- Test - lists.nanog.org

Fwd: [OCCAID] 6bone addresses going away in June
by eric 07 Jan '06

07 Jan '06

Enough talk about viruses and unpatched hosts! <grin> Maybe if we try hard enough, we can create a Y2K syndrome for the removal of 3ffe:: from global routing? ----- Forwarded message from Mike Bran <mbran(a)occaid.org> ----- Date: Fri, 6 Jan 2006 10:27:11 -0500 From: Mike Bran <mbran(a)occaid.org> To: occaid(a)cnacs.occaid.org Subject: [OCCAID] 6bone addresses going away in June Everyone- Pursuant to RFC 3701 calling for "6BONE Phaseout" 3FFE prefixes remain valid only until June 6, 2006. Those who are still using 6BONE based address space and transit service must take appropriate action now instead of waiting to the last minute. We will begin filtering 3ffe::/16 traffic by the earlier of: (i) June 6 2006; (ii) when transiting traffic sourced from or destined to 3ffe address space drops below 5% of our aggregate network traffic. --mikeb Regards, Mike Bran IP Global Network Operations Center OCCAID, Inc. w: http://www.occaid.org p: +1 617 459 4051 x 500 e: mbran(a)occaid.org _______________________________________________ OCCAID Mailing List November 1, 2005: OCCAID 5th Year Anniversary! http://www.occaid.org Occaid(a)cnacs.occaid.org is the list posting address. db-admin(a)cnacs.occaid.org is the human contact address. See below URL for subscribe/unsubscribe and list options: http://mailman.twdx.net/mailman/listinfo/occaid ----- End forwarded message -----

6 6

Re: QWest is having some pretty nice DNS issues right now
by Fergie 07 Jan '06

07 Jan '06

Feeling the thrash all the way down here in Austin in SBC-land... :-( - ferg -- Wil Schultz <wschultz(a)wilcomm.net> wrote: Apparently they have lost two authoritive servers. ETA is unknown. -Wil

1 0

Weekly Routing Table Report
by Routing Table Analysis 06 Jan '06

06 Jan '06

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 07 Jan, 2006 Analysis Summary ---------------- BGP routing table entries examined: 177730 Prefixes after maximum aggregation: 99948 Unique aggregates announced to Internet: 86379 Total ASes present in the Internet Routing Table: 21282 Origin-only ASes present in the Internet Routing Table: 18508 Origin ASes announcing only one prefix: 8776 Transit ASes present in the Internet Routing Table: 2774 Transit-only ASes present in the Internet Routing Table: 71 Average AS path length visible in the Internet Routing Table: 4.5 Max AS path length visible: 25 Prefixes from unregistered ASNs in the Routing Table: 6 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 12 Number of addresses announced to Internet: 1477940032 Equivalent to 88 /8s, 23 /16s and 147 /24s Percentage of available address space announced: 39.9 Percentage of allocated address space announced: 60.0 Percentage of available address space allocated: 66.4 Total number of prefixes smaller than registry allocations: 85680 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 37230 Total APNIC prefixes after maximum aggregation: 15820 Prefixes being announced from the APNIC address blocks: 35018 Unique aggregates announced from the APNIC address blocks: 17190 APNIC Region origin ASes present in the Internet Routing Table: 2454 APNIC Region origin ASes announcing only one prefix: 696 APNIC Region transit ASes present in the Internet Routing Table: 379 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 17 Number of APNIC addresses announced to Internet: 210093248 Equivalent to 12 /8s, 133 /16s and 196 /24s Percentage of available APNIC address space announced: 78.0 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911 APNIC Address Blocks 58/7, 60/7, 124/7, 126/8, 202/7, 210/7, 218/7, 220/7 and 222/8 ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 93656 Total ARIN prefixes after maximum aggregation: 56229 Prefixes being announced from the ARIN address blocks: 72981 Unique aggregates announced from the ARIN address blocks: 27906 ARIN Region origin ASes present in the Internet Routing Table: 10418 ARIN Region origin ASes announcing only one prefix: 3873 ARIN Region transit ASes present in the Internet Routing Table: 964 Average ARIN Region AS path length visible: 4.3 Max ARIN Region AS path length visible: 17 Number of ARIN addresses announced to Internet: 281518336 Equivalent to 16 /8s, 199 /16s and 161 /24s Percentage of available ARIN address space announced: 69.9 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863 ARIN Address Blocks 24/8, 63/8, 64/6, 68/7, 70/6, 74/7, 76/8, 198/7, 204/6, 208/7 and 216/8 RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 34867 Total RIPE prefixes after maximum aggregation: 23618 Prefixes being announced from the RIPE address blocks: 31867 Unique aggregates announced from the RIPE address blocks: 21439 RIPE Region origin ASes present in the Internet Routing Table: 7533 RIPE Region origin ASes announcing only one prefix: 3949 RIPE Region transit ASes present in the Internet Routing Table: 1239 Average RIPE Region AS path length visible: 5.0 Max RIPE Region AS path length visible: 25 Number of RIPE addresses announced to Internet: 229011648 Equivalent to 13 /8s, 166 /16s and 112 /24s Percentage of available RIPE address space announced: 68.3 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 RIPE Address Blocks 62/8, 80/5, 88/6, 188/8, 193/8, 194/7, 212/7 and 217/8 LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 10115 Total LACNIC prefixes after maximum aggregation: 3418 Prefixes being announced from the LACNIC address blocks: 8332 Unique aggregates announced from the LACNIC address blocks: 4819 LACNIC Region origin ASes present in the Internet Routing Table: 660 LACNIC Region origin ASes announcing only one prefix: 211 LACNIC Region transit ASes present in the Internet Routing Table: 124 Average LACNIC Region AS path length visible: 5.2 Max LACNIC Region AS path length visible: 22 Number of LACNIC addresses announced to Internet: 23553280 Equivalent to 1 /8s, 103 /16s and 101 /24s Percentage of available LACNIC address space announced: 35.1 LACNIC AS Blocks 26592-26623, 27648-28671, plus ERX transfers LACNIC Address Blocks 189/8, 190/8, 200/7 AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 1856 Total AfriNIC prefixes after maximum aggregation: 863 Prefixes being announced from the AfriNIC address blocks: 1209 Unique aggregates announced from the AfriNIC address blocks: 857 AfriNIC Region origin ASes present in the Internet Routing Table: 145 AfriNIC Region origin ASes announcing only one prefix: 47 AfriNIC Region transit ASes present in the Internet Routing Table: 25 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 12 Number of AfriNIC addresses announced to Internet: 2972416 Equivalent to 0 /8s, 45 /16s and 91 /24s Percentage of available AfriNIC address space announced: 8.9 AfriNIC AS Blocks 36864-37887 & ERX transfers AfriNIC Address Blocks 41/8, 196/8 APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4134 995 6453 206 CHINANET-BACKBONE 9583 836 77 14 Sify Limited 4755 770 258 64 Videsh Sanchar Nigam Ltd. Aut 4766 705 3930 298 Korea Telecom (KIX) 1221 667 1364 475 Telstra Pty Ltd 7545 515 108 71 TPG Internet Pty Ltd 17676 478 6901 102 Softbank BB Corp. 17488 436 26 9 Hathway IP Over Cable Interne 9498 401 211 71 BHARTI BT INTERNET LTD. 9443 399 89 85 Primus Telecommunications 4802 355 74 160 Wantree Development 2907 338 1763 315 SINET Japan 9929 332 217 50 China Netcom Corp. 7474 329 227 227 SingTel Optus Pty Ltd 17557 307 24 161 Pakistan Telecom 18101 302 68 24 Reliance Infocom Ltd Internet 17974 301 72 31 PT TELEKOMUNIKASI INDONESIA 4780 282 226 16 Digital United Inc. 9837 270 78 169 Powertel Ltd 9800 256 410 67 CHINA UNICOM ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7018 1441 6311 942 AT&T WorldNet Services 4323 1200 723 235 Time Warner Telecom 174 1041 5825 959 Cogent Communications 721 1031 21938 309 DLA Systems Automation Center 701 973 8117 816 UUNET Technologies, Inc. 6197 969 435 505 BellSouth Network Solutions, 2386 913 516 685 AT&T Data Communications Serv 18566 888 240 7 Covad Communications 1239 846 2803 600 Sprint 209 660 3606 528 Qwest 20115 656 536 338 Charter Communications 11492 639 89 11 Cable One 22773 601 1478 33 Cox Communications, Inc. 19262 592 1703 145 Verizon Global Networks 852 570 1092 379 Telus Advanced Communications 19916 563 49 54 OLM LLC 855 562 243 65 Canadian Research Network 3602 523 127 106 Sprint Canada, Inc. 6478 523 1444 287 AT&T Worldnet Services 3356 519 10617 399 Level 3 Communications, LLC RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 702 589 1954 467 UUNET - Commercial IP service 3301 304 1071 290 TeliaNet Sweden 3320 285 3486 240 Deutsche Telekom AG 8220 274 474 268 COLT Telecommunications 680 244 2024 238 DFN-IP service G-WiN 3246 227 486 220 Song Networks 8708 222 274 206 Romania Data Systems S.A. 6746 205 52 177 Dynamic Network Technologies, 1257 189 712 169 SWIPnet Swedish IP Network 3269 184 1893 69 TELECOM ITALIA 5515 180 840 127 Sonera Solution Autonomous Sy 786 173 1794 173 The JANET IP Service 8866 172 37 11 Bulgarian Telecommunication C 5400 166 328 135 BT Ignite European Backbone 24863 166 38 9 LINKdotNET AS number 3215 162 1326 82 France Telecom Transpac 6830 162 669 33 UPC Distribution Services 3300 159 169 90 AUCS Communications Services 12479 157 322 5 Uni2 Autonomous System 25186 150 211 105 France Telecom Transpac's Tra LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 542 776 214 UniNet S.A. de C.V. 22047 380 141 43 VTR PUNTO NET S.A. 11172 293 109 77 Servicios Alestra S.A de C.V 16814 293 18 6 NSS, S.A. 14117 184 11 6 Telefonica del Sur S.A. 13999 175 52 9 Mega Cable S.A. de C.V. 7303 153 73 18 Telecom Argentina Stet-France 6147 150 118 21 Telefonica Del Peru 11556 130 64 3 Cable-Wireless Panama 19169 126 8 29 Telconet 10481 121 48 8 Prima S.A. 6503 115 148 77 AVANTEL, S.A. 21826 113 14 19 INTERCABLE 5639 112 12 9 Telecommunications Services o 6505 107 88 80 Global One Communicaoes Ltda 11311 99 8 10 Sinectis S.A. 18822 99 8 10 TELEFONICA MANQUEHUE 14522 97 12 8 SatNet S.A. 7315 96 6 3 Grupo Rey Moreno 4270 93 17 9 Red de Interconexion Universi AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 3741 272 812 230 The Internet Solution 8452 147 60 7 TEDATA 5536 122 8 16 Internet Egypt Network 2018 117 298 103 Tertiary Education Network 15475 101 84 4 Nile Online 2905 74 155 67 The Internetworking Company o 6713 71 71 10 Itissalat Al-MAGHRIB 24835 65 34 6 RAYA Telecom - Egypt 20928 61 16 2 Noor Advanced Technologies AS 5713 39 167 35 Telkom SA Ltd 33774 33 4 24 AS Number for Telecom Algeria 15706 31 8 3 Sudatel Internet Exchange Aut 23889 25 7 10 MAURITIUS TELECOM 21280 24 4 4 Swift Global Kenya Ltd.Is an 8524 23 1 4 AUCEGYPT Autonomous System 10798 22 1 13 Standard Bank of South Africa 16637 22 10 20 Johnnic e-Ventures 8346 19 14 18 SONATEL-AS Autonomous System 12455 19 6 5 Jambonet Autonomous system 12258 17 3 11 Vodacom Internet Company Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4323 1200 965 Time Warner Telecom 18566 888 881 Covad Communications 9583 836 822 Sify Limited 4134 995 789 CHINANET-BACKBONE 721 1031 722 DLA Systems Automation Center 4755 770 706 Videsh Sanchar Nigam Ltd. Aut 11492 639 628 Cable One 22773 601 568 Cox Communications, Inc. 19916 563 509 OLM LLC 855 562 497 Canadian Research Network 5668 511 487 CenturyTel Internet Holdings, 6197 969 464 BellSouth Network Solutions, 19262 592 447 Verizon Global Networks 7545 515 444 TPG Internet Pty Ltd 17488 436 427 Hathway IP Over Cable Interne 3602 523 417 Sprint Canada, Inc. 4766 705 407 Korea Telecom (KIX) 17676 478 376 Softbank BB Corp. 6467 402 356 E.Spire Communications, Inc. 812 370 343 Rogers WAVE List of Unregistered ASNs (Global) ---------------------------------- Bad AS Designation Network Transit AS Description 38976 UNALLOCATED 62.192.224.0/19 21166 Satgate autonomous s 38976 UNALLOCATED 62.192.232.0/24 21166 Satgate autonomous s 38972 UNALLOCATED 80.251.144.0/21 6828 Ekaterinburg Telegra 38972 UNALLOCATED 80.251.151.0/24 6828 Ekaterinburg Telegra 38972 UNALLOCATED 80.251.152.0/23 28947 CJSC InT, Ekaterinbu 29544 UNALLOCATED 82.151.64.0/19 12956 Telefonica Data Auto Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 132.0.0.0/10 721 DLA Systems Automation Center 137.0.0.0/13 721 DLA Systems Automation Center 158.0.0.0/13 721 DLA Systems Automation Center 192.43.230.0/24 7575 Australian Academic and Rease 192.44.0.0/24 5501 Fraunhofer Gesellschaft 192.44.0.0/19 702 UUNET - Commercial IP service 192.70.164.0/24 25689 National Research Council of 192.72.0.0/18 4780 Digital United Inc. 192.72.0.0/16 4780 Digital United Inc. 192.84.205.0/24 719 LANLINK autonomous system 192.119.135.0/24 270 NASA 192.172.0.0/19 721 DLA Systems Automation Center Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:18 /9:5 /10:8 /11:20 /12:87 /13:196 /14:346 /15:670 /16:8637 /17:2943 /18:4955 /19:11189 /20:12306 /21:10503 /22:13598 /23:14742 /24:96569 /25:344 /26:267 /27:199 /28:34 /29:12 /30:45 /31:3 /32:34 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 872 888 Covad Communications 6197 784 969 BellSouth Network Solutions, 7018 719 1441 AT&T WorldNet Services 9583 657 836 Sify Limited 2386 636 913 AT&T Data Communications Serv 11492 630 639 Cable One 4323 575 1200 Time Warner Telecom 19916 557 563 OLM LLC 4766 508 705 Korea Telecom (KIX) 855 434 562 Canadian Research Network 7011 403 469 Citizens Utilities 5668 400 511 CenturyTel Internet Holdings, 702 373 589 UUNET - Commercial IP service 1239 365 846 Sprint 6198 355 498 BellSouth Network Solutions, 6517 331 357 Yipes Communications, Inc. 15270 329 356 PaeTec.net -a division of Pae 22773 311 601 Cox Communications, Inc. 13609 290 332 Choice One Communications Inc 701 283 973 UUNET Technologies, Inc. Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:3 8:42 12:1628 13:1 15:11 16:3 17:3 18:3 20:42 24:715 25:1 30:2 32:68 38:186 40:54 44:3 47:3 52:4 55:1 56:3 57:33 58:110 59:120 60:174 61:770 62:781 63:1896 64:2936 65:2147 66:2997 67:594 68:696 69:1349 70:264 71:41 72:538 73:15 80:692 81:594 82:506 83:349 84:336 85:402 86:248 87:124 125:145 128:151 129:169 130:101 131:304 132:33 133:1 134:151 135:45 136:162 137:64 138:178 139:92 140:444 141:136 142:403 143:205 144:227 145:39 146:310 147:135 148:328 149:188 150:109 151:71 152:115 153:98 154:6 155:183 156:90 157:119 158:152 159:175 160:87 161:67 162:247 163:177 164:167 165:170 166:148 167:237 168:473 169:142 170:312 171:12 192:5743 193:3349 194:2460 195:1702 196:735 198:3896 199:3263 200:4173 201:547 202:6380 203:6671 204:3809 205:2095 206:2409 207:2918 208:2011 209:3455 210:1855 211:791 212:1242 213:1414 214:317 215:40 216:3827 217:1158 218:234 219:131 220:619 221:330 222:139 End of report

1 0

Teredo (was RE: Fwd: [OCCAID] 6bone addresses going away in June)
by Bora Akyol 06 Jan '06

06 Jan '06

> guess terado services will get a facelift then too? (since > they require/use the 3ffe range for comms) Out of curiosity, how prevalent is Teredo these days? Thanks Bora

1 0

Re: [Fwd: Re: sober.z to hit tomorrow]
by Wil Schultz 06 Jan '06

06 Jan '06

And here i was expecting .ZIP file from the FBI and CIA telling me that I need to full out a "survey" :) -Wil Martin Hannigan wrote: >>Here is some more interesting information. I'm not positive this is >>Sober.Z related but it's walking like and talking like a duck. >> >>First I see the below DNS requests, shortly after I see many SMTP >>packets hitting Hotmail, AOL, Yahoo.com, Yahoo.co.uk, Progegy, etc.... >>Looks like it's... Sending SPAM?!?! >> >> > >No! Not that! > > > >>This I didn't expect at all, here is a trace from one of the known >>infected users: >> >> > > >This is how these folks make money. > > > >

1 0

LACNIC ranges being filtered
by Ricardo Patara 06 Jan '06

06 Jan '06

Hello, In june 2005 LACNIC received two new IP block from IANA (189/8 and 190/8). And before starting to make allocation in it, we conducted some reachability tests with valuable help from this community. Those test showed that great majority of transit providers were not block those network ranges. But unfortunately turned out that there are now some end nodes networks which are still blocking them. Contact have been tried from LANCIC members being affected, their upstream and also from LACNIC itself since end of November 2005 with not much success so far. So we kindly ask you all to revise your filters and if some of the following networks/address range administrator could contact us offline we would appreciate: American Express Oracle Wikipedia HostDime.com, Inc American Airlines Inc. Gannett Co Adslzone.net 82.223.64.0/18 Thanks Ricardo Patara RSG Manager -- | LACNIC | http://LACNIC.NET

1 0

The Cidr Report
by cidr-report＠potaroo.net 06 Jan '06

06 Jan '06

This report has been generated at Fri Jan 6 21:52:35 2006 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 30-12-05 174422 116292 31-12-05 174512 116417 01-01-06 174547 116366 02-01-06 174524 116324 03-01-06 174473 116302 04-01-06 174604 116340 05-01-06 174699 116244 06-01-06 174675 116326 AS Summary 21209 Number of ASes in routing system 8802 Number of ASes announcing only one prefix 1434 Largest number of prefixes announced by an AS AS7018 : ATT-INTERNET4 - AT&T WorldNet Services 91312384 Largest address span announced by an AS (/32s) AS721 : DLA-ASNBLOCK-AS - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 06Jan06 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 174695 116276 58419 33.4% All ASes AS4323 1194 237 957 80.2% TWTC - Time Warner Telecom AS18566 888 8 880 99.1% COVAD - Covad Communications Co. AS4134 991 253 738 74.5% CHINANET-BACKBONE No.31,Jin-rong Street AS721 1031 311 720 69.8% DLA-ASNBLOCK-AS - DoD Network Information Center AS22773 601 39 562 93.5% CCINET-2 - Cox Communications Inc. AS19916 563 65 498 88.5% ASTRUM-0001 - OLM LLC AS855 562 65 497 88.4% CANET-ASN-4 - Canadian Research Network AS7018 1434 941 493 34.4% ATT-INTERNET4 - AT&T WorldNet Services AS3602 523 107 416 79.5% SPRINT-CA-AS - Sprint Canada Inc. AS6197 966 569 397 41.1% BATI-ATL - BellSouth Network Solutions, Inc AS11492 639 249 390 61.0% CABLEONE - CABLE ONE AS17676 478 103 375 78.5% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS17488 436 64 372 85.3% HATHWAY-NET-AP Hathway IP Over Cable Internet AS4766 666 301 365 54.8% KIXS-AS-KR Korea Telecom AS9583 832 467 365 43.9% SIFY-AS-IN Sify Limited AS812 370 27 343 92.7% ROGERS-CABLE - Rogers Cable Inc. AS6467 395 54 341 86.3% ESPIRECOMM - e.spire Communications, Inc. AS4755 617 291 326 52.8% VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System AS15270 351 30 321 91.5% AS-PAETEC-NET - PaeTec.net -a division of PaeTecCommunications, Inc. AS9498 399 93 306 76.7% BBIL-AP BHARTI BT INTERNET LTD. AS22047 380 88 292 76.8% VTR BANDA ANCHA S.A. AS14654 292 6 286 97.9% WAYPORT - Wayport AS5668 510 236 274 53.7% AS-5668 - CenturyTel Internet Holdings, Inc. AS18101 302 28 274 90.7% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS6167 330 65 265 80.3% CELLCO-PART - Cellco Partnership AS9929 320 57 263 82.2% CNCNET-CN China Netcom Corp. AS16814 293 41 252 86.0% NSS S.A. AS1239 843 602 241 28.6% SPRINTLINK - Sprint AS6517 357 118 239 66.9% YIPESCOM - Yipes Communications, Inc. AS6478 522 288 234 44.8% ATT-INTERNET3 - AT&T WorldNet Services Total 18085 5803 12282 67.9% Top 30 total Possible Bogus Routes 24.246.0.0/17 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.78.0/24 AS25994 NPG-001 - NPG Cable, INC 24.246.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 64.17.32.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.33.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.37.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.25.224.0/20 AS12180 INTERNAP-2BLK - Internap Network Services 64.25.224.0/22 AS15083 INFOLINK-MIA-US - Infolink Information Services Inc. 64.38.96.0/19 AS19654 HOSTING-NETWORK - HOSTING-NETWORK, INC. 64.127.128.0/17 AS19654 HOSTING-NETWORK - HOSTING-NETWORK, INC. 66.11.32.0/20 AS6261 VISINET - Visionary Systems, Inc. 66.11.224.0/20 AS3356 LEVEL3 Level 3 Communications 66.37.96.0/20 AS3764 IA-HOU-AS - Internet America, Inc. 66.51.134.0/24 AS29876 LNTC - Latency LLC 66.96.0.0/20 AS3770 WORLDPATH-AS - WorldPath Internet Services 66.117.0.0/21 AS30033 NHI-NETWORKS - NHI Networks 66.117.8.0/24 AS174 COGENT Cogent/PSI 66.117.9.0/24 AS30033 NHI-NETWORKS - NHI Networks 66.117.16.0/24 AS30033 NHI-NETWORKS - NHI Networks 66.117.18.0/24 AS30033 NHI-NETWORKS - NHI Networks 66.117.20.0/24 AS30085 NHI-COLOCATIONS - New Horizon Collocations 66.117.21.0/24 AS30033 NHI-NETWORKS - NHI Networks 66.117.23.0/24 AS31972 EMGINECONCEPT-01 - Emagine Concept, Inc. 66.117.25.0/24 AS31972 EMGINECONCEPT-01 - Emagine Concept, Inc. 66.117.26.0/24 AS31972 EMGINECONCEPT-01 - Emagine Concept, Inc. 66.117.27.0/24 AS31972 EMGINECONCEPT-01 - Emagine Concept, Inc. 66.186.192.0/19 AS19654 HOSTING-NETWORK - HOSTING-NETWORK, INC. 66.187.96.0/24 AS10026 ANC Asia Netcom Corporation 66.187.108.0/24 AS10026 ANC Asia Netcom Corporation 66.187.109.0/24 AS10026 ANC Asia Netcom Corporation 66.216.0.0/18 AS19654 HOSTING-NETWORK - HOSTING-NETWORK, INC. 66.235.158.0/23 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 69.39.193.0/24 AS25973 MZIMA - Mzima Networks, Inc. 69.39.195.0/24 AS25973 MZIMA - Mzima Networks, Inc. 69.39.196.0/24 AS25973 MZIMA - Mzima Networks, Inc. 85.129.3.0/24 AS14585 CIFNET - CIFNet, Inc. 85.129.4.0/24 AS14585 CIFNET - CIFNet, Inc. 90.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 90.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 91.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 91.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 125.213.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 131.64.0.0/12 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 132.0.0.0/10 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 137.0.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 138.136.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 151.135.0.0/16 AS4763 TELSTRANZ-AS TelstraClear Ltd 158.0.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 163.142.0.0/16 AS2500 JPNIC-ASBLOCK-AP JPNIC 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.40.105.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.43.230.0/24 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 192.44.0.0/19 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 192.44.0.0/24 AS5501 FRAUNHOFER-CLUSTER-BW Fraunhofer Gesellschaft 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.72.0.0/16 AS4780 SEEDNET Digital United Inc. 192.72.0.0/18 AS4780 SEEDNET Digital United Inc. 192.72.192.0/18 AS4780 SEEDNET Digital United Inc. 192.81.183.0/24 AS719 ELISA-AS Elisa Oyj 192.81.184.0/24 AS719 ELISA-AS Elisa Oyj 192.88.99.0/24 AS559 SWITCH SWITCH, Swiss Education and Research Network 192.96.36.0/24 AS5713 AFRINIC African Network Information Center 192.96.37.0/24 AS10474 AFRINIC African Network Information Center 192.96.135.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.136.0/23 AS2018 TENET - 1 - The Uninet Project 192.96.140.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.143.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.145.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.177.0/24 AS6083 AFRINIC African Network Information Center 192.96.250.0/24 AS2018 TENET - 1 - The Uninet Project 192.107.104.0/24 AS6458 GUATEL 192.119.135.0/24 AS270 PSCNI-AS - National Aeronautics and Space Administration 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.133.6.0/24 AS10282 EQUANT-CEEUR EQUANT AS for Central and Eastern Europe region 192.136.53.0/24 AS8346 SONATEL-AS Autonomous System 192.153.144.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 192.172.0.0/19 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 192.188.208.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 193.0.246.0/24 AS3303 SWISSCOM Swisscom Solutions Ltd 193.32.19.0/24 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 193.32.20.0/23 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 193.36.1.0/24 AS8220 COLT COLT Telecommunications 193.37.69.0/24 AS2856 BT-UK-AS BTnet UK Regional network 193.37.236.0/24 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 193.110.77.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.78.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.79.0/24 AS3356 LEVEL3 Level 3 Communications 194.31.227.0/24 AS21461 TRANSFAIRNET Transfair-net GmbH Krefeld 194.59.176.0/20 AS1273 CW Cable & Wireless 194.153.156.0/24 AS24865 KMITCHELL-AS Keith Mitchell's Network 194.246.72.0/23 AS8893 ARTFILES-AS Artfiles New Media GmbH 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.54.82.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.92.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.222.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.249.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.250.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.251.0/24 AS2018 TENET - 1 - The Uninet Project 198.97.72.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.80.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.96.0/19 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.240.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.101.4.0/22 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.136.32.0/20 AS19329 MCNET - Martin County Board of County Commissioners 198.160.171.0/24 AS7046 UUNET-CUSTOMER - UUNET Technologies, Inc. 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.163.155.0/24 AS684 MTSAL-ASN - MTS Allstream Inc. 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 198.168.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL - SaskTel 198.232.133.0/24 AS23075 SKOTOS-AS - Skotos Tech, Inc 199.9.128.0/17 AS668 ASN-ASNET-NET-AS - Defense Research and Engineering Network 199.10.0.0/16 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.60.0.0/20 AS271 BCNET-AS - University of British Columbia 199.114.0.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.128.0/18 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.130.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.132.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DISA/UNRRA 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DISA/UNRRA 199.114.142.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.144.0/24 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.148.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.150.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.114.160.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.120.32.0/19 AS16582 NEXTLEVELINTERNET - NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.0.0/18 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.16.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.80.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 199.246.116.0/24 AS813 UUNET-AS1 - UUNET Technologies, Inc. 202.58.113.0/24 AS19161 INNOCOM-TELECOM - INNOCOM TELECOM 202.74.32.0/19 AS9315 CWN-AS-AP Chomanan WorldNet Co., Ltd. 202.80.224.0/19 AS7613 DATALINETHAI-AS-AP Data Line Thai Co., LTD. Internet Service Provider 202.80.231.0/24 AS4750 LOXLEY-TH Loxley Information Co., Ltd. 202.86.252.0/22 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.90.33.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.40.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.41.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.42.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.43.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.44.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.131.64.0/19 AS9381 NEWTT-IP-AP Wharf T&T Ltd. 203.13.171.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.89.133.0/24 AS15412 FLAG-AS Flag Telecom Global Internet AS 203.89.134.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.138.0/24 AS9237 HUTCHCA-AS Corporate Access (HK) Ltd. 203.89.139.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 203.89.143.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.144.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.145.0/24 AS4637 REACH Reach Network Border AS 203.89.146.0/24 AS4637 REACH Reach Network Border AS 203.89.147.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.148.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.149.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.150.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.151.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.153.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.154.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.158.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.159.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.99.0.0/19 AS17746 ORCONINTERNET-NZ-AP Orcon Internet 203.99.142.0/24 AS9826 ILINK-HK-AP iLink.net Ltd 203.111.192.0/20 AS7473 SINGTEL-AS-AP Singapore Telecom 203.210.69.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 204.48.118.0/23 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.48.119.0/24 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.154.125.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 205.150.0.0/15 AS701 ALTERNET-AS - UUNET Technologies, Inc. 206.108.96.0/19 AS577 BACOM - Bell Advanced Communications Inc. 206.128.104.0/21 AS11709 VIC - VIRTUAL INTERACTIVE CENTER 206.167.57.0/24 AS376 RISQ-AS - Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 206.191.96.0/19 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc 209.40.192.0/21 AS6487 CyberNet de Guatemala S.A. 209.40.200.0/21 AS6487 CyberNet de Guatemala S.A. 209.40.208.0/21 AS6487 CyberNet de Guatemala S.A. 209.40.216.0/21 AS6487 CyberNet de Guatemala S.A. 209.97.64.0/19 AS6132 INGRESSNET - Ingress Enterprises, Inc w/ Ingress Communications, Inc. 209.112.224.0/20 AS19817 DSLEXTREME - DSL Extreme 209.205.69.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.70.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.81.0/24 AS15066 SkyNet de Colombia S.A. 209.205.82.0/24 AS15066 SkyNet de Colombia S.A. 209.205.84.0/24 AS15066 SkyNet de Colombia S.A. 209.234.0.0/18 AS3845 STATE-NET - CS&W, Inc. 209.251.0.0/19 AS11036 SISCOM - SISCOM, Inc 216.37.110.0/23 AS4264 CERNET-ASN-BLOCK - California Education and Research Federation Network 216.71.224.0/20 AS23527 COTELLIGENCE - Cotelligence, Inc. 216.82.160.0/20 AS20481 CALYX-NL Calyx Internet B.V. Netherlands 216.96.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.228.64.0/21 AS6295 WHIDBEY1 - Whidbey Internet Services 216.228.224.0/20 AS13674 VRIS-AS-BLOCK-13661-13675 - Verizon Internet Services Inc. 216.240.240.0/20 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.242.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

[Fwd: Re: sober.z to hit tomorrow]
by Wil Schultz 06 Jan '06

06 Jan '06

Here is some more interesting information. I'm not positive this is Sober.Z related but it's walking like and talking like a duck. First I see the below DNS requests, shortly after I see many SMTP packets hitting Hotmail, AOL, Yahoo.com, Yahoo.co.uk, Progegy, etc.... Looks like it's... Sending SPAM?!?! This I didn't expect at all, here is a trace from one of the known infected users: ############################################################### <snip, due to the postmasters request since it looks like SPAM> ############################################################### Wil Schultz wrote: > FYI: I've set some traps on our DNS servers, dunno exactally what this > means but I thought that I should share: > > Jan 5 18:41:09 myServer named[24490]: client X.X.X.X#1192: query: > arcor.de IN MX > Jan 5 18:45:48 myServer named[24490]: client X.X.X.X#1034: query: > freenet.de IN MX > > These are the only two logs I have at this point. And I don't recall > any other Sober searching for an email server. > > -Wil > > Wil Schultz wrote: > >> Wouldn't it be fun if it contained the WMF exploit in some form? >> So, I'm planning on using swatch to monitor DNS requests for the >> known affected domains. What is everyone else planning to do? >> >> -Wil >> >> > > >

1 0

sober.z to hit tomorrow
by Wil Schultz 06 Jan '06

06 Jan '06

Wouldn't it be fun if it contained the WMF exploit in some form? So, I'm planning on using swatch to monitor DNS requests for the known affected domains. What is everyone else planning to do? -Wil

3 4

Awful quiet?
by Jim Popovitch 05 Jan '06

05 Jan '06

I miss the endless debates. Is *everyone* Christmas shopping? Here's a thought to ponder.... With the thousands of datacenters that exist with IPv4 cores, what will it take to get them to move all of their infrastructure and customers to IPv6? Can it even be done or will they just run IPv6 to the core and proxy the rest? -Jim P.

17 28