- Test - lists.nanog.org

Re: The Backhoe: A Real Cyberthreat?
by Frank Coluccio 20 Jan '06

20 Jan '06

>My argument simply is if this kind of awareness >can be made more broadly available you end up with >a more resilient infrastructure overall. Sean, would you care to list the route, facility, ownership and customer attributes of the data base that you'd make public, and briefly explain the access controls you would impose on same? If this is not what you originally intended, then please show me the way ... thanks. Frank On Fri Jan 20 9:19 , sgorman1(a)gmu.edu sent: As you mentioned before this is largely because the customer (SIAC) was savvy enough to set the reuirements and had the money to do it. A lot of that saviness came from lessons learned from 9/11 and fund transfer. Similar measures were taken with DoD's GIG-BE, again because the customer was knowlegable and had the financial clout to enforce the requirements and demand the information. An anonymous data pool is just one suggestion of a market based mechanism to do it. ----- Original Message ----- From: Michael.Dillon(a)btradianz.com Date: Friday, January 20, 2006 5:37 am Subject: > > > Imagine if 60 Hudson and 111 8th > > were to go down at the same time? Finding means to mitigate this > > threat is not frivolously spending the taxpayer's money, IMO; > > although perhaps removing fiber maps is not the best way to > > address this. > > No, removing fiber maps will not address this problem > now that you have pinpointed the addresses that they > should attack. > > Separacy is the key to addressing this problem. Separate > circuits along separate routes connecting separate routers > in separate PoPs. Separacy should be the mantra, not > obscurity. > > End-to-end separation of circuits is how SFTI and other > financial industry networks deal with the issue of continuity > in the face of terrorism and other disasters. In fact, now > that trading is mediated by networked computers, the physical > location of the exchange is less vulnerable to terrorists because > the real action takes place in redundant data centers connected > by diverse separate networks. Since 9-11 was a direct attack on > the financial services industry, people within the industry > worldwide, have been applying the lessons learned in New York. > Another 9-11 is simply not possible today. > > --Michael Dillon > > > >

2 1

Weekly Routing Table Report
by Routing Table Analysis 20 Jan '06

20 Jan '06

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 21 Jan, 2006 Analysis Summary ---------------- BGP routing table entries examined: 178949 Prefixes after maximum aggregation: 100271 Unique aggregates announced to Internet: 87108 Total ASes present in the Internet Routing Table: 21341 Origin-only ASes present in the Internet Routing Table: 18557 Origin ASes announcing only one prefix: 8782 Transit ASes present in the Internet Routing Table: 2784 Transit-only ASes present in the Internet Routing Table: 72 Average AS path length visible in the Internet Routing Table: 4.5 Max AS path length visible: 25 Prefixes from unregistered ASNs in the Routing Table: 7 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 12 Number of addresses announced to Internet: 1481701664 Equivalent to 88 /8s, 80 /16s and 249 /24s Percentage of available address space announced: 40.0 Percentage of allocated address space announced: 59.0 Percentage of available address space allocated: 67.8 Total number of prefixes smaller than registry allocations: 86492 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 37594 Total APNIC prefixes after maximum aggregation: 15880 Prefixes being announced from the APNIC address blocks: 35380 Unique aggregates announced from the APNIC address blocks: 17327 APNIC Region origin ASes present in the Internet Routing Table: 2461 APNIC Region origin ASes announcing only one prefix: 694 APNIC Region transit ASes present in the Internet Routing Table: 381 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 21 Number of APNIC addresses announced to Internet: 210786016 Equivalent to 12 /8s, 144 /16s and 86 /24s Percentage of available APNIC address space announced: 65.9 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911 APNIC Address Blocks 58/7, 60/7, 121/8, 122/7, 124/7, 126/8, 202/7 210/7, 218/7, 220/7 and 222/8 ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 94137 Total ARIN prefixes after maximum aggregation: 56355 Prefixes being announced from the ARIN address blocks: 73444 Unique aggregates announced from the ARIN address blocks: 28140 ARIN Region origin ASes present in the Internet Routing Table: 10457 ARIN Region origin ASes announcing only one prefix: 3882 ARIN Region transit ASes present in the Internet Routing Table: 966 Average ARIN Region AS path length visible: 4.3 Max ARIN Region AS path length visible: 17 Number of ARIN addresses announced to Internet: 282709248 Equivalent to 16 /8s, 217 /16s and 205 /24s Percentage of available ARIN address space announced: 70.2 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863 ARIN Address Blocks 24/8, 63/8, 64/6, 68/7, 70/6, 74/7, 76/8, 198/7, 204/6, 208/7 and 216/8 RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 35157 Total RIPE prefixes after maximum aggregation: 23723 Prefixes being announced from the RIPE address blocks: 32187 Unique aggregates announced from the RIPE address blocks: 21567 RIPE Region origin ASes present in the Internet Routing Table: 7540 RIPE Region origin ASes announcing only one prefix: 3945 RIPE Region transit ASes present in the Internet Routing Table: 1249 Average RIPE Region AS path length visible: 5.0 Max RIPE Region AS path length visible: 25 Number of RIPE addresses announced to Internet: 229825408 Equivalent to 13 /8s, 178 /16s and 219 /24s Percentage of available RIPE address space announced: 68.5 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 RIPE Address Blocks 62/8, 80/5, 88/6, 188/8, 193/8, 194/7, 212/7 and 217/8 LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 10230 Total LACNIC prefixes after maximum aggregation: 3444 Prefixes being announced from the LACNIC address blocks: 8400 Unique aggregates announced from the LACNIC address blocks: 5007 LACNIC Region origin ASes present in the Internet Routing Table: 667 LACNIC Region origin ASes announcing only one prefix: 217 LACNIC Region transit ASes present in the Internet Routing Table: 124 Average LACNIC Region AS path length visible: 5.2 Max LACNIC Region AS path length visible: 22 Number of LACNIC addresses announced to Internet: 24633344 Equivalent to 1 /8s, 119 /16s and 224 /24s Percentage of available LACNIC address space announced: 36.7 LACNIC AS Blocks 26592-26623, 27648-28671, plus ERX transfers LACNIC Address Blocks 189/8, 190/8, 200/7 AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 1824 Total AfriNIC prefixes after maximum aggregation: 869 Prefixes being announced from the AfriNIC address blocks: 1209 Unique aggregates announced from the AfriNIC address blocks: 857 AfriNIC Region origin ASes present in the Internet Routing Table: 144 AfriNIC Region origin ASes announcing only one prefix: 44 AfriNIC Region transit ASes present in the Internet Routing Table: 24 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 12 Number of AfriNIC addresses announced to Internet: 3022592 Equivalent to 0 /8s, 46 /16s and 31 /24s Percentage of available AfriNIC address space announced: 9.0 AfriNIC AS Blocks 36864-37887 & ERX transfers AfriNIC Address Blocks 41/8, 196/8 APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4134 978 6450 206 CHINANET-BACKBONE 9583 840 109 15 Sify Limited 4755 786 258 63 Videsh Sanchar Nigam Ltd. Aut 4766 719 3929 303 Korea Telecom (KIX) 1221 667 1364 474 Telstra Pty Ltd 7545 514 108 70 TPG Internet Pty Ltd 9498 507 211 69 BHARTI BT INTERNET LTD. 17676 477 6901 102 Softbank BB Corp. 17488 436 26 9 Hathway IP Over Cable Interne 9443 408 93 85 Primus Telecommunications 4802 361 74 156 Wantree Development 2907 338 1763 315 SINET Japan 9929 334 217 50 China Netcom Corp. 7474 330 227 228 SingTel Optus Pty Ltd 18101 327 68 23 Reliance Infocom Ltd Internet 17974 316 77 37 PT TELEKOMUNIKASI INDONESIA 17557 312 25 162 Pakistan Telecom 4780 282 226 16 Digital United Inc. 9837 271 78 169 Powertel Ltd 9800 256 410 67 CHINA UNICOM ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7018 1477 6297 961 AT&T WorldNet Services 4323 1203 724 236 Time Warner Telecom 174 1037 5805 952 Cogent Communications 721 1025 21921 306 DLA Systems Automation Center 6197 972 436 506 BellSouth Network Solutions, 701 965 8099 807 UUNET Technologies, Inc. 18566 891 272 8 Covad Communications 2386 879 501 687 AT&T Data Communications Serv 1239 854 2790 607 Sprint 20115 659 538 341 Charter Communications 209 658 3603 525 Qwest 11492 644 89 12 Cable One 22773 610 1478 33 Cox Communications, Inc. 19262 594 1703 145 Verizon Global Networks 852 571 1092 380 Telus Advanced Communications 855 571 243 65 Canadian Research Network 19916 563 49 54 OLM LLC 6478 530 1471 293 AT&T Worldnet Services 3602 520 127 106 Sprint Canada, Inc. 5668 517 143 24 CenturyTel Internet Holdings, RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 702 587 1954 465 UUNET - Commercial IP service 3301 302 1071 288 TeliaNet Sweden 3352 302 1500 34 Ibernet, Internet Access Netw 3320 283 3485 237 Deutsche Telekom AG 8220 274 474 268 COLT Telecommunications 680 244 2024 238 DFN-IP service G-WiN 3246 228 487 218 Song Networks 8708 223 275 207 Romania Data Systems S.A. 6746 215 53 187 Dynamic Network Technologies, 1257 189 712 169 SWIPnet Swedish IP Network 3269 185 1925 70 TELECOM ITALIA 5515 180 840 127 Sonera Solution Autonomous Sy 786 173 1794 173 The JANET IP Service 8866 171 37 13 Bulgarian Telecommunication C 3215 166 1350 81 France Telecom Transpac 5400 166 328 136 BT Ignite European Backbone 24863 166 38 9 LINKdotNET AS number 6830 161 669 33 UPC Distribution Services 3300 160 170 91 AUCS Communications Services 12479 156 322 5 Uni2 Autonomous System LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 558 1048 213 UniNet S.A. de C.V. 22047 379 141 44 VTR PUNTO NET S.A. 11172 303 110 78 Servicios Alestra S.A de C.V 16814 295 18 7 NSS, S.A. 13999 191 52 13 Mega Cable S.A. de C.V. 14117 181 11 6 Telefonica del Sur S.A. 7303 152 73 18 Telecom Argentina Stet-France 6147 150 118 21 Telefonica Del Peru 11556 130 64 3 Cable-Wireless Panama 19169 122 8 29 Telconet 10481 121 48 8 Prima S.A. 6503 117 148 78 AVANTEL, S.A. 21826 113 14 19 INTERCABLE 5639 112 12 9 Telecommunications Services o 6505 108 88 80 Global One Communicaoes Ltda 11311 100 8 14 Sinectis S.A. 18822 99 8 10 TELEFONICA MANQUEHUE 7315 96 6 3 Grupo Rey Moreno 14522 95 12 8 SatNet S.A. 4270 94 17 9 Red de Interconexion Universi AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 3741 276 819 233 The Internet Solution 8452 148 60 7 TEDATA 5536 122 8 16 Internet Egypt Network 2018 117 298 103 Tertiary Education Network 15475 76 84 4 Nile Online 2905 74 155 67 The Internetworking Company o 24835 69 34 6 RAYA Telecom - Egypt 6713 68 71 10 Itissalat Al-MAGHRIB 20928 61 16 2 Noor Advanced Technologies AS 5713 39 167 35 Telkom SA Ltd 33774 35 8 26 AS Number for Telecom Algeria 15706 31 8 3 Sudatel Internet Exchange Aut 23889 25 7 10 MAURITIUS TELECOM 8524 23 1 4 AUCEGYPT Autonomous System 10798 22 1 13 Standard Bank of South Africa 16637 22 10 20 Johnnic e-Ventures 21280 21 4 4 Swift Global Kenya Ltd.Is an 12455 19 6 5 Jambonet Autonomous system 12258 17 3 11 Vodacom Internet Company 15808 17 2 2 Communication Solutions Ltd i Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4323 1203 967 Time Warner Telecom 18566 891 883 Covad Communications 9583 840 825 Sify Limited 4134 978 772 CHINANET-BACKBONE 4755 786 723 Videsh Sanchar Nigam Ltd. Aut 721 1025 719 DLA Systems Automation Center 11492 644 632 Cable One 22773 610 577 Cox Communications, Inc. 19916 563 509 OLM LLC 855 571 506 Canadian Research Network 5668 517 493 CenturyTel Internet Holdings, 6197 972 466 BellSouth Network Solutions, 19262 594 449 Verizon Global Networks 7545 514 444 TPG Internet Pty Ltd 9498 507 438 BHARTI BT INTERNET LTD. 17488 436 427 Hathway IP Over Cable Interne 4766 719 416 Korea Telecom (KIX) 3602 520 414 Sprint Canada, Inc. 812 438 410 Rogers WAVE 17676 477 375 Softbank BB Corp. List of Unregistered ASNs (Global) ---------------------------------- Bad AS Designation Network Transit AS Description 38976 UNALLOCATED 62.192.224.0/19 21166 Satgate autonomous s 38976 UNALLOCATED 62.192.232.0/24 21166 Satgate autonomous s 38972 UNALLOCATED 80.251.144.0/21 6828 Ekaterinburg Telegra 38972 UNALLOCATED 80.251.151.0/24 6828 Ekaterinburg Telegra 38972 UNALLOCATED 80.251.152.0/23 6828 Ekaterinburg Telegra 29544 UNALLOCATED 82.151.64.0/19 12956 Telefonica Data Auto 65005 PRIVATE 159.153.148.0/22 24989 IX Europe Frankfurt Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 132.0.0.0/10 721 DLA Systems Automation Center 137.0.0.0/13 721 DLA Systems Automation Center 158.0.0.0/13 721 DLA Systems Automation Center 192.43.230.0/24 7575 Australian Academic and Rease 192.44.0.0/24 5501 Fraunhofer Gesellschaft 192.44.0.0/19 702 UUNET - Commercial IP service 192.70.164.0/24 25689 National Research Council of 192.72.0.0/18 4780 Digital United Inc. 192.72.0.0/16 4780 Digital United Inc. 192.84.205.0/24 719 LANLINK autonomous system 192.119.135.0/24 270 NASA 192.172.0.0/19 721 DLA Systems Automation Center Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:18 /9:5 /10:8 /11:20 /12:87 /13:196 /14:349 /15:679 /16:8656 /17:2967 /18:4978 /19:11208 /20:12376 /21:10688 /22:13695 /23:14891 /24:97177 /25:311 /26:253 /27:202 /28:62 /29:26 /30:55 /31:3 /32:39 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 874 891 Covad Communications 6197 785 972 BellSouth Network Solutions, 7018 747 1477 AT&T WorldNet Services 9583 661 840 Sify Limited 11492 635 644 Cable One 2386 613 879 AT&T Data Communications Serv 4323 578 1203 Time Warner Telecom 19916 557 563 OLM LLC 4766 519 719 Korea Telecom (KIX) 855 443 571 Canadian Research Network 5668 406 517 CenturyTel Internet Holdings, 7011 402 468 Citizens Utilities 702 372 587 UUNET - Commercial IP service 1239 369 854 Sprint 6198 356 499 BellSouth Network Solutions, 6517 342 370 Yipes Communications, Inc. 15270 334 361 PaeTec.net -a division of Pae 812 317 438 Rogers WAVE 22773 315 610 Cox Communications, Inc. 13609 290 332 Choice One Communications Inc Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:3 8:44 12:1618 13:1 15:11 16:3 17:3 18:4 20:42 24:762 25:1 30:2 32:67 38:186 40:54 44:3 47:3 52:4 55:1 56:3 57:34 58:115 59:158 60:181 61:812 62:728 63:1890 64:2947 65:2156 66:3023 67:586 68:693 69:1385 70:276 71:51 72:573 73:20 80:732 81:602 82:505 83:353 84:340 85:412 86:269 87:146 88:18 89:4 124:5 125:184 128:150 129:174 130:102 131:311 132:34 133:7 134:151 135:46 136:169 137:62 138:181 139:88 140:446 141:135 142:412 143:144 144:225 145:39 146:313 147:134 148:327 149:186 150:112 151:72 152:59 153:99 154:6 155:186 156:91 157:118 158:153 159:178 160:88 161:68 162:252 163:176 164:166 165:176 166:147 167:234 168:478 169:139 170:315 171:12 192:5750 193:3353 194:2461 195:1730 196:731 198:3915 199:3261 200:4204 201:552 202:6457 203:6717 204:3834 205:2059 206:2427 207:2911 208:2012 209:3477 210:1846 211:781 212:1263 213:1453 214:320 215:40 216:3808 217:1152 218:232 219:135 220:642 221:334 222:146 End of report

1 0

Re: The Backhoe: A Real Cyberthreat? [ & Re: cyber-redundancy ]
by Frank Coluccio 20 Jan '06

20 Jan '06

What I meant to state in my closing sentence of my last post, but didn't catch myself in time, was: " ... to ask on an official or unofficial level, whatever works." -- Frank A. Coluccio DTI Consulting Inc. 212-587-8150 Office 347-526-6788 Mobile

1 0

The Backhoe: A Real Cyberthreat?
by Dennis Dayman 20 Jan '06

20 Jan '06

"In 2004, Department of Homeland Security officials became fearful that terrorists might start using accidental dig-ups as a road map for deliberate attacks, and convinced the FCC to begin locking up previously public data on outages. In a commission filing, DHS argued successfully that revealing the details..." --MORE-- http://wired.com/news/technology/0,70040-0.html?tw=wn_tophead_1 -Dennis

15 18

The Cidr Report
by cidr-report＠potaroo.net 20 Jan '06

20 Jan '06

This report has been generated at Fri Jan 20 21:46:42 2006 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 13-01-06 175331 116944 14-01-06 176919 116794 15-01-06 175363 116841 16-01-06 175331 116943 17-01-06 175450 116905 18-01-06 175507 116948 19-01-06 175709 117045 20-01-06 176004 117172 AS Summary 21264 Number of ASes in routing system 8807 Number of ASes announcing only one prefix 1463 Largest number of prefixes announced by an AS AS7018 : ATT-INTERNET4 - AT&T WorldNet Services 91246848 Largest address span announced by an AS (/32s) AS721 : DLA-ASNBLOCK-AS - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 20Jan06 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 176028 117148 58880 33.4% All ASes AS4323 1198 237 961 80.2% TWTC - Time Warner Telecom AS18566 891 9 882 99.0% COVAD - Covad Communications Co. AS721 1030 309 721 70.0% DLA-ASNBLOCK-AS - DoD Network Information Center AS4134 974 254 720 73.9% CHINANET-BACKBONE No.31,Jin-rong Street AS22773 608 39 569 93.6% CCINET-2 - Cox Communications Inc. AS855 571 65 506 88.6% CANET-ASN-4 - Canadian Research Network AS7018 1463 957 506 34.6% ATT-INTERNET4 - AT&T WorldNet Services AS19916 563 65 498 88.5% ASTRUM-0001 - OLM LLC AS3602 520 107 413 79.4% SPRINT-CA-AS - Sprint Canada Inc. AS812 438 28 410 93.6% ROGERS-CABLE - Rogers Cable Inc. AS6197 969 570 399 41.2% BATI-ATL - BellSouth Network Solutions, Inc AS11492 644 249 395 61.3% CABLEONE - CABLE ONE AS9498 507 128 379 74.8% BBIL-AP BHARTI BT INTERNET LTD. AS4766 678 303 375 55.3% KIXS-AS-KR Korea Telecom AS17676 477 102 375 78.6% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS17488 436 81 355 81.4% HATHWAY-NET-AP Hathway IP Over Cable Internet AS6467 389 52 337 86.6% ESPIRECOMM - e.spire Communications, Inc. AS4755 633 306 327 51.7% VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System AS9583 838 545 293 35.0% SIFY-AS-IN Sify Limited AS22047 379 89 290 76.5% VTR BANDA ANCHA S.A. AS18101 326 37 289 88.7% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS15270 356 75 281 78.9% AS-PAETEC-NET - PaeTec.net -a division of PaeTecCommunications, Inc. AS14654 292 13 279 95.5% WAYPORT - Wayport AS5668 515 243 272 52.8% AS-5668 - CenturyTel Internet Holdings, Inc. AS3352 302 34 268 88.7% TELEFONICA-DATA-ESPANA Internet Access Network of TDE AS6167 332 65 267 80.4% CELLCO-PART - Cellco Partnership AS9929 322 57 265 82.3% CNCNET-CN China Netcom Corp. AS16814 295 42 253 85.8% NSS S.A. AS1239 848 605 243 28.7% SPRINTLINK - Sprint AS6517 369 128 241 65.3% YIPESCOM - Yipes Communications, Inc. Total 18163 5794 12369 68.1% Top 30 total Possible Bogus Routes 24.246.0.0/17 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 64.17.32.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.33.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.37.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.25.224.0/20 AS12180 INTERNAP-2BLK - Internap Network Services 64.25.224.0/22 AS15083 INFOLINK-MIA-US - Infolink Information Services Inc. 64.38.96.0/19 AS19654 HOSTING-NETWORK - HOSTING-NETWORK, INC. 64.127.128.0/17 AS19654 HOSTING-NETWORK - HOSTING-NETWORK, INC. 66.11.32.0/20 AS6261 VISINET - Visionary Systems, Inc. 66.11.224.0/20 AS3356 LEVEL3 Level 3 Communications 66.37.96.0/20 AS3764 IA-HOU-AS - Internet America, Inc. 66.51.134.0/24 AS29876 LNTC - Latency LLC 66.96.0.0/20 AS3770 WORLDPATH-AS - WorldPath Internet Services 66.117.0.0/21 AS30033 NHI-NETWORKS - NHI Networks 66.117.8.0/24 AS174 COGENT Cogent/PSI 66.117.9.0/24 AS30033 NHI-NETWORKS - NHI Networks 66.117.16.0/24 AS30033 NHI-NETWORKS - NHI Networks 66.117.18.0/24 AS30033 NHI-NETWORKS - NHI Networks 66.117.20.0/24 AS30085 NHI-COLOCATIONS - New Horizon Collocations 66.117.21.0/24 AS30033 NHI-NETWORKS - NHI Networks 66.117.23.0/24 AS31972 EMGINECONCEPT-01 - Emagine Concept, Inc. 66.117.25.0/24 AS31972 EMGINECONCEPT-01 - Emagine Concept, Inc. 66.117.26.0/24 AS31972 EMGINECONCEPT-01 - Emagine Concept, Inc. 66.117.27.0/24 AS31972 EMGINECONCEPT-01 - Emagine Concept, Inc. 66.186.192.0/19 AS19654 HOSTING-NETWORK - HOSTING-NETWORK, INC. 66.187.96.0/24 AS10026 ANC Asia Netcom Corporation 66.187.108.0/24 AS10026 ANC Asia Netcom Corporation 66.187.109.0/24 AS10026 ANC Asia Netcom Corporation 66.216.0.0/18 AS19654 HOSTING-NETWORK - HOSTING-NETWORK, INC. 66.235.158.0/23 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 69.39.193.0/24 AS25973 MZIMA - Mzima Networks, Inc. 69.39.195.0/24 AS25973 MZIMA - Mzima Networks, Inc. 69.39.196.0/24 AS25973 MZIMA - Mzima Networks, Inc. 85.129.3.0/24 AS14585 CIFNET - CIFNet, Inc. 85.129.4.0/24 AS14585 CIFNET - CIFNet, Inc. 90.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 90.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 91.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 91.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 125.213.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 131.64.0.0/12 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 132.0.0.0/10 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 137.0.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 138.136.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 151.135.0.0/16 AS4763 TELSTRANZ-AS TelstraClear Ltd 158.0.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 163.142.0.0/16 AS2500 JPNIC-ASBLOCK-AP JPNIC 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.40.105.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.43.230.0/24 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 192.44.0.0/19 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 192.44.0.0/24 AS5501 FRAUNHOFER-CLUSTER-BW Fraunhofer Gesellschaft 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.72.0.0/16 AS4780 SEEDNET Digital United Inc. 192.72.0.0/18 AS4780 SEEDNET Digital United Inc. 192.72.192.0/18 AS4780 SEEDNET Digital United Inc. 192.81.183.0/24 AS719 ELISA-AS Elisa Oyj 192.81.184.0/24 AS719 ELISA-AS Elisa Oyj 192.88.99.0/24 AS559 SWITCH SWITCH, Swiss Education and Research Network 192.96.36.0/24 AS5713 AFRINIC African Network Information Center 192.96.37.0/24 AS10474 AFRINIC African Network Information Center 192.96.135.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.136.0/23 AS2018 TENET - 1 - The Uninet Project 192.96.140.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.143.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.145.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.177.0/24 AS6083 AFRINIC African Network Information Center 192.96.250.0/24 AS2018 TENET - 1 - The Uninet Project 192.107.104.0/24 AS6458 GUATEL 192.119.135.0/24 AS270 PSCNI-AS - National Aeronautics and Space Administration 192.124.252.0/22 AS680 DFN-IP DFN-IP service X-WiN 192.133.6.0/24 AS10282 EQUANT-CEEUR EQUANT AS for Central and Eastern Europe region 192.136.53.0/24 AS8346 SONATEL-AS Autonomous System 192.153.144.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 192.172.0.0/19 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 192.188.208.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 193.0.246.0/24 AS3303 SWISSCOM Swisscom Solutions Ltd 193.32.19.0/24 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 193.32.20.0/23 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 193.36.1.0/24 AS8220 COLT COLT Telecommunications 193.37.69.0/24 AS2856 BT-UK-AS BTnet UK Regional network 193.37.236.0/24 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 193.110.77.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.78.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.79.0/24 AS3356 LEVEL3 Level 3 Communications 194.31.227.0/24 AS21461 TRANSFAIRNET Transfair-net GmbH Krefeld 194.59.176.0/20 AS1273 CW Cable & Wireless 194.153.156.0/24 AS24865 KMITCHELL-AS Keith Mitchell's Network 194.246.72.0/23 AS8893 ARTFILES-AS Artfiles New Media GmbH 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.54.82.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.92.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.222.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.249.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.250.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.251.0/24 AS2018 TENET - 1 - The Uninet Project 198.97.72.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.80.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.96.0/19 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.240.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.101.4.0/22 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.136.32.0/20 AS19329 MCNET - Martin County Board of County Commissioners 198.160.171.0/24 AS7046 UUNET-CUSTOMER - UUNET Technologies, Inc. 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.163.155.0/24 AS684 MTSAL-ASN - MTS Allstream Inc. 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 198.168.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL - SaskTel 198.232.133.0/24 AS23075 SKOTOS-AS - Skotos Tech, Inc 199.9.128.0/17 AS668 ASN-ASNET-NET-AS - Defense Research and Engineering Network 199.10.0.0/16 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.60.0.0/20 AS271 BCNET-AS - University of British Columbia 199.114.0.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.128.0/18 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.130.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.132.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DISA/UNRRA 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DISA/UNRRA 199.114.142.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.144.0/24 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.148.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.150.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.114.160.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.121.0.0/16 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.0.0/18 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.16.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.80.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 199.246.116.0/24 AS813 UUNET-AS1 - UUNET Technologies, Inc. 202.9.64.0/19 AS9290 TPN-AS-AP Smart Global Network (M) Sdn Bhd 202.58.113.0/24 AS19161 INNOCOM-TELECOM - INNOCOM TELECOM 202.74.32.0/19 AS9315 CWN-AS-AP Chomanan WorldNet Co., Ltd. 202.80.224.0/19 AS7613 DATALINETHAI-AS-AP Data Line Thai Co., LTD. Internet Service Provider 202.80.231.0/24 AS4750 LOXLEY-TH Loxley Information Co., Ltd. 202.86.252.0/22 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.90.33.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.40.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.41.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.42.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.43.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.44.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.131.64.0/19 AS9381 NEWTT-IP-AP Wharf T&T Ltd. 203.13.171.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.89.134.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.138.0/24 AS9237 HUTCHCA-AS Corporate Access (HK) Ltd. 203.89.139.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 203.89.143.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.144.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.145.0/24 AS4637 REACH Reach Network Border AS 203.89.146.0/24 AS4637 REACH Reach Network Border AS 203.89.147.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.148.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.149.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.150.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.151.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.153.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.154.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.158.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.159.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.99.0.0/19 AS17746 ORCONINTERNET-NZ-AP Orcon Internet 203.99.142.0/24 AS9826 ILINK-HK-AP iLink.net Ltd 203.111.192.0/20 AS7473 SINGTEL-AS-AP Singapore Telecom 203.210.69.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 204.48.118.0/23 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.48.119.0/24 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.154.125.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 205.150.0.0/15 AS701 ALTERNET-AS - UUNET Technologies, Inc. 206.108.96.0/19 AS577 BACOM - Bell Advanced Communications Inc. 206.128.104.0/21 AS11709 VIC - VIRTUAL INTERACTIVE CENTER 206.167.57.0/24 AS376 RISQ-AS - Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 206.191.96.0/19 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc 209.40.192.0/21 AS6487 CyberNet de Guatemala S.A. 209.40.200.0/21 AS6487 CyberNet de Guatemala S.A. 209.40.208.0/21 AS6487 CyberNet de Guatemala S.A. 209.40.216.0/21 AS6487 CyberNet de Guatemala S.A. 209.97.64.0/19 AS6132 INGRESSNET - Ingress Enterprises, Inc w/ Ingress Communications, Inc. 209.112.224.0/20 AS19817 DSLEXTREME - DSL Extreme 209.205.69.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.70.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.81.0/24 AS15066 SkyNet de Colombia S.A. 209.205.82.0/24 AS15066 SkyNet de Colombia S.A. 209.205.84.0/24 AS15066 SkyNet de Colombia S.A. 209.234.0.0/18 AS3845 STATE-NET - CS&W, Inc. 209.251.0.0/19 AS11036 SISCOM - SISCOM, Inc 216.37.110.0/23 AS4264 CERNET-ASN-BLOCK - California Education and Research Federation Network 216.71.224.0/20 AS23527 COTELLIGENCE - Cotelligence, Inc. 216.82.160.0/20 AS20481 CALYX-NL Calyx Internet B.V. Netherlands 216.96.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.228.64.0/21 AS6295 WHIDBEY1 - Whidbey Internet Services 216.228.224.0/20 AS13674 VRIS-AS-BLOCK-13661-13675 - Verizon Internet Services Inc. 216.240.240.0/20 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.242.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Security inside AS
by Glen Kent 20 Jan '06

20 Jan '06

Hi, I understand that in theory we need to protect our IGPs from all sorts of attacks. But do we really have service providers who enable authentication (MD5, etc) inside their ASes for their IGPs (OSPF/IS-IS)? Thanks, Glen

2 2

ORDB.ORG Outage
by Jon R. Kibler 20 Jan '06

20 Jan '06

Anyone else having ORDB.ORG Temp lookup failures? Seems to have been going on since about 1900 UTC today. Using web site to do lookups also fails or is VERY slow. Anyone know what is going on here? THANKS! Jon Kibler -- Jon R. Kibler Chief Technical Officer A.S.E.T., Inc. Charleston, SC USA (843) 849-8214 ================================================== Filtered by: TRUSTEM.COM's Email Filtering Service http://www.trustem.com/ No Spam. No Viruses. Just Good Clean Email.

4 4

Re: [MailServer Notification]To sender: eManager settings were matche d and action was taken.
by Alexander Harrowell 19 Jan '06

19 Jan '06

Wank, did I use a fucking naughty shitting word? On 1/19/06, System Attendant <LONSRVMAL01-SA(a)patsystems.com> wrote: > **************** eManager Notification ***************** > > The following message was blocked because it contains sensitive content. > > Source mailbox: a.harrowell(a)gmail.com > Destination mailbox(es): > random@72616e646f6d20323030342d30342d31360a.nosense.org;anti.confidentiality > .notices@gmail.com;jerry@jerry.org;nanog@merit.edu > Rule/Policy: Profanity > Action: Quarantine to D:\Program > Files\Trend\SMCF\Quarantine\2004-09-04\15-50-25.10\2006-01-19\23-04-40.11853 > \DFImessagebody43d01b082e4d.tmp > > Note: ScanMail eManager content filter Blocked an email thought to contain > offensive or inappropriate information." Please contact Internal support if > you have any questions or believe this is a legitimate mail. > > ******************* End of message ********************* > DISCLAIMER: This e-mail is confidential and may also be legally privileged. > If you are not the intended recipient, use of the information contained in > this e-mail (including disclosure, copying or distribution) is prohibited > and may be unlawful. Please inform the sender and delete the message > immediately from your system. This e-mail is attributed to the sender and > may not necessarily reflect the views of the Patsystems Group and no member > of the Patsystems Group accepts any liability for any action taken in > reliance on the contents of this e-mail (other than where it has a legal or > regulatory obligation to do so) or for the consequences of any computer > viruses which may have been transmitted by this e-mail. The Patsystems Group > comprises Patsystems plc and its subsidiary group of companies. >

1 0

Re: Stupidity: A Real Cyberthreat.
by A Satisfied Mind 19 Jan '06

19 Jan '06

On 1/19/06, Jerry Pasker <jerry(a)jerry.org> wrote: > Terrorists want to kill people. Did anyone die when those two > fibers were cut? Did it cripple the US Economy? Did it close the > stock markets? When the markets opened the next day, did stock > prices fall across the board for weeks and months on end? Not > exactly. Will people put bumper stickers on their cars that say > "Remember 1/9?" or "Remember Buckeye and Reno Junction" No. Not one > person will do that. You are oversimplifying things here.... Why was the World Trade Center chosen (twice) to attack.... it is an economic target. All wars are economic, including drug wars and terror wars... what was the COST of 9/11??? A hell of a lot: http://www.ccc.nps.navy.mil/si/aug02/homeland.asp > that? We already cut enough of it without any help from terrorists. > Just in case no one was paying attention, the score is: Lack of > information + guy on backhoe = 675,000 cuts per year: Terrorists = > ZERO. Consider the economic impact of cutting a significant portion of the cross-country fiber capacity in such a way that it is very difficult and time-consuming to repair (let's say, shaped-charges along the two fiber routes every 1 mile or so for 50 miles, in remote terrain), in combination with ambush and execution of the work crews sent out to repair the damage, in combination with a similar types of attacks on major cable landing points in the US. And while you are at it, a truck bomb at 8:30 am Monday morning outside Wall Street. What about an attack that specifically targetted SFTI? http://sfti.siac.com/ How much more critical does this get when you consider that NYSE is going to all-electronic trading in the near future? The IRA carried out very effective economic bombing campaigns in London... is Al-Queda (or a hostile foreign government, say Syria) any less-capable?

3 4

Re: IP Addresses from a different region
by Sam Stickland 19 Jan '06

19 Jan '06

That's a fair point David. I can't of course start naming our clients. I could harp on about how they are a multinational, running legimate operations and blah blah blah.. But you'd only have my word for it. So you'll just have to take my word for the fact that we run an operational that comes down hard on nefrarious activities. Sorry. Sam On Thu, 19 Jan 2006, David Ulevitch wrote: > Be wary. > > Who is this client? Some of us in the security abuse world wouldn't mind a > heads up... > > -david > > > On Jan 19, 2006, at 6:20 AM, Sam Stickland wrote: > >> >> Hi, >> >> Long story short... I'm under some considerable pressure from management to >> obtain a /24 of addresses from ARIN. We are a UK based ISP that are, of >> course, members of RIPE. Is this possible? If I approach one of ARIN's LIRs >> can they obtain ARIN PI space for our client, and are their any volunteers? >> Or, is it the case, that being outside of ARIN's geographic reach that we >> can't approach them? >> >> Short story long... This is for a client that currently has a USA based >> operation, that wants to consolidate everything in one of our colo centres. >> Their USA servers are involved in some of kind advertising system that >> attempts to do geographic location based on the IP address prefix. I am >> assured that traceroutes, SWIP data, and AS number play no part in this >> geographic lookup. >> >> The client insists that they must have addresses from a prefix that appear >> to have been allocated by ARIN for this system to continue to work. The >> language barrier between us has been scrupering attempts by me to get more >> techincal information from them. >> >> As usual management are interested in "solutions not problems" ;) and this >> deal is worth quite a bit of money. I hate to be contributing to the ever >> increasing PI swamp space, but unfortunately I don't pay my own wages. >> >> Any suggestions? >> >> Sam > >

4 3