- Test - lists.nanog.org

BGP Update Report
by cidr-report＠potaroo.net 23 Feb '07

23 Feb '07

BGP Update Report Interval: 09-Feb-07 -to- 22-Feb-07 (14 days) Observation Point: BGP Peering with AS4637 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS4134 15109 1.2% 27.3 -- CHINANET-BACKBONE No.31,Jin-rong Street 2 - AS9583 14028 1.1% 14.5 -- SIFY-AS-IN Sify Limited 3 - AS9394 13035 1.1% 4.6 -- CRNET CHINA RAILWAY Internet(CRNET) 4 - AS702 11929 1.0% 16.7 -- AS702 MCI EMEA - Commercial IP service provider in Europe 5 - AS24731 10268 0.8% 446.4 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 6 - AS20426 9956 0.8% 2489.0 -- PWC-AS - PriceWaterhouseCoopers, LLP 7 - AS17974 8969 0.7% 25.8 -- TELKOMNET-AS2-AP PT TELEKOMUNIKASI INDONESIA 8 - AS15611 8426 0.7% 94.7 -- Iranian Research Organisation 9 - AS4249 8354 0.7% 62.3 -- LILLY-AS - Eli Lilly and Company 10 - AS4775 7998 0.7% 35.1 -- GLOBE-TELECOM-AS Telecom Carrier / ISP Plus + 11 - AS12654 7746 0.6% 188.9 -- RIPE-NCC-RIS-AS RIPE NCC RIS project 12 - AS4621 7567 0.6% 53.7 -- UNSPECIFIED UNINET-TH 13 - AS306 7354 0.6% 40.4 -- DNIC - DoD Network Information Center 14 - AS18809 6969 0.6% 101.0 -- Cable Onda 15 - AS4795 6921 0.6% 30.6 -- INDOSAT2-ID INDOSATM2 ASN 16 - AS8151 6831 0.6% 6.6 -- Uninet S.A. de C.V. 17 - AS33783 6063 0.5% 53.2 -- EEPAD 18 - AS5486 5872 0.5% 4.1 -- SMILE-ASN Euronet Digital Communications, (1992) LTD, Israel 19 - AS9051 5428 0.5% 36.9 -- IDM Autonomous System 20 - AS9737 5281 0.4% 44.4 -- TOTNET-TH-AS-AP Telephone Organization of Thailand TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS31594 4490 0.4% 4490.0 -- FORTESS-AS Fortess LLC Network 2 - AS20426 9956 0.8% 2489.0 -- PWC-AS - PriceWaterhouseCoopers, LLP 3 - AS25774 1961 0.2% 1961.0 -- CHAPMORTCORP - CHAPEL MORTGAGE 4 - AS9502 2690 0.2% 1345.0 -- OOCL-HKG-AP Hong Kong Headquarters 5 - AS4587 3779 0.3% 1259.7 -- ONEWORLD2 - One World Internetworking, Inc 6 - AS34378 914 0.1% 914.0 -- RUG-AS Razguliay-UKRROS Group 7 - AS3944 890 0.1% 890.0 -- PARTAN-LAB - Partan & Partan 8 - AS31307 830 0.1% 830.0 -- YKYATIRIM YAPI KREDI YATIRIM 9 - AS19580 805 0.1% 805.0 -- ZONETEL - ZONE TELECOM, INC. 10 - AS14548 742 0.1% 742.0 -- LISTEN-SF-1 - Listen.com 11 - AS12408 678 0.1% 678.0 -- BIKENT-AS Bikent Ltd. Autonomous system 12 - AS30707 2024 0.2% 674.7 -- SICOR-US-CA-IRVINE - SICOR Pharmaceuticals, Inc. 13 - AS3043 3132 0.3% 626.4 -- AMPHIB-AS - Amphibian Media Corporation 14 - AS7345 2461 0.2% 615.2 -- LUCENTTECH - Lucent Technologies Inc. 15 - AS28650 608 0.1% 608.0 -- Dilmar Antonio Simonetti 16 - AS21391 1519 0.1% 506.3 -- TDA-AS 17 - AS15774 503 0.0% 503.0 -- MEDIANAT LLC "MEDIANAT", ISP primarily for educational institution 18 - AS29098 498 0.0% 498.0 -- IPSO-AS S.C. IPSO S.A. 19 - AS33188 976 0.1% 488.0 -- SCS-NETWORK-1 - Sono Corporate Suites 20 - AS4963 1373 0.1% 457.7 -- TEXOMA - Internet Texoma TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 155.201.48.0/21 9951 0.7% AS20426 -- PWC-AS - PriceWaterhouseCoopers, LLP 2 - 194.242.124.0/22 4490 0.3% AS31594 -- FORTESS-AS Fortess LLC Network 3 - 203.177.144.0/23 3973 0.3% AS4775 -- GLOBE-TELECOM-AS Telecom Carrier / ISP Plus + 4 - 89.4.131.0/24 3341 0.2% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 5 - 89.4.128.0/24 3335 0.2% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 6 - 89.4.129.0/24 3309 0.2% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 7 - 209.140.24.0/24 3096 0.2% AS3043 -- AMPHIB-AS - Amphibian Media Corporation 8 - 146.222.76.0/24 2673 0.2% AS9502 -- OOCL-HKG-AP Hong Kong Headquarters 9 - 62.89.226.0/24 2077 0.1% AS20663 -- INAR-VOLOGDA-AS Autonomous System of Vologda 10 - 64.95.193.0/24 2018 0.1% AS30707 -- SICOR-US-CA-IRVINE - SICOR Pharmaceuticals, Inc. 11 - 207.106.204.0/24 1961 0.1% AS25774 -- CHAPMORTCORP - CHAPEL MORTGAGE 12 - 203.199.128.0/19 1877 0.1% AS4755 -- VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System 13 - 194.42.208.0/20 1836 0.1% AS705 -- UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 14 - 135.109.224.0/19 1292 0.1% AS7345 -- LUCENTTECH - Lucent Technologies Inc. 15 - 143.227.48.0/20 1267 0.1% AS4587 -- ONEWORLD2 - One World Internetworking, Inc 16 - 143.227.0.0/16 1265 0.1% AS4587 -- ONEWORLD2 - One World Internetworking, Inc 17 - 204.87.185.0/24 1250 0.1% AS4587 -- ONEWORLD2 - One World Internetworking, Inc 18 - 135.109.0.0/19 1168 0.1% AS7345 -- LUCENTTECH - Lucent Technologies Inc. 19 - 216.85.83.0/24 1143 0.1% AS4323 -- TWTC - Time Warner Telecom, Inc. AS6467 -- ESPIRECOMM - Xspedius Communications Co. 20 - 194.225.132.0/24 1016 0.1% AS6736 -- IRANET-IPM IRANET/IPM Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org ausnog(a)ausnog.net

1 0

The Cidr Report
by cidr-report＠potaroo.net 23 Feb '07

23 Feb '07

This report has been generated at Fri Feb 23 21:45:34 2007 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 16-02-07 208954 135684 17-02-07 209138 135744 18-02-07 209288 135739 19-02-07 209438 135908 20-02-07 209575 135968 21-02-07 209757 135766 22-02-07 209998 135856 23-02-07 209950 135789 AS Summary 24353 Number of ASes in routing system 10282 Number of ASes announcing only one prefix 1483 Largest number of prefixes announced by an AS AS7018 : ATT-INTERNET4 - AT&T WorldNet Services 90543360 Largest address span announced by an AS (/32s) AS721 : DISA-ASNBLK - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 23Feb07 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 209972 135774 74198 35.3% All ASes AS4323 1326 354 972 73.3% TWTC - Time Warner Telecom, Inc. AS18566 992 30 962 97.0% COVAD - Covad Communications Co. AS4134 1242 308 934 75.2% CHINANET-BACKBONE No.31,Jin-rong Street AS4755 1047 169 878 83.9% VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System AS9498 960 117 843 87.8% BBIL-AP BHARTI BT INTERNET LTD. AS6478 1124 388 736 65.5% ATT-INTERNET3 - AT&T WorldNet Services AS22773 729 47 682 93.6% CCINET-2 - Cox Communications Inc. AS11492 978 344 634 64.8% CABLEONE - CABLE ONE AS8151 1041 462 579 55.6% Uninet S.A. de C.V. AS17488 598 54 544 91.0% HATHWAY-NET-AP Hathway IP Over Cable Internet AS19262 713 180 533 74.8% VZGNI-TRANSIT - Verizon Internet Services Inc. AS6197 1024 507 517 50.5% BATI-ATL - BellSouth Network Solutions, Inc AS7018 1483 978 505 34.1% ATT-INTERNET4 - AT&T WorldNet Services AS19916 568 71 497 87.5% ASTRUM-0001 - OLM LLC AS18101 522 32 490 93.9% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS17676 503 65 438 87.1% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS4812 490 72 418 85.3% CHINANET-SH-AP China Telecom (Group) AS15270 504 88 416 82.5% AS-PAETEC-NET - PaeTec.net -a division of PaeTecCommunications, Inc. AS4766 727 315 412 56.7% KIXS-AS-KR Korea Telecom AS2386 1114 742 372 33.4% INS-AS - AT&T Data Communications Services AS721 633 278 355 56.1% DISA-ASNBLK - DoD Network Information Center AS3602 520 181 339 65.2% AS3602-RTI - Rogers Telecom Inc. AS16852 395 72 323 81.8% BROADWING-FOCAL - Broadwing Communications Services, Inc. AS7011 798 476 322 40.4% FRONTIER-AND-CITIZENS - Frontier Communications, Inc. AS33588 432 127 305 70.6% BRESNAN-AS - Bresnan Communications, LLC. AS6198 562 268 294 52.3% BATI-MIA - BellSouth Network Solutions, Inc AS7029 511 224 287 56.2% WINDSTREAM - Windstream Communications Inc AS4668 293 7 286 97.6% LGNET-AS-KR LG CNS AS6517 406 122 284 70.0% YIPESCOM - Yipes Communications, Inc. AS855 566 287 279 49.3% CANET-ASN-4 - Bell Aliant Total 22801 7365 15436 67.7% Top 30 total Possible Bogus Routes 24.246.0.0/17 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 60.253.0.0/18 AS27572 THEBOE-27572 - The Boeing Company 60.253.64.0/19 AS27572 THEBOE-27572 - The Boeing Company 61.4.64.0/20 AS9929 CNCNET-CN China Netcom Corp. 63.248.0.0/16 AS3356 LEVEL3 Level 3 Communications 63.248.0.0/17 AS3356 LEVEL3 Level 3 Communications 64.7.112.0/21 AS13511 ITXC - ITXC 64.7.120.0/21 AS13537 ITXC-2 - ITXC 64.17.32.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.33.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.37.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.46.96.0/20 AS13680 AS13680 Hostway Corporation Tampa, FL 64.46.112.0/20 AS30217 DESYNC Desync Corporation 64.79.64.0/19 AS10789 BIGNET-AS - The Bignet 64.79.86.0/24 AS10789 BIGNET-AS - The Bignet 64.79.87.0/24 AS10789 BIGNET-AS - The Bignet 64.79.88.0/24 AS10789 BIGNET-AS - The Bignet 64.79.89.0/24 AS10789 BIGNET-AS - The Bignet 64.79.90.0/24 AS10789 BIGNET-AS - The Bignet 64.79.96.0/20 AS10789 BIGNET-AS - The Bignet 64.89.224.0/24 AS15276 MAX-LV - Intuitive Logic 64.89.225.0/24 AS15276 MAX-LV - Intuitive Logic 64.89.226.0/24 AS15276 MAX-LV - Intuitive Logic 64.89.232.0/24 AS15276 MAX-LV - Intuitive Logic 64.89.239.0/24 AS15276 MAX-LV - Intuitive Logic 64.188.0.0/16 AS3356 LEVEL3 Level 3 Communications 64.250.128.0/18 AS10789 BIGNET-AS - The Bignet 65.60.45.0/24 AS32311 JKS-ASN - JKS Media, LLC 66.11.32.0/20 AS6261 VISINET - Visionary Systems, Inc. 66.37.96.0/20 AS3764 IA-HOU-AS - Internet America, Inc. 66.54.91.0/24 AS30506 BLACKSUN-1 - Blacksun Technologies LLC 66.55.160.0/19 AS29994 ISKIMARO - Iskimaro 66.55.160.0/24 AS29994 ISKIMARO - Iskimaro 66.55.176.0/24 AS29994 ISKIMARO - Iskimaro 66.64.96.0/20 AS3790 RADIGRAFICA COSTARRICENSE 66.97.32.0/20 AS11305 INTERLAND-NET1 - Interland Incorporated 66.163.96.0/20 AS25767 WAVEFORM - Waveform Technology, LLC 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.235.158.0/23 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 66.241.96.0/21 AS10271 TCIX - Troy City Internet Exchange, Inc 69.36.192.0/20 AS29804 INTEGRATIX - Integratix Inc. 69.55.108.0/24 AS4977 NET1 - Pecos Technologies 72.9.128.0/20 AS27572 THEBOE-27572 - The Boeing Company 77.242.16.0/20 AS35047 ABISSNET Abiss Net Tirana Albania 79.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 79.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 123.0.0.0/8 AS7643 VNN-AS-AP Vietnam Posts and Telecommunications (VNPT) 128.209.0.0/16 AS4017 BELLST - Bell Atlantic Science & Technology 131.64.0.0/12 AS721 DISA-ASNBLK - DoD Network Information Center 132.0.0.0/10 AS721 DISA-ASNBLK - DoD Network Information Center 137.0.0.0/13 AS721 DISA-ASNBLK - DoD Network Information Center 138.136.0.0/13 AS721 DISA-ASNBLK - DoD Network Information Center 139.56.0.0/19 AS14956 BROADVISION-ASN - Broadvision Inc. 139.56.72.0/23 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 151.135.0.0/16 AS4763 TELSTRANZ-AS TelstraClear Ltd 158.0.0.0/13 AS721 DISA-ASNBLK - DoD Network Information Center 159.3.211.0/24 AS2687 ASATTCA AT&T Global Network Services - AP 159.220.0.0/22 AS16050 REUTERS-DOCKLANDS-RES-AS Reuters Docklands resiliancy 159.220.4.0/22 AS16050 REUTERS-DOCKLANDS-RES-AS Reuters Docklands resiliancy 159.220.4.0/24 AS16050 REUTERS-DOCKLANDS-RES-AS Reuters Docklands resiliancy 159.220.8.0/22 AS35528 REUTERS-UK2-AS Reuters-UK2 159.220.40.0/24 AS1787 REUTERS-AMERICA-ISP-CELL-AS - Reuters America Inc. 159.220.41.0/24 AS1787 REUTERS-AMERICA-ISP-CELL-AS - Reuters America Inc. 159.220.42.0/24 AS1787 REUTERS-AMERICA-ISP-CELL-AS - Reuters America Inc. 159.220.43.0/24 AS1787 REUTERS-AMERICA-ISP-CELL-AS - Reuters America Inc. 159.220.64.0/23 AS24977 MONEYLINE-UK Moneyline Telerate 163.142.0.0/16 AS2500 JPNIC-ASBLOCK-AP JPNIC 180.190.0.0/16 AS24003 JUBL-MAIN-AS-IN JUBILANT ORGANOSYS LTD., INDIA, LEADING CHEMICAL MANUFACTURER 190.54.0.0/16 AS6429 Core Internet AT&T Chile 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.40.105.0/24 AS12582 TSF-DATANET-NGD-AS TSF MPLS VPN Services 192.69.107.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.69.108.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.69.177.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.81.160.0/24 AS719 ELISA-AS Elisa Oyj 192.81.182.0/24 AS719 ELISA-AS Elisa Oyj 192.81.183.0/24 AS719 ELISA-AS Elisa Oyj 192.81.184.0/24 AS719 ELISA-AS Elisa Oyj 192.88.99.0/24 AS559 SWITCH SWITCH, Swiss Education and Research Network 192.96.36.0/24 AS5713 SAIX-NET 192.96.37.0/24 AS10474 NETACTIVE 192.96.135.0/24 AS2018 TENET-1 192.96.136.0/23 AS2018 TENET-1 192.96.140.0/24 AS2018 TENET-1 192.96.143.0/24 AS2018 TENET-1 192.96.145.0/24 AS2018 TENET-1 192.96.177.0/24 AS6083 POSIX-AFRICA 192.96.250.0/24 AS2018 TENET-1 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.133.6.0/24 AS10282 EQUANT-CEEUR EQUANT AS for Central and Eastern Europe region 192.139.3.0/24 AS23184 PERSONA - PERSONA COMMUNICATIONS INC. 192.153.136.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 192.153.144.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 192.172.0.0/19 AS721 DISA-ASNBLK - DoD Network Information Center 192.188.208.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 192.245.235.0/24 AS29748 CARPATHIA-HOSTING - Carpathia Hosting 194.31.227.0/24 AS21461 TRANSFAIRNET Transfair-net GmbH Krefeld 194.59.176.0/20 AS1273 CW Cable & Wireless 194.153.107.0/24 AS8897 MISTRAL Mistral Internet Group Limited 194.246.72.0/23 AS8893 ARTFILES-AS Artfiles New Media GmbH 196.6.108.0/24 AS5713 SAIX-NET 196.6.175.0/24 AS3741 IS 196.6.176.0/23 AS3741 IS 196.6.183.0/24 AS3741 IS 196.6.196.0/24 AS3741 IS 196.6.199.0/24 AS3741 IS 196.6.204.0/22 AS3741 IS 196.6.208.0/24 AS3741 IS 196.6.211.0/24 AS3741 IS 196.6.212.0/23 AS3741 IS 196.6.212.0/24 AS3741 IS 196.6.222.0/23 AS3741 IS 196.6.237.0/24 AS3741 IS 196.10.119.0/24 AS2018 TENET-1 196.10.122.0/23 AS2018 TENET-1 196.10.136.0/22 AS3741 IS 196.10.140.0/22 AS3741 IS 196.10.231.0/24 AS3741 IS 196.10.251.0/24 AS2018 TENET-1 196.10.252.0/23 AS2018 TENET-1 196.10.254.0/24 AS2018 TENET-1 196.11.0.0/20 AS3741 IS 196.11.40.0/21 AS3741 IS 196.11.135.0/24 AS3741 IS 196.11.188.0/23 AS3741 IS 196.11.190.0/24 AS3741 IS 196.11.251.0/24 AS3741 IS 196.13.101.0/24 AS2018 TENET-1 196.13.102.0/23 AS2018 TENET-1 196.13.104.0/24 AS2018 TENET-1 196.13.108.0/24 AS3741 IS 196.13.116.0/22 AS2018 TENET-1 196.13.121.0/24 AS2018 TENET-1 196.13.125.0/24 AS2018 TENET-1 196.13.126.0/24 AS2018 TENET-1 196.13.128.0/22 AS3741 IS 196.13.144.0/22 AS2905 TICSA-ASN 196.13.152.0/21 AS2905 TICSA-ASN 196.13.160.0/24 AS2905 TICSA-ASN 196.13.169.0/24 AS2018 TENET-1 196.13.174.0/23 AS2018 TENET-1 196.13.176.0/21 AS2018 TENET-1 196.13.188.0/22 AS2018 TENET-1 196.13.192.0/22 AS2018 TENET-1 196.13.196.0/24 AS2018 TENET-1 196.13.214.0/23 AS3741 IS 196.13.216.0/23 AS3741 IS 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.54.82.0/24 AS2018 TENET-1 198.54.92.0/24 AS2018 TENET-1 198.54.222.0/24 AS2018 TENET-1 198.54.249.0/24 AS2018 TENET-1 198.54.250.0/24 AS2018 TENET-1 198.54.251.0/24 AS2018 TENET-1 198.97.72.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.80.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.96.0/19 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.240.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.163.155.0/24 AS684 MTSAL-ASN - MTS Allstream Inc. 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.168.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 198.169.0.0/16 AS803 SASKTEL - SaskTel 199.9.128.0/17 AS668 ASN-ASNET-NET-AS - Defense Research and Engineering Network 199.10.0.0/16 AS721 DISA-ASNBLK - DoD Network Information Center 199.60.0.0/20 AS271 BCNET-AS - University of British Columbia 199.114.0.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.128.0/18 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.130.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.132.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DISA/UNRRA 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DISA/UNRRA 199.114.142.0/24 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.144.0/24 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.148.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.150.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS3542 ITSDN-U5 - DISA/UNRRA 199.114.156.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.114.160.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.121.0.0/16 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.0.0/18 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.16.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.80.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 199.246.116.0/24 AS813 UUNET-CANADA - MCI Communications Services, Inc. d/b/a Verizon Business 202.4.160.0/24 AS9498 BBIL-AP BHARTI BT INTERNET LTD. 202.4.161.0/24 AS9498 BBIL-AP BHARTI BT INTERNET LTD. 202.4.162.0/24 AS9498 BBIL-AP BHARTI BT INTERNET LTD. 202.9.64.0/19 AS9290 TPN-AS-AP Smart Global Network (M) Sdn Bhd 202.45.132.0/22 AS24314 UPSI-AS-AP University Pendidikan Sultan Idris 202.58.113.0/24 AS19161 INNOCOM-TELECOM - INNOCOM TELECOM 202.58.224.0/19 AS17925 WAVENET WAVENET PHILIPPINES INC. 202.58.224.0/20 AS17925 WAVENET WAVENET PHILIPPINES INC. 202.58.240.0/20 AS17925 WAVENET WAVENET PHILIPPINES INC. 202.58.240.0/24 AS17925 WAVENET WAVENET PHILIPPINES INC. 202.58.244.0/24 AS17925 WAVENET WAVENET PHILIPPINES INC. 202.58.249.0/24 AS17925 WAVENET WAVENET PHILIPPINES INC. 202.58.250.0/24 AS17925 WAVENET WAVENET PHILIPPINES INC. 202.58.253.0/24 AS17925 WAVENET WAVENET PHILIPPINES INC. 202.59.8.0/21 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.86.252.0/22 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.90.33.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.40.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.41.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.42.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.43.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.44.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.94.70.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.124.192.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.193.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.194.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.195.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.196.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.197.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.198.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.199.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.200.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.201.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.202.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.203.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.204.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.205.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.206.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.207.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.125.96.0/20 AS7693 COMNET-TH KSC Commercial Internet Co. Ltd. 202.136.254.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.136.255.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.148.32.0/20 AS17495 GATEWAY-AP BROADBAND WIRELESSS INTERNET SERVICE PROVIDER 202.164.100.0/24 AS18101 RIL-IDC Reliance Infocom Ltd Internet Data Centre, 202.174.70.0/24 AS21175 M-LINK M-Link Teleport s.a. 202.174.71.0/24 AS23924 SCNET-AS-AP Storage Continuity Pte Ltd 202.174.72.0/22 AS23924 SCNET-AS-AP Storage Continuity Pte Ltd 202.179.64.0/24 AS24392 ANKHNET-AS-AP Ankhnet Informations Pvt. Ltd., Internet Service 202.179.67.0/24 AS24392 ANKHNET-AS-AP Ankhnet Informations Pvt. Ltd., Internet Service 202.179.68.0/24 AS24392 ANKHNET-AS-AP Ankhnet Informations Pvt. Ltd., Internet Service 202.182.32.0/22 AS10223 UECOMM-AU Uecomm Ltd 203.13.171.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.80.32.0/20 AS4817 DESTRA-AU-AP Destra Corporation 203.89.139.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 203.111.192.0/20 AS7473 SINGTEL-AS-AP Singapore Telecom 203.128.128.0/19 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 203.152.136.0/23 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.138.0/23 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.142.0/24 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.143.0/24 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.160.104.0/22 AS23914 OCI-AS-VN One-Connection Internet Company 203.160.110.0/23 AS7643 VNN-AS-AP Vietnam Posts and Telecommunications (VNPT) 204.29.196.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 204.29.197.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 204.48.58.0/24 AS4323 TWTC - Time Warner Telecom, Inc. 204.48.60.0/24 AS4323 TWTC - Time Warner Telecom, Inc. 204.153.68.0/24 AS4017 BELLST - Bell Atlantic Science & Technology 204.153.71.0/24 AS4017 BELLST - Bell Atlantic Science & Technology 204.153.104.0/24 AS10913 INTERNAP-BLK - Internap Network Services 204.154.125.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 205.150.0.0/15 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 206.55.208.0/20 AS22180 CONPOINT - POWER POINT COMPUTER CENTERS, 206.128.104.0/21 AS11709 VIC - VIRTUAL INTERACTIVE CENTER 206.191.192.0/18 AS6287 SPACESTAR - Spacestar Communications 207.7.64.0/19 AS14093 ITRIBE - iTRiBE, Inc. 207.189.62.0/23 AS7132 SBIS-AS - SBC Internet Services 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc 207.246.192.0/20 AS5656 ACCESSUS-DOM - accessU.S./BASENet 208.69.192.0/22 AS40219 ARACTEL-NETWORKS-LLC - ARACTEL NETWORKS LLC 208.69.193.0/24 AS20161 TRGO - TeraGo Networks Inc. 209.105.224.0/19 AS20074 KNOWLEDGENET - KNOWLEDGENET 209.159.128.0/19 AS209 ASN-QWEST - Qwest 209.205.81.0/24 AS15066 SkyNet de Colombia S.A. 209.205.82.0/24 AS15066 SkyNet de Colombia S.A. 209.205.84.0/24 AS15066 SkyNet de Colombia S.A. 210.5.128.0/20 AS4837 CHINA169-BACKBONE CNCGROUP China169 Backbone 216.21.1.0/24 AS11652 DATATONE - Datatone Communications Inc 216.21.6.0/24 AS11652 DATATONE - Datatone Communications Inc 216.21.7.0/24 AS11652 DATATONE - Datatone Communications Inc 216.21.15.0/24 AS11652 DATATONE - Datatone Communications Inc 216.21.17.0/24 AS11652 DATATONE - Datatone Communications Inc 216.59.0.0/17 AS3356 LEVEL3 Level 3 Communications 216.65.160.0/19 AS7770 TRITON - Triton Technologies, Inc. 216.75.228.0/24 AS32097 WII-KC - WholeSale Internet 216.75.229.0/24 AS6939 HURRICANE - Hurricane Electric 216.116.56.0/24 AS9237 HUTCHCA-AS Corporate Access (HK) Ltd. 216.116.59.0/24 AS7132 SBIS-AS - SBC Internet Services 216.224.64.0/19 AS6440 EMF-AS - emf.net 216.230.224.0/20 AS15270 AS-PAETEC-NET - PaeTec.net -a division of PaeTecCommunications, Inc. 216.235.96.0/19 AS13645 BROADBANDONE - BroadbandONE, Inc. 216.235.224.0/20 AS22136 NYCT - New York Connect Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org ausnog(a)ausnog.net

1 0

How to protect a network (that's already running spt) from a customer's layer2 loop?
by Gunther Stammwitz 22 Feb '07

22 Feb '07

Hello colleagues, I'm using (rapid)spanning tree in order to protect my network from layer2 loops and in order to provide redundancy in my ring-structure. This is fine so far but a big PROBLEM can occur if a customer is having a layer2-loop within his part of the network. Although the customer does only have one single uplink to my backbone and is in his own vlan isolated from the other vlans on the network/ring the cpu on my switches dramatically increases to 99% when the customer is having a layer2-loop on his switch (and does not run spanning tree). The same thing happens if spanning tree gets disabled on one of my switches. What can I do against this situation? I know that many big network outages can be traced back to layer2-problems but I had thought that spanning tree would help in such a situation. How can I protect my network from such kind of a situation? Broadcast-storm-limits, mac-limits and so on won't help here, right. What's next?!? Thanks, Gunther

1 0

Re: botnets: web servers, end-systems and Vint Cerf [LONG, sorry]
by Fergie 21 Feb '07

21 Feb '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- Gadi Evron <ge(a)linuxbox.org> wrote: >And this is before we get into the academic off-topic discussion of what a >bot actually is, which after almost 11 years of dealing with these I find >difficult to define. Is it an IP address? A computer? Perhaps an instance >of a bot (and every machine could have even hundreds). > >Welcome to the realm of Internet security operations and the different >groups and folks involved (and now industry). It is about Internet >security rather than this or that network security or this and that sample >detection. Interestingly enough, I discovered during my trip to Tokyo this week that the Japanese government is _mandating_ that the national ISPs address the botnet problem, specifically. I'm still gathering details on the framework -- which is still being defined, if I'm not mistaken -- but I applaud them for taking the lead in this regard. If they are even marginally successful, I hope it will be an example for others around the world to stop making excuses and begin addressing the problem. - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.5.3 (Build 5003) wj8DBQFF2+dhq1pz9mNUZTMRAhd9AJ9FqULfYzAXzwlhSRdrU2a5Xd5frwCcDedO XAQipmVgJwGfqq34fANSy7w= =mAC6 -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

Interland dead?
by Michael Loftis 21 Feb '07

21 Feb '07

Anyone know what's going on? -- "Genius might be described as a supreme capacity for getting its possessors into trouble of all kinds." -- Samuel Butler

3 2

RE: botnets: web servers, end-systems and Vint Cerf
by michael.dillon＠bt.com 20 Feb '07

20 Feb '07

> I've concluded three things (by doing experiements like > that). (a) Where > there are Windows boxes, there are zombies. "Securing > Microsoft operating > systems adequately for use on the Internet" is not a solved problem in > computing. I disagree. Since 1994 I have been in the habit of setting up MS Windows boxes with Win98 and up, by installing from CD, connecting to the net and installing various patches and updates from the Windows Update service. I've never had a virus infection, a bot, a root kit or whatever. The secret is simple. These machines never connected directly to the Internet but went through a NAT box. Way back when it was a FreeBSD machine running TIS Firewalls Toolkit. These days it is an off-the-shelf Ethernet switch with DSL modem and NAT built-in. Therefore, I assert that securing systems adequately for use on the Internet is indeed a SOLVED PROBLEM in computing. However, it isn't yet solved in a social or business sense. On the business side, I wonder why PC's don't come with a built-in firewall/NAT device. It is cheap enough to do these days. This means that a computer would have no Ethernet ports on it. Instead, an internal Ethernet port would be directly connected to a NAT/firewall device on the same circuit board (or via PCI/PCMCIA/etc.). The external Ethernet port would belong to the firewall/NAT device. On the social side, people don't realize that such a solution is possible and therefore they aren't demanding computer vendors to build it in. The box vendors only build what the OS vendors want and the OS vendors are not interested in a piece of hardware that runs its own OS, most likely FreeBSD or Linux. In the UK, companies who sell TV services (cable and satellite) give there customers a box to connect with. Why can't ISPs also sell their services with a proper box included? By proper, I mean a NAT/firewall, not a USB-connected DSL modem. > (c) Amusingly, it's possible > to detect new end-user allocations and service rollouts by noting when > spam starts to arrive from them. (e.g. the Verizon FIOS > deployment, if I > may use hostnames of the form *.fios.verizon.net as a guide, is going > well in NYC, Dallas, DC, Tampa, Philly, LA, Boston and > Newark, but lags > behind in Seattle, Pittsburgh, Buffalo and Syracuse.) I wonder if Verizon is violating any SEC rules by not reporting this information publicly? This is a good example of something that would not be revealed if they provided a NAT/firewall box to every customer who didn't already have one. Has anyone implemented a tool that ISPs could use to detect whether or not a NAT/firewall device is present? Perhaps based on OS fingerprinting? Or even based on an agent that must be installed by the customer? If such tools are available then an ISP could offer customers a discount for being compliant with a NAT/firewall rule in their contract. --Michael Dillon

5 4

Drone Armies C&C Report - 19 Feb 2007
by c2report＠isotf.org 20 Feb '07

20 Feb '07

This is a periodic public report from the ISOTF's affiliated group 'DA' (Drone Armies (botnets) research and mitigation mailing list / TISF DA) with the ISOTF affiliated ASreport project (TISF / RatOut). For this report it should be noted that we base our analysis on the data we have accumulated from various sources, which may be incomplete. Any responsible party that wishes to receive reports of botnet command and control servers on their network(s) regularly and directly, feel free to contact us. For purposes of this report we use the following terms open the host completed the TCP handshake closed No activity detected reset issued a RST This month's survey is of 5730 unique, domains (or IPs) with port suspect C&Cs. This list is extracted from the BBL which has a historical base of 15292 reported C&Cs. Of the suspect C&Cs surveyed, 682 reported as Open, 1990 reported as closed, and 749 issued resets to the survey instrument. Of the C&Cs listed by domain name in the our C&C database, 7228 are mitigated. Top 20 ASNes by Total suspect domains mapping to a host in the ASN. These numbers are determined by counting the number of domains which resolve to a host in the ASN. We do not remove duplicates and some of the ASNs reported have many domains mapping to a single IP. Note the Percent_resolved figure is calculated using only the Total and Open counts and does not represent a mitigation effectiveness metric. Percent_ ASN Responsible Party Total Open Resolved 19318 NJIIX-AS-1 - NEW JERSEY INTERN 133 16 88 13301 UNITEDCOLO-AS Autonomous System of 89 35 61 4766 KIXS-AS-KR 63 17 73 30058 FDCSE FDCservers.net LLC 45 14 69 23522 CIT-FOONET 45 24 47 7132 SBC Internet Services 41 3 93 13213 UK2NET-AS UK-2 Ltd Autonomous Syste 39 8 79 8560 SCHLUND-AS 37 3 92 14779 INKT Inktomi Corporation 36 0 100 9318 HANARO-AS 35 2 94 33597 InfoRelay Online Systems, Inc. 31 0 100 174 Cogent Communications 31 27 13 4713 OCN NTT Communications Corporation 28 24 14 3561 Savvis 28 0 100 4134 CHINANET-BACKBONE 27 6 78 16265 LEASEWEB AS 26 5 81 24611 AS24611 Datacenter Luxembourg S.A. 26 0 100 12832 Lycos Europe 25 0 100 9121 TTNet 25 1 96 3786 ERX-DACOMNET 23 9 61 Top 20 ASNes by number of active suspect C&Cs. These counts are determined by the number of suspect domains or IPs located within the ASN completed a connection request. Percent_ ASN Responsible Party Total Open Resolved 13301 UNITEDCOLO-AS Autonomous System of 89 35 61 174 Cogent Communications 31 27 13 4713 OCN NTT Communications Corporation 28 24 14 23522 CIT-FOONET 45 24 47 25973 Mzima Networks, Inc. 20 18 10 4766 KIXS-AS-KR 63 17 73 30506 Blacksun Technologies 17 17 0 19318 NJIIX-AS-1 - NEW JERSEY INTERN 133 16 88 30058 FDCSE FDCservers.net LLC 45 14 69 23832 SPACELAN KANAZAWA CABLE TELEVISION 11 11 0 29339 MBBG-AS Markus Bach Betriebs Gesell 10 10 0 31103 KEYWEB-AS Keyweb AG 11 10 9 11260 Andara High Speed Internet c/o Hali 10 9 10 3786 ERX-DACOMNET 23 9 61 4837 CHINA169-Backbone 22 8 64 9800 UNICOM 18 8 56 13213 UK2NET-AS UK-2 Ltd Autonomous Syste 39 8 79 24989 IXEUROPE-DE-FRANKFURT-ASN IX Europe 21 7 67 25761 STAMIN-2 Staminus Communications 21 7 67 8001 Net Access Corporation 13 7 46 A version of this report with addition rankings can be found via the isotf.org home page. Randal Vaughn Gadi Evron Professor ge at linuxbox.org Baylor University Waco, TX (254) 710 4756 randy_vaughn at baylor.edu

1 0

Road Runner (as10994) NOC contact?
by David Hubbard 19 Feb '07

19 Feb '07

All of their listed contact info is for abuse and that just gets you a voice greeting that tells you to email abuse and then hangs up on you. Trying to troubleshoot an issue between Road Runner Tampa and Level 3. Thanks, David

1 0

RE: botnets: web servers, end-systems and Vint Cerf [LONG, sorry]
by michael.dillon＠bt.com 19 Feb '07

19 Feb '07

> > Now, even those people have shifted to a hierarchical > architecture of > > instant-messaging servers. > > In what way is IM hierarchial? > Jabber/XMPP has a mesh-of-stars topology That is hierarchy. One level is a star topology, the next level is a mesh. > which is the same as email's > modulo some simplifications (mainly owing to the lack of forwarding). In other words, it is not the same as email's. Of course it may end up that way but we can hope. > ISTR that you were arguing in favour of a chain-of-trust > system for email > back in November on the IETF list. I pointed out that the > architecture you > are proposing is essentially the same as inter-domain routing > (IP & BGP) > and Usenet, and you failed to explain how your ideas would solve the > unwanted traffic problem for email given that the same architecture > doesn't solve the unwanted traffic problem for IP or NNTP. An abstract simplification of an architecture is not equal to the architecture itself. The fact that you can simplify different architectures into a similar abstract model, doesn't mean that they have the same problems. Problems often arise in the details of implementation, not in the theoretical models. I never claimed that my proposed email model would solve the unwanted mail problem. It was intended to carry authenticated sender info to the receiver, and to provide an authenticated reverse path for complaints to postmaster. And since it was based on negotiated bilateral email peering agreements, if the chain of trust was subverted at some point in the chain, the peer would have legal recourse to cut service. --Michael Dillon

1 0

Hackers hit key Internet traffic computers
by Roy 19 Feb '07

19 Feb '07

Its amazing how reporters has to butcher technology information to make it understood by their editors http://www.cnn.com/2007/TECH/internet/02/06/internet.attacks.ap/index.html?…

28 43