- Test - lists.nanog.org

RE: AS136165 103.100.107.0/24
by Mathew Heard 12 Nov '19

12 Nov '19

Hi Radu, Maintainer of that range. Currently it's unallocated, pending reallocation to a new product line shortly. It's not announced by us. It appears China Mobile (AS40676 <https://bgp.he.net/AS40676>) attempted theft via unauthorized announcement (RADB listed). I've just enabled RPKI & ROA on that range. Thanks for the notification, sorry for the delay it came indirect as we are not a member here. For further correspondence could I perhaps request a contact at the technical contact or abuse contact for the range. Regards, Mathew

1 0

Any info on devices that are running eBGP on the Internet?
by Compton, Rich A 11 Nov '19

11 Nov '19

Hi, I am working with MANRS (https://www.manrs.org) on a tool for checking router configs for BGP security / spoofing prevention (e.g. uRPF) https://github.com/manrs-tools/MANRS-validator We are wondering if there is any research on the percentages of different types of devices running BGP on the Internet. Something like: Cisco IOS 30% Junos 30% Mikrotik 20% etc… We are looking to focus our tool on the most prevalent types of devices doing BGP (and the most prevalent with BGP security/spoofing issues) so that we can have the greatest impact. Does anyone have any information on this or know where I can obtain this information? Thanks in advance! -Rich E-MAIL CONFIDENTIALITY NOTICE: The contents of this e-mail message and any attachments are intended solely for the addressee(s) and may contain confidential and/or legally privileged information. If you are not the intended recipient of this message or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message and any attachments. If you are not the intended recipient, you are notified that any use, dissemination, distribution, copying, or storage of this message or any attachment is strictly prohibited.

10 10

AWS GeoDNS and Routing...
by John Von Essen 08 Nov '19

08 Nov '19

If anyone from AWS Networking Engineering is here, it would be great if you could chime in. I work for a very large search engine, hosted in AWS. Right around Oct 31st/Nov 1st, we noticed a significant change/re-routing of traffic that normally goes to Virginia to either California or Europe. All of our stats and pixel data indicate that approx 6-7% of our us-east-1 inbound traffic (we use Route53, Geo DNS, performance based routing, so lowest latency) was migrated to us-west-1 (Cali) and eu-west-1 (Ireland). If we used pure Geo-based routing, I could make the argument that there was some major Geo IP database update, but we performance based routing based in lowest latency. I realize that still depends on some data sets, and maybe those data sets got updated, or maybe the traffic was specifically re-routed due to some other kind of transit issue? This isn’t critical, but its a head scratcher… Thanks John Von Essen

1 0

all major US carriers received text messages overnight that appear to have been sent around Valentine's Day 2019
by Chris Kimball 08 Nov '19

08 Nov '19

Does anyone have any more information on this? Users on Twitter report that T-Mobile said "that there is a known issue of texts being resent/spoofed and said not to worry about it." https://twitter.com/ThelocalfilmMN/status/1192434609197375488 https://investors.sprint.com/news-and-events/press-releases/press-release-d… thoughts? - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - The information contained in this electronic message may be confidential, and the message is for the use of intended recipients only. If you are not the intended recipient, do not disseminate, copy, or disclose this communication or its contents. If you have received this communication in error, please immediately notify me by replying to the email or call MIS Alliance at 617-500-1700 and permanently delete this communication.

23 25

Weekly Routing Table Report
by cscora＠apnic.net 08 Nov '19

08 Nov '19

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 09 Nov, 2019 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 781783 Prefixes after maximum aggregation (per Origin AS): 297937 Deaggregation factor: 2.62 Unique aggregates announced (without unneeded subnets): 376869 Total ASes present in the Internet Routing Table: 66078 Prefixes per ASN: 11.83 Origin-only ASes present in the Internet Routing Table: 56797 Origin ASes announcing only one prefix: 24298 Transit ASes present in the Internet Routing Table: 9281 Transit-only ASes present in the Internet Routing Table: 268 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 35 Max AS path prepend of ASN ( 44555) 27 Prefixes from unregistered ASNs in the Routing Table: 27 Number of instances of unregistered ASNs: 27 Number of 32-bit ASNs allocated by the RIRs: 29439 Number of 32-bit ASNs visible in the Routing Table: 24053 Prefixes from 32-bit ASNs in the Routing Table: 109264 Number of bogon 32-bit ASNs visible in the Routing Table: 11 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 360 Number of addresses announced to Internet: 2841827200 Equivalent to 169 /8s, 98 /16s and 215 /24s Percentage of available address space announced: 76.8 Percentage of allocated address space announced: 76.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.4 Total number of prefixes smaller than registry allocations: 260296 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 209880 Total APNIC prefixes after maximum aggregation: 60956 APNIC Deaggregation factor: 3.44 Prefixes being announced from the APNIC address blocks: 204135 Unique aggregates announced from the APNIC address blocks: 84988 APNIC Region origin ASes present in the Internet Routing Table: 10169 APNIC Prefixes per ASN: 20.07 APNIC Region origin ASes announcing only one prefix: 2827 APNIC Region transit ASes present in the Internet Routing Table: 1512 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 25 Number of APNIC region 32-bit ASNs visible in the Routing Table: 5183 Number of APNIC addresses announced to Internet: 771228032 Equivalent to 45 /8s, 248 /16s and 1 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-141625 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 230178 Total ARIN prefixes after maximum aggregation: 106890 ARIN Deaggregation factor: 2.15 Prefixes being announced from the ARIN address blocks: 227726 Unique aggregates announced from the ARIN address blocks: 108693 ARIN Region origin ASes present in the Internet Routing Table: 18642 ARIN Prefixes per ASN: 12.22 ARIN Region origin ASes announcing only one prefix: 6925 ARIN Region transit ASes present in the Internet Routing Table: 1921 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 24 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2989 Number of ARIN addresses announced to Internet: 1069086720 Equivalent to 63 /8s, 184 /16s and 248 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 218407 Total RIPE prefixes after maximum aggregation: 102481 RIPE Deaggregation factor: 2.13 Prefixes being announced from the RIPE address blocks: 214977 Unique aggregates announced from the RIPE address blocks: 127753 RIPE Region origin ASes present in the Internet Routing Table: 26583 RIPE Prefixes per ASN: 8.09 RIPE Region origin ASes announcing only one prefix: 11704 RIPE Region transit ASes present in the Internet Routing Table: 3749 Average RIPE Region AS path length visible: 4.5 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 8644 Number of RIPE addresses announced to Internet: 722427648 Equivalent to 43 /8s, 15 /16s and 95 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 101615 Total LACNIC prefixes after maximum aggregation: 23220 LACNIC Deaggregation factor: 4.38 Prefixes being announced from the LACNIC address blocks: 102745 Unique aggregates announced from the LACNIC address blocks: 44941 LACNIC Region origin ASes present in the Internet Routing Table: 9067 LACNIC Prefixes per ASN: 11.33 LACNIC Region origin ASes announcing only one prefix: 2369 LACNIC Region transit ASes present in the Internet Routing Table: 1715 Average LACNIC Region AS path length visible: 5.3 Max LACNIC Region AS path length visible: 35 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 6620 Number of LACNIC addresses announced to Internet: 173949696 Equivalent to 10 /8s, 94 /16s and 67 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-270748 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 21675 Total AfriNIC prefixes after maximum aggregation: 4368 AfriNIC Deaggregation factor: 4.96 Prefixes being announced from the AfriNIC address blocks: 31840 Unique aggregates announced from the AfriNIC address blocks: 10190 AfriNIC Region origin ASes present in the Internet Routing Table: 1334 AfriNIC Prefixes per ASN: 23.87 AfriNIC Region origin ASes announcing only one prefix: 473 AfriNIC Region transit ASes present in the Internet Routing Table: 260 Average AfriNIC Region AS path length visible: 4.9 Max AfriNIC Region AS path length visible: 23 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 617 Number of AfriNIC addresses announced to Internet: 104797440 Equivalent to 6 /8s, 63 /16s and 21 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 5091 630 590 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4681 4192 73 ERX-CERNET-BKB China Education and Rese 7552 3265 1331 27 VIETEL-AS-AP Viettel Group, VN 45899 3082 1772 108 VNPT-AS-VN VNPT Corp, VN 7713 2712 799 489 TELKOMNET-AS-AP PT Telekomunikasi Indon 9808 2615 9043 63 CMNET-GD Guangdong Mobile Communication 9829 2531 1495 530 BSNL-NIB National Internet Backbone, IN 4766 2384 11113 665 KIXS-AS-KR Korea Telecom, KR 9498 2203 433 211 BBIL-AP BHARTI Airtel Ltd., IN 4755 2149 442 196 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7155 4055 280 27 VIASAT-SP-BACKBONE - ViaSat,Inc., US 11492 3753 247 674 CABLEONE - CABLE ONE, INC., US 16509 3633 7375 1570 AMAZON-02 - Amazon.com, Inc., US 22773 3496 2970 155 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 6327 3357 1324 93 SHAW - Shaw Communications Inc., CA 16625 2900 1534 2070 AKAMAI-AS - Akamai Technologies, Inc., 30036 2239 354 121 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 20115 2134 2769 517 CHARTER-20115 - Charter Communications, 209 2114 5070 533 CENTURYLINK-US-LEGACY-QWEST - CenturyLi 18566 2068 405 103 MEGAPATH5-US - MegaPath Corporation, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 5639 1618 136 UNI2-AS, ES 39891 4034 219 19 ALJAWWALSTC-AS, SA 8551 2980 379 46 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2796 475 1965 AKAMAI-ASN1, US 31334 2630 484 13 KABELDEUTSCHLAND-AS, DE 12389 2418 2234 698 ROSTELECOM-AS, RU 9121 2155 1691 18 TTNET, TR 34984 2153 349 536 TELLCOM-AS, TR 9009 1927 207 1055 M247, GB 13188 1604 100 47 TRIOLAN, UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6224 3330 612 Uninet S.A. de C.V., MX 10620 3355 532 466 Telmex Colombia S.A., CO 11830 2697 370 54 Instituto Costarricense de Electricidad 6503 1688 327 387 Axtel, S.A.B. de C.V., MX 7303 1477 1024 275 Telecom Argentina S.A., AR 28573 1202 2232 195 CLARO S.A., BR 13999 1114 486 244 Mega Cable, S.A. de C.V., MX 6147 1103 380 37 Telefonica del Peru S.A.A., PE 3816 1086 556 135 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 934 110 59 Alestra, S. de R.L. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1175 393 23 LINKdotNET-AS, EG 36992 1021 1535 73 ETISALAT-MISR, EG 24835 959 618 25 RAYA-AS, EG 36903 868 438 95 MT-MPLS, MA 8452 642 1857 19 TE-AS TE-AS, EG 6713 626 1863 34 IAM-AS, MA 29571 522 68 11 ORANGE-COTE-IVOIRE, CI 37342 482 32 1 MOVITEL, MZ 15399 410 45 10 WANANCHI-, KE 23889 366 231 15 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6224 3330 612 Uninet S.A. de C.V., MX 12479 5639 1618 136 UNI2-AS, ES 7545 5091 630 590 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4681 4192 73 ERX-CERNET-BKB China Education and Rese 7155 4055 280 27 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 4034 219 19 ALJAWWALSTC-AS, SA 11492 3753 247 674 CABLEONE - CABLE ONE, INC., US 16509 3633 7375 1570 AMAZON-02 - Amazon.com, Inc., US 22773 3496 2970 155 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 6327 3357 1324 93 SHAW - Shaw Communications Inc., CA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 12479 5639 5503 UNI2-AS, ES 4538 4681 4608 ERX-CERNET-BKB China Education and Research Net 7545 5091 4501 TPG-INTERNET-AP TPG Telecom Limited, AU 7155 4055 4028 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 4034 4015 ALJAWWALSTC-AS, SA 22773 3496 3341 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 6327 3357 3264 SHAW - Shaw Communications Inc., CA 7552 3265 3238 VIETEL-AS-AP Viettel Group, VN 11492 3753 3079 CABLEONE - CABLE ONE, INC., US 45899 3082 2974 VNPT-AS-VN VNPT Corp, VN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 64501 DOCUMENT 45.174.25.0/24 267817 UNKNOWN 260984 UNALLOCATED 45.175.186.0/23 16735 ALGAR TELECOM S/A, BR 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65550 DOCUMENT 81.8.34.0/24 15924 BORUSANTELEKOM-AS, TR 65550 DOCUMENT 81.8.35.0/24 15924 BORUSANTELEKOM-AS, TR 64339 UNALLOCATED 143.0.108.0/22 18747 IFX18747 - IFX Corporation, US 64355 UNALLOCATED 156.40.196.0/24 30387 NIH-NET-NCCS - National Instit 64011 UNALLOCATED 166.133.128.0/18 20057 ATT-MOBILITY-LLC-AS20057 - AT& 64011 UNALLOCATED 166.133.192.0/18 20057 ATT-MOBILITY-LLC-AS20057 - AT& Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 23.136.224.0/24 15206 6X7 - 6x7 Networks LLC, ZZ 27.100.7.0/24 56096 UNKNOWN 27.126.156.0/22 55827 UNKNOWN 27.126.156.0/23 55827 UNKNOWN 27.126.158.0/23 55827 UNKNOWN 31.217.248.0/23 209372 IPMEN, GB 31.217.250.0/23 209372 IPMEN, GB 31.217.252.0/23 209372 IPMEN, GB 31.217.254.0/23 209372 IPMEN, GB 37.77.148.0/23 209372 IPMEN, GB Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:10 /9:11 /10:38 /11:100 /12:290 /13:577 /14:1159 /15:1921 /16:13314 /17:8089 /18:13796 /19:25732 /20:40311 /21:47338 /22:97473 /23:79192 /24:450872 /25:1560 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 4597 5639 UNI2-AS, ES 7155 3147 4055 VIASAT-SP-BACKBONE - ViaSat,Inc., US 6327 3144 3357 SHAW - Shaw Communications Inc., CA 39891 2946 4034 ALJAWWALSTC-AS, SA 11492 2920 3753 CABLEONE - CABLE ONE, INC., US 22773 2718 3496 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 31334 2486 2630 KABELDEUTSCHLAND-AS, DE 8551 2439 2980 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11830 2044 2697 Instituto Costarricense de Electricidad y Telec 8151 1996 6224 Uninet S.A. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1544 2:1110 3:6 4:21 5:3104 6:49 8:1368 9:1 12:1802 13:465 14:2194 15:52 16:8 17:273 18:78 20:56 23:3102 24:2595 25:4 27:2499 31:2773 32:107 35:36 36:930 37:2998 38:1794 39:306 40:128 41:3399 42:848 43:2102 44:185 45:11998 46:3333 47:270 49:1413 50:1127 51:344 52:1074 54:267 55:729 56:6 57:48 58:2052 59:1095 60:654 61:2216 62:2127 63:1897 64:4991 65:2294 66:4815 67:2727 68:1216 69:3591 70:1384 71:669 72:2744 74:2682 75:1426 76:658 77:2552 78:2002 79:2211 80:1828 81:1519 82:1186 83:967 84:1203 85:2431 86:564 87:1622 88:1108 89:2582 90:244 91:6675 92:1422 93:2442 94:2582 95:3687 96:961 97:339 98:956 99:958 100:82 101:1093 102:673 103:22575 104:3640 105:351 106:836 107:1829 108:680 109:3600 110:1805 111:2025 112:1574 113:1381 114:1443 115:1822 116:1815 117:1967 118:2185 119:1679 120:1032 121:1053 122:2304 123:1889 124:1522 125:1998 128:1384 129:882 130:559 131:1820 132:763 133:251 134:1118 135:273 136:590 137:822 138:2134 139:965 140:654 141:852 142:793 143:1103 144:922 145:284 146:1442 147:908 148:1880 149:1008 150:834 151:1266 152:1448 153:366 154:4518 155:894 156:2926 157:1061 158:707 159:1956 160:1637 161:1030 162:3021 163:873 164:1296 165:1185 166:529 167:1452 168:3559 169:489 170:4129 171:711 172:1810 173:2302 174:1037 175:998 176:2679 177:4146 178:2779 179:1424 180:2172 181:2389 182:2813 183:1097 184:2290 185:15584 186:3775 187:2522 188:3433 189:2065 190:8276 191:1498 192:10095 193:6871 194:5586 195:4198 196:3223 197:1916 198:6069 199:5946 200:7178 201:5171 202:10434 203:10204 204:4586 205:3100 206:3253 207:3295 208:3969 209:4315 210:3975 211:2009 212:3272 213:2965 214:1158 215:54 216:5846 217:2287 218:904 219:610 220:1944 221:950 222:1021 223:1407 End of report

1 0

Spoofer Report for NANOG for Oct 2019
by CAIDA Spoofer Project 08 Nov '19

08 Nov '19

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Oct 2019: ASN Name Fixed-By 18451 LESNET 2019-10-10 16787 CHARTER-16787-DC 2019-10-14 19230 NANOG 2019-10-28 8047 GCI 2019-10-29 2037 CSUFRESNO 2019-10-30 3356 LEVEL3 2019-10-30 7018 ATT-INTERNET4 2019-10-31 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Oct 2019: ASN Name First-Spoofed Last-Spoofed 40065 CNSERVERS 2016-05-01 2019-10-09 209 CENTURYLINK-US-LEGACY-QWEST 2016-08-16 2019-10-30 6128 CABLE-NET-1 2016-09-03 2019-10-29 27364 ACS-INTERNET 2016-09-27 2019-10-03 20412 CLARITY-TELECOM 2016-09-30 2019-10-25 6181 FUSE-NET 2016-10-10 2019-10-28 25787 ROWE-NETWORKS 2016-10-21 2019-10-27 11427 TWC-11427-TEXAS 2016-10-21 2019-10-27 174 COGENT-174 2016-10-21 2019-10-28 11537 ABILENE 2016-10-24 2019-10-24 32440 LONI 2016-11-03 2019-10-28 12083 WOW-INTERNET 2016-11-09 2019-10-29 22561 CENTURYLINK-LEGACY-LIGHTCORE 2016-11-27 2019-10-08 701 UUNET 2017-06-14 2019-10-06 63296 AMARILLO-WIRELESS 2017-09-01 2019-10-28 546 PARSONS-PGS-1 2017-11-20 2019-10-24 12222 AKAMAI 2018-02-14 2019-10-18 4201 ORST 2018-04-19 2019-10-09 11827 WSU 2018-05-07 2019-10-25 225 VIRGINIA 2018-06-18 2019-10-31 33452 RW 2018-09-19 2019-10-30 20448 VPNTRANET-LLC 2018-09-20 2019-10-28 14031 SCXY 2018-10-18 2019-10-25 63275 RADIOWIRE 2019-02-07 2019-10-14 15290 ALLST-15290 2019-04-09 2019-10-02 8047 GCI 2019-04-11 2019-10-29 10745 ARIN-ASH-CHA 2019-04-29 2019-10-28 54600 PEGTECHINC 2019-08-28 2019-10-11 262248 Metro MPLS 2019-10-09 2019-10-09 46375 AS-SONICTELECOM 2019-10-21 2019-10-21 30136 AD12 2019-10-24 2019-10-24 396073 MAJESTIC-HOSTING-01 2019-10-30 2019-10-30 46300 HSC-WAP 2019-10-30 2019-10-30 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Equinix Hong Kong
by Hank Disuko 07 Nov '19

07 Nov '19

Hello, Anybody from Equinix willing to help me out with an issue in Hong Kong? Please contact me off-list. Thanks. -Hank Disuko

1 0

FCC Takes Steps to Enforce Quality Standards for Rural Broadband
by Sean Donelan 07 Nov '19

07 Nov '19

There is just so much I want to make sarcastic comments about, but I worry about offending future potential employers (all of them). https://www.fcc.gov/document/fcc-takes-steps-enforce-quality-standards-rura… Description: FCC Takes Steps To Enforce Quality Standards For Rural Broadband Networks and Also Provides Additional Flexibility to Reduce Burden on Companies [...] In response to Petitions for Reconsideration and Applications for Review of an earlier bureau- level Performance Measure Order, the FCC today maintained the existing requirement that carriers conduct quarterly speed and latency tests between specified numbers of active subscribers’ homes and the Internet, and made targeted modifications to the testing procedures, including: - Modifying the schedule for commencing testing by basing it on the deployment obligations specific to each Connect America Fund support mechanism; - Implementing a new pre-testing period that will allow carriers to become familiar with testing procedures without facing a loss of support for failure to meet the requirements; - Allowing greater flexibility to carriers in identifying which customer locations should be tested and selecting the endpoints for testing broadband connections.

7 7

Re: Russian government’s disconnection test
by Scott Weeks 05 Nov '19

05 Nov '19

--- surfer(a)mauigateway.com wrote: From: "Scott Weeks" <surfer(a)mauigateway.com> Anyone got any technical info on how Russia plans to execute a disconnection test of the internet? ------------------------------------ Got crickets, so now I have to respond to my own post on what I just found out about it. Is that like talking to yourself? :) https://www.npr.org/2019/11/01/775366588/russian-law-takes-effect-that-give… "The "sovereign Internet law," as the government calls it, greatly enhances the Kremlin's control over the Web. It was passed earlier this year and allows Russia's government to cut off the Internet completely or from traffic outside Russia "in an emergency," as the BBC reported. But some of the applications could be more subtle, like the ability to block a single post." "The equipment would conduct what's known as "deep packet inspection," an advanced way to filter network traffic. "Regardless of what the government intends, some experts think it would be technically difficult for Russia to actually close its network if it wanted to, because of the sheer number of its international connections." "What I found was that there were hundreds of existing Internet exchange points in Russia, some of which have hundreds of participants...Many of them are international network providers, he says, so "basically it's challenging — if not impossible, I think — to completely isolate the Russian Internet." Belson says that the requirement for Internet service providers to install tracking software will very likely also be challenging in practice. He adds that it will be difficult to get hundreds of providers to deploy it and hard to coordinate that they're all filtering the same content. scott

12 13

Real World Contact at Charter/Spectrum Abuse?
by Conrad Rockenhaus 04 Nov '19

04 Nov '19

Hello, Does anyone know how to get in touch with a real world contact at Chrter/Spectrum Abuse? One of their users is causing significant issues for one of my dedicated hosting customers - from attempting to extort and blackmail them to uploading borderline to possible Child Pornography on on their WordPress. I just would like to actually contact a real world contact because I’m not even sure if their abuse email system is accepting my complaint. Thanks, Conrad -- Conrad Rockenhaus https://www.rockenhaus.com Cell: (254) 292-3350 Fax: (254) 875-0459

1 0