- Test - lists.nanog.org

Weekly Routing Table Report
by Routing Analysis Role Account 06 Apr '07

06 Apr '07

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 07 Apr, 2007 Analysis Summary ---------------- BGP routing table entries examined: 217445 Prefixes after maximum aggregation: 116217 Deaggregation factor: 1.87 Unique aggregates announced to Internet: 104542 Total ASes present in the Internet Routing Table: 24844 Prefixes per ASN: 8.75 Origin-only ASes present in the Internet Routing Table: 21659 Origin ASes announcing only one prefix: 10450 Transit ASes present in the Internet Routing Table: 3185 Transit-only ASes present in the Internet Routing Table: 74 Average AS path length visible in the Internet Routing Table: 3.6 Max AS path length visible: 24 Max AS path prepend of ASN (16327) 21 Prefixes from unregistered ASNs in the Routing Table: 3 Unregistered ASNs in the Routing Table: 5 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 12 Number of addresses announced to Internet: 1705019720 Equivalent to 101 /8s, 160 /16s and 137 /24s Percentage of available address space announced: 46.0 Percentage of allocated address space announced: 62.5 Percentage of available address space allocated: 73.7 Total number of prefixes smaller than registry allocations: 113403 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 49833 Total APNIC prefixes after maximum aggregation: 20069 APNIC Deaggregation factor: 2.48 Prefixes being announced from the APNIC address blocks: 46877 Unique aggregates announced from the APNIC address blocks: 21084 APNIC Region origin ASes present in the Internet Routing Table: 2909 APNIC Region origin ASes announcing only one prefix: 779 APNIC Region transit ASes present in the Internet Routing Table: 428 Average APNIC Region AS path length visible: 3.6 Max APNIC Region AS path length visible: 17 Number of APNIC addresses announced to Internet: 290876352 Equivalent to 17 /8s, 86 /16s and 107 /24s Percentage of available APNIC address space announced: 72.1 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911 APNIC Address Blocks 58/7, 60/7, 116/6, 120/6, 124/7, 126/8, 202/7 210/7, 218/7, 220/7 and 222/8 ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 105650 Total ARIN prefixes after maximum aggregation: 61744 ARIN Deaggregation factor: 1.71 Prefixes being announced from the ARIN address blocks: 77656 Unique aggregates announced from the ARIN address blocks: 30162 ARIN Region origin ASes present in the Internet Routing Table: 11463 ARIN Region origin ASes announcing only one prefix: 4385 ARIN Region transit ASes present in the Internet Routing Table: 1045 Average ARIN Region AS path length visible: 3.4 Max ARIN Region AS path length visible: 21 Number of ARIN addresses announced to Internet: 327721344 Equivalent to 19 /8s, 136 /16s and 161 /24s Percentage of available ARIN address space announced: 72.3 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959 ARIN Address Blocks 24/8, 63/8, 64/5, 72/6, 76/8, 96/6, 199/8, 204/6, 208/7 and 216/8 RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 44899 Total RIPE prefixes after maximum aggregation: 29324 RIPE Deaggregation factor: 1.53 Prefixes being announced from the RIPE address blocks: 41481 Unique aggregates announced from the RIPE address blocks: 26508 RIPE Region origin ASes present in the Internet Routing Table: 9436 RIPE Region origin ASes announcing only one prefix: 4974 RIPE Region transit ASes present in the Internet Routing Table: 1509 Average RIPE Region AS path length visible: 4.0 Max RIPE Region AS path length visible: 24 Number of RIPE addresses announced to Internet: 299437056 Equivalent to 17 /8s, 217 /16s and 12 /24s Percentage of available RIPE address space announced: 74.4 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-43007 RIPE Address Blocks 62/8, 77/8, 78/7, 80/5, 88/6, 92/7, 193/8, 194/7, 212/7 and 217/8 LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 14521 Total LACNIC prefixes after maximum aggregation: 4089 LACNIC Deaggregation factor: 3.55 Prefixes being announced from the LACNIC address blocks: 12617 Unique aggregates announced from the LACNIC address blocks: 7086 LACNIC Region origin ASes present in the Internet Routing Table: 777 LACNIC Region origin ASes announcing only one prefix: 254 LACNIC Region transit ASes present in the Internet Routing Table: 134 Average LACNIC Region AS path length visible: 4.2 Max LACNIC Region AS path length visible: 19 Number of LACNIC addresses announced to Internet: 38813952 Equivalent to 2 /8s, 80 /16s and 65 /24s Percentage of available LACNIC address space announced: 57.8 LACNIC AS Blocks 26592-26623, 27648-28671, plus ERX transfers LACNIC Address Blocks 189/8, 190/8, 200/7 AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 2538 Total AfriNIC prefixes after maximum aggregation: 987 AfriNIC Deaggregation factor: 2.57 Prefixes being announced from the AfriNIC address blocks: 1889 Unique aggregates announced from the AfriNIC address blocks: 1168 AfriNIC Region origin ASes present in the Internet Routing Table: 184 AfriNIC Region origin ASes announcing only one prefix: 58 AfriNIC Region transit ASes present in the Internet Routing Table: 36 Average AfriNIC Region AS path length visible: 3.6 Max AfriNIC Region AS path length visible: 15 Number of AfriNIC addresses announced to Internet: 5964288 Equivalent to 0 /8s, 91 /16s and 2 /24s Percentage of available AfriNIC address space announced: 17.8 AfriNIC AS Blocks 36864-37887 & ERX transfers AfriNIC Address Blocks 41/8, 196/8 APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4134 1286 9438 280 CHINANET-BACKBONE 4755 1177 383 77 Videsh Sanchar Nigam Ltd. Aut 9583 1100 78 379 Sify Limited 9498 969 469 70 BHARTI BT INTERNET LTD. 4766 788 4943 314 Korea Telecom (KIX) 23577 786 35 711 Korea Telecom (ATM-MPLS) 17488 626 41 32 Hathway IP Over Cable Interne 7545 610 142 77 TPG Internet Pty Ltd 1221 571 1956 445 Telstra Pty Ltd 18101 538 116 27 Reliance Infocom Ltd Internet 17676 503 10935 65 Softbank BB Corp. 4668 502 68 10 LG-EDS Systems Inc. 4812 457 791 72 China Telecom (Shanghai) 9443 453 111 73 Primus Telecommunications 7474 385 216 260 SingTel Optus Pty Ltd 17557 369 35 175 Pakistan Telecom 4802 359 86 150 Wantree Development 4837 342 4596 157 chinanet IDC center beijing n 17974 342 129 14 PT TELEKOMUNIKASI INDONESIA 2907 338 1749 311 SINET Japan ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7018 1500 6127 983 AT&T WorldNet Services 4323 1271 1021 353 Time Warner Telecom 2386 1089 558 731 AT&T Data Communications Serv 6478 1085 333 152 AT&T Worldnet Services 6197 1033 682 500 BellSouth Network Solutions, 11492 1023 102 12 Cable One 18566 999 288 9 Covad Communications 174 941 6791 860 Cogent Communications 701 926 6658 727 UUNET Technologies, Inc. 1239 820 2715 571 Sprint 20115 811 722 426 Charter Communications 7011 780 225 463 Citizens Utilities 19262 723 2566 164 Verizon Global Networks 209 721 3733 572 Qwest 22773 696 1871 42 Cox Communications, Inc. 721 619 21756 274 DLA Systems Automation Center 852 591 1096 378 Telus Advanced Communications 5668 582 160 17 CenturyTel Internet Holdings, 19916 568 49 54 OLM LLC 855 565 250 71 Canadian Research Network RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 702 520 1941 414 UUNET - Commercial IP service 24863 340 47 32 LINKdotNET AS number 3301 309 1455 289 TeliaNet Sweden 3320 303 4993 251 Deutsche Telekom AG 6746 275 95 252 Dynamic Network Technologies, 8220 265 463 255 COLT Telecommunications 680 257 2044 250 DFN-IP service G-WiN 5416 249 15 15 BATELCO-BH 3215 239 2256 92 France Telecom Transpac 8708 233 287 226 Romania Data Systems S.A. 1257 222 1180 168 SWIPnet Swedish IP Network 3269 216 2583 73 TELECOM ITALIA 3246 208 354 197 Song Networks 8551 206 196 30 Bezeq International 30890 205 17 93 SC Kappa Invexim SRL 20858 199 34 4 EgyNet 3352 196 1795 36 Ibernet, Internet Access Netw 12479 185 578 6 Uni2 Autonomous System 3300 184 171 89 AUCS Communications Services 786 175 1795 175 The JANET IP Service LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 1073 2009 211 UniNet S.A. de C.V. 11830 483 299 19 Instituto Costarricense de El 11172 361 116 66 Servicios Alestra S.A de C.V 16814 361 22 8 NSS, S.A. 22047 310 238 12 VTR PUNTO NET S.A. 7303 265 143 24 Telecom Argentina Stet-France 6471 259 74 31 ENTEL CHILE S.A. 14117 242 17 14 Telefonica del Sur S.A. 11556 237 128 4 Cable-Wireless Panama 6147 227 180 24 Telefonica Del Peru 6503 212 171 84 AVANTEL, S.A. 20299 182 25 23 NEWCOM AMERICAS 10481 181 72 8 Prima S.A. 10620 164 48 22 TVCABLE BOGOTA 21826 156 28 59 INTERCABLE 23216 156 19 47 RAMtelecom Telecomunicaciones 7910 154 11 29 ANDINET ON LINE 19429 148 91 38 E.T.B. 14522 147 22 5 SatNet S.A. 18822 146 9 6 TELEFONICA MANQUEHUE AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 3741 291 868 232 The Internet Solution 8452 209 188 7 TEDATA 6713 143 135 11 Itissalat Al-MAGHRIB 2018 138 309 113 Tertiary Education Network 15475 128 84 4 Nile Online 5536 123 8 15 Internet Egypt Network 33783 113 7 7 EEPAD TISP TELECOM & INTERNET 2905 85 176 74 The Internetworking Company o 24835 85 48 6 RAYA Telecom - Egypt 2561 61 6 2 Egyptian Universities Network 15706 55 12 4 Sudatel Internet Exchange Aut 23889 49 16 13 MAURITIUS TELECOM 5713 44 294 34 Telkom SA Ltd 33774 42 13 23 AS Number for Telecom Algeria 16637 33 21 25 Johnnic e-Ventures 33766 33 2 1 Nyala Communications Pty Ltd 8524 30 2 6 AUCEGYPT Autonomous System 21280 27 4 4 Swift Global Kenya Ltd.Is an 33776 27 2 5 Starcomms Nigeria Limited 12455 25 6 3 Jambonet Autonomous system Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4755 1177 1100 Videsh Sanchar Nigam Ltd. Aut 11492 1023 1011 Cable One 4134 1286 1006 CHINANET-BACKBONE 18566 999 990 Covad Communications 6478 1085 933 AT&T Worldnet Services 4323 1271 918 Time Warner Telecom 9498 969 899 BHARTI BT INTERNET LTD. 8151 1073 862 UniNet S.A. de C.V. 9583 1100 721 Sify Limited 22773 696 654 Cox Communications, Inc. 17488 626 594 Hathway IP Over Cable Interne 5668 582 565 CenturyTel Internet Holdings, 19262 723 559 Verizon Global Networks 6197 1033 533 BellSouth Network Solutions, 7545 610 533 TPG Internet Pty Ltd 19916 568 514 OLM LLC 18101 538 511 Reliance Infocom Ltd Internet 855 565 494 Canadian Research Network 4668 502 492 LG-EDS Systems Inc. 7029 565 484 Alltel Information Services, List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 65332 PRIVATE 63.166.106.192/27 1803 SPRINT 24410 UNALLOCATED 203.119.28.0/24 4134 CHINANET-BACKBONE 22895 UNALLOCATED 216.174.38.0/24 19094 Adelphia Business So Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 7.1.1.0/24 1239 Sprint 132.0.0.0/10 721 DLA Systems Automation Center 137.0.0.0/13 721 DLA Systems Automation Center 158.0.0.0/13 721 DLA Systems Automation Center 172.33.1.0/24 7018 AT&T WorldNet Services 180.190.0.0/16 24003 JUBILANT ORGANOSYS LTD., INDI 192.0.10.0/24 9498 BHARTI BT INTERNET LTD. 192.44.0.0/24 5501 Fraunhofer Gesellschaft 192.44.0.0/19 702 UUNET - Commercial IP service 192.70.164.0/24 25689 National Research Council of 192.153.136.0/21 721 DLA Systems Automation Center 192.172.0.0/19 721 DLA Systems Automation Center Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:20 /9:9 /10:12 /11:34 /12:122 /13:235 /14:445 /15:851 /16:9340 /17:3802 /18:6278 /19:13423 /20:15066 /21:13615 /22:17683 /23:19065 /24:115168 /25:775 /26:810 /27:483 /28:60 /29:40 /30:69 /31:0 /32:40 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6478 1076 1085 AT&T Worldnet Services 11492 1009 1023 Cable One 18566 981 999 Covad Communications 9583 940 1100 Sify Limited 7018 817 1500 AT&T WorldNet Services 2386 811 1089 AT&T Data Communications Serv 6197 796 1033 BellSouth Network Solutions, 23577 772 786 Korea Telecom (ATM-MPLS) 7011 683 780 Citizens Utilities 9498 632 969 BHARTI BT INTERNET LTD. 4766 593 788 Korea Telecom (KIX) 4755 573 1177 Videsh Sanchar Nigam Ltd. Aut 19916 563 568 OLM LLC 4323 529 1271 Time Warner Telecom 4668 492 502 LG-EDS Systems Inc. 15270 486 518 PaeTec.net -a division of Pae 855 463 565 Canadian Research Network 18101 462 538 Reliance Infocom Ltd Internet 5668 450 582 CenturyTel Internet Holdings, 17488 448 626 Hathway IP Over Cable Interne Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:9 7:1 8:65 9:1 12:1797 15:19 16:3 17:3 18:8 20:36 24:948 25:1 32:53 38:294 40:57 41:112 44:2 47:4 52:4 55:1 56:3 57:25 58:366 59:360 60:228 61:906 62:991 63:1968 64:3111 65:2314 66:3223 67:775 68:645 69:1785 70:490 71:111 72:1247 73:1 74:326 75:175 76:31 77:156 80:810 81:788 82:663 83:380 84:473 85:758 86:381 87:462 88:251 89:887 90:19 91:261 97:1 116:10 121:163 122:521 123:64 124:759 125:915 128:273 129:223 130:124 131:350 132:51 133:10 134:192 135:38 136:175 137:87 138:191 139:55 140:482 141:142 142:369 143:213 144:281 145:43 146:323 147:146 148:381 149:179 150:115 151:124 152:92 153:121 154:5 155:252 156:152 157:181 158:160 159:154 160:103 161:90 162:235 163:141 164:452 165:401 166:247 167:293 168:499 169:117 170:393 171:15 172:1 189:243 190:548 192:5741 193:3780 194:3076 195:2197 196:917 198:3749 199:3282 200:4651 201:1008 202:7250 203:7418 204:3948 205:2107 206:2413 207:2880 208:2615 209:3604 210:2387 211:933 212:1287 213:1423 214:406 215:39 216:3996 217:1167 218:355 219:301 220:896 221:390 222:269 End of report Report Website: http://thyme.apnic.net

1 0

BGP Update Report
by cidr-report＠potaroo.net 06 Apr '07

06 Apr '07

BGP Update Report Interval: 23-Mar-07 -to- 05-Apr-07 (14 days) Observation Point: BGP Peering with AS4637 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS17974 23281 1.9% 87.9 -- TELKOMNET-AS2-AP PT TELEKOMUNIKASI INDONESIA 2 - AS9121 23085 1.8% 39.8 -- TTNET TTnet Autonomous System 3 - AS9829 18389 1.5% 145.9 -- BSNL-NIB National Internet Backbone 4 - AS24731 14822 1.2% 361.5 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 5 - AS306 13157 1.1% 72.3 -- DNIC - DoD Network Information Center 6 - AS5786 10298 0.8% 64.8 -- UPRENET - University of Puerto Rico 7 - AS8447 9195 0.7% 129.5 -- TELEKOM-AT Telekom Austria AutonomousSystem 8 - AS9583 8952 0.7% 8.5 -- SIFY-AS-IN Sify Limited 9 - AS4621 8952 0.7% 63.5 -- UNSPECIFIED UNINET-TH 10 - AS721 8229 0.7% 19.3 -- DISA-ASNBLK - DoD Network Information Center 11 - AS3255 8163 0.7% 61.8 -- UARNET-AS Ukrainian Academic and Research Network 12 - AS7545 7773 0.6% 15.3 -- TPG-INTERNET-AP TPG Internet Pty Ltd 13 - AS17557 7761 0.6% 20.7 -- PKTELECOM-AS-AP Pakistan Telecom 14 - AS702 7739 0.6% 18.6 -- AS702 MCI EMEA - Commercial IP service provider in Europe 15 - AS18231 7245 0.6% 59.9 -- EXATT-AS-AP Exatt Technologies Private Ltd. 16 - AS30890 7227 0.6% 34.7 -- EVOLVA Evolva Telecom 17 - AS12654 7183 0.6% 175.2 -- RIPE-NCC-RIS-AS RIPE NCC RIS project 18 - AS22291 6904 0.6% 13.5 -- CHARTER-LA - Charter Communications 19 - AS17645 6699 0.5% 609.0 -- NTT-SG-AP ASN - NTT SINGAPORE PTE LTD 20 - AS15471 6409 0.5% 42.4 -- SNR-RO SNR - Societatea Nationala de Radiocomunicatii TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS3043 3119 0.2% 3119.0 -- AMPHIB-AS - Amphibian Media Corporation 2 - AS31594 2826 0.2% 2826.0 -- FORTESS-AS Fortess LLC Network 3 - AS38077 6040 0.5% 1510.0 -- TIMOR-TELECOM-AS-AP Timor Telecom, SA 4 - AS34378 859 0.1% 859.0 -- RUG-AS Razguliay-UKRROS Group 5 - AS38151 835 0.1% 835.0 -- ENUM-AS-ID APJII-RD 6 - AS11828 3327 0.3% 831.8 -- SOINET - State of Illinois/CMS 7 - AS31307 698 0.1% 698.0 -- YKYATIRIM YAPI KREDI YATIRIM 8 - AS41664 668 0.1% 668.0 -- SEMSER-AS Semser Provider LLP 9 - AS36487 4667 0.4% 666.7 -- NEB-SANDHILLS-NET - Consolidated Telephone Company 10 - AS10210 650 0.1% 650.0 -- HOSTECHNET-AP Hostech.Net 11 - AS17645 6699 0.5% 609.0 -- NTT-SG-AP ASN - NTT SINGAPORE PTE LTD 12 - AS33188 1180 0.1% 590.0 -- 13 - AS29700 1763 0.1% 587.7 -- CYPRESS-SEMICONDUCTOR - Cypress Semiconductor 14 - AS9747 1691 0.1% 563.7 -- EZINTERNET-AS-AP EZInternet Pty Ltd 15 - AS30707 1610 0.1% 536.7 -- 16 - AS36867 512 0.0% 512.0 -- Kokonet-BGP 17 - AS13292 490 0.0% 490.0 -- BK DAT 18 - AS35423 486 0.0% 486.0 -- PIRCHER Josef Pircher BetriebsGmbH 19 - AS19760 481 0.0% 481.0 -- CALPINECORP-1 - CALPINE CORP 20 - AS24102 479 0.0% 479.0 -- PEOPLESUPPORT-AS-CEBU-AP PeopleSupport Inc. TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 81.213.47.0/24 5206 0.3% AS9121 -- TTNET TTnet Autonomous System 2 - 81.212.197.0/24 4796 0.3% AS9121 -- TTNET TTnet Autonomous System 3 - 59.94.240.0/20 3964 0.3% AS9829 -- BSNL-NIB National Internet Backbone 4 - 59.94.192.0/20 3964 0.3% AS9829 -- BSNL-NIB National Internet Backbone 5 - 59.95.240.0/20 3964 0.3% AS9829 -- BSNL-NIB National Internet Backbone 6 - 59.94.160.0/20 3964 0.3% AS9829 -- BSNL-NIB National Internet Backbone 7 - 81.212.39.0/24 3567 0.2% AS9121 -- TTNET TTnet Autonomous System 8 - 89.4.130.0/24 3474 0.2% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 9 - 89.4.129.0/24 3469 0.2% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 10 - 89.4.131.0/24 3430 0.2% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 11 - 89.4.128.0/24 3419 0.2% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 12 - 163.191.160.0/19 3323 0.2% AS11828 -- SOINET - State of Illinois/CMS 13 - 209.140.24.0/24 3119 0.2% AS3043 -- AMPHIB-AS - Amphibian Media Corporation 14 - 194.242.124.0/22 2826 0.2% AS31594 -- FORTESS-AS Fortess LLC Network 15 - 80.243.64.0/20 2485 0.2% AS21332 -- NTC-AS New Telephone Company 16 - 192.6.180.0/24 2476 0.2% AS2129 -- HP-EUROPE-AS-TRADE Hewlett-Packard 17 - 58.65.1.0/24 2306 0.1% AS17645 -- NTT-SG-AP ASN - NTT SINGAPORE PTE LTD 18 - 202.136.176.0/24 2173 0.1% AS17645 -- NTT-SG-AP ASN - NTT SINGAPORE PTE LTD 19 - 202.136.182.0/24 2168 0.1% AS17645 -- NTT-SG-AP ASN - NTT SINGAPORE PTE LTD 20 - 62.89.226.0/24 2146 0.1% AS20663 -- INAR-VOLOGDA-AS Autonomous System of Vologda Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org ausnog(a)ausnog.net

1 0

The Cidr Report
by cidr-report＠potaroo.net 06 Apr '07

06 Apr '07

This report has been generated at Fri Apr 6 21:47:13 2007 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 30-03-07 213735 137823 31-03-07 213608 137710 01-04-07 213704 137854 02-04-07 213815 138060 03-04-07 214256 138024 04-04-07 213986 138300 05-04-07 214125 138248 06-04-07 214183 138345 AS Summary 24759 Number of ASes in routing system 10456 Number of ASes announcing only one prefix 1473 Largest number of prefixes announced by an AS AS7018 : ATT-INTERNET4 - AT&T WorldNet Services 90396928 Largest address span announced by an AS (/32s) AS721 : DISA-ASNBLK - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 06Apr07 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 214272 138377 75895 35.4% All ASes AS4134 1257 319 938 74.6% CHINANET-BACKBONE No.31,Jin-rong Street AS4323 1266 356 910 71.9% TWTC - Time Warner Telecom, Inc. AS4755 1080 195 885 81.9% VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System AS9498 971 91 880 90.6% BBIL-AP BHARTI BT INTERNET LTD. AS6478 1084 275 809 74.6% ATT-INTERNET3 - AT&T WorldNet Services AS18566 999 257 742 74.3% COVAD - Covad Communications Co. AS11492 1022 373 649 63.5% CABLEONE - CABLE ONE AS22773 693 52 641 92.5% CCINET-2 - Cox Communications Inc. AS8151 1071 457 614 57.3% Uninet S.A. de C.V. AS17488 626 82 544 86.9% HATHWAY-NET-AP Hathway IP Over Cable Internet AS19262 707 165 542 76.7% VZGNI-TRANSIT - Verizon Internet Services Inc. AS6197 1033 508 525 50.8% BATI-ATL - BellSouth Network Solutions, Inc AS18101 538 32 506 94.1% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS7018 1473 976 497 33.7% ATT-INTERNET4 - AT&T WorldNet Services AS19916 568 101 467 82.2% ASTRUM-0001 - OLM LLC AS17676 503 65 438 87.1% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS4766 746 319 427 57.2% KIXS-AS-KR Korea Telecom AS4812 450 72 378 84.0% CHINANET-SH-AP China Telecom (Group) AS2386 1091 735 356 32.6% INS-AS - AT&T Data Communications Services AS721 618 277 341 55.2% DISA-ASNBLK - DoD Network Information Center AS5668 578 238 340 58.8% AS-5668 - CenturyTel Internet Holdings, Inc. AS15270 515 179 336 65.2% AS-PAETEC-NET - PaeTec.net -a division of PaeTecCommunications, Inc. AS7029 565 235 330 58.4% WINDSTREAM - Windstream Communications Inc AS3602 505 181 324 64.2% AS3602-RTI - Rogers Telecom Inc. AS16852 396 73 323 81.6% BROADWING-FOCAL - Broadwing Communications Services, Inc. AS16814 361 42 319 88.4% NSS S.A. AS7011 780 463 317 40.6% FRONTIER-AND-CITIZENS - Frontier Communications, Inc. AS7545 606 300 306 50.5% TPG-INTERNET-AP TPG Internet Pty Ltd AS4668 310 8 302 97.4% LGNET-AS-KR LG CNS AS33588 437 136 301 68.9% BRESNAN-AS - Bresnan Communications, LLC. Total 22849 7562 15287 66.9% Top 30 total Possible Bogus Routes 24.48.0.0/13 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 24.246.0.0/17 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 41.202.189.0/24 AS22351 INTELSAT Intelsat Global BGP Routing Policy 60.253.0.0/18 AS27572 THEBOE-27572 - The Boeing Company 60.253.64.0/19 AS27572 THEBOE-27572 - The Boeing Company 61.4.64.0/20 AS9929 CNCNET-CN China Netcom Corp. 63.140.213.0/24 AS22555 UTC - Universal Talkware Corporation 63.140.238.0/24 AS20471 MONCUR - Moncur Design 63.141.42.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 63.141.159.0/24 AS17216 VERITECT-EAST - Veritect 63.248.0.0/16 AS3356 LEVEL3 Level 3 Communications 63.248.0.0/17 AS3356 LEVEL3 Level 3 Communications 64.7.112.0/21 AS13511 64.7.120.0/21 AS13537 64.17.32.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.33.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.37.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.46.96.0/20 AS13680 AS13680 Hostway Corporation Tampa, FL 64.46.112.0/20 AS30217 DESYNC Desync Corporation 64.89.224.0/20 AS15276 MAX-LV - Intuitive Logic 64.186.72.0/21 AS25795 ARPNET - ARP NETWORKS, INC. 64.188.0.0/16 AS3356 LEVEL3 Level 3 Communications 65.36.52.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 65.36.121.0/24 AS29957 UINET - UI NET LLC 65.60.45.0/24 AS32311 JKS-ASN - JKS Media, LLC 66.6.34.0/24 AS14935 MONTICELLO - Monticello Networks, Inc. 66.11.32.0/20 AS6261 VISINET - Visionary Systems, Inc. 66.11.40.0/21 AS6261 VISINET - Visionary Systems, Inc. 66.54.91.0/24 AS30506 BLACKSUN-1 - Blacksun Technologies LLC 66.55.160.0/19 AS29994 66.64.96.0/20 AS3790 RADIGRAFICA COSTARRICENSE 66.97.32.0/20 AS11305 INTERLAND-NET1 - Interland Incorporated 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.235.158.0/23 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 66.241.96.0/21 AS10271 TCIX - Troy City Internet Exchange, Inc 67.20.0.0/14 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.64.0.0/13 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.64.208.0/20 AS20001 ROADRUNNER-WEST - Road Runner HoldCo LLC 68.65.192.0/18 AS20001 ROADRUNNER-WEST - Road Runner HoldCo LLC 68.66.64.0/18 AS20001 ROADRUNNER-WEST - Road Runner HoldCo LLC 68.67.16.0/21 AS20001 ROADRUNNER-WEST - Road Runner HoldCo LLC 68.68.192.0/19 AS20001 ROADRUNNER-WEST - Road Runner HoldCo LLC 68.168.0.0/14 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.171.32.0/19 AS20001 ROADRUNNER-WEST - Road Runner HoldCo LLC 68.232.0.0/14 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 68.234.32.0/19 AS20001 ROADRUNNER-WEST - Road Runner HoldCo LLC 69.55.108.0/24 AS4977 NET1 - Pecos Technologies 69.71.192.0/20 AS13818 PHX-INTL-TELEPORT - Phoenix International Teleport 69.160.0.0/12 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 69.168.0.0/14 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 69.169.0.0/17 AS20001 ROADRUNNER-WEST - Road Runner HoldCo LLC 70.32.0.0/13 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 70.33.64.0/18 AS20001 ROADRUNNER-WEST - Road Runner HoldCo LLC 70.35.0.0/18 AS20001 ROADRUNNER-WEST - Road Runner HoldCo LLC 70.40.0.0/16 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 72.9.128.0/20 AS27572 THEBOE-27572 - The Boeing Company 77.244.208.0/20 AS35357 RSSP-AS FSUE RS SP AS 92.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 92.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 93.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 93.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 128.209.0.0/16 AS4017 131.64.0.0/12 AS721 DISA-ASNBLK - DoD Network Information Center 132.0.0.0/10 AS721 DISA-ASNBLK - DoD Network Information Center 137.0.0.0/13 AS721 DISA-ASNBLK - DoD Network Information Center 138.136.0.0/13 AS721 DISA-ASNBLK - DoD Network Information Center 139.56.72.0/23 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 151.135.0.0/16 AS4763 TELSTRANZ-AS TelstraClear Ltd 158.0.0.0/13 AS721 DISA-ASNBLK - DoD Network Information Center 159.3.211.0/24 AS2687 ASATTCA AT&T Global Network Services - AP 159.220.0.0/22 AS16050 REUTERS-DOCKLANDS-RES-AS Reuters Docklands resiliancy 159.220.4.0/22 AS16050 REUTERS-DOCKLANDS-RES-AS Reuters Docklands resiliancy 159.220.4.0/24 AS16050 REUTERS-DOCKLANDS-RES-AS Reuters Docklands resiliancy 159.220.8.0/22 AS35528 REUTERS-UK2-AS Reuters-UK2 159.220.40.0/24 AS1787 REUTERS-AMERICA-ISP-CELL-AS - Reuters America Inc. 159.220.41.0/24 AS1787 REUTERS-AMERICA-ISP-CELL-AS - Reuters America Inc. 159.220.42.0/24 AS1787 REUTERS-AMERICA-ISP-CELL-AS - Reuters America Inc. 159.220.43.0/24 AS1787 REUTERS-AMERICA-ISP-CELL-AS - Reuters America Inc. 159.220.64.0/23 AS24977 MONEYLINE-UK Moneyline Telerate 163.142.0.0/16 AS2500 JPNIC-ASBLOCK-AP JPNIC 180.190.0.0/16 AS24003 JUBL-MAIN-AS-IN JUBILANT ORGANOSYS LTD., INDIA, LEADING CHEMICAL MANUFACTURER 190.54.0.0/16 AS6429 Core Internet AT&T Chile 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.40.105.0/24 AS12582 TSF-DATANET-NGD-AS TSF MPLS VPN Services 192.69.107.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.69.108.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.69.177.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.81.160.0/24 AS719 ELISA-AS Elisa Oyj 192.81.182.0/24 AS719 ELISA-AS Elisa Oyj 192.81.183.0/24 AS719 ELISA-AS Elisa Oyj 192.81.184.0/24 AS719 ELISA-AS Elisa Oyj 192.88.99.0/24 AS559 SWITCH SWITCH, Swiss Education and Research Network 192.96.36.0/24 AS5713 SAIX-NET 192.96.37.0/24 AS10474 NETACTIVE 192.96.135.0/24 AS2018 TENET-1 192.96.136.0/23 AS2018 TENET-1 192.96.140.0/24 AS2018 TENET-1 192.96.143.0/24 AS2018 TENET-1 192.96.145.0/24 AS2018 TENET-1 192.96.177.0/24 AS6083 POSIX-AFRICA 192.96.250.0/24 AS2018 TENET-1 192.122.212.0/24 AS209 ASN-QWEST - Qwest 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.131.233.0/24 AS7891 BELLSOUTH-NET-BLK2 - Bellsouth.Net 192.133.6.0/24 AS10282 EQUANT-CEEUR EQUANT AS for Central and Eastern Europe region 192.139.3.0/24 AS23184 PERSONA - PERSONA COMMUNICATIONS INC. 192.153.136.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 192.153.144.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 192.172.0.0/19 AS721 DISA-ASNBLK - DoD Network Information Center 192.188.208.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 192.245.235.0/24 AS10913 INTERNAP-BLK - Internap Network Services 194.31.227.0/24 AS21461 TRANSFAIRNET Transfair-net GmbH Krefeld 194.59.176.0/20 AS1273 CW Cable & Wireless 194.110.208.0/24 AS174 COGENT Cogent/PSI 194.153.107.0/24 AS8897 MISTRAL Mistral Internet Group Limited 194.246.72.0/23 AS8893 ARTFILES-AS Artfiles New Media GmbH 196.6.108.0/24 AS5713 SAIX-NET 196.6.175.0/24 AS3741 IS 196.6.176.0/23 AS3741 IS 196.6.183.0/24 AS3741 IS 196.6.196.0/24 AS3741 IS 196.6.199.0/24 AS3741 IS 196.6.204.0/22 AS3741 IS 196.6.208.0/24 AS3741 IS 196.6.211.0/24 AS3741 IS 196.6.212.0/23 AS3741 IS 196.6.212.0/24 AS3741 IS 196.6.222.0/23 AS3741 IS 196.6.237.0/24 AS3741 IS 196.10.119.0/24 AS2018 TENET-1 196.10.122.0/23 AS2018 TENET-1 196.10.136.0/22 AS3741 IS 196.10.140.0/22 AS3741 IS 196.10.231.0/24 AS3741 IS 196.10.251.0/24 AS2018 TENET-1 196.10.252.0/23 AS2018 TENET-1 196.10.254.0/24 AS2018 TENET-1 196.11.0.0/20 AS3741 IS 196.11.40.0/21 AS3741 IS 196.11.135.0/24 AS3741 IS 196.11.188.0/23 AS3741 IS 196.11.190.0/24 AS3741 IS 196.11.251.0/24 AS3741 IS 196.13.101.0/24 AS2018 TENET-1 196.13.102.0/23 AS2018 TENET-1 196.13.104.0/24 AS2018 TENET-1 196.13.108.0/24 AS3741 IS 196.13.116.0/22 AS2018 TENET-1 196.13.121.0/24 AS2018 TENET-1 196.13.125.0/24 AS2018 TENET-1 196.13.126.0/24 AS2018 TENET-1 196.13.128.0/22 AS3741 IS 196.13.144.0/22 AS2905 TICSA-ASN 196.13.152.0/21 AS2905 TICSA-ASN 196.13.160.0/24 AS2905 TICSA-ASN 196.13.169.0/24 AS2018 TENET-1 196.13.174.0/23 AS2018 TENET-1 196.13.176.0/21 AS2018 TENET-1 196.13.188.0/22 AS2018 TENET-1 196.13.192.0/22 AS2018 TENET-1 196.13.196.0/24 AS2018 TENET-1 196.13.214.0/23 AS3741 IS 196.13.216.0/23 AS3741 IS 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.54.82.0/24 AS2018 TENET-1 198.54.92.0/24 AS2018 TENET-1 198.54.222.0/24 AS2018 TENET-1 198.54.249.0/24 AS2018 TENET-1 198.54.250.0/24 AS2018 TENET-1 198.54.251.0/24 AS2018 TENET-1 198.97.72.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.80.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.96.0/19 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.240.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.163.155.0/24 AS684 MTSAL-ASN - MTS Allstream Inc. 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.168.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 198.169.0.0/16 AS803 SASKTEL - SaskTel 199.9.128.0/17 AS668 ASN-ASNET-NET-AS - Defense Research and Engineering Network 199.10.0.0/16 AS721 DISA-ASNBLK - DoD Network Information Center 199.60.0.0/20 AS271 BCNET-AS - University of British Columbia 199.114.0.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.128.0/18 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.130.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.132.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DISA/UNRRA 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DISA/UNRRA 199.114.142.0/24 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.144.0/24 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.148.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.150.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS3542 ITSDN-U5 - DISA/UNRRA 199.114.156.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.114.160.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.121.0.0/16 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.0.0/18 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.16.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.80.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 199.246.116.0/24 AS813 UUNET-CANADA - MCI Communications Services, Inc. d/b/a Verizon Business 202.4.160.0/24 AS9498 BBIL-AP BHARTI BT INTERNET LTD. 202.4.161.0/24 AS9498 BBIL-AP BHARTI BT INTERNET LTD. 202.4.162.0/24 AS9498 BBIL-AP BHARTI BT INTERNET LTD. 202.9.64.0/19 AS9290 202.45.132.0/22 AS24314 202.58.113.0/24 AS19161 INNOCOM-TELECOM - INNOCOM TELECOM 202.59.8.0/21 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.86.252.0/22 AS4748 RESOLINK-AS Resources Linke Network Limited 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.90.33.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.40.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.41.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.42.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.43.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.44.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.94.70.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.124.16.0/24 AS24485 202.124.17.0/24 AS24485 202.124.18.0/24 AS24485 202.124.19.0/24 AS24485 202.124.20.0/24 AS24485 202.124.21.0/24 AS24485 202.124.22.0/24 AS24485 202.124.23.0/24 AS24485 202.124.192.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.193.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.194.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.195.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.196.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.197.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.198.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.199.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.200.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.201.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.202.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.203.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.204.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.205.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.206.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.207.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 202.125.96.0/20 AS7693 COMNET-TH KSC Commercial Internet Co. Ltd. 202.128.109.0/24 AS4802 ASN-IINET iiNet Limited 202.128.110.0/23 AS4802 ASN-IINET iiNet Limited 202.136.254.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.136.255.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.148.32.0/20 AS17495 GATEWAY-AP BROADBAND WIRELESSS INTERNET SERVICE PROVIDER 202.164.100.0/24 AS18101 RIL-IDC Reliance Infocom Ltd Internet Data Centre, 202.174.70.0/24 AS21175 M-LINK M-Link Teleport s.a. 202.174.71.0/24 AS23924 202.174.72.0/22 AS23924 202.182.32.0/22 AS10223 UECOMM-AU Uecomm Ltd 203.13.171.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.89.139.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 203.111.192.0/20 AS7473 SINGTEL-AS-AP Singapore Telecom 203.128.128.0/19 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 203.132.64.0/22 AS24001 203.132.68.0/24 AS24001 203.132.74.0/23 AS9837 POWERTEL-AP Powertel Ltd 203.132.80.0/22 AS24001 203.132.84.0/23 AS9837 POWERTEL-AP Powertel Ltd 203.132.86.0/23 AS24001 203.132.88.0/23 AS9837 POWERTEL-AP Powertel Ltd 203.132.90.0/24 AS24001 203.132.95.0/24 AS24001 203.152.136.0/23 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.138.0/23 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.142.0/24 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.143.0/24 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.160.104.0/22 AS23914 OCI-AS-VN One-Connection Internet Company 203.160.110.0/23 AS7643 VNN-AS-AP Vietnam Posts and Telecommunications (VNPT) 204.29.196.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 204.29.197.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 204.48.58.0/24 AS4323 TWTC - Time Warner Telecom, Inc. 204.48.60.0/24 AS4323 TWTC - Time Warner Telecom, Inc. 204.153.68.0/24 AS4017 204.153.71.0/24 AS4017 204.153.104.0/24 AS10913 INTERNAP-BLK - Internap Network Services 204.154.125.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 205.150.0.0/15 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 206.55.208.0/20 AS22180 206.128.104.0/21 AS11709 VIC - VIRTUAL INTERACTIVE CENTER 206.191.192.0/18 AS6287 SPACESTAR - Spacestar Communications 207.7.64.0/19 AS14093 207.98.192.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 207.98.209.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 207.98.223.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 207.98.250.0/23 AS30329 TELESPECTRA - Telespectra, LLC 207.189.62.0/23 AS7132 SBIS-AS - SBC Internet Services 207.204.168.0/24 AS15150 BELLTECH-AS - BELLWETHER TECHNOLOGY CORPORATION 207.204.222.0/24 AS15218 COX-OKC - Cox Communications 207.204.248.0/24 AS6653 PRIVATEI - privateI, LLC 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc 207.246.192.0/20 AS5656 ACCESSUS-DOM - accessU.S./BASENet 208.64.12.0/22 AS22773 CCINET-2 - Cox Communications Inc. 209.54.42.0/24 AS6653 PRIVATEI - privateI, LLC 209.54.93.0/24 AS15218 COX-OKC - Cox Communications 209.54.111.0/24 AS15218 COX-OKC - Cox Communications 209.54.123.0/24 AS6062 NETPLEX - NETPLEX 209.54.142.0/24 AS12284 IPNS-AS - Internet Professionals & Network Solutions 209.54.240.0/21 AS10887 BPSI-AS - BPSI Internet Services 209.105.224.0/19 AS20074 209.140.64.0/20 AS22307 209.140.90.0/24 AS14461 NTSL - NET SOLUTIONS 209.140.224.0/21 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.234.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.235.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.236.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.237.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.238.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.239.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.141.4.0/24 AS6653 PRIVATEI - privateI, LLC 209.141.16.0/21 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.141.48.0/22 AS14461 NTSL - NET SOLUTIONS 209.141.104.0/24 AS6653 PRIVATEI - privateI, LLC 209.159.128.0/19 AS209 ASN-QWEST - Qwest 209.207.24.0/24 AS21829 JADETECH-NET - Jade Technologies, Inc. 209.207.36.0/24 AS21829 JADETECH-NET - Jade Technologies, Inc. 210.5.128.0/20 AS4837 CHINA169-BACKBONE CNCGROUP China169 Backbone 216.21.1.0/24 AS11652 216.21.6.0/24 AS11652 216.21.7.0/24 AS11652 216.21.15.0/24 AS11652 216.21.17.0/24 AS11652 216.59.0.0/17 AS3356 LEVEL3 Level 3 Communications 216.65.160.0/19 AS7770 TRITON - Triton Technologies, Inc. 216.75.228.0/24 AS32097 WII-KC - WholeSale Internet 216.115.73.0/24 AS26834 DURA - Dura Automotive 216.115.80.0/20 AS35921 IFCI-US - InternetFCI LLC 216.116.56.0/24 AS9237 HUTCHCA-AS Corporate Access (HK) Ltd. 216.116.59.0/24 AS7132 SBIS-AS - SBC Internet Services 216.172.198.0/24 AS15218 COX-OKC - Cox Communications 216.172.199.0/24 AS15218 COX-OKC - Cox Communications 216.210.86.0/24 AS577 BACOM - Bell Canada 216.211.160.0/21 AS11584 IGEUNET Intergate Europe Inc. 216.224.64.0/19 AS6440 EMF-AS - emf.net 216.230.224.0/20 AS15270 AS-PAETEC-NET - PaeTec.net -a division of PaeTecCommunications, Inc. 216.235.96.0/19 AS13645 BROADBANDONE - BroadbandONE, Inc. 216.235.224.0/20 AS22136 NYCT - New York Connect 216.236.160.0/21 AS23272 216.236.168.0/23 AS23272 216.236.170.0/24 AS4565 EPOCH-INTERNET - Epoch Networks 216.236.171.0/24 AS4565 EPOCH-INTERNET - Epoch Networks 216.236.172.0/24 AS4565 EPOCH-INTERNET - Epoch Networks 216.236.174.0/23 AS23272 216.251.203.0/24 AS7132 SBIS-AS - SBC Internet Services 216.251.205.0/24 AS209 ASN-QWEST - Qwest 216.251.207.0/24 AS1239 SPRINTLINK - Sprint Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org ausnog(a)ausnog.net

1 0

Re: Blocking mail from bad places
by James R. Cutler 05 Apr '07

05 Apr '07

Todd makes my point exactly. As he notes, the rejection message tells me that the message was rejected by some system. It does not tell my why it was rejected. Thus, just like this message, it adds more to the noise to signal ratio! Cutler At 4/5/2007 12:28 PM -0700, todd glassey wrote: ----- Original Message ----- From: <mailto:james.cutler@consultant.com>James R. Cutler To: <mailto:nanog@nanog.org>nanog(a)nanog.org Sent: Thursday, April 05, 2007 12:08 PM Subject: Re: Blocking mail from bad places At 4/5/2007 08:38 AM -0700, Thomas Leavitt wrote: One problem with the "bounce" solution is that <snip/> ========================== So, I (Cutler) add: And, even the best-intentioned bounce messages often give lots of data, but no information, thus increasing the noise to signal ratio. For example, Paul most likely knows what the following means to him. To me it just means I can't send mail to Paul. Except that this message tells you why you cant send mail to Paul - because Paul's system refused it, not because Paul's system didnt exist or that Paul's address was bad. >This message was created automatically by mail delivery software. > >A message that you sent could not be delivered to one or more of its >recipients. This is a permanent error. The following address(es) failed: > > paul(a)vix.com > SMTP error from remote mailer after RCPT TO:<paul(a)vix.com>: > host sa.vix.com [204.152.187.1]: 553 5.7.1 Service unavailable; > Client host [209.86.89.61] blocked using reject-all.vix.com; created / reason > >------ This is a copy of the message, including all the headers. ------ - James R. Cutler james.cutler(a)consultant.com - James R. Cutler james.cutler(a)consultant.com

3 2

AT&T (7018) BGP clue sought
by Justin M. Streiner 05 Apr '07

05 Apr '07

I'm trying to track down someone at AT&T that can answer questions about their implementation of BGP communities - questions that are not answered in their BGP policy document. Conversations with first and second line support people have not been productive. Any help that someone in a network engineering role could provide would be greatly appreciated. jms

2 1

Re: Blocking mail from bad places
by Scott Weeks 05 Apr '07

05 Apr '07

--- black(a)csulb.edu wrote:---------------------- Valdis.Kletnieks(a)vt.edu wrote: > On Tue, 03 Apr 2007 15:18:36 PDT, Scott Weeks said: >> What I meant was: when only a few folks use email, the spammers will go >>away. > > They won't go away, they'll just go infest whatever the people are using. : : MySpace and blog spamming can be cured instantly : if users required all public posts to be moderated : rather than automatically accepted. ------------------------------------------------ I have to agree with Valdis. My post was incomplete, though the analogy still stands. When I said spammers will go away, I should've said the 'email spammers' will go away. Just like parasites on a dead animal body, the spammers won't go away. They'll just find another live body and kill it. ad infinitum. It's not a technology issue. It's not a political issue. It's a biological issue. Parasites kill until there's nothing left to kill. I wonder if spammers and cheats think of themselves that way? Rhetorical question...not a troll. scott

1 0

Re: ICANNs role [was: Re: On-going ...]
by Fergie 04 Apr '07

04 Apr '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [top-posting to maintain the entire context below] I think Doug makes some good points here (with the exception of number 6)... - - ferg - -- Douglas Otis <dotis(a)mail-abuse.org> wrote: On Apr 2, 2007, at 7:02 PM, Gadi Evron wrote: > On Mon, 2 Apr 2007, David Conrad wrote: >> On Apr 1, 2007, at 8:45 AM, Gadi Evron wrote: >> >> The one concrete suggestion I've seen is to induce a delay in zone >> creation and publish a list of newly created names within the zone. >> The problem with this is that is sort of assumes: > > What are your thoughts on basic suggestions such as: > 1. Allowing registrars to terminate domains based on abuse, rather > than just fake contact details. This requires a separate agency tasked to respond to reports of crime. Registrars have a conflict of interest (they want to be profitable). Even answering the phone to deal with this type of problem costs more than a registration is worth. Hence, it is easier to establish domain tasting which essentially drops this entire problem into someone else's lap. > 2. Following these incidents as they happen so that YOU, in charge, > can make these suggestion? Often enforcement policies begins with a complaint. But who is taking the role of enforcement? > 3. For true emergencies threatening the survivability of the > system, shoudln't we be able to black-list a domain in the core? It would be nice if there were an agency that had a mechanism in place for routinely yanking domains that pose a public threat. Who would you trust in that role? Unfortunately, the US has lost their credibility as loudly echoed on this list. > 4. Black lists for providers are not perfect, but perhaps they > could help protect users significantly? Black-hole or block-lists is where protection can be introduced, political push back will thwart centralized enforcement. To support this mode of operation, a preview mode of operation would be highly beneficial. Currently bad actors will keep such efforts in a futile feckless reactive mode. > 5. Enforcing that registrars act in say, not a whitehat fashion, > but a not blackhat fashion? Of course a bad registrar might warrant greater scrutiny. At what point would all their customers need to find a different registrar? > 6. Yours here? Perhaps only banks should be allowed to act as registrars? At least they know how to check physical IDs. - -Doug -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.0 (Build 214) wj8DBQFGEc7Vq1pz9mNUZTMRAtoyAKDHDvGL6rvC+tKjlfrN0T09f4JjGACg+GBa rARiLG+Oj2UY1y1EFjqPlA8= =PJHj -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

12 23

Re: On-going Internet Emergency and Domain Names
by Fergie 04 Apr '07

04 Apr '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- "Steven M. Bellovin" <smb(a)cs.columbia.edu> wrote: >Jeff Shultz <jeffshultz(a)wvi.com> wrote: > >> >> I won't discount the assertion that there is some sort of emergency >> occurring. I would however, like to see a bit of a reference to where >> we can learn more about what is going on (I assume this is the >> javascript exploit I heard about a couple days ago). >> > >No -- it's a 0day in Internet Explorer involving animated cursors -- >and it can be spread by visiting an infected web site or even by email. > Not that I like being in the position of correcting Steve :-) but the real answer is "yes" and "no" -- or ctually just yes. While the 0-day exploit is the ANI vulnerability, there are many, many compromised websites (remember the MiamiDolhins.com embedded javascript iframe redirect?) that are using similar embedded .js redirects to malware hosted sites which fancy this exploit. And some of them have vast audiences, increasing the potential for a major "issue" -- TBD. Track with the SANS ISC -- they're doing a good job of keeping the community abreast. Cheers, - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.0 (Build 214) wj8DBQFGDc/4q1pz9mNUZTMRAjqiAJ0UYDDep4RbSmaJ3jUdsGssSVt7AwCgnDPV PIfR8hlav9Bh20TBXBPsUZo= =wtJu -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

45 111

On-going Internet Emergency and Domain Names
by Gadi Evron 04 Apr '07

04 Apr '07

There is a current on-going Internet emergency: a critical 0day vulnerability currently exploited in the wild threatens numerous desktop systems which are being compromised and turned into bots, and the domain names hosting it are a significant part of the reason why this attack has not yet been mitigated. This incident is currenly being handled by several operational groups. This past February, I sent an email to the Reg-Ops (Registrar Operations) mailing list. The email, which is quoted below, states how DNS abuse (not the DNS infrastructure) is the biggest unmitigated current vulnerability in day-to-day Internet security operations, not to mention abuse. While we argue about this or that TLD, there are operational issues of the highest importance that are not being addressed. The following is my original email message, elaborating on these above statements. Please note this was indeed just an email message, sent among friends. ----- Begin quoted message ----- Date: Fri, 16 Feb 2007 02:32:46 -0600 (CST) From: Gadi Evron To: reg-ops@... Subject: [reg-ops] Internet security and domain names Hi all, this is a tiny bit long. Please have patience, this is important. On this list (which we maintain as low-traffic) you guys (the registrars) have shown a lot of care and have become, on our sister mitigation and research lists (those of you who are subscribed), an integral part of our community we now call "The Internet Security Operations Community". We face problems today though, that you can not help us solve under the current setting. But only you can help us coming up with new ideas. Day-to-day, we are able to report hundreds and thousands of completely bogus phishing and other bad domains, but both policy-wise and resources-wise, registrars can't handle this. I don't blame you. In emergencies, we can only mitigate threats if one of you or yours are in control.. Just a week ago we faced the problem of the Dolphins stadium being hacked and malicious code being put on it: 1. We tracked down all the IP addresses involved and mitigated them (by we I mean also people other than me. Many were involved). 2. We helped the Dolphins Stadium IT staff take care of the malicious code on their web page - Specifically Gary Warner). 3. We coordinated with law enforcement. 4. We coordinated that no one does a press release which will hurt law enforcement. 5. We did a lot more. Including actually convincing a Chinese registrar to pull one of the domains in question. A miracle. There was another domain to be mitigated, unsuccessfully. One thing though - at a second's notice, this could all be for nothing as the DNS records could be updated with new IP addresses. There were hundreds of other sites also infected. Even if we could find the name server admin, some of these domains have as many as 40 NSs. That doesn't make life easy. Then, these could change, too. This is the weakest link online today in Internet security, which we in most cases can't mitigate, and the only mitigation route is the domain name. Every day we see two types of fast-flux attacks: 1. Those that keep changing A records by using a very low TTL. 2. Those that keep changing NS records, pretty much the same. Now, if we have a domain which can be mitigated to solve such emergencies and one of you happen to run it, that's great... However, if we end up with a domain not under the care of you and yours.. we are simply.. fucked. Sorry for the language. ICANN has a lot of policy issues as well, and the good guys there can't help. ICANN has enough trouble taking care of all those who want money for .com, .net or .xxx. All that being said, the current situation can not go on. We can no longer ignore it nor are current measures sufficient. It is imperative that we find some solutions, as limited as they may be. We need to be able to get rid of domain names, at the very least during real emergencies. I am aware how it isn't always easy to distinguish what is good and what is bad. Still, we need to find a way. Members of reg-ops: What do you think can be conceivably done? How can we make a difference which is REALLY needed on today's Internet? Please participate and let me know what you think, we simply can no longer wait for some magical change to happen. Gadi. ----- End of quoted message ----- Thousands of malicious domain names and several weeks later, we face the current crisis. The 0day vulnerability is exploited in the wild, and mitigating the IP addresses is not enough. We need to be able to "get rid" of malicious domain names. We need to be able to mitigate attacks on the weakest link - DNS, which are not necessarily solved by DNS-SEC or Anycast. On Reg-Ops and other operational groups, we came up with some imperfect ideas on what we can make happen on our own in short term which will help us reach better mitigation, as security does not seem to be on the agenda of those running DNS: 1. A system by which registrars can acknowledge confirmed bad domains (under strict guidelines) and respond to the reports according to their AUP and ICANN policy, thus "getting rid" of them in a much quicker fashion, is being set up at the ISOTF. A black list for registrars, if you will. This is far from perfect and currently slow-going. Naturally, this can not be forced on all registrars, nor do the black hat ones, care. 2. A black list for resolvers (hopefully large service providers) is also being created at the ISOTF, so that the risk of visibility of bad domains, as will be defined, can be minimized. Naturally, no provider can be forced to use this list and there are millions of unaffiliated resolvers, etc. Other options that have been raised as technically possible, but considered unlikely and indeed, bad: 3. Setting up a black list of domain names for TLD servers, for them not to respond on. 4. Creating an alternate root which we could trust. Another suggestion which was raised: 5. Apply to change the ICANN policy. We need a solution. This operational issue needs to be added as a main agenda item today so that tomorrow we will be ready to mitigate it. I blame myself to some degree for not raising this with higher echelons 2 and 3 years ago due to respect to those who have been working on DNS for many years, but what's done is done. The operational communities do not always know how to voice their needs or the difficulties they face. Nor will everyone agree on what the issues are. It is my strong belief (which is obviously my personal opinion), based on facts we see in daily security operations on the Internet that this issue is paramount, and I am sending here a call for help to the DNS experts of the world: what is our next step to be? What do we currently intend to do (not my personal opinion): We are formalizing a letter to ICANN's SSAC, as they are the top experts on DNS infrastructure security issues, coming from operational folks at the ISOTF dealing with daily usage of the DNS for abuse purposes (and specifically fastflux). Further, the ISOTF is moving forward with items #1 and #2 as mentioned above. #3 will have to remain as a contingency, #4 we have no influence to affect. #5 is currently being explored. Are we missing a possible solution? What does the larger community suggest? Gadi Evron.

22 33

Re: summarising [was: Re: ICANNs role]
by Fergie 04 Apr '07

04 Apr '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- Douglas Otis <dotis(a)mail-abuse.org> wrote: >[...]Just because this information can be published within a few milliseconds, does not make doing so a good idea.[...] Very well said. - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.0 (Build 214) wj8DBQFGEv77q1pz9mNUZTMRAhQtAJ4omynbNbOi6uLe+tN6ezXrYkNwGgCgwVIG rgcrtWdNCOOOodnPXz6FfGk= =EWm+ -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0