- Test - lists.nanog.org

Facebook IP Geolocation
by Peter Potvin 29 Apr '23

29 Apr '23

Hey all, Recently a customer reached out to us regarding an IP of ours in Canada that Facebook is somehow placing within China, despite our geolocation in other databases showing up correctly as they're ingesting our geofeeds as we had requested. Does anyone know which geolocation databases Facebook uses, and if possible a contact at Meta we can reach out to so that this can be investigated further? Thanks in advance! Regards, Peter Potvin | Executive Director ------------------------------------------------------------------------------ *Accuris Technologies Ltd.*

2 2

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 28 Apr '23

28 Apr '23

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 29 Apr, 2023 BGP Table (Global) as seen in Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 920274 Prefixes after maximum aggregation (per Origin AS): 349049 Deaggregation factor: 2.64 Unique aggregates announced (without unneeded subnets): 449049 Total ASes present in the Internet Routing Table: 74365 Prefixes per ASN: 12.38 Origin-only ASes present in the Internet Routing Table: 63787 Origin ASes announcing only one prefix: 26221 Transit ASes present in the Internet Routing Table: 10578 Transit-only ASes present in the Internet Routing Table: 435 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 55 Max AS path prepend of ASN (265020) 50 Prefixes from unregistered ASNs in the Routing Table: 1078 Number of instances of unregistered ASNs: 1078 Number of 32-bit ASNs allocated by the RIRs: 41758 Number of 32-bit ASNs visible in the Routing Table: 34510 Prefixes from 32-bit ASNs in the Routing Table: 170749 Number of bogon 32-bit ASNs visible in the Routing Table: 13 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 635 Number of addresses announced to Internet: 3060323968 Equivalent to 182 /8s, 104 /16s and 214 /24s Percentage of available address space announced: 82.7 Percentage of allocated address space announced: 82.7 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.6 Total number of prefixes smaller than registry allocations: 307168 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 243681 Total APNIC prefixes after maximum aggregation: 69357 APNIC Deaggregation factor: 3.51 Prefixes being announced from the APNIC address blocks: 237917 Unique aggregates announced from the APNIC address blocks: 97908 APNIC Region origin ASes present in the Internet Routing Table: 13396 APNIC Prefixes per ASN: 17.76 APNIC Region origin ASes announcing only one prefix: 3929 APNIC Region transit ASes present in the Internet Routing Table: 1802 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 26 Number of APNIC region 32-bit ASNs visible in the Routing Table: 8699 Number of APNIC addresses announced to Internet: 773438208 Equivalent to 46 /8s, 25 /16s and 187 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-151865 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 269219 Total ARIN prefixes after maximum aggregation: 122319 ARIN Deaggregation factor: 2.20 Prefixes being announced from the ARIN address blocks: 271854 Unique aggregates announced from the ARIN address blocks: 131001 ARIN Region origin ASes present in the Internet Routing Table: 19089 ARIN Prefixes per ASN: 14.24 ARIN Region origin ASes announcing only one prefix: 6963 ARIN Region transit ASes present in the Internet Routing Table: 1964 Average ARIN Region AS path length visible: 3.7 Max ARIN Region AS path length visible: 24 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4790 Number of ARIN addresses announced to Internet: 1283916288 Equivalent to 76 /8s, 135 /16s and 2 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 259353 Total RIPE prefixes after maximum aggregation: 122220 RIPE Deaggregation factor: 2.12 Prefixes being announced from the RIPE address blocks: 255356 Unique aggregates announced from the RIPE address blocks: 158069 RIPE Region origin ASes present in the Internet Routing Table: 28321 RIPE Prefixes per ASN: 9.02 RIPE Region origin ASes announcing only one prefix: 12059 RIPE Region transit ASes present in the Internet Routing Table: 3972 Average RIPE Region AS path length visible: 4.2 Max RIPE Region AS path length visible: 30 Number of RIPE region 32-bit ASNs visible in the Routing Table: 11156 Number of RIPE addresses announced to Internet: 717996416 Equivalent to 42 /8s, 203 /16s and 193 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 117852 Total LACNIC prefixes after maximum aggregation: 28563 LACNIC Deaggregation factor: 4.13 Prefixes being announced from the LACNIC address blocks: 117112 Unique aggregates announced from the LACNIC address blocks: 49293 LACNIC Region origin ASes present in the Internet Routing Table: 10991 LACNIC Prefixes per ASN: 10.66 LACNIC Region origin ASes announcing only one prefix: 2654 LACNIC Region transit ASes present in the Internet Routing Table: 2306 Average LACNIC Region AS path length visible: 5.0 Max LACNIC Region AS path length visible: 55 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8779 Number of LACNIC addresses announced to Internet: 176720384 Equivalent to 10 /8s, 136 /16s and 138 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-273820 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 29091 Total AfriNIC prefixes after maximum aggregation: 5811 AfriNIC Deaggregation factor: 5.01 Prefixes being announced from the AfriNIC address blocks: 37400 Unique aggregates announced from the AfriNIC address blocks: 12252 AfriNIC Region origin ASes present in the Internet Routing Table: 1739 AfriNIC Prefixes per ASN: 21.51 AfriNIC Region origin ASes announcing only one prefix: 616 AfriNIC Region transit ASes present in the Internet Routing Table: 333 Average AfriNIC Region AS path length visible: 4.9 Max AfriNIC Region AS path length visible: 30 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 1086 Number of AfriNIC addresses announced to Internet: 107835136 Equivalent to 6 /8s, 109 /16s and 111 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 9483 8706 40 CHINAMOBILE-CN China Mobile Communicati 7545 5730 787 693 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4863 4192 75 ERX-CERNET-BKB China Education and Rese 45899 4054 1877 47 VNPT-AS-VN VNPT Corp, VN 7713 3547 1043 65 TELKOMNET-AS-AP PT Telekomunikasi Indon 7552 3227 1331 21 VIETEL-AS-AP Viettel Group, VN 9498 2942 489 234 BBIL-AP BHARTI Airtel Ltd., IN 4766 2537 11251 591 KIXS-AS-KR Korea Telecom, KR 24560 2386 837 442 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd 45090 2184 1438 79 TENCENT-NET-AP Shenzhen Tencent Compute Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 8232 10772 2936 AMAZON-02, US 11492 4545 301 593 CABLEONE, US 7155 3975 281 51 VIASAT-SP-BACKBONE, US 22773 3588 3057 284 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3523 1320 64 SHAW, CA 16625 3171 1584 2361 AKAMAI-AS, US 749 3071 53111 2323 DNIC-AS-00749, US 396982 2635 3590 366 GOOGLE-CLOUD-PLATFORM, US 7018 2516 24151 1575 ATT-INTERNET4, US 30036 2501 361 449 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 7270 1706 140 UNI2-AS, ES 39891 4833 286 59 ALJAWWALSTC-AS, SA 20940 4080 3399 164 AKAMAI-ASN1, NL 8551 3889 370 37 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2951 2292 909 ROSTELECOM-AS, RU 9009 2668 249 1400 M247, RO 34984 2276 359 613 TELLCOM-AS, TR 6849 2018 307 18 UKRTELNET, UA 58224 1852 950 544 TCI, IR 13188 1607 100 18 TRIOLAN, UA Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 11251 3343 591 Uninet S.A. de C.V., MX 10620 3479 505 906 Telmex Colombia S.A., CO 13999 2334 358 617 Mega Cable, S.A. de C.V., MX 11830 2263 369 64 Instituto Costarricense de Electricidad 28573 1333 2324 240 Claro NXT Telecomunicacoes Ltda, BR 6503 1299 339 514 Axtel, S.A.B. de C.V., MX 3816 1293 760 170 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 1132 370 22 Telefonica del Peru S.A.A., PE 11664 1099 180 444 Techtel LMDS Comunicaciones Interactiva 26615 1035 2498 45 TIM SA, BR Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1585 393 19 LINKdotNET-AS, EG 24835 1553 533 30 RAYA-AS, EG 36992 1338 1518 275 ETISALAT-MISR, EG 36903 1242 550 99 MT-MPLS, MA 29571 1024 67 46 ORANGE-COTE-IVOIRE, CI 36935 875 520 42 Vodafone-, EG 6713 550 1861 34 IAM-AS, MA 15399 529 54 48 WANANCHI-, KE 37342 491 32 1 MOVITEL, MZ 24757 489 73 5 EthioNet-AS, ET Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 11251 3343 591 Uninet S.A. de C.V., MX 9808 9483 8706 40 CHINAMOBILE-CN China Mobile Communicati 16509 8232 10772 2936 AMAZON-02, US 12479 7270 1706 140 UNI2-AS, ES 7545 5730 787 693 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4863 4192 75 ERX-CERNET-BKB China Education and Rese 39891 4833 286 59 ALJAWWALSTC-AS, SA 11492 4545 301 593 CABLEONE, US 20940 4080 3399 164 AKAMAI-ASN1, NL 45899 4054 1877 47 VNPT-AS-VN VNPT Corp, VN Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 9483 9443 CHINAMOBILE-CN China Mobile Communications Grou 12479 7270 7130 UNI2-AS, ES 16509 8232 5296 AMAZON-02, US 7545 5730 5037 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4863 4788 ERX-CERNET-BKB China Education and Research Net 39891 4833 4774 ALJAWWALSTC-AS, SA 45899 4054 4007 VNPT-AS-VN VNPT Corp, VN 11492 4545 3952 CABLEONE, US 7155 3975 3924 VIASAT-SP-BACKBONE, US 20940 4080 3916 AKAMAI-ASN1, NL Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 3507 UNALLOCATED 5.105.166.0/24 213035 AS-SERVERION Serverion B.V., 33492 UNALLOCATED 8.6.184.0/23 33650 COMCAST-33650, US 33123 UNALLOCATED 8.10.69.0/24 11168 SCC, US 12169 UNALLOCATED 8.15.207.0/24 32787 PROLEXIC-TECHNOLOGIES-DDOS-M 53775 UNALLOCATED 8.20.88.0/24 7029 WINDSTREAM, US 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 396894 UNALLOCATED 8.28.201.0/24 46887 LIGHTOWER, US 394936 UNALLOCATED 8.33.224.0/24 22442 HOU-PHONOSCOPE, US 54338 UNALLOCATED 8.33.241.0/24 6461 ZAYO-6461, US Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.131.185.0/24 Origin: 174 COGENT-174, US 23.131.185.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.131.186.0/24 Origin: 174 COGENT-174, US 23.131.186.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.131.187.0/24 Origin: 174 COGENT-174, US 23.131.187.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.131.188.0/24 Origin: 174 COGENT-174, US 23.131.188.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.139.232.0/24 Origin: 211619 MAXKO, HR 23.139.232.0/24 Transit: 42864 GIGANET-HU GigaNet Internet Service Prov Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:14 /10:39 /11:103 /12:298 /13:578 /14:1195 /15:2046 /16:13453 /17:8234 /18:14280 /19:25215 /20:44283 /21:51252 /22:109692 /23:97666 /24:551168 /25:742 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 6330 7270 UNI2-AS, ES 8151 5196 11251 Uninet S.A. de C.V., MX 39891 3632 4833 ALJAWWALSTC-AS, SA 11492 3454 4545 CABLEONE, US 8551 3361 3889 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 6327 3332 3523 SHAW, CA 7155 3042 3975 VIASAT-SP-BACKBONE, US 22773 2652 3588 ASN-CXA-ALL-CCI-22773-RDC, US 30036 2158 2501 MEDIACOM-ENTERPRISE-BUSINESS, US 10620 2034 3479 Telmex Colombia S.A., CO Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1821 2:1290 3:175 4:5 5:4516 6:128 7:6 8:1548 9:1 11:172 12:1535 13:380 14:2340 15:299 16:182 17:371 18:417 20:256 21:4 22:188 23:6246 24:2594 25:6 27:2459 29:19 31:2493 32:81 34:12 35:109 36:1939 37:4658 38:4467 39:822 40:151 41:3932 42:1231 43:2345 44:307 45:16532 46:4291 47:363 49:1758 50:1844 51:573 52:1592 54:390 55:858 56:8 57:112 58:1780 59:1152 60:990 61:2453 62:2663 63:1925 64:5669 65:2331 66:4995 67:3007 68:1352 69:4130 70:1235 71:671 72:2983 74:2612 75:1447 76:615 77:2441 78:1815 79:3173 80:2109 81:1762 82:1488 83:1278 84:1531 85:2985 86:764 87:2011 88:1169 89:3668 90:613 91:7740 92:2064 93:2627 94:3604 95:3999 96:1321 97:335 98:1153 99:746 100:73 101:1077 102:2629 103:31289 104:4628 105:488 106:948 107:2524 108:1030 109:4421 110:2090 111:3137 112:2036 113:1645 114:1651 115:2016 116:1923 117:2534 118:2381 119:2017 120:1794 121:1112 122:2593 123:2216 124:1614 125:2500 128:1377 129:1064 130:1020 131:1996 132:814 133:422 134:1904 135:303 136:878 137:944 138:2556 139:1574 140:1250 141:1464 142:1443 143:1501 144:1164 145:348 146:1942 147:1574 148:2353 149:2208 150:876 151:1158 152:1817 153:490 154:4443 155:1436 156:1784 157:1305 158:1064 159:2306 160:2544 161:1531 162:3516 163:1522 164:1617 165:1715 166:1040 167:1725 168:3857 169:943 170:4585 171:874 172:3547 173:2937 174:1072 175:1177 176:3693 177:4599 178:3592 179:2152 180:2573 181:3434 182:3380 183:1975 184:2371 185:20183 186:4747 187:3967 188:4109 189:3562 190:9155 191:1438 192:10947 193:8876 194:7336 195:5161 196:3063 197:2356 198:5944 199:6103 200:8039 201:5875 202:10671 203:10238 204:4587 205:3672 206:4354 207:3458 208:4072 209:4860 210:4427 211:2498 212:4137 213:3586 214:1090 215:59 216:6636 217:2682 218:1294 219:577 220:2015 221:972 222:890 223:2185 End of report

1 0

Dormant space on blacklists, how can I resolve this?
by Matthew Crocker 28 Apr '23

28 Apr '23

Hello, I run Crocker Communications (AS7849) and have ARIN allocations of 161.77.0.0/16 & 66.59.48.0/20. The 66.58.48.0/20 space was used for our datacenter which shutdown a couple years ago. The space has mostly been dormant for the past couple years. I’m now starting to assign 66.59.[55-60].0/24 to a new group of residential FTTH customers. The customers are getting access denied messages from Akamai based websites. What can I do to get Akamai to unblock the 66.59.48.0/20 space. Is there a website I can look to research the reputation of the subnets? They haven’t been used in years so I would expect them to be pretty clean. Thanks -Matt

3 2

Looking for sales from comcast
by Brandon Zhi 27 Apr '23

27 Apr '23

Hello guys, Our company is looking for a way to get IP Transit from comcast, can someone give me the email of their sales team? Also, does anyone know about whether AT-Tand T-Mobile provide IP Transit or not? Best wishes,

1 0

NWS service assessment on 2021 Hurricane Ida
by Sean Donelan 27 Apr '23

27 Apr '23

Just published, buried in the after-action report on 2021 Hurricane Ida Commodity internet access is now part of life-safety. National Weather Service Service Assessment August-September 2021 Hurricane Ida April 2023 https://www.weather.gov/media/publications/assessments/Hurricane_Ida_Servic… [...] The Assessment Team found commodity internet access as important to the completion of the NWS mission as the AWIPS Wide Area Network (WAN) is to disseminating life-saving warnings. The lack of reliable, consistent internet access, to include sufficient bandwidth, would have led to mission failure during Ida if not for extraordinary measures taken by staff at WFO New Orleans/Baton Rouge and the LMRFC. WFO New Orleans/Baton Rouge and the LMRFC sent people to telework from a forecaster’s home, where they had reliable commodity internet, to provide IDSS. [...]

1 0

Standard DC rack rail distance, front to back question
by Chuck Church 27 Apr '23

27 Apr '23

Hey all. Question about standard 4 post racks. We bought some that are adjustable. Unfortunately, the posts are very flimsy, as these are some fancy cabinets with spacing on the sides for vertical patch panels, etc. We found that 2 post mounting of most Cisco devices (namely Cat 9500 1RU switches) are sagging quite bad. We're used to the new server type rails that extend to support most reasonable distances front rails to back for 4 post mounting. However, for a Cisco ASA1001, there aren't rails, but rather front and back 'ears' you use to hit both front and back posts. These would appear to not have any adjustability, the front to back post distance would seem to need to match the ears, I assume they don't adjust placement on the router much. Is there a 'standard' distance between front and back rails that devices usually adhere to? Googling didn't find an answer readily. These are 19" wide cabinets by the way. Thanks, Chuck

12 15

Upcoming Event: ABQNOG + New ISOC Course
by Nanog News 27 Apr '23

27 Apr '23

*Register Now for ABQNOG! * ABQNOG will take place next Thursday 4, May 2023 in Albuquerque, NM. ABQNOG allows industry professionals to network with others in the region and learn more about the latest technology trends. *REGISTER NOW* <https://www.nanog.org/events/abqnog-01/> *New ISOC Course: Fundamentals of Designing and Deploying Computer Networks* *Enroll in this New ISOC Moderated Course with an Instructor! * *This course will feature:* - Fundamentals of Networking - Ethernet - WIFI Technologies - Planning, Design, and Deployment of Simple LANs - How to Connect a LAN to the Internet *MORE INFO <https://nanog.org/events/fundamentals-of-designing-and-deploying-computer-n…>* *Join the Women in Tech Affinity Group! * *Have You Checked out our Online Community Discussion Threads? * The NANOG Affinity Groups are part of the Community Forum and allow our members to connect over shared interests. Did you know NANOG has a Women in Tech (WIT) Affinity group? Connect with other females in the tech industry and find mentorship and support while sharing your experiences. *MORE INFO <https://community.nanog.org/c/women-in-tech/33>*

1 0

Questionnaire on building real network configuration dataset
by 徐惠三 27 Apr '23

27 Apr '23

Dear NANOG community members, We are post graduate students majoring in computer network and we are now conducting a research project aimed at setting up an open dataset of real network configurations for experiment needs. We think it will be a contributing work for network verification evaluations. As part of this effort, we are reaching out to the community to request your help in filling out a short questionnaire. Your participation in this survey would be greatly appreciated and valuable for our research. It will take only about 2-3 minutes of your time and your responses will be kept strictly confidential. To participate in the survey, please click on the following link: https://docs.google.com/forms/d/1XPBxVH40UcQRMZf-H-ENj4AUZQDEw8xxQtllyylCl4… Please note that the survey will be open for one month, and we kindly ask you to complete it by the end of May. Thank you in advance for your participation and support of our research. Best regards, Huisan

2 1

BKA Wiesbaden - Abteilung Cybercrime (Not sure if this is a phishing E-mail or real...)
by Glen A. Pearce 27 Apr '23

27 Apr '23

Hi All: I received an E-mail with an attachment claiming something on my network is infected and that I should look at the attachment to find out what. Normally I think everything with an attachment is phishing to get me to run malware but: #1: The sites linked to in it seem to be legit German government websites based on Wikipedia entries that haven't changed in several years. (Looked at archive.org) #2: The attachment is a .txt file which I've normally assumed to be safe. #3: None of the usual dead giveaways that most phishing E-mails have. If it is a phishing E-mail it has got to be the cleverest one I've ever seen, though someone would try to be cleaver considering the target would be holders of IP blocks. I right clicked and checked properties to make sure the attached ip_addresses.txt file really is a text file and not some fancy trickery with reverse direction characters ( As seen on https://www.youtube.com/watch?v=ieQUy8YTbFU ) I tried poking around to see if there was some vulnerability in notepad (or some versions of it) that I didn't know about and only found a vulnerability in the text editor on Macs but nothing with Windows Notepad. The other thing I felt was a bit off is that the originating mail server is in Deutsche Telekom AG space and not IP Space registered to the German government. I'm thinking someone could rent some IP space from Deutsche Telekom AG with a connection to them in a data center and get the DNS delegated to them so they could set the reverse DNS to whatever they want. A lot of effort to try to look legit by coming out of Germany and having a government domain in the reverse DNS to look like a plausible legit outsourcing but again Network operators are the target audience so the normal tricks that work on the general public won't work with this group so I can see someone going that far. I'll attach the E-mail below with all headers. Has anyone else gotten these? Is there some security risk opening it in Windows Notepad that I don't know about or is it actually safe to open this? Return-Path: <abuse(a)cyber.bka.de> Delivered-To: [REDACTED] Received: from ezp08-pco.easydns.vpn ([10.5.10.148]) by ezb03-pco.easydns.vpn with LMTP id oCfeBO/yEmTokhgAzaFxkQ (envelope-from <abuse(a)cyber.bka.de>) for <[REDACTED]>; Thu, 16 Mar 2023 10:43:59 +0000 Received: from smtp.easymail.ca ([127.0.0.1]) by ezp08-pco.easydns.vpn with LMTP id WCB5BO/yEmSHdgEABcrfzg (envelope-from <abuse(a)cyber.bka.de>); Thu, 16 Mar 2023 10:43:59 +0000 Received: from localhost (localhost [127.0.0.1]) by smtp.easymail.ca (Postfix) with ESMTP id 0DC85557DF for <arin(a)ve4.ca>; Thu, 16 Mar 2023 10:43:59 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at ezp08-pco.easydns.vpn X-Spam-Flag: NO X-Spam-Score: 0.075 X-Spam-Level: X-Spam-Status: No, score=0.075 required=4 tests=[BAYES_00=-1.9, DEAR_SOMETHING=1.973, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from smtp.easymail.ca ([127.0.0.1]) by localhost (ezp08-pco.easydns.vpn [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d0XbPteZN-Io for <arin(a)ve4.ca>; Thu, 16 Mar 2023 10:43:55 +0000 (UTC) Received: from mail.cyber.bka.de (mail.cyber.bka.de [80.146.190.22]) by smtp.easymail.ca (Postfix) with ESMTPS id 0BC0C557DC for <arin(a)ve4.ca>; Thu, 16 Mar 2023 10:43:54 +0000 (UTC) Date: Thu, 16 Mar 2023 10:43:53 +0000 To: arin(a)ve4.ca From: BKA Wiesbaden - Abteilung Cybercrime <abuse(a)cyber.bka.de> Reply-To: BKA Wiesbaden - Abteilung Cybercrime <abuse(a)cyber.bka.de> Subject: Information regarding possible infection with malware Message-ID: <M47LJRZpjy1zymUJDKsNtrYm3RimkafZfZTqeZpauZA(a)emailapi.apps.cc.bka> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="b1_M47LJRZpjy1zymUJDKsNtrYm3RimkafZfZTqeZpauZA" Content-Transfer-Encoding: 8bit Dear Sir or Madam, As part of criminal proceedings, the German Federal Criminal Police Office (Bundeskriminalamt) has been informed about public IP addresses and timestamps which indicate a potential infection by the malicious software "Bumblebee" of one or more systems behind the respective public IP address. Within this letter, the BKA is providing you with the data of the respective IP addresses which have been assigned to you as the appropriate provider. You are asked to take appropriate measures to inform your customers about the potential infection. The following information will be provided: 1. Public IP address 2. Last known timestamp of contact by the public IP address 3. Possible system name or username on the potentially infected system The following information may be sent to your customers in addition to the message of concern. What should you do now? 1. Donâ€™t panic! 2. Check your systems/networks for possible infections. If other institutions have already made you aware of infected systems recently, follow the action guidelines which you may have received from them. 3. For further information on cleaning up infections, please visit the English website of the Federal Office for Information Security (BSI): https://www.bsi.bund.de/EN/Themen/Verbraucherinnen-und-Verbraucher/Informat… Yours sincerely, Bundeskriminalamt Wiesbaden -- Glen A. Pearce gap(a)ve4.ca Network Manager, Webmaster, Bookkeeper, Fashion Model and Shipping Clerk. Very Eager 4 Tees http://www.ve4.ca ARIN Handle VET-17

7 8

UltraDNS contact
by Matthew Crocker 26 Apr '23

26 Apr '23

Can anyone from UltraDNS contact me off list please? I have some security issues I’d like to discuss with you. Thanks -Matt

1 0