24835 90 48 7 RAYA Telecom - Egypt 29571 80 13 7 Ci Telecom Autonomous system Complete listing at http://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4755 1539 381 125 Videsh Sanchar Nigam Ltd. Aut 7018 1425 5928 999 AT&T WorldNet Services 4323 1385 1012 366 Time Warner Telecom 2386 1377 638 839 AT&T Data Communications Serv 11492 1218 144 26 Cable One 8151 1191 2449 221 UniNet S.A. de C.V. 9498 1155 550 66 BHARTI BT INTERNET LTD. 9583 1149 109 25 Sify Limited 7011 1063 309 609 Citizens Utilities 18566 1043 296 10 Covad Communications Complete listing at http://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 11492 1218 1192 Cable One 9583 1149 1124 Sify Limited 9498 1155 1089 BHARTI BT INTERNET LTD. 18566 1043 1033 Covad Communications 4323 1385 1019 Time Warner Telecom 8151 1191 970 UniNet S.A. de C.V. 17488 1007 917 Hathway IP Over Cable Interne 1785 975 868 AppliedTheory Corporation 6478 930 821 AT&T Worldnet Services 22773 886 821 Cox Communications, Inc. Complete listing at http://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 18506 UNALLOCATED 63.107.123.0/24 33286 Turlock Irrigation D 16886 UNALLOCATED 63.109.3.0/24 1239 Sprint 16886 UNALLOCATED 63.167.139.0/24 1239 Sprint 33526 UNALLOCATED 64.128.26.0/24 4323 Time Warner Telecom 65000 PRIVATE 92.62.240.0/20 24750 Cable Internet Syste 64601 PRIVATE 118.232.77.0/24 9924 Taiwan Fixed Network 64601 PRIVATE 118.232.78.0/24 9924 Taiwan Fixed Network 64601 PRIVATE 118.232.224.0/21 9924 Taiwan Fixed Network 64601 PRIVATE 118.232.224.0/20 9924 Taiwan Fixed Network 64601 PRIVATE 118.232.232.0/21 9924 Taiwan Fixed Network Complete listing at http://thyme.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 24.48.10.0/23 19548 Adelphia Business Solutions 24.48.12.0/22 19548 Adelphia Business Solutions 24.48.80.0/21 19548 Adelphia Business Solutions 24.54.224.0/19 20001 HoldCo LLC - Road Runner 24.75.192.0/18 19548 Adelphia Business Solutions 24.142.40.0/21 7018 AT&T WorldNet Services 24.142.160.0/19 7018 AT&T WorldNet Services 24.246.0.0/17 7018 AT&T WorldNet Services 24.246.128.0/18 7018 AT&T WorldNet Services 62.61.220.0/24 24974 Tachyon Europe BV - Wireless Complete listing at http://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:20 /9:9 /10:16 /11:40 /12:139 /13:278 /14:496 /15:989 /16:9764 /17:4239 /18:7165 /19:15172 /20:17402 /21:16580 /22:20967 /23:22098 /24:130127 /25:899 /26:1121 /27:578 /28:110 /29:9 /30:1 /31:0 /32:8 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 11492 1205 1218 Cable One 2386 1084 1377 AT&T Data Communications Serv 18566 1024 1043 Covad Communications 9583 986 1149 Sify Limited 7011 946 1063 Citizens Utilities 6478 929 930 AT&T Worldnet Services 4755 915 1539 Videsh Sanchar Nigam Ltd. Aut 17488 822 1007 Hathway IP Over Cable Interne 9498 817 1155 BHARTI BT INTERNET LTD. 23577 804 813 Korea Telecom (ATM-MPLS) Complete listing at http://thyme.apnic.net/current/data/sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:9 8:100 11:1 12:1992 13:2 15:21 16:3 17:6 18:13 20:35 24:1044 25:1 32:61 33:4 38:399 40:65 41:617 44:2 47:8 52:3 55:3 56:3 57:22 58:512 59:420 60:416 61:981 62:1122 63:1963 64:3338 65:2363 66:3614 67:1023 68:637 69:2096 70:506 71:124 72:1487 73:6 74:868 75:234 76:265 77:583 78:510 79:92 80:879 81:814 82:604 83:356 84:541 85:1011 86:391 87:635 88:290 89:1179 90:11 91:1079 92:157 93:135 96:16 97:14 98:88 99:3 116:551 117:270 118:81 119:165 121:443 122:713 123:306 124:816 125:1117 128:322 129:200 130:132 131:399 132:67 133:9 134:188 135:32 136:223 137:118 138:154 139:64 140:485 141:108 142:379 143:270 144:343 145:53 146:334 147:131 148:496 149:177 150:117 151:155 152:144 153:131 154:11 155:266 156:207 157:252 158:164 159:218 160:246 161:101 162:201 163:192 164:565 165:429 166:295 167:311 168:590 169:130 170:426 171:29 172:3 189:156 190:1369 192:5757 193:4109 194:3259 195:2360 196:1083 198:3780 199:3201 200:5468 201:1307 202:7595 203:7729 204:3980 205:2089 206:2420 207:2752 208:3213 209:3506 210:2529 211:1030 212:1314 213:1610 214:438 215:48 216:4180 217:1225 218:339 219:390 220:1075 221:400 222:310 End of report

1 0

3rd party network monitoring
by Darrell Hyde 07 Mar '08

07 Mar '08

In light of the recent major outages experienced by XO and Abovenet, I have become very interested in finding a 3rd party vendor to monitor the availability of my network from a variety of locations. I've looked at keynote / redalert, but oddly enough they don't seem to be able to monitor simple ICMP round-trip times - they (or at least the sales folk that I've spoken with) insist on checking the status of a TCP port or the response time of a web server. Google searches have yielded a few leads, but nothing terribly promising. Can anybody recommend a vendor for this type of service? I suppose I could always just get a bunch of VPS accounts here and there and run smokeping, but I'd really like to avoid that. - Darrell

11 14

Data Centre Migration
by Dennis Dayman 07 Mar '08

07 Mar '08

Looking for a consultant or someone that could help a company I am working with migrate 15 racks of servers from Canada to US. Not all will be coming, but we will be re-purchasing some equipment to create a second data centre. Anyone interested or knows someone please contact me offlist. -Dennis

1 0

BGP Update Report
by cidr-report＠potaroo.net 07 Mar '08

07 Mar '08

BGP Update Report Interval: 04-Feb-08 -to- 06-Mar-08 (32 days) Observation Point: BGP Peering with AS2.0 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS9498 94122 1.6% 76.0 -- BBIL-AP BHARTI BT INTERNET LTD. 2 - AS24731 68420 1.2% 937.3 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 3 - AS9583 54286 0.9% 45.2 -- SIFY-AS-IN Sify Limited 4 - AS33783 43711 0.7% 319.1 -- EEPAD 5 - AS26829 42770 0.7% 42770.0 -- YKK-USA - YKK USA,INC 6 - AS1239 34014 0.6% 8.8 -- SPRINTLINK - Sprint 7 - AS8151 33836 0.6% 28.1 -- Uninet S.A. de C.V. 8 - AS8452 33410 0.6% 27.6 -- TEDATA TEDATA 9 - AS4802 33327 0.6% 64.1 -- ASN-IINET iiNet Limited 10 - AS9829 33168 0.6% 40.9 -- BSNL-NIB National Internet Backbone 11 - AS21332 32373 0.6% 1245.1 -- NTC-AS New Telephone Company 12 - AS17974 32223 0.6% 72.1 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia 13 - AS4323 25748 0.4% 6.3 -- TWTC - Time Warner Telecom, Inc. 14 - AS5803 25330 0.4% 145.6 -- DDN-ASNBLK - DoD Network Information Center 15 - AS19334 21980 0.4% 21980.0 -- SPORTLINE-DBC - SPORTLINE 16 - AS7018 20912 0.3% 13.9 -- ATT-INTERNET4 - AT&T WorldNet Services 17 - AS4618 20640 0.3% 338.4 -- INET-TH-AS Internet Thailand Company Limited 18 - AS6140 20320 0.3% 26.8 -- IMPSAT-USA - ImpSat USA, Inc. 19 - AS17443 20189 0.3% 448.6 -- ESTELCOM-AP International Internet gateway , India 20 - AS4621 20090 0.3% 130.5 -- UNSPECIFIED UNINET-TH TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS26829 42770 0.7% 42770.0 -- YKK-USA - YKK USA,INC 2 - AS19334 21980 0.4% 21980.0 -- SPORTLINE-DBC - SPORTLINE 3 - AS13495 15547 0.3% 15547.0 -- NTT do Brasil Telecomunicaoes Ltda 4 - AS21291 12845 0.2% 12845.0 -- OMEGABANK 8 Dragatsaniou str 5 - AS32398 17643 0.3% 8821.5 -- REALNET-ASN-1 6 - AS17487 7464 0.1% 7464.0 -- ICBCASIA-AP Industrial and Commercial Bank 7 - AS30929 5867 0.1% 5867.0 -- HUTCB Hidrotechnical Faculty - Technical University 8 - AS41482 5789 0.1% 5789.0 -- CLUEAG-AS Clue AG IT Solutions 9 - AS19017 5527 0.1% 5527.0 -- QUALCOMM-QWBS-LV - Qualcomm Wireless Business Solutions 10 - AS29225 5433 0.1% 5433.0 -- TAIF-TELCOM-AS JSC TAIF-TELCOM 11 - AS7974 14173 0.2% 3543.2 -- Instituto Mexicano del Petroleo 12 - AS4184 6895 0.1% 3447.5 -- STORTEK-WHQ - Storage Technology Corporation 13 - AS32207 3247 0.1% 3247.0 -- 14 - AS14576 5802 0.1% 2901.0 -- RHNL-NET - Righthosting.com 15 - AS28977 5362 0.1% 2681.0 -- UN-UNLB United Nations Logistics Base Brindisi, Italy 16 - AS28646 2620 0.0% 2620.0 -- Confederacao Interestadual das Cooperativas Ligadas ao Sicredi 17 - AS40981 2413 0.0% 2413.0 -- UNIVCG University of Montenegro 18 - AS32455 2257 0.0% 2257.0 -- FNIS-HAWAII - FNIS 19 - AS43382 2244 0.0% 2244.0 -- IFOLOR-FIKA-AS IFI Oy 20 - AS38206 12657 0.2% 2109.5 -- ESTATIONPRIM-AS-AP eStation Pty Ltd Australia Primary AS Hosting Service Provider TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 203.101.87.0/24 61874 1.0% AS9498 -- BBIL-AP BHARTI BT INTERNET LTD. 2 - 12.108.254.0/24 42770 0.7% AS26829 -- YKK-USA - YKK USA,INC 3 - 80.243.64.0/20 31379 0.5% AS21332 -- NTC-AS New Telephone Company 4 - 202.140.63.0/24 30567 0.5% AS17443 -- ESTELCOM-AP International Internet gateway , India AS9498 -- BBIL-AP BHARTI BT INTERNET LTD. 5 - 203.55.229.160/2 27960 0.5% AS4802 -- ASN-IINET iiNet Limited 6 - 63.169.11.0/24 21980 0.3% AS19334 -- SPORTLINE-DBC - SPORTLINE 7 - 124.7.35.0/24 19021 0.3% AS9583 -- SIFY-AS-IN Sify Limited 8 - 41.204.0.0/24 17592 0.3% AS32398 -- REALNET-ASN-1 9 - 203.63.26.0/24 16806 0.3% AS9747 -- EZINTERNET-AS-AP EZInternet Pty Ltd 10 - 89.4.130.0/24 16712 0.3% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 11 - 89.4.131.0/24 16577 0.3% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 12 - 200.194.64.0/19 15547 0.2% AS13495 -- NTT do Brasil Telecomunicaoes Ltda 13 - 124.7.244.0/24 15139 0.2% AS9583 -- SIFY-AS-IN Sify Limited 14 - 89.4.128.0/24 15016 0.2% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 15 - 89.4.129.0/24 14144 0.2% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 16 - 192.100.180.160/ 14137 0.2% AS7974 -- Instituto Mexicano del Petroleo 17 - 200.33.104.0/23 13800 0.2% AS21603 -- Universidad La Salle, AC 18 - 193.109.213.0/24 12845 0.2% AS21291 -- OMEGABANK 8 Dragatsaniou str 19 - 207.181.144.0/24 12184 0.2% AS19750 -- CTI-TX - C2C Fiber, Inc. AS32004 -- BIG-ASN - Business Information Group, Inc. 20 - 64.79.128.0/19 11812 0.2% AS23005 -- SWITCH-COMMUNICATIONS - SWITCH Communications Group LLC Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 07 Mar '08

07 Mar '08

This report has been generated at Fri Mar 7 21:14:14 2008 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 29-02-08 253399 160360 01-03-08 253645 161077 02-03-08 253907 161337 03-03-08 253940 161721 04-03-08 254078 162873 05-03-08 254441 163349 06-03-08 254636 164080 07-03-08 255204 164685 AS Summary 27768 Number of ASes in routing system 11637 Number of ASes announcing only one prefix 1599 Largest number of prefixes announced by an AS AS4755 : VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System 88768000 Largest address span announced by an AS (/32s) AS721 : DISA-ASNBLK - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 07Mar08 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 255498 164718 90780 35.5% All ASes AS9498 1194 121 1073 89.9% BBIL-AP BHARTI BT INTERNET LTD. AS4755 1599 628 971 60.7% VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System AS4323 1383 436 947 68.5% TWTC - Time Warner Telecom, Inc. AS18566 1043 242 801 76.8% COVAD - Covad Communications Co. AS11492 1219 452 767 62.9% CABLEONE - CABLE ONE AS8151 1191 487 704 59.1% Uninet S.A. de C.V. AS19262 886 205 681 76.9% VZGNI-TRANSIT - Verizon Internet Services Inc. AS17488 1016 337 679 66.8% HATHWAY-NET-AP Hathway IP Over Cable Internet AS6478 933 362 571 61.2% ATT-INTERNET3 - AT&T WorldNet Services AS18101 710 151 559 78.7% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS2386 1393 866 527 37.8% INS-AS - AT&T Data Communications Services AS22773 886 359 527 59.5% CCINET-2 - Cox Communications Inc. AS4134 869 393 476 54.8% CHINANET-BACKBONE No.31,Jin-rong Street AS4812 562 104 458 81.5% CHINANET-SH-AP China Telecom (Group) AS19916 557 101 456 81.9% ASTRUM-0001 - OLM LLC AS6197 996 549 447 44.9% BATI-ATL - BellSouth Network Solutions, Inc AS17676 509 67 442 86.8% GIGAINFRA BB TECHNOLOGY Corp. AS855 555 115 440 79.3% CANET-ASN-4 - Bell Aliant AS7018 1457 1026 431 29.6% ATT-INTERNET4 - AT&T WorldNet Services AS4766 868 443 425 49.0% KIXS-AS-KR Korea Telecom AS3356 854 441 413 48.4% LEVEL3 Level 3 Communications AS6389 889 490 399 44.9% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS9443 452 77 375 83.0% INTERNETPRIMUS-AS-AP Primus Telecommunications AS7545 505 133 372 73.7% TPG-INTERNET-AP TPG Internet Pty Ltd AS4808 516 151 365 70.7% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS6140 611 247 364 59.6% IMPSAT-USA - ImpSat USA, Inc. AS5668 675 313 362 53.6% AS-5668 - CenturyTel Internet Holdings, Inc. AS16814 426 70 356 83.6% NSS S.A. AS4668 528 175 353 66.9% LGNET-AS-KR LG CNS AS1785 608 275 333 54.8% AS-PAETEC-NET - PaeTec Communications, Inc. Total 25890 9816 16074 62.1% Top 30 total Possible Bogus Routes 14.0.0.0/8 AS27044 DDN-ASNBLK1 - DoD Network Information Center 24.38.0.0/17 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 24.48.0.0/13 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 24.48.10.0/23 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 24.48.12.0/22 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 24.48.80.0/21 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 24.49.44.0/24 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 24.49.60.0/24 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 24.49.63.0/24 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 24.52.110.0/23 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 24.52.124.0/22 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 24.52.232.0/22 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 24.54.224.0/19 AS20001 ROADRUNNER-WEST - Road Runner HoldCo LLC 24.75.192.0/18 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 24.75.224.0/21 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 24.142.40.0/21 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.142.160.0/19 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.0.0/17 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV - Wireless Broadband via Satellite 63.140.213.0/24 AS22555 UTC - Universal Talkware Corporation 63.140.238.0/24 AS20471 MONCUR - Moncur Design 63.141.42.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 63.143.71.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 63.143.115.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 63.248.0.0/16 AS3356 LEVEL3 Level 3 Communications 64.5.64.0/22 AS7228 MCLEOD - McLeod, Inc. 64.5.68.0/24 AS7228 MCLEOD - McLeod, Inc. 64.5.69.0/24 AS7228 MCLEOD - McLeod, Inc. 64.5.70.0/23 AS7228 MCLEOD - McLeod, Inc. 64.5.72.0/24 AS7228 MCLEOD - McLeod, Inc. 64.5.73.0/24 AS7228 MCLEOD - McLeod, Inc. 64.5.74.0/23 AS7228 MCLEOD - McLeod, Inc. 64.5.76.0/22 AS7228 MCLEOD - McLeod, Inc. 64.5.80.0/20 AS7228 MCLEOD - McLeod, Inc. 64.5.96.0/22 AS7228 MCLEOD - McLeod, Inc. 64.5.100.0/23 AS7228 MCLEOD - McLeod, Inc. 64.5.102.0/24 AS7228 MCLEOD - McLeod, Inc. 64.5.103.0/24 AS7228 MCLEOD - McLeod, Inc. 64.5.104.0/21 AS7228 MCLEOD - McLeod, Inc. 64.5.112.0/20 AS7228 MCLEOD - McLeod, Inc. 64.7.112.0/21 AS6453 GLOBEINTERNET Teleglobe America Inc. 64.7.120.0/21 AS6453 GLOBEINTERNET Teleglobe America Inc. 64.50.128.0/18 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 64.89.0.0/22 AS10469 FIRSTNET - FIRST Inc. 64.89.6.0/24 AS10469 FIRSTNET - FIRST Inc. 64.89.7.0/24 AS7132 SBIS-AS - AT&T Internet Services 64.89.9.0/24 AS10469 FIRSTNET - FIRST Inc. 64.89.10.0/24 AS10469 FIRSTNET - FIRST Inc. 64.144.0.0/15 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 64.188.0.0/16 AS3356 LEVEL3 Level 3 Communications 65.36.8.0/24 AS5696 65.36.9.0/24 AS5696 65.36.33.0/24 AS5696 65.36.52.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 66.6.34.0/24 AS14935 MONTICELLO - Monticello Networks, Inc. 66.11.32.0/20 AS6261 VISINET - Visionary Systems, Inc. 66.11.40.0/21 AS6261 VISINET - Visionary Systems, Inc. 66.54.91.0/24 AS30506 BLACKSUN-1 - Blacksun Technologies LLC 66.55.160.0/19 AS29994 66.64.96.0/20 AS3790 RADIGRAFICA COSTARRICENSE 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.181.128.0/21 AS22619 66.199.32.0/20 AS10397 WISP-AS - Wispnet, LLC 66.206.32.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.33.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.34.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.35.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.40.0/22 AS174 COGENT Cogent/PSI 66.206.44.0/23 AS174 COGENT Cogent/PSI 66.206.47.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 66.207.32.0/20 AS23011 66.219.192.0/18 AS5048 FIBER - FIBERNET Corp. 67.20.0.0/14 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 67.20.219.0/24 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 67.21.32.0/20 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 67.22.32.0/23 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 67.22.46.0/23 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 67.22.48.0/21 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 67.22.56.0/22 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 67.22.64.0/21 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 67.22.112.0/20 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.64.0.0/13 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.64.56.0/23 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.64.58.0/24 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.67.96.0/19 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.67.124.0/22 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.68.80.0/20 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.70.132.0/23 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.70.136.0/23 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.70.140.0/22 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.70.146.0/23 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.70.148.0/23 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.168.0.0/14 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.168.192.0/20 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.169.171.0/24 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.169.239.0/24 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.169.240.0/24 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.169.255.0/24 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.171.12.0/22 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.171.140.0/22 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.171.144.0/23 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.171.150.0/23 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.232.0.0/14 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.235.122.0/23 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 69.71.192.0/20 AS13818 PHX-INTL-TELEPORT - Phoenix International Teleport 69.80.0.0/17 AS3043 AMPHIB-AS - Amphibian Media Corporation 69.160.0.0/12 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 69.160.224.0/20 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 69.163.30.0/23 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 69.164.192.0/18 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 69.166.0.0/19 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 69.166.56.0/21 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 69.167.176.0/20 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 69.168.0.0/14 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 69.169.0.0/17 AS20001 ROADRUNNER-WEST - Road Runner HoldCo LLC 69.171.0.0/20 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 69.172.0.0/14 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 69.173.172.0/22 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 69.173.184.0/22 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 70.32.0.0/13 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 70.32.64.0/18 AS20001 ROADRUNNER-WEST - Road Runner HoldCo LLC 70.36.0.0/20 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 70.36.64.0/20 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 70.36.80.0/20 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 70.37.124.0/22 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 70.37.212.0/22 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 70.38.188.0/23 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 70.38.190.0/23 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 70.40.0.0/16 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 80.88.0.0/21 AS33774 DJAWEB 80.88.8.0/22 AS33774 DJAWEB 80.88.10.0/24 AS33774 DJAWEB 80.88.11.0/24 AS33774 DJAWEB 80.88.12.0/24 AS33779 wataniya-telecom-as 91.199.236.0/24 AS42755 TECHNOTOP-AS Technotop Networks 95.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 95.195.82.0/24 AS43827 ENVAGENCY Environement Agency 95.195.83.0/24 AS43827 ENVAGENCY Environement Agency 95.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 119.235.192.0/20 AS38678 128.209.0.0/16 AS4017 137.0.0.0/13 AS721 DISA-ASNBLK - DoD Network Information Center 151.135.0.0/16 AS4768 CLIX-NZ TelstraClear Ltd 159.3.211.0/24 AS2687 ASATTCA AT&T Global Network Services - AP 163.142.0.0/16 AS2500 WIDE-BB WIDE Project 172.10.1.0/30 AS18305 POSNET POSDATA Co.,Ltd 192.9.200.0/24 AS3602 AS3602-RTI - Rogers Telecom Inc. 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.40.105.0/24 AS12582 TSF-DATANET-NGD-AS TSF MPLS VPN Services 192.69.107.0/24 AS5515 TS-FINLAND-DATANET-OLD TS Finland DataNet 192.69.108.0/24 AS5515 TS-FINLAND-DATANET-OLD TS Finland DataNet 192.69.177.0/24 AS5515 TS-FINLAND-DATANET-OLD TS Finland DataNet 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.88.99.0/24 AS1930 RCCN RCCN-NET 192.96.36.0/24 AS5713 SAIX-NET 192.96.37.0/24 AS10474 NETACTIVE 192.96.135.0/24 AS2018 TENET-1 192.96.136.0/23 AS2018 TENET-1 192.96.143.0/24 AS2018 TENET-1 192.96.145.0/24 AS2018 TENET-1 192.96.177.0/24 AS6083 POSIX-AFRICA 192.101.45.0/24 AS2905 TICSA-ASN 192.101.46.0/24 AS6503 Avantel, S.A. 192.101.47.0/24 AS6503 Avantel, S.A. 192.101.64.0/21 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.67.0/24 AS21775 192.101.70.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.71.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.72.0/24 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.73.0/24 AS4765 WORLDNET-AS World Net & Services Co., Ltd. 192.101.74.0/24 AS1239 SPRINTLINK - Sprint 192.122.212.0/24 AS209 ASN-QWEST - Qwest 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.131.233.0/24 AS7891 BELLSOUTH-NET-BLK2 - Bellsouth.Net 192.133.6.0/24 AS10282 EQUANT-CEEUR EQUANT AS for Central and Eastern Europe region 192.145.251.0/24 AS10026 ANC Asia Netcom Corporation 192.153.144.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 192.188.208.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 193.41.122.0/23 AS38924 DDC-AS SC DDC Net Invest SRL 193.200.114.0/23 AS31530 SERVERCREW-AS Servercrew LTD Autonomes System 194.31.227.0/24 AS21461 TRANSFAIRNET Transfair-net GmbH Krefeld 194.246.72.0/23 AS8893 ARTFILES-AS Artfiles New Media GmbH 196.6.108.0/24 AS5713 SAIX-NET 196.10.119.0/24 AS2018 TENET-1 196.10.122.0/23 AS2018 TENET-1 196.10.251.0/24 AS2018 TENET-1 196.10.252.0/23 AS2018 TENET-1 196.10.254.0/24 AS2018 TENET-1 196.13.101.0/24 AS2018 TENET-1 196.13.102.0/23 AS2018 TENET-1 196.13.104.0/24 AS2018 TENET-1 196.13.121.0/24 AS2018 TENET-1 196.13.125.0/24 AS2018 TENET-1 196.13.126.0/24 AS2018 TENET-1 196.13.169.0/24 AS2018 TENET-1 196.13.174.0/23 AS2018 TENET-1 196.13.176.0/21 AS2018 TENET-1 196.13.188.0/22 AS2018 TENET-1 196.13.192.0/22 AS2018 TENET-1 196.13.196.0/24 AS2018 TENET-1 196.216.132.0/24 AS9207 AS9207 Taide - Kenya POP 196.216.133.0/24 AS36966 Edgenet 196.216.134.0/24 AS9207 AS9207 Taide - Kenya POP 196.216.135.0/24 AS36966 Edgenet 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.54.82.0/24 AS2018 TENET-1 198.54.92.0/24 AS2018 TENET-1 198.54.222.0/24 AS2018 TENET-1 198.97.72.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.80.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.96.0/19 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.240.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 198.144.96.0/20 AS12185 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.168.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 198.169.0.0/16 AS803 SASKTEL - SaskTel 198.180.198.0/24 AS23715 SEOUL-INTGW-GXS-AP Global Exchange Services 199.9.128.0/17 AS668 ASN-ASNET-NET-AS - Defense Research and Engineering Network 199.10.0.0/16 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.0.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.128.0/18 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.130.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.131.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.132.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DoD Network Information Center 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DoD Network Information Center 199.114.142.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.144.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.148.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.150.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.114.156.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.114.160.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.121.0.0/16 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.0.0/18 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.16.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.80.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 199.246.116.0/24 AS813 UUNET-CANADA - MCI Communications Services, Inc. d/b/a Verizon Business 202.45.132.0/22 AS24314 202.58.113.0/24 AS19161 INNOCOM-TELECOM - INNOCOM TELECOM 202.73.144.0/20 AS4788 TMNET-AS-AP TM Net, Internet Service Provider 202.86.252.0/22 AS4748 RESOLINK-AS-AP Resources Link Network Limited 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.90.33.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.40.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.41.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.42.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.43.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.44.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.94.70.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.124.195.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.207.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 202.128.109.0/24 AS4802 ASN-IINET iiNet Limited 202.136.254.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.136.255.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.148.32.0/20 AS17495 GATEWAY-AP BROADBAND WIRELESSS INTERNET SERVICE PROVIDER 202.164.100.0/24 AS18101 RIL-IDC Reliance Infocom Ltd Internet Data Centre, 202.181.32.0/24 AS4645 ASN-HKNET-AP HKNet Co. Ltd 202.182.32.0/22 AS10223 UECOMM-AU Uecomm Ltd 203.12.45.0/24 AS4854 NETSPACE-AS-AP Netspace Online Systems 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.89.139.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 203.111.192.0/20 AS7473 SINGTEL-AS-AP Singapore Telecom 203.112.97.0/24 AS9942 COMINDICO-AP SOUL Converged Communications Australia 203.112.111.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.113.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.114.0/24 AS4802 ASN-IINET iiNet Limited 203.112.116.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.117.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.118.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.119.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.120.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.121.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.127.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.128.128.0/19 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 203.128.128.0/24 AS23849 CNNIC-NET263-AP Beijing Capital-online science development Co.,Ltd. 203.148.64.0/20 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.152.136.0/23 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.138.0/23 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.142.0/24 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.143.0/24 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.160.110.0/23 AS7643 VNN-AS-AP Vietnam Posts and Telecommunications (VNPT) 203.160.192.0/19 AS18233 PTT-AS-AP Philippine Telegraph and Telephone Corporation, 204.13.140.0/22 AS7270 NET2PHONE - Net2Phone Corp. 204.16.120.0/23 AS12077 204.16.122.0/23 AS12077 204.19.14.0/23 AS577 BACOM - Bell Canada 204.29.196.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 204.29.197.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 204.48.58.0/24 AS4323 TWTC - Time Warner Telecom, Inc. 204.48.60.0/24 AS4323 TWTC - Time Warner Telecom, Inc. 204.153.68.0/24 AS4017 204.153.71.0/24 AS4017 204.154.125.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 205.150.0.0/15 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 206.28.176.0/21 AS1273 CW Cable and Wireless plc 206.162.224.0/19 AS23464 ILCSNET - Interlink Computer Services 206.180.240.0/20 AS12083 KNOLOGY-NET - Knology Holdings 206.220.240.0/24 AS10764 STARTAP - National Center for Supercomputing Applications 206.220.240.64/26 AS22335 MREN - Metropolitan Research and Education Network 206.220.240.128/25 AS10764 STARTAP - National Center for Supercomputing Applications 206.220.240.160/30 AS10764 STARTAP - National Center for Supercomputing Applications 206.220.240.220/32 AS10764 STARTAP - National Center for Supercomputing Applications 206.220.241.0/24 AS10764 STARTAP - National Center for Supercomputing Applications 207.98.192.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 207.98.209.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 207.98.223.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 207.191.128.0/19 AS10887 BPSI-AS - BPSI Internet Services 207.204.168.0/24 AS15150 BELLTECH-AS - BELLWETHER TECHNOLOGY CORPORATION 207.204.222.0/24 AS22773 CCINET-2 - Cox Communications Inc. 207.204.248.0/24 AS6653 PRIVATEI - privateI, LLC 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 207.254.192.0/19 AS11881 208.38.192.0/18 AS3043 AMPHIB-AS - Amphibian Media Corporation 208.38.192.0/21 AS14237 BEAMSPEED1 - Beamspeed 208.38.200.0/23 AS14237 BEAMSPEED1 - Beamspeed 208.38.202.0/24 AS14237 BEAMSPEED1 - Beamspeed 208.38.203.0/24 AS14237 BEAMSPEED1 - Beamspeed 208.38.204.0/22 AS14237 BEAMSPEED1 - Beamspeed 208.64.12.0/22 AS22773 CCINET-2 - Cox Communications Inc. 209.54.42.0/24 AS6653 PRIVATEI - privateI, LLC 209.54.93.0/24 AS22773 CCINET-2 - Cox Communications Inc. 209.54.111.0/24 AS22773 CCINET-2 - Cox Communications Inc. 209.54.123.0/24 AS6062 NETPLEX - NETPLEX 209.54.142.0/24 AS12284 IPNS-AS - Internet Professionals & Network Solutions 209.54.240.0/21 AS10887 BPSI-AS - BPSI Internet Services 209.105.224.0/19 AS20074 209.140.64.0/20 AS22307 SINGLEEDGE-AS - SingleEdge, Inc. 209.140.90.0/24 AS14461 NTSL - NET SOLUTIONS 209.140.224.0/21 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.234.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.235.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.236.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.237.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.238.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.239.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.141.4.0/24 AS6653 PRIVATEI - privateI, LLC 209.141.16.0/21 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.141.48.0/22 AS14461 NTSL - NET SOLUTIONS 209.141.104.0/24 AS6653 PRIVATEI - privateI, LLC 209.145.192.0/18 AS3043 AMPHIB-AS - Amphibian Media Corporation 209.145.204.0/22 AS14237 BEAMSPEED1 - Beamspeed 209.207.24.0/24 AS21829 JADETECH-NET - Jade Technologies, Inc. 209.207.36.0/24 AS21829 JADETECH-NET - Jade Technologies, Inc. 210.5.128.0/20 AS4837 CHINA169-BACKBONE CNCGROUP China169 Backbone 213.150.192.0/21 AS29571 CITelecom-AS 213.150.200.0/22 AS29571 CITelecom-AS 213.150.201.0/24 AS29338 AFOL-AS Used by Africaonline Operations 213.150.202.0/24 AS41042 SKYVISION SkyVision Network Services 216.20.241.0/24 AS6220 ILINK - I-Link Worldwide Inc 216.20.242.0/24 AS6220 ILINK - I-Link Worldwide Inc 216.25.240.0/20 AS26972 TRANSWORLDINTERNETEXCHANGE - Trans World Internet eXchange, LLC. 216.37.114.0/23 AS3549 GBLX Global Crossing Ltd. 216.37.120.0/23 AS13377 216.59.0.0/17 AS3356 LEVEL3 Level 3 Communications 216.99.16.0/24 AS6395 LVLT-6395 - Level 3 Communications, Inc. 216.99.17.0/24 AS6395 LVLT-6395 - Level 3 Communications, Inc. 216.99.20.0/24 AS6395 LVLT-6395 - Level 3 Communications, Inc. 216.162.96.0/19 AS7393 CYBERCON - CYBERCON, INC. 216.172.198.0/24 AS22773 CCINET-2 - Cox Communications Inc. 216.172.199.0/24 AS22773 CCINET-2 - Cox Communications Inc. 216.210.86.0/24 AS577 BACOM - Bell Canada 216.227.128.0/18 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 216.240.240.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.241.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.242.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.251.205.0/24 AS209 ASN-QWEST - Qwest 216.251.207.0/24 AS1239 SPRINTLINK - Sprint 217.78.71.0/24 AS12491 IPPLANET-AS IPPlanet 217.78.72.0/24 AS12491 IPPLANET-AS IPPlanet 217.78.73.0/24 AS12491 IPPLANET-AS IPPlanet Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Scan traffic from 121.8.0.0/16
by Rich Sena 07 Mar '08

07 Mar '08

Anyone seeing anything similar - trying to determine if this is spoofed etc... -- Rich Sena - ras(a)thick.net ThickNET Consulting "On the way to understanding; you understand, and forget."

5 4

RE: RADB down?
by John van Oppen 05 Mar '08

05 Mar '08

Yep, works from my other desk machine... Same subnet, different IP as well. I note it appears to be breaking their web whois queries as well as I get a "connect failed: Connection timed out" notice on any of the webform updates. John -----Original Message----- From: Mike Tancsa [mailto:mike@sentex.net] Sent: Wednesday, March 05, 2008 11:04 AM To: John van Oppen; nanog(a)merit.edu Subject: Re: RADB down? At 01:52 PM 3/5/2008, John van Oppen wrote: >Anyone else seeing the radb whois server as being down? Simple whois seems to work ok for me from one IP address, but not from another on the same subnet... % ping -S 199.212.134.1 whois.ra.net PING whois.radb.net (198.108.0.18) from 199.212.134.1: 56 data bytes ^C --- whois.radb.net ping statistics --- 5 packets transmitted, 0 packets received, 100% packet loss # ping -S 199.212.134.2 whois.ra.net PING whois.radb.net (198.108.0.18) from 199.212.134.2: 56 data bytes 64 bytes from 198.108.0.18: icmp_seq=0 ttl=56 time=25.556 ms 64 bytes from 198.108.0.18: icmp_seq=1 ttl=56 time=25.886 ms ^C --- whois.radb.net ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max/stddev = 25.556/25.721/25.886/0.165 ms # whois -h whois.ra.net AS11404 aut-num: AS11404 as-name: VOBIZ descr: vanoppen.biz LLC / Spectrum Networks LLC member-of: AS-VOBIZ import: from AS2914 accept ANY import: from AS3491 accept ANY import: from AS3356 accept ANY export: to AS2914 announce AS-VOBIZ export: to AS3491 announce AS-VOBIZ export: to AS3356 announce AS-VOBIZ admin-c: John van Oppen tech-c: John van Oppen mnt-by: MAINT-AS11404 changed: john(a)vanoppen.com 20070401 #16:20:39(UTC) changed: john(a)vanoppen.com 20070903 #17:42:34(UTC) changed: john(a)vanoppen.com 20080125 #07:55:53(UTC) source: RADB # traceroute -s 199.212.134.2 -q1 198.108.0.18 traceroute to 198.108.0.18 (198.108.0.18), 64 hops max, 44 byte packets 1 iolite4-fxp2 (199.212.134.10) 0.126 ms 2 cogent-vl108 (67.43.129.246) 2.950 ms 3 gi8-22.mpd01.yyz02.atlas.cogentco.com (38.104.158.77) 2.975 ms 4 vl3492.mpd01.yyz01.atlas.cogentco.com (154.54.5.81) 3.355 ms 5 te8-2.mpd01.ord01.atlas.cogentco.com (154.54.7.73) 18.345 ms 6 vl3489.mpd01.ord03.atlas.cogentco.com (154.54.5.18) 17.938 ms 7 Merit.demarc.cogentco.com (66.28.21.234) 18.053 ms 8 ge-0-2-0x43.aa1.mich.net (198.108.22.241) 27.641 ms 9 rpsl-p.merit.edu (198.108.0.18) 31.018 ms % traceroute -n -q1 198.108.0.18 traceroute to 198.108.0.18 (198.108.0.18), 64 hops max, 40 byte packets 1 199.212.134.10 0.180 ms 2 67.43.129.246 3.220 ms 3 38.104.158.77 3.977 ms 4 154.54.5.85 7.361 ms 5 154.54.2.161 18.714 ms 6 154.54.25.66 18.852 ms 7 38.112.7.10 20.107 ms 8 198.108.22.241 30.215 ms 9 * 10 * Bad Load balancer or busted MPLS silliness or firewall issue ? ---Mike

2 1

Re: RADB down?
by Mike Tancsa 05 Mar '08

05 Mar '08

At 01:52 PM 3/5/2008, John van Oppen wrote: >Anyone else seeing the radb whois server as being down? Simple whois seems to work ok for me from one IP address, but not from another on the same subnet... % ping -S 199.212.134.1 whois.ra.net PING whois.radb.net (198.108.0.18) from 199.212.134.1: 56 data bytes ^C --- whois.radb.net ping statistics --- 5 packets transmitted, 0 packets received, 100% packet loss # ping -S 199.212.134.2 whois.ra.net PING whois.radb.net (198.108.0.18) from 199.212.134.2: 56 data bytes 64 bytes from 198.108.0.18: icmp_seq=0 ttl=56 time=25.556 ms 64 bytes from 198.108.0.18: icmp_seq=1 ttl=56 time=25.886 ms ^C --- whois.radb.net ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max/stddev = 25.556/25.721/25.886/0.165 ms # whois -h whois.ra.net AS11404 aut-num: AS11404 as-name: VOBIZ descr: vanoppen.biz LLC / Spectrum Networks LLC member-of: AS-VOBIZ import: from AS2914 accept ANY import: from AS3491 accept ANY import: from AS3356 accept ANY export: to AS2914 announce AS-VOBIZ export: to AS3491 announce AS-VOBIZ export: to AS3356 announce AS-VOBIZ admin-c: John van Oppen tech-c: John van Oppen mnt-by: MAINT-AS11404 changed: john(a)vanoppen.com 20070401 #16:20:39(UTC) changed: john(a)vanoppen.com 20070903 #17:42:34(UTC) changed: john(a)vanoppen.com 20080125 #07:55:53(UTC) source: RADB # traceroute -s 199.212.134.2 -q1 198.108.0.18 traceroute to 198.108.0.18 (198.108.0.18), 64 hops max, 44 byte packets 1 iolite4-fxp2 (199.212.134.10) 0.126 ms 2 cogent-vl108 (67.43.129.246) 2.950 ms 3 gi8-22.mpd01.yyz02.atlas.cogentco.com (38.104.158.77) 2.975 ms 4 vl3492.mpd01.yyz01.atlas.cogentco.com (154.54.5.81) 3.355 ms 5 te8-2.mpd01.ord01.atlas.cogentco.com (154.54.7.73) 18.345 ms 6 vl3489.mpd01.ord03.atlas.cogentco.com (154.54.5.18) 17.938 ms 7 Merit.demarc.cogentco.com (66.28.21.234) 18.053 ms 8 ge-0-2-0x43.aa1.mich.net (198.108.22.241) 27.641 ms 9 rpsl-p.merit.edu (198.108.0.18) 31.018 ms % traceroute -n -q1 198.108.0.18 traceroute to 198.108.0.18 (198.108.0.18), 64 hops max, 40 byte packets 1 199.212.134.10 0.180 ms 2 67.43.129.246 3.220 ms 3 38.104.158.77 3.977 ms 4 154.54.5.85 7.361 ms 5 154.54.2.161 18.714 ms 6 154.54.25.66 18.852 ms 7 38.112.7.10 20.107 ms 8 198.108.22.241 30.215 ms 9 * 10 * Bad Load balancer or busted MPLS silliness or firewall issue ? ---Mike

1 0