August 2018 - routing-wg - mailman.ripe.net

/24 prefix "hijackability" metric (defining "better than avg AS")
by nusenu 25 Sep '18

25 Sep '18

Hi, I'm currently estimating how "vulnerable" certain IP addresses are to BGP hijacking. To do that, I put them into different categories (multiple can apply): a) RPKI validity state is "NotFound" (no ROA) and IP located in a prefix shorter than /24 (IPv4) or /48 (IPv6) b) Valid ROA but weak maxlength c) Valid ROA with proper maxlength d) is announced in a /24 prefix (IPv4) or /48 (IPv6) e) = (c) + (d) In addition to the distinction of prefix length (/24 vs. </24) I'd like to subcategorize /24 prefixes into - /24 prefix located in "well" connected AS (attacker's BGP visibility is presumed lower than the authentic AS visibility) - /24 prefix located in "poorly" connected AS (better for the attacker) The question is: What is the threshold and metric to tell these two apart? I'm having 3 approaches in mind and wanted to hear if you have any preferences, opinions or other approaches: Approach 1: ----------- If avg AS PATH length as provided by [1] is <2 in more than 50% of given locations and DE-CIX and AMS-IX is among them, then consider it a "well connected AS" Approach 2: ----------- Use CAIDA's AS rank data and define the top 50% ASes as "well" connected Approach 3: ----------- define "well connected" as avg AS PATH as seen in [1] is shorter than the global avg. AS PATH length (defined in [2]) Also: If there are already well established metrics for "well connected" AS I'd be happy to hear about them. Currently I'm leaning towards approach 1 as it is probably the strictest and most conservative approach. I also might compare the results of all 3 approaches. thanks! nusenu [1] https://stat.ripe.net/docs/data_api#AsPathLength [2] http://thyme.rand.apnic.net/current/data-summary (the mean value would actually be more interesting than the avg) Because it is hard to collect ROV data and the list on https://rov.rpki.net is still short I do not try to include a ROV metric (yet).

3 4

Weekly Routing Table Report
by cscora＠apnic.net 31 Aug '18

31 Aug '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 01 Sep, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 713837 Prefixes after maximum aggregation (per Origin AS): 273774 Deaggregation factor: 2.61 Unique aggregates announced (without unneeded subnets): 342471 Total ASes present in the Internet Routing Table: 61678 Prefixes per ASN: 11.57 Origin-only ASes present in the Internet Routing Table: 53258 Origin ASes announcing only one prefix: 23227 Transit ASes present in the Internet Routing Table: 8420 Transit-only ASes present in the Internet Routing Table: 263 Average AS path length visible in the Internet Routing Table: 4.0 Max AS path length visible: 34 Max AS path prepend of ASN ( 30873) 32 Prefixes from unregistered ASNs in the Routing Table: 59 Number of instances of unregistered ASNs: 59 Number of 32-bit ASNs allocated by the RIRs: 23898 Number of 32-bit ASNs visible in the Routing Table: 19283 Prefixes from 32-bit ASNs in the Routing Table: 80844 Number of bogon 32-bit ASNs visible in the Routing Table: 18 Special use prefixes present in the Routing Table: 2 Prefixes being announced from unallocated address space: 321 Number of addresses announced to Internet: 2855523908 Equivalent to 170 /8s, 51 /16s and 214 /24s Percentage of available address space announced: 77.1 Percentage of allocated address space announced: 77.1 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.0 Total number of prefixes smaller than registry allocations: 238618 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 194522 Total APNIC prefixes after maximum aggregation: 55387 APNIC Deaggregation factor: 3.51 Prefixes being announced from the APNIC address blocks: 192645 Unique aggregates announced from the APNIC address blocks: 79290 APNIC Region origin ASes present in the Internet Routing Table: 9034 APNIC Prefixes per ASN: 21.32 APNIC Region origin ASes announcing only one prefix: 2537 APNIC Region transit ASes present in the Internet Routing Table: 1348 Average APNIC Region AS path length visible: 4.0 Max APNIC Region AS path length visible: 26 Number of APNIC region 32-bit ASNs visible in the Routing Table: 4001 Number of APNIC addresses announced to Internet: 767494915 Equivalent to 45 /8s, 191 /16s and 11 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-139577 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 212189 Total ARIN prefixes after maximum aggregation: 100386 ARIN Deaggregation factor: 2.11 Prefixes being announced from the ARIN address blocks: 211909 Unique aggregates announced from the ARIN address blocks: 100560 ARIN Region origin ASes present in the Internet Routing Table: 18219 ARIN Prefixes per ASN: 11.63 ARIN Region origin ASes announcing only one prefix: 6756 ARIN Region transit ASes present in the Internet Routing Table: 1808 Average ARIN Region AS path length visible: 3.6 Max ARIN Region AS path length visible: 23 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2419 Number of ARIN addresses announced to Internet: 1101112992 Equivalent to 65 /8s, 161 /16s and 166 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 195173 Total RIPE prefixes after maximum aggregation: 93190 RIPE Deaggregation factor: 2.09 Prefixes being announced from the RIPE address blocks: 191486 Unique aggregates announced from the RIPE address blocks: 113483 RIPE Region origin ASes present in the Internet Routing Table: 25451 RIPE Prefixes per ASN: 7.52 RIPE Region origin ASes announcing only one prefix: 11469 RIPE Region transit ASes present in the Internet Routing Table: 3514 Average RIPE Region AS path length visible: 4.1 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 7357 Number of RIPE addresses announced to Internet: 714109312 Equivalent to 42 /8s, 144 /16s and 113 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 92401 Total LACNIC prefixes after maximum aggregation: 20612 LACNIC Deaggregation factor: 4.48 Prefixes being announced from the LACNIC address blocks: 93809 Unique aggregates announced from the LACNIC address blocks: 40895 LACNIC Region origin ASes present in the Internet Routing Table: 7499 LACNIC Prefixes per ASN: 12.51 LACNIC Region origin ASes announcing only one prefix: 2072 LACNIC Region transit ASes present in the Internet Routing Table: 1417 Average LACNIC Region AS path length visible: 4.7 Max LACNIC Region AS path length visible: 26 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 5047 Number of LACNIC addresses announced to Internet: 172077344 Equivalent to 10 /8s, 65 /16s and 177 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 19492 Total AfriNIC prefixes after maximum aggregation: 4149 AfriNIC Deaggregation factor: 4.70 Prefixes being announced from the AfriNIC address blocks: 23667 Unique aggregates announced from the AfriNIC address blocks: 7969 AfriNIC Region origin ASes present in the Internet Routing Table: 1185 AfriNIC Prefixes per ASN: 19.97 AfriNIC Region origin ASes announcing only one prefix: 393 AfriNIC Region transit ASes present in the Internet Routing Table: 240 Average AfriNIC Region AS path length visible: 4.4 Max AfriNIC Region AS path length visible: 26 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 459 Number of AfriNIC addresses announced to Internet: 100272384 Equivalent to 5 /8s, 250 /16s and 9 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 4680 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4426 478 470 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 2986 1154 90 VIETEL-AS-AP Viettel Group, VN 4766 2825 11135 768 KIXS-AS-KR Korea Telecom, KR 9829 2813 1495 541 BSNL-NIB National Internet Backbone, IN 45899 2712 1646 158 VNPT-AS-VN VNPT Corp, VN 9394 2549 4907 32 CTTNET China TieTong Telecommunications 17974 2262 962 71 TELKOMNET-AS2-AP PT Telekomunikasi Indo 9808 2255 8699 26 CMNET-GD Guangdong Mobile Communication 4755 2121 417 204 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3455 1324 83 SHAW - Shaw Communications Inc., CA 11492 3354 249 439 CABLEONE - CABLE ONE, INC., US 22773 3226 2970 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 16509 2279 4809 778 AMAZON-02 - Amazon.com, Inc., US 18566 2166 405 109 MEGAPATH5-US - MegaPath Corporation, US 20115 2146 2677 506 CHARTER-NET-HKY-NC - Charter Communicat 209 2042 5085 605 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 30036 2032 345 142 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 16625 2004 1051 1469 AKAMAI-AS - Akamai Technologies, Inc., 7018 1771 20199 1282 ATT-INTERNET4 - AT&T Services, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 4733 1613 125 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 8551 3081 378 44 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2560 620 1900 AKAMAI-ASN1, US 12389 2043 1893 733 ROSTELECOM-AS, RU 34984 2008 335 510 TELLCOM-AS, TR 9121 1819 1692 19 TTNET, TR 13188 1604 100 43 TRIOLAN, UA 6849 1241 355 21 UKRTELNET, UA 8402 1210 544 14 CORBINA-AS OJSC "Vimpelcom", RU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5208 3349 607 Uninet S.A. de C.V., MX 10620 3490 532 455 Telmex Colombia S.A., CO 11830 2652 369 78 Instituto Costarricense de Electricidad 6503 1675 444 65 Axtel, S.A.B. de C.V., MX 7303 1430 953 206 Telecom Argentina S.A., AR 28573 1094 2231 192 CLARO S.A., BR 3816 1022 510 116 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 928 126 84 Alestra, S. de R.L. de C.V., MX 18881 916 1082 27 TELEFÔNICA BRASIL S.A, BR 6147 884 377 31 Telefonica del Peru S.A.A., PE Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1196 396 48 LINKdotNET-AS, EG 37611 896 107 9 Afrihost, ZA 36903 778 391 137 MT-MPLS, MA 36992 746 1411 41 ETISALAT-MISR, EG 24835 641 818 18 RAYA-AS, EG 8452 578 1728 14 TE-AS TE-AS, EG 37492 474 470 57 ORANGE-, TN 29571 461 70 11 ORANGE-COTE-IVOIRE, CI 37342 386 32 1 MOVITEL, MZ 23889 376 231 15 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5208 3349 607 Uninet S.A. de C.V., MX 12479 4733 1613 125 UNI2-AS, ES 4538 4680 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4426 478 470 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 203 20 ALJAWWALSTC-AS, SA 10620 3490 532 455 Telmex Colombia S.A., CO 6327 3455 1324 83 SHAW - Shaw Communications Inc., CA 11492 3354 249 439 CABLEONE - CABLE ONE, INC., US 22773 3226 2970 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 8551 3081 378 44 BEZEQ-INTERNATIONAL-AS Bezeqint Interne Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 12479 4733 4608 UNI2-AS, ES 4538 4680 4606 ERX-CERNET-BKB China Education and Research Net 7545 4426 3956 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3455 3372 SHAW - Shaw Communications Inc., CA 22773 3226 3077 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 3081 3037 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 10620 3490 3035 Telmex Colombia S.A., CO 11492 3354 2915 CABLEONE - CABLE ONE, INC., US 7552 2986 2896 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 64500 DOCUMENT 45.43.56.0/24 135391 AOFEI-HK AOFEI DATA INTERNATIO 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 4200003000 PRIVATE 47.89.98.0/24 45102 CNNIC-ALIBABA-CN-NET-AP Alibab 64513 PRIVATE 62.150.101.0/24 9155 QNET Kuwait, KW 65537 DOCUMENT 62.162.120.0/24 6821 MT-AS-OWN bul. Orce Nikolov bb 64121 UNALLOCATED 98.159.9.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64121 UNALLOCATED 98.159.12.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64140 UNALLOCATED 98.159.14.0/24 64121 UNKNOWN Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 100.66.224.0/19 209 CENTURYLINK-US-LEGACY-QWEST - Qwest Communicati 198.18.1.19/32 7497 CSTNET-AS-AP Computer Network Information Cente Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.136.0/24 37500 -Reserved AS-, ZZ 41.76.138.0/24 37500 -Reserved AS-, ZZ 41.76.139.0/24 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ 41.78.92.0/22 14988 BTC-GATE1, BW 41.78.180.0/23 37265 -Reserved AS-, ZZ 43.251.20.0/22 9381 WTT-AS-AP WTT HK Limited, HK 45.121.32.0/22 134356 UNKNOWN Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:14 /9:11 /10:36 /11:99 /12:292 /13:567 /14:1094 /15:1893 /16:13357 /17:7938 /18:13818 /19:25388 /20:39498 /21:45678 /22:88576 /23:72247 /24:401135 /25:814 /26:617 /27:634 /28:35 /29:20 /30:19 /31:4 /32:53 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 3485 4733 UNI2-AS, ES 6327 3244 3455 SHAW - Shaw Communications Inc., CA 39891 2946 3778 ALJAWWALSTC-AS, SA 11492 2691 3354 CABLEONE - CABLE ONE, INC., US 8551 2543 3081 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 22773 2493 3226 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 18566 2060 2166 MEGAPATH5-US - MegaPath Corporation, US 11830 2001 2652 Instituto Costarricense de Electricidad y Telec 30036 1783 2032 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 10620 1581 3490 Telmex Colombia S.A., CO Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1617 2:830 4:18 5:2832 6:43 7:1 8:1127 12:1873 13:210 14:1798 15:32 16:3 17:192 18:54 20:51 23:2455 24:2387 25:2 27:2493 31:1974 32:88 35:29 36:526 37:2904 38:1494 39:258 40:117 41:3201 42:705 43:1954 44:121 45:5447 46:3131 47:207 49:1341 50:1051 51:318 52:1088 54:368 55:1 56:11 57:38 58:1629 59:994 60:408 61:2116 62:1893 63:1790 64:5068 65:2205 66:4710 67:2669 68:1150 69:3341 70:1156 71:581 72:2215 74:2734 75:419 76:464 77:1642 78:1688 79:2255 80:1582 81:1399 82:1063 83:779 84:1034 85:2001 86:567 87:1349 88:908 89:2341 90:211 91:6424 92:1263 93:2380 94:2427 95:2961 96:935 97:355 98:925 99:135 100:86 101:989 102:192 103:18531 104:3527 105:216 106:771 107:1773 108:709 109:3316 110:1647 111:1794 112:1343 113:1304 114:1128 115:1616 116:1660 117:1776 118:2219 119:1656 120:1029 121:1041 122:2424 123:1729 124:1446 125:1923 128:1120 129:682 130:493 131:1653 132:730 133:191 134:1026 135:235 136:507 137:651 138:1926 139:680 140:479 141:741 142:847 143:1009 144:810 145:479 146:1241 147:738 148:1649 149:768 150:761 151:1101 152:828 153:323 154:1660 155:799 156:1441 157:801 158:660 159:1850 160:1324 161:825 162:2645 163:605 164:1083 165:1551 166:446 167:1208 168:3212 169:834 170:3875 171:491 172:1011 173:2096 174:983 175:795 176:2033 177:4024 178:2490 179:1283 180:2182 181:2419 182:2568 183:1248 184:1056 185:13986 186:3535 187:2470 188:2890 189:2041 190:8215 191:1358 192:9810 193:6119 194:5018 195:3988 196:2738 197:1613 198:5584 199:5931 200:7285 201:5005 202:10265 203:10285 204:4573 205:2892 206:3205 207:3210 208:3927 209:4074 210:3889 211:1997 212:3041 213:2817 214:1038 215:55 216:5999 217:2130 218:861 219:566 220:1811 221:997 222:974 223:1376 End of report

1 0

A measurement of the RPKI adoption of the >3k Tor prefixes
by nusenu 25 Aug '18

25 Aug '18

Hi, since I used your data, API (RIPEstat) and tools (RPKI validator) I figured I send you also my IRR and RPKI measurement results: https://medium.com/@nusenu/how-vulnerable-is-the-tor-network-to-bgp-hijacki… Thanks for making RIPEstat available for everyone. If anyone can comment on how hard it is to get a ROA for a legacy IP block for a RIPE member without converting it to ALLOCATED PA block first, that would be interesting. Also: is there any reason why a RIPE member would prefer to retain the LEGACY status? (instead of converting it) thanks, nusenu btw: While collecting the IRR data I stumbled on a problem with RIPEstat where it would say there is no IRR entry but NTTCOM actually had it (Christian is looking into it). https://stat.ripe.net/data/prefix-routing-consistency/data.json?resource=36… (if you change it to /17 the expected record will appear) "routes": [ { "origin": 10013, "irr_sources": [], <<<<------------------- "in_whois": false, <<<<------------------- "asn_name": "FBDC - FreeBit Co.,Ltd.", "prefix": "36.55.0.0/16", <<<<------------------- "in_bgp": true } vs whois -h rr.ntt.net 36.55.0.0/16 route: 36.55.0.0/16 descr: FreeBit CIDR origin: AS10013 notify: noc(a)FreeBit.NET mnt-by: MAINT-FBDC changed: y.ishizaki(a)FreeBit.NET 20120821 source: NTTCOM -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

2 2

Weekly Routing Table Report
by cscora＠apnic.net 24 Aug '18

24 Aug '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 25 Aug, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 711713 Prefixes after maximum aggregation (per Origin AS): 273276 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 341846 Total ASes present in the Internet Routing Table: 61612 Prefixes per ASN: 11.55 Origin-only ASes present in the Internet Routing Table: 53212 Origin ASes announcing only one prefix: 23205 Transit ASes present in the Internet Routing Table: 8400 Transit-only ASes present in the Internet Routing Table: 260 Average AS path length visible in the Internet Routing Table: 4.0 Max AS path length visible: 34 Max AS path prepend of ASN ( 30873) 32 Prefixes from unregistered ASNs in the Routing Table: 55 Number of instances of unregistered ASNs: 55 Number of 32-bit ASNs allocated by the RIRs: 23808 Number of 32-bit ASNs visible in the Routing Table: 19184 Prefixes from 32-bit ASNs in the Routing Table: 80326 Number of bogon 32-bit ASNs visible in the Routing Table: 20 Special use prefixes present in the Routing Table: 2 Prefixes being announced from unallocated address space: 272 Number of addresses announced to Internet: 2857455684 Equivalent to 170 /8s, 81 /16s and 80 /24s Percentage of available address space announced: 77.2 Percentage of allocated address space announced: 77.2 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.0 Total number of prefixes smaller than registry allocations: 237793 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 193767 Total APNIC prefixes after maximum aggregation: 55359 APNIC Deaggregation factor: 3.50 Prefixes being announced from the APNIC address blocks: 191973 Unique aggregates announced from the APNIC address blocks: 79241 APNIC Region origin ASes present in the Internet Routing Table: 9019 APNIC Prefixes per ASN: 21.29 APNIC Region origin ASes announcing only one prefix: 2534 APNIC Region transit ASes present in the Internet Routing Table: 1342 Average APNIC Region AS path length visible: 4.0 Max APNIC Region AS path length visible: 26 Number of APNIC region 32-bit ASNs visible in the Routing Table: 3981 Number of APNIC addresses announced to Internet: 767386627 Equivalent to 45 /8s, 189 /16s and 100 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-139577 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 211629 Total ARIN prefixes after maximum aggregation: 100126 ARIN Deaggregation factor: 2.11 Prefixes being announced from the ARIN address blocks: 211412 Unique aggregates announced from the ARIN address blocks: 100195 ARIN Region origin ASes present in the Internet Routing Table: 18229 ARIN Prefixes per ASN: 11.60 ARIN Region origin ASes announcing only one prefix: 6758 ARIN Region transit ASes present in the Internet Routing Table: 1805 Average ARIN Region AS path length visible: 3.6 Max ARIN Region AS path length visible: 23 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2415 Number of ARIN addresses announced to Internet: 1103319200 Equivalent to 65 /8s, 195 /16s and 80 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 195094 Total RIPE prefixes after maximum aggregation: 93057 RIPE Deaggregation factor: 2.10 Prefixes being announced from the RIPE address blocks: 191399 Unique aggregates announced from the RIPE address blocks: 113352 RIPE Region origin ASes present in the Internet Routing Table: 25436 RIPE Prefixes per ASN: 7.52 RIPE Region origin ASes announcing only one prefix: 11467 RIPE Region transit ASes present in the Internet Routing Table: 3523 Average RIPE Region AS path length visible: 4.1 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 7324 Number of RIPE addresses announced to Internet: 714069376 Equivalent to 42 /8s, 143 /16s and 213 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 91736 Total LACNIC prefixes after maximum aggregation: 20544 LACNIC Deaggregation factor: 4.47 Prefixes being announced from the LACNIC address blocks: 93193 Unique aggregates announced from the LACNIC address blocks: 40829 LACNIC Region origin ASes present in the Internet Routing Table: 7458 LACNIC Prefixes per ASN: 12.50 LACNIC Region origin ASes announcing only one prefix: 2060 LACNIC Region transit ASes present in the Internet Routing Table: 1398 Average LACNIC Region AS path length visible: 4.7 Max LACNIC Region AS path length visible: 26 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 5006 Number of LACNIC addresses announced to Internet: 172006176 Equivalent to 10 /8s, 64 /16s and 155 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 19431 Total AfriNIC prefixes after maximum aggregation: 4143 AfriNIC Deaggregation factor: 4.69 Prefixes being announced from the AfriNIC address blocks: 23464 Unique aggregates announced from the AfriNIC address blocks: 7986 AfriNIC Region origin ASes present in the Internet Routing Table: 1183 AfriNIC Prefixes per ASN: 19.83 AfriNIC Region origin ASes announcing only one prefix: 386 AfriNIC Region transit ASes present in the Internet Routing Table: 235 Average AfriNIC Region AS path length visible: 4.4 Max AfriNIC Region AS path length visible: 29 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 458 Number of AfriNIC addresses announced to Internet: 100231168 Equivalent to 5 /8s, 249 /16s and 104 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 4681 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4421 478 471 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 2989 1154 86 VIETEL-AS-AP Viettel Group, VN 4766 2825 11135 768 KIXS-AS-KR Korea Telecom, KR 9829 2813 1495 541 BSNL-NIB National Internet Backbone, IN 45899 2569 1638 157 VNPT-AS-VN VNPT Corp, VN 9394 2541 4907 32 CTTNET China TieTong Telecommunications 17974 2262 962 71 TELKOMNET-AS2-AP PT Telekomunikasi Indo 9808 2252 8699 26 CMNET-GD Guangdong Mobile Communication 4755 2118 417 204 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3448 1324 82 SHAW - Shaw Communications Inc., CA 11492 3268 253 411 CABLEONE - CABLE ONE, INC., US 22773 3228 2968 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 16509 2271 4808 773 AMAZON-02 - Amazon.com, Inc., US 18566 2166 405 109 MEGAPATH5-US - MegaPath Corporation, US 20115 2141 2652 505 CHARTER-NET-HKY-NC - Charter Communicat 209 2038 5085 604 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 30036 2028 345 142 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 16625 1995 1043 1463 AKAMAI-AS - Akamai Technologies, Inc., 7018 1774 20210 1283 ATT-INTERNET4 - AT&T Services, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 4704 1613 125 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 8551 3099 378 44 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2546 615 1892 AKAMAI-ASN1, US 12389 2042 1893 732 ROSTELECOM-AS, RU 34984 2015 335 507 TELLCOM-AS, TR 9121 1821 1692 19 TTNET, TR 13188 1604 100 43 TRIOLAN, UA 6849 1241 355 21 UKRTELNET, UA 8402 1205 544 14 CORBINA-AS OJSC "Vimpelcom", RU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 4884 3349 608 Uninet S.A. de C.V., MX 10620 3487 531 459 Telmex Colombia S.A., CO 11830 2657 369 78 Instituto Costarricense de Electricidad 6503 1665 444 63 Axtel, S.A.B. de C.V., MX 7303 1429 952 205 Telecom Argentina S.A., AR 28573 1084 2229 181 CLARO S.A., BR 3816 1022 510 117 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 929 126 85 Alestra, S. de R.L. de C.V., MX 18881 915 1080 32 TELEFÔNICA BRASIL S.A, BR 6147 907 377 31 Telefonica del Peru S.A.A., PE Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1184 396 48 LINKdotNET-AS, EG 37611 895 107 9 Afrihost, ZA 36903 778 391 137 MT-MPLS, MA 36992 745 1411 40 ETISALAT-MISR, EG 24835 641 818 18 RAYA-AS, EG 8452 591 1728 14 TE-AS TE-AS, EG 37492 474 470 57 ORANGE-, TN 29571 463 70 13 ORANGE-COTE-IVOIRE, CI 37342 386 32 1 MOVITEL, MZ 23889 375 231 15 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 4884 3349 608 Uninet S.A. de C.V., MX 12479 4704 1613 125 UNI2-AS, ES 4538 4681 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4421 478 471 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 203 20 ALJAWWALSTC-AS, SA 10620 3487 531 459 Telmex Colombia S.A., CO 6327 3448 1324 82 SHAW - Shaw Communications Inc., CA 11492 3268 253 411 CABLEONE - CABLE ONE, INC., US 22773 3228 2968 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 8551 3099 378 44 BEZEQ-INTERNATIONAL-AS Bezeqint Interne Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4538 4681 4607 ERX-CERNET-BKB China Education and Research Net 12479 4704 4579 UNI2-AS, ES 7545 4421 3950 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3448 3366 SHAW - Shaw Communications Inc., CA 22773 3228 3079 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 3099 3055 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 10620 3487 3028 Telmex Colombia S.A., CO 7552 2989 2903 VIETEL-AS-AP Viettel Group, VN 11492 3268 2857 CABLEONE - CABLE ONE, INC., US Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 64500 DOCUMENT 45.43.56.0/24 135391 AOFEI-HK AOFEI DATA INTERNATIO 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 64513 PRIVATE 62.150.101.0/24 9155 QNET Kuwait, KW 65537 DOCUMENT 62.162.120.0/24 6821 MT-AS-OWN bul. Orce Nikolov bb 64121 UNALLOCATED 98.159.9.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64121 UNALLOCATED 98.159.12.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64140 UNALLOCATED 98.159.14.0/24 64121 UNKNOWN 4259905537 PRIVATE 103.250.48.0/24 132917 YELLOWPAGESGROUP-AS-AP Yellow Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 100.66.224.0/19 209 CENTURYLINK-US-LEGACY-QWEST - Qwest Communicati 198.18.1.19/32 7497 CSTNET-AS-AP Computer Network Information Cente Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.136.0/24 37500 -Reserved AS-, ZZ 41.76.138.0/24 37500 -Reserved AS-, ZZ 41.76.139.0/24 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ 41.78.92.0/22 14988 BTC-GATE1, BW 41.78.180.0/23 37265 -Reserved AS-, ZZ 43.251.20.0/22 9381 WTT-AS-AP WTT HK Limited, HK 45.121.32.0/22 134356 UNKNOWN Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:14 /9:11 /10:36 /11:99 /12:291 /13:570 /14:1096 /15:1900 /16:13370 /17:7932 /18:13806 /19:25374 /20:39278 /21:45530 /22:88363 /23:71758 /24:400129 /25:799 /26:603 /27:624 /28:35 /29:20 /30:19 /31:4 /32:52 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 3455 4704 UNI2-AS, ES 6327 3238 3448 SHAW - Shaw Communications Inc., CA 39891 2946 3778 ALJAWWALSTC-AS, SA 11492 2623 3268 CABLEONE - CABLE ONE, INC., US 8551 2561 3099 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 22773 2497 3228 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 18566 2060 2166 MEGAPATH5-US - MegaPath Corporation, US 11830 2005 2657 Instituto Costarricense de Electricidad y Telec 30036 1780 2028 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 10620 1580 3487 Telmex Colombia S.A., CO Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1616 2:827 4:18 5:2861 6:43 7:1 8:1125 12:1871 13:210 14:1796 15:32 16:3 17:191 18:54 20:51 23:2489 24:2341 25:2 27:2478 31:2012 32:88 35:29 36:522 37:2896 38:1495 39:257 40:118 41:3191 42:702 43:1975 44:120 45:5363 46:3116 47:199 49:1339 50:1054 51:318 52:1088 54:368 55:1 56:12 57:39 58:1629 59:992 60:406 61:2113 62:1870 63:1790 64:5078 65:2201 66:4716 67:2673 68:1147 69:3306 70:1157 71:582 72:2191 74:2724 75:416 76:464 77:1650 78:1690 79:2253 80:1569 81:1393 82:1065 83:782 84:1034 85:1998 86:561 87:1364 88:908 89:2355 90:214 91:6434 92:1260 93:2377 94:2406 95:2961 96:901 97:355 98:935 99:133 100:84 101:989 102:184 103:18502 104:3533 105:215 106:769 107:1769 108:710 109:3324 110:1645 111:1800 112:1337 113:1306 114:1130 115:1646 116:1655 117:1775 118:2214 119:1659 120:1015 121:1043 122:2423 123:1725 124:1447 125:1920 128:1129 129:671 130:494 131:1620 132:732 133:190 134:1003 135:232 136:507 137:651 138:1942 139:677 140:475 141:737 142:851 143:1000 144:810 145:476 146:1230 147:735 148:1643 149:757 150:756 151:1097 152:825 153:323 154:1489 155:800 156:1464 157:799 158:657 159:1840 160:1312 161:810 162:2633 163:605 164:1077 165:1552 166:462 167:1257 168:3150 169:831 170:3859 171:492 172:1007 173:2087 174:971 175:796 176:2029 177:4013 178:2501 179:1269 180:2180 181:2412 182:2350 183:1254 184:1062 185:13979 186:3538 187:2425 188:2899 189:2000 190:8157 191:1354 192:9803 193:6103 194:5017 195:3992 196:2743 197:1612 198:5573 199:5914 200:7435 201:4876 202:10293 203:10269 204:4571 205:2903 206:3197 207:3209 208:3933 209:4027 210:3884 211:1998 212:3044 213:2818 214:1037 215:56 216:5999 217:2130 218:860 219:567 220:1807 221:998 222:971 223:1372 End of report

1 0

The Ongoing Summer of Hijacks: MNT-SERVERSGET / dnsget.top
by Ronald F. Guilmette 23 Aug '18

23 Aug '18

The entire set of objects in the RIPE WHOIS data base that are currently registered with mnt-by: MNT-SERVERSGET is listed here: https://pastebin.com/raw/GiYWxHMh Among this set of objects there are 235 separate route objects. Evidence indicates persuasively that some sizable fraction of these RIPE- registered route objects are fradulent and are simply there to provide cover for multiple IPv4 address block hijacks. The presence of these objects in the data base permits the following set of ASNs to claim that they are acting "legitimately" even as they route these hijacked blocks: AS9009 M247 Ltd (UK) AS43350 NFOrce Internet Sevices (Netherlands) AS57129 Optibit, LLC (Russia) AS197328 Istanbuldc Veri Merkezi Ltd. Sti (Turkey) AS202287 Men Danil Valentinovich (Russia) AS204895 Santa Plus, LLC (Russia) The total amount of IPv4 space encompassed within the set of route objects registered with mnt-by: MNT-SERVERSGET at the present time amounts to eight hundred and fifty nine (859) /24 blocks. Of these, only three hundred and five (305) actually have correctly functioning and properly delegated reverse DNS at the present time, and even among those, only two hundred and two (202) have functioning reverse DNS delegations to the prefered name servers of MNT-SERVERSGET, which is to say the name servers ns5.dnsget.top and ns6.dnsget.top. The bottom line is that it appears that, at the present time, something less than 1/4 of all of the IPv4 address space currently registered in the RIPE data base (via route objects) by and to MNT-SERVERSGET is space for which a plausible case could be made that the blocks in question are actually legitimately assigned to and/or under the legitimate control of whoever or whatever is MNT-SERVERSGET. The other 3/4ths of the IPv4 space in question has provenance which is, at best, dubious. Due to its use of little country-of-registration flags for each IP address block, the web site bgp.he.net provides the most visually obvious indications of at least two of the specific block hijacks in this case, specifically the hijacks of 27.103.192.0/19 and 36.0.192.0/19 by AS57129: https://bgp.he.net/AS57129#_prefixes Based upon the foregoing, I hereby respectfully request RIPE NCC to undertake an immediate and conmprehensive review of all objects in the data base that are currently registered with mnt-by: MNT-SERVERSGET. Additionally, I also respectfully request RIPE NCC to publish the results of this review to the mailing lists of the Database Working Group and the Anti-Abuse Working Group. The charters of both of these Working Groups are directly relevant to this issue, and there exists neither need nor reason to simply sweep this issue quietly under the carpet, as has been done in previous and similar cases. Cases such as this, and the two others of similar magnitude that I have publicly disclosed just this summer, affect the operation of, the stability of, and the continued enjoyment of the entire planetary Internet and its billions of users. Despite its status as a strictly private corporation, RIPE has a public responsibility, not only to handle such incidents responsibly and competently, but to show the world that it is ready, willing, and able to do so. The responses of RIPE to prior instances of this exact type of bad behavior have been largely or entirely cloaked in secrecy, presumably to protect the guilty. This longstanding and antiquated tradition of omerta within the RIPE community is unambiguously counterproductive to the goal of a well-managed and properly fuctioning Internet. Just as importantly, it naturally gives rise to unavoidable questions about the actual competence of, and capabilities of RIPE NCC staff as they attempt to deal with such incidents. I personally feel that RIPE NCC staff are doing the best they can when responding to incidents such as this, but the tradition of playing "hide the ball" with respect to their actions in such cases reflects badly on them, and badly on RIPE generally. It certainly raises doubts about RIPE's claim to authority over even its own data base. Lastly, I respectfully request both the RIPE Executive Board and the RIPE membership to make plain and explicit their respective intentions with regards to the various bad actors that have been caught, and that may in future be caught red handed engaging in the deliberate and premeditated corruption of the RIPE data base. To date, the policies an actions that RIPE applies, or which RIPE may apply to such bad actors have been shrouded in apparently deliberate secrecy and mystery. To put this request in more concrete terms, I would like to know if RIPE and the Executive Board actually and deliberately intend to take no action whatsoever with respect to the ongoing RIPE memberships of clearly identified bad actors, specifically, in this case, whatever persons or entities are currently hiding behind the RIPE WHOIS handle MNT-SERVERSGET (aka AS202287 and AS202275), which would appear to be this specific entity / RIPE member: https://www.ripe.net/membership/indices/data/ru.danil.html Is it the express intention of both the Board and the RIPE membership to simply deprive this bad actor of just those fradulent data base entries that have effectively legitimized his/her/its fradulent routing announcements? Is it the express intention of both the Board and the RIPE membership to simply make this bad actor give back what he has stolen, and to otherwise take no action, just as the response has been in the two other and similar cases that have also arisen in the RIPE region and that I have also publicly reported on this summer? https://mailman.nanog.org/pipermail/nanog/2018-June/096034.html https://mailman.nanog.org/pipermail/nanog/2018-July/096437.html My question is prompted by the following simple facts. In the two prior cases cited above, and also in the one I am presenting here today, the bad actors involved were seen to have not only hijacked large swaths of IP address space that clearly didn't belong to them, but also, as in the case I am presenting today, these same bad actors additionally acted to corrupt the RIPE data base with premeditated and deliberately fradulent entries. Nonetheless, and regardless of these attacks on the reliability and trustworthyness of the RIPE data base, to date it appears that no action whatsoever has been taken which might affect the ongoing RIPE memberships of the relevant parties and bad actors involved, and they are all still members in good standing of RIPE at the present time: https://www.ripe.net/membership/indices/data/pt.bitcanal-pt.html https://www.ripe.net/membership/indices/data/ua.d2investukraine.html https://www.ripe.net/membership/indices/data/bz.universal.html This is, to say the least, puzzling. I would like to know when, where, and how the Executive Board and/or the RIPE membership reached the altogether dubious conclusion that the best possible way to deal with bad actors such as these is to make them give back -just- the stuff the stole, and then to otherwise impose no penality of any kind, thus allowing them to live on, so that they may hijack another day. Whether this policy is a result of either deliberation or default, it *does* appear to be the policy, based on the evidence. Without intending to be rude, I feel that I must ask the obvious question: In what Universe does this otherwise admirable and generous Christian policy of "turning the other cheek" with respect to such verified bad actors have any effect other than encouraging the next hijacker, and then next one, and the one after that? Has either the Board or the membership even ever seriously debated what penalties should be imposed upon those members who are caught red handed deliberately corrupting the RIPE data base? Is the present RIPE policy of "forgive and forget" with respect to such travesties a product of anyone's intentional design, or is it instead merely the result of utter apathy and indifference on the part of the entire RIPE community? In either case, I believe it to be self evident that the time is... ummm... blooming, blossoming, burgeoning, flourishing, and flowering for this policy to be reexamined and revised. From where I am sitting it is self evident that the current policy of turning a blind eye to these events, and to the bad actors behind them is quite clearly encouraging others to follow suit and to themselves undertake the exact same sorts of travesties. Why shouldn't they? There is no downside. At the very worst, one is simply made to give back all of the stuff that one has stolen, and one is then allowed to go on one's merry way. Regards, rfg P.S. As incensed as I am at the fact that the above named bad actors have been allowed not only to retain their RIPE memberships, but also, apparently, 100% of their legitimately-allocated number resources, this is not even nearly as utterly appalling and inexplicable as the fact that two of the bad actors with direct and provable connections to the prior instances of hijacking that I have reported on publicly this summer have been allowed to remain as officially recognized RIPE IP brokers: https://www.ripe.net/manage-ips-and-asns/resource-transfers-and-mergers/bro… I am referring here specifically to Ebonyhorizon Telecomunicacoes Lda (aka Bitcanal) and also to NetAssist LLC (AS29632), which conveniently continues to maintain its association with, and peering arrangements with both AS57166 aka D2 International Investment Ukraine, Ltd. and, indirectly via D2, AS205869 aka Universal IP Solution Corp., both of which apparently continue to this day to try their best to hijack, either directly or indirectly, via AS Path fraud, a number of IPv4 blocks that clearly do not belong to any of these three Ukranian entities: https://bgp.he.net/AS57166#_peers https://bgp.he.net/AS205869#_peers https://bgp.he.net/AS29632#_peers What IP blocks are these two officially recognized RIPE IP brokers, Ebony Horizon and NetAssist brokering, exactly? Are they blocks that have been successfully hijacked? Does either RIPE or RIPE NCC even know? Does either RIPE or RIPE NCC even care? (One cannot help but wonder what might occur if RIPE were put in charge of distributing meat supplies within Europe. Would RIPE officially designate the McDonald's "Hamburglar" as RIPE's officially recognized agent for said distributions?) I guess that, in the end, all of the questions I have raised above can be boiled down to just one simple question: Who exactly does one need to either kill or maim or seriously wound in order to get kicked out of this organization (RIPE)? Regards, rfg P.P.S. Among the set of six companies / ASNs listed toward the top of this message as possible facilitators of the current hijacks of MNT-SERVERSGET, three are already fairly well known... at least in anti-spam circles... as being among "the usual suspects" when it comes to facilitating spamming and spammers. And no, I do not care to publicly specify which three. It may be true, as the saying goes that "On the Internet, nobody knows that you're a dog", but memories are long, and people don't forget if your company has been repeatedly caught acting like one.

4 6

New AS Number Block allocated to the RIPE NCC
by Ingrid Wijte 21 Aug '18

21 Aug '18

Dear Colleagues, The RIPE NCC has received the following AS Number Blocks from the IANA on 20 August 2018: 207260-208283 208284-209307 209308-210331 You may want to update your records accordingly. Best regards, Ingrid Wijte Registration Services Assistant Manager and Policy Development RIPE NCC

1 0

2nd call for presentations RIPE 77
by Benno Overeinder 20 Aug '18

20 Aug '18

Dear colleagues, Please note the approaching deadline of *26 August 2018* for RIPE 77 plenary programme submissions. You can find the CFP for RIPE 77 below or at https://ripe77.ripe.net/submit-topic/cfp/, for your proposals for plenary session presentations, tutorials, workshops, BoFs (Birds of a Feather sessions) and lightning talks. Please also note that speakers do not receive any extra reduction or funding towards the meeting fee at the RIPE Meetings, see the "Speakers" paragraph in CFP for more information. Kind regards, Benno Overeinder RIPE PC Chair https://ripe77.ripe.net/ripe-pc/ -------------------->>><<<-------------------- Call for Presentations A RIPE Meeting is an open event where Internet Service Providers, network operators and other interested parties get together. Although the meeting is mostly technical, it is also a chance for people to meet and network with others in their field. *RIPE 77 will take place from 15-19 October in Amsterdam, The Netherlands* The RIPE Programme Committee (PC) is now seeking content proposals from the RIPE community for the plenary sessions, BoFs (Birds of a Feather sessions), panels, workshops, tutorials and lightning talks at RIPE 77. See the full descriptions of the different presentation formats: https://ripe77.ripe.net/submit-topic/presentation-formats/ Proposals for plenary sessions, BoFs, panels, workshops and tutorials must be submitted for full consideration no later than *26 August 2018*. Proposals submitted after this date will be considered depending on the slots still available in the programme. The PC is looking for presentations covering the topics of network engineering and operations, including but not limited to: - IPv6 deployment - Managing IPv4 scarcity - Data centre technologies - Network and DNS operations - Internet governance and regulatory practices - Network and routing security - Content delivery - Internet peering and mobile data exchange - Connected Things (aka. Internet of Things - IoT) ---- Speakers ---- Presenters, RIPE Working Group Chairs and the RIPE Programme Committee are required to cover their own costs to attend a RIPE Meeting (meeting ticket, travel and accommodation). We have various ticket options available depending on your needs. In extraordinary circumstances, the RIPE Chair can waive the meeting fee for presenters. These requests are dealt with on a case-by-case basis via pc(a)ripe.net. Also note that, on an individual basis, participants can apply for a RIPE Fellowship or RACI to develop their professional or academic career. For more information, please visit: https://www.ripe.net/participate/ripe/ripe-fellowship https://www.ripe.net/participate/ripe/raci ---- Submissions ---- Presenters should be clear on whether they wish to submit a presentation for a plenary or working group (WG) session. At present, most working groups will solicit policy proposals, discussion points or other content directly via their mailing lists. If you’re not sure what kind of session you should be presenting at, please visit: https://ripe77.ripe.net/plenary-or-wg/ RIPE Meeting attendees are quite sensitive to keeping presentations non-commercial, and product marketing talks are strongly discouraged. Repeated audience feedback shows that the most successful talks focus on operational experience, research results, or case studies. For example, presenters wishing to describe a commercial solution should focus on the underlying technology and should not attempt a product demonstration. Presenters should indicate how much time they will require. In general, the time allocated for the different presentation formats is as follows: - Plenary presentations: 20-25 minutes presentation with 5-10 minutes discussion - Tutorials: up to two hours (Monday morning) - Workshops: one hour (during evening sessions) to two hours (Monday morning) - BoFs: approximately one hour (during evening sessions) - Lightning talks: 10 minutes in total for both the presentation and any discussion The following general requirements apply: - Proposals must be submitted using the meeting submission system, https://ripe77.ripe.net/submit-topic/ - Lightning talks should also be submitted using the meeting submission system (https://ripe77.ripe.net/submit-topic/) and can be submitted any time up to and including the meeting week. The allocation of lightning talks will be announced on short notice, in some cases on the same day but often one day prior to the time slot allocated. - Presenters who propose a panel or BoF are encouraged to include speakers from several (perhaps even competing) companies and/or a neutral facilitator. - All presentation proposals will only be considered by the PC if they contain at least draft presentation slides (slides may be updated later on). For panels, proposals must contain a clear description, as well as the names of invited panellists, presenters and moderators. ---- Diversity and Inclusion - On-Site Childcare and the RIPE Meeting Code of Conduct ---- Did you know that RIPE Meetings now have on-site childcare? You can reserve a spot for your child (age 6 months – 10 years) during the registration process for the meeting. Registrations for RIPE 77 will open mid-July. Childcare places are limited, so please be quick to reserve a spot for your child! Read about the experiences of our next generation of engineers at: https://labs.ripe.net/Members/agowland/ripe-meeting-diversity-efforts-on-si… Ensuring that RIPE Meeting values are upheld and that attendees experience a professional, respectful and safe meeting is a priority. Please do read the RIPE Meeting Code of Conduct: https://www.ripe.net/participate/meetings/ripe-meetings/ripe-meeting-code-o… --- If you have any questions or requests concerning content submissions, please email pc(a)ripe.net.

1 0

Weekly Routing Table Report
by cscora＠apnic.net 17 Aug '18

17 Aug '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 18 Aug, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 710936 Prefixes after maximum aggregation (per Origin AS): 273073 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 341471 Total ASes present in the Internet Routing Table: 61560 Prefixes per ASN: 11.55 Origin-only ASes present in the Internet Routing Table: 53145 Origin ASes announcing only one prefix: 23145 Transit ASes present in the Internet Routing Table: 8415 Transit-only ASes present in the Internet Routing Table: 265 Average AS path length visible in the Internet Routing Table: 4.0 Max AS path length visible: 34 Max AS path prepend of ASN ( 30873) 32 Prefixes from unregistered ASNs in the Routing Table: 64 Number of instances of unregistered ASNs: 64 Number of 32-bit ASNs allocated by the RIRs: 23718 Number of 32-bit ASNs visible in the Routing Table: 19114 Prefixes from 32-bit ASNs in the Routing Table: 80241 Number of bogon 32-bit ASNs visible in the Routing Table: 79 Special use prefixes present in the Routing Table: 2 Prefixes being announced from unallocated address space: 273 Number of addresses announced to Internet: 2857353028 Equivalent to 170 /8s, 79 /16s and 191 /24s Percentage of available address space announced: 77.2 Percentage of allocated address space announced: 77.2 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.0 Total number of prefixes smaller than registry allocations: 237374 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 193698 Total APNIC prefixes after maximum aggregation: 55273 APNIC Deaggregation factor: 3.50 Prefixes being announced from the APNIC address blocks: 191862 Unique aggregates announced from the APNIC address blocks: 79147 APNIC Region origin ASes present in the Internet Routing Table: 9007 APNIC Prefixes per ASN: 21.30 APNIC Region origin ASes announcing only one prefix: 2525 APNIC Region transit ASes present in the Internet Routing Table: 1346 Average APNIC Region AS path length visible: 4.0 Max APNIC Region AS path length visible: 26 Number of APNIC region 32-bit ASNs visible in the Routing Table: 3968 Number of APNIC addresses announced to Internet: 767572739 Equivalent to 45 /8s, 192 /16s and 59 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-139577 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 211280 Total ARIN prefixes after maximum aggregation: 100125 ARIN Deaggregation factor: 2.11 Prefixes being announced from the ARIN address blocks: 211152 Unique aggregates announced from the ARIN address blocks: 100055 ARIN Region origin ASes present in the Internet Routing Table: 18222 ARIN Prefixes per ASN: 11.59 ARIN Region origin ASes announcing only one prefix: 6755 ARIN Region transit ASes present in the Internet Routing Table: 1805 Average ARIN Region AS path length visible: 3.6 Max ARIN Region AS path length visible: 23 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2404 Number of ARIN addresses announced to Internet: 1103306912 Equivalent to 65 /8s, 195 /16s and 32 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 194600 Total RIPE prefixes after maximum aggregation: 92972 RIPE Deaggregation factor: 2.09 Prefixes being announced from the RIPE address blocks: 190927 Unique aggregates announced from the RIPE address blocks: 113250 RIPE Region origin ASes present in the Internet Routing Table: 25424 RIPE Prefixes per ASN: 7.51 RIPE Region origin ASes announcing only one prefix: 11458 RIPE Region transit ASes present in the Internet Routing Table: 3531 Average RIPE Region AS path length visible: 4.1 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 7311 Number of RIPE addresses announced to Internet: 713978496 Equivalent to 42 /8s, 142 /16s and 114 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 91962 Total LACNIC prefixes after maximum aggregation: 20542 LACNIC Deaggregation factor: 4.48 Prefixes being announced from the LACNIC address blocks: 93397 Unique aggregates announced from the LACNIC address blocks: 40757 LACNIC Region origin ASes present in the Internet Routing Table: 7426 LACNIC Prefixes per ASN: 12.58 LACNIC Region origin ASes announcing only one prefix: 2016 LACNIC Region transit ASes present in the Internet Routing Table: 1397 Average LACNIC Region AS path length visible: 4.7 Max LACNIC Region AS path length visible: 26 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 4971 Number of LACNIC addresses announced to Internet: 171888672 Equivalent to 10 /8s, 62 /16s and 208 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 19331 Total AfriNIC prefixes after maximum aggregation: 4104 AfriNIC Deaggregation factor: 4.71 Prefixes being announced from the AfriNIC address blocks: 23325 Unique aggregates announced from the AfriNIC address blocks: 8018 AfriNIC Region origin ASes present in the Internet Routing Table: 1187 AfriNIC Prefixes per ASN: 19.65 AfriNIC Region origin ASes announcing only one prefix: 391 AfriNIC Region transit ASes present in the Internet Routing Table: 240 Average AfriNIC Region AS path length visible: 4.4 Max AfriNIC Region AS path length visible: 29 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 460 Number of AfriNIC addresses announced to Internet: 100161536 Equivalent to 5 /8s, 248 /16s and 88 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 4684 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4414 477 468 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 2968 1150 82 VIETEL-AS-AP Viettel Group, VN 4766 2840 11134 766 KIXS-AS-KR Korea Telecom, KR 9829 2812 1497 543 BSNL-NIB National Internet Backbone, IN 45899 2578 1638 157 VNPT-AS-VN VNPT Corp, VN 9394 2544 4907 32 CTTNET China TieTong Telecommunications 17974 2262 962 71 TELKOMNET-AS2-AP PT Telekomunikasi Indo 9808 2249 8699 26 CMNET-GD Guangdong Mobile Communication 4755 2117 417 204 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3442 1324 82 SHAW - Shaw Communications Inc., CA 22773 3235 2968 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 11492 3041 256 408 CABLEONE - CABLE ONE, INC., US 16509 2258 4807 767 AMAZON-02 - Amazon.com, Inc., US 18566 2166 405 109 MEGAPATH5-US - MegaPath Corporation, US 20115 2125 2640 488 CHARTER-NET-HKY-NC - Charter Communicat 30036 2022 344 144 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 209 2016 5085 604 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 16625 2012 1035 1454 AKAMAI-AS - Akamai Technologies, Inc., 7018 1765 20206 1280 ATT-INTERNET4 - AT&T Services, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 4691 1613 124 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 8551 2804 378 44 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2541 621 1889 AKAMAI-ASN1, US 12389 2041 1891 731 ROSTELECOM-AS, RU 34984 2013 335 506 TELLCOM-AS, TR 9121 1824 1692 19 TTNET, TR 13188 1604 100 43 TRIOLAN, UA 8402 1194 544 14 CORBINA-AS OJSC "Vimpelcom", RU 6849 1177 355 21 UKRTELNET, UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5196 3349 607 Uninet S.A. de C.V., MX 10620 3488 532 453 Telmex Colombia S.A., CO 11830 2657 369 78 Instituto Costarricense de Electricidad 6503 1665 444 63 Axtel, S.A.B. de C.V., MX 7303 1429 952 205 Telecom Argentina S.A., AR 28573 1085 2229 181 CLARO S.A., BR 3816 1021 508 129 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 933 377 31 Telefonica del Peru S.A.A., PE 18881 915 1080 32 TELEFÔNICA BRASIL S.A, BR 13999 878 522 248 Mega Cable, S.A. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1184 396 48 LINKdotNET-AS, EG 37611 893 107 9 Afrihost, ZA 36903 778 391 137 MT-MPLS, MA 36992 743 1411 40 ETISALAT-MISR, EG 24835 641 818 18 RAYA-AS, EG 8452 593 1728 14 TE-AS TE-AS, EG 37492 474 470 57 ORANGE-, TN 29571 460 68 12 ORANGE-COTE-IVOIRE, CI 37342 386 32 1 MOVITEL, MZ 23889 379 231 15 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5196 3349 607 Uninet S.A. de C.V., MX 12479 4691 1613 124 UNI2-AS, ES 4538 4684 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4414 477 468 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 203 20 ALJAWWALSTC-AS, SA 10620 3488 532 453 Telmex Colombia S.A., CO 6327 3442 1324 82 SHAW - Shaw Communications Inc., CA 22773 3235 2968 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 11492 3041 256 408 CABLEONE - CABLE ONE, INC., US 7552 2968 1150 82 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4538 4684 4610 ERX-CERNET-BKB China Education and Research Net 12479 4691 4567 UNI2-AS, ES 7545 4414 3946 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3442 3360 SHAW - Shaw Communications Inc., CA 22773 3235 3086 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 10620 3488 3035 Telmex Colombia S.A., CO 7552 2968 2886 VIETEL-AS-AP Viettel Group, VN 8551 2804 2760 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 3041 2633 CABLEONE - CABLE ONE, INC., US Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 64500 DOCUMENT 45.43.56.0/24 135391 AOFEI-HK AOFEI DATA INTERNATIO 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 64513 PRIVATE 62.150.101.0/24 9155 QNET Kuwait, KW 65537 DOCUMENT 62.162.120.0/24 6821 MT-AS-OWN bul. Orce Nikolov bb 64121 UNALLOCATED 98.159.9.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64121 UNALLOCATED 98.159.12.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64140 UNALLOCATED 98.159.14.0/24 64121 UNKNOWN 4259905537 PRIVATE 103.250.48.0/24 132917 YELLOWPAGESGROUP-AS-AP Yellow Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 100.66.224.0/19 209 CENTURYLINK-US-LEGACY-QWEST - Qwest Communicati 198.18.1.19/32 7497 CSTNET-AS-AP Computer Network Information Cente Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.136.0/24 37500 -Reserved AS-, ZZ 41.76.138.0/24 37500 -Reserved AS-, ZZ 41.76.139.0/24 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ 41.78.92.0/22 14988 BTC-GATE1, BW 41.78.180.0/23 37265 -Reserved AS-, ZZ 43.251.20.0/22 9381 WTT-AS-AP WTT HK Limited, HK 45.121.32.0/22 134356 UNKNOWN Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:14 /9:11 /10:36 /11:99 /12:291 /13:570 /14:1096 /15:1899 /16:13380 /17:7929 /18:13805 /19:25371 /20:39332 /21:45624 /22:88177 /23:71681 /24:399464 /25:800 /26:603 /27:624 /28:35 /29:20 /30:19 /31:4 /32:52 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 3440 4691 UNI2-AS, ES 6327 3231 3442 SHAW - Shaw Communications Inc., CA 39891 2946 3778 ALJAWWALSTC-AS, SA 22773 2501 3235 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 11492 2413 3041 CABLEONE - CABLE ONE, INC., US 8551 2266 2804 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 18566 2060 2166 MEGAPATH5-US - MegaPath Corporation, US 11830 2005 2657 Instituto Costarricense de Electricidad y Telec 30036 1774 2022 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 10620 1579 3488 Telmex Colombia S.A., CO Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1617 2:823 4:19 5:2843 6:43 7:1 8:1126 12:1864 13:211 14:1799 15:32 16:3 17:194 18:54 20:50 23:2478 24:2239 25:2 27:2480 31:2029 32:88 35:29 36:522 37:2891 38:1494 39:254 40:118 41:3168 42:698 43:1965 44:121 45:5346 46:3110 47:198 49:1340 50:1054 51:318 52:1077 54:368 55:1 56:12 57:39 58:1627 59:991 60:402 61:2118 62:1860 63:1789 64:5075 65:2211 66:4722 67:2587 68:1161 69:3299 70:1157 71:582 72:2169 74:2723 75:419 76:463 77:1629 78:1688 79:2131 80:1566 81:1379 82:1051 83:783 84:1033 85:1999 86:566 87:1369 88:909 89:2353 90:215 91:6437 92:1269 93:2379 94:2395 95:2953 96:893 97:356 98:934 99:133 100:85 101:992 102:173 103:18381 104:3565 105:214 106:770 107:1783 108:711 109:3158 110:1642 111:1796 112:1337 113:1301 114:1130 115:1642 116:1646 117:1715 118:2221 119:1670 120:1015 121:1050 122:2418 123:1725 124:1445 125:1916 128:1118 129:680 130:496 131:1631 132:730 133:190 134:1024 135:225 136:504 137:646 138:1950 139:673 140:473 141:734 142:815 143:1013 144:812 145:483 146:1219 147:728 148:1641 149:758 150:751 151:1101 152:827 153:323 154:1493 155:802 156:1452 157:798 158:655 159:1820 160:1306 161:808 162:2622 163:606 164:1083 165:1539 166:462 167:1294 168:3147 169:833 170:3827 171:493 172:1005 173:2056 174:947 175:786 176:1999 177:4033 178:2506 179:1272 180:2180 181:2420 182:2559 183:1237 184:1046 185:13971 186:3563 187:2420 188:2928 189:2029 190:8166 191:1358 192:9828 193:6111 194:5006 195:3985 196:2685 197:1614 198:5578 199:5917 200:7369 201:4974 202:10286 203:10276 204:4583 205:2900 206:3162 207:3208 208:3936 209:4023 210:3878 211:1998 212:3040 213:2823 214:1036 215:55 216:6041 217:2117 218:859 219:568 220:1805 221:995 222:971 223:1377 End of report

1 0

Re: [routing-wg] [db-wg] [anti-abuse-wg] The Ongoing Summer of Hijacks: MNT-SERVERSGET / dnsget.top
by Ronald F. Guilmette 15 Aug '18

15 Aug '18

In message <07e92bc3-2856-a40c-4b4e-c248b941dbd3(a)foobar.org>, Nick Hilliard <nick(a)foobar.org> wrote: >Ronald F. Guilmette via db-wg wrote on 14/08/2018 21:53: >> None of them have even had the courtesy to send me a FOAD message in >> response. >> >> Their silence on these matters is deafening. > >Yes, and there is not a problem with this. The RIPE NCC board of >directors are not involved in day-to-day operations... Wait a minute. Didn't Erik Bais just -advise- me that I -should- be contacting the board? Wouldn't he qualify as an authority, given that he is a chair of a RIPE working group? More to the point, since when has it become a routine part of "day to day operations" to have RIPE members flooding the RIPE data base with blatant bovine excrement? I -do- see, and I -have- reported on an inordinate amount of exactly such deliberate hanky panky being perpetrated within the RIPE region, and within the RIPE data base of late, but I was not aware, until now, that this sort of behavior is nowadays considered, within the RIPE region at least, to be nothing more than "another day at the office". When exactly did the RIPE membership come around to this bland and careless acceptance of the clearly unacceptable? Or has it just always been like this? >If you need to submit a complaint to the RIPE NCC about problem >registrations in the RIPE IRRDB... I see that you have not understood my points at all. Please allow me to try again. The issue I have, and that I have tried to raise, is -not- merely the existance, in the data base, of this one deliberately fradulent entry or that one deliberately fradulent entry. Nor is the real issue even any given *collection* of deliberately fradulent entries that have been placed into the data base by any one specific member. Rather, the real issue I have raised is the question of what, if anything, RIPE is either willing or able to do to disipline any member that has demonstratably engaged in this exact pattern of repeated frauds. Removal of the fradulent data base entries that I have already identified, or that I may in the future identify, is a good thing, but it does not even begin to address the underlying issue: Why does this keep on happening, specifically and, it seems, -exclusively- within the RIPE region? What is RIPE doing, or not doing, that seems to engourage so many RIPE members to try their hand at this exact type of fraud? Could it perhaps be the case that since no one is ever sanctioned in any way for such activities, there is no real downside to giving it a try? >Also, could you kindly not cc: your emails to so many working groups? No >doubt people appreciate how important your reports are, but spamming >your emails across three working groups is, in all fairness, a bit much. Let me see if I have understood you. I've sent my recent messages to exactly and only three mailing lists for three clearly relevant working working groups, namely the data base working group, the routing working group and the (arguably mis-named) "anti-abuse" working group. Are you asserting that my points have nothing whatever to do with the RIPE data base? Are you asserting that my points have nothing whatever to do with routing? Does the deliberate pollution of the data base not constitute a type of "abuse" in your opinion? Just to make sure that I understand, you are apparently asserting that it is now just ordinary "day to day" activity for RIPE to permit the creation, in its data base, of numerous deliberately fradulent entries which then serve to legitimize the hijacking of various IP address blocks, right? And because RIPE "is not the Internet Police" it is also true that nobody on any RIPE mailing list cares about the fact that any of this hijacked IP space... space which RIPE has effectively legitimized... has been or is being sub-leased out to various high-end professional snowshoe spanmmers, who have then proceeded to pump out millions or tens of millions of -actual- spams, right? And yet you have the unmitigated audacity to accuse -me- of "spamming" for the unforgivable act of posting the three clearly relevant WG mailing lists? The gentleman doth protest too much, methinks. That having been said, I am at least pleased to learn that there exists one more member of the RIPE community who evinces at least some concern about the global problem of spam. And I look forward to seeing your concern translated into action with respect to the real and primary issue I have raised, which is the sanctioning of clearly misbehaving members, or rather, the apparently abundant current lack thereof. Regards, rfg

3 3

Weekly Routing Table Report
by cscora＠apnic.net 10 Aug '18

10 Aug '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 11 Aug, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 710351 Prefixes after maximum aggregation (per Origin AS): 272851 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 341377 Total ASes present in the Internet Routing Table: 61486 Prefixes per ASN: 11.55 Origin-only ASes present in the Internet Routing Table: 53097 Origin ASes announcing only one prefix: 23134 Transit ASes present in the Internet Routing Table: 8389 Transit-only ASes present in the Internet Routing Table: 266 Average AS path length visible in the Internet Routing Table: 4.0 Max AS path length visible: 34 Max AS path prepend of ASN ( 30873) 32 Prefixes from unregistered ASNs in the Routing Table: 71 Number of instances of unregistered ASNs: 71 Number of 32-bit ASNs allocated by the RIRs: 23624 Number of 32-bit ASNs visible in the Routing Table: 19037 Prefixes from 32-bit ASNs in the Routing Table: 79679 Number of bogon 32-bit ASNs visible in the Routing Table: 107 Special use prefixes present in the Routing Table: 2 Prefixes being announced from unallocated address space: 275 Number of addresses announced to Internet: 2857141828 Equivalent to 170 /8s, 76 /16s and 134 /24s Percentage of available address space announced: 77.2 Percentage of allocated address space announced: 77.2 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.0 Total number of prefixes smaller than registry allocations: 237154 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 193620 Total APNIC prefixes after maximum aggregation: 55167 APNIC Deaggregation factor: 3.51 Prefixes being announced from the APNIC address blocks: 191870 Unique aggregates announced from the APNIC address blocks: 79105 APNIC Region origin ASes present in the Internet Routing Table: 8995 APNIC Prefixes per ASN: 21.33 APNIC Region origin ASes announcing only one prefix: 2537 APNIC Region transit ASes present in the Internet Routing Table: 1341 Average APNIC Region AS path length visible: 4.0 Max APNIC Region AS path length visible: 29 Number of APNIC region 32-bit ASNs visible in the Routing Table: 3958 Number of APNIC addresses announced to Internet: 767223811 Equivalent to 45 /8s, 186 /16s and 232 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-139577 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 210910 Total ARIN prefixes after maximum aggregation: 100181 ARIN Deaggregation factor: 2.11 Prefixes being announced from the ARIN address blocks: 210886 Unique aggregates announced from the ARIN address blocks: 99818 ARIN Region origin ASes present in the Internet Routing Table: 18212 ARIN Prefixes per ASN: 11.58 ARIN Region origin ASes announcing only one prefix: 6737 ARIN Region transit ASes present in the Internet Routing Table: 1812 Average ARIN Region AS path length visible: 3.6 Max ARIN Region AS path length visible: 23 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2396 Number of ARIN addresses announced to Internet: 1103025824 Equivalent to 65 /8s, 190 /16s and 214 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 194304 Total RIPE prefixes after maximum aggregation: 92790 RIPE Deaggregation factor: 2.09 Prefixes being announced from the RIPE address blocks: 190611 Unique aggregates announced from the RIPE address blocks: 113115 RIPE Region origin ASes present in the Internet Routing Table: 25398 RIPE Prefixes per ASN: 7.50 RIPE Region origin ASes announcing only one prefix: 11460 RIPE Region transit ASes present in the Internet Routing Table: 3514 Average RIPE Region AS path length visible: 4.1 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 7284 Number of RIPE addresses announced to Internet: 714048896 Equivalent to 42 /8s, 143 /16s and 133 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 92228 Total LACNIC prefixes after maximum aggregation: 20546 LACNIC Deaggregation factor: 4.49 Prefixes being announced from the LACNIC address blocks: 93649 Unique aggregates announced from the LACNIC address blocks: 41078 LACNIC Region origin ASes present in the Internet Routing Table: 7399 LACNIC Prefixes per ASN: 12.66 LACNIC Region origin ASes announcing only one prefix: 2008 LACNIC Region transit ASes present in the Internet Routing Table: 1387 Average LACNIC Region AS path length visible: 4.7 Max LACNIC Region AS path length visible: 26 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 4944 Number of LACNIC addresses announced to Internet: 172309792 Equivalent to 10 /8s, 69 /16s and 61 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 19217 Total AfriNIC prefixes after maximum aggregation: 4104 AfriNIC Deaggregation factor: 4.68 Prefixes being announced from the AfriNIC address blocks: 23060 Unique aggregates announced from the AfriNIC address blocks: 8018 AfriNIC Region origin ASes present in the Internet Routing Table: 1185 AfriNIC Prefixes per ASN: 19.46 AfriNIC Region origin ASes announcing only one prefix: 392 AfriNIC Region transit ASes present in the Internet Routing Table: 237 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 25 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 455 Number of AfriNIC addresses announced to Internet: 100085248 Equivalent to 5 /8s, 247 /16s and 46 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 4689 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4405 477 468 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 2969 1153 83 VIETEL-AS-AP Viettel Group, VN 4766 2830 11132 759 KIXS-AS-KR Korea Telecom, KR 9829 2816 1497 543 BSNL-NIB National Internet Backbone, IN 45899 2573 1634 157 VNPT-AS-VN VNPT Corp, VN 9394 2543 4907 32 CTTNET China TieTong Telecommunications 17974 2261 962 71 TELKOMNET-AS2-AP PT Telekomunikasi Indo 9808 2249 8699 26 CMNET-GD Guangdong Mobile Communication 4755 2115 417 203 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3442 1324 82 SHAW - Shaw Communications Inc., CA 22773 3253 2968 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 11492 2842 256 421 CABLEONE - CABLE ONE, INC., US 16509 2259 4791 768 AMAZON-02 - Amazon.com, Inc., US 18566 2166 405 109 MEGAPATH5-US - MegaPath Corporation, US 20115 2124 2641 484 CHARTER-NET-HKY-NC - Charter Communicat 30036 2018 344 142 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 16625 2007 1031 1445 AKAMAI-AS - Akamai Technologies, Inc., 209 1994 5085 604 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 7018 1764 20206 1281 ATT-INTERNET4 - AT&T Services, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 4682 1613 128 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 8551 2819 378 44 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2552 624 1891 AKAMAI-ASN1, US 12389 2042 1891 731 ROSTELECOM-AS, RU 34984 2013 335 506 TELLCOM-AS, TR 9121 1837 1692 19 TTNET, TR 13188 1605 100 39 TRIOLAN, UA 6849 1241 355 21 UKRTELNET, UA 8402 1204 544 14 CORBINA-AS OJSC "Vimpelcom", RU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5191 3349 607 Uninet S.A. de C.V., MX 10620 3483 531 456 Telmex Colombia S.A., CO 11830 2657 369 78 Instituto Costarricense de Electricidad 6503 1666 444 63 Axtel, S.A.B. de C.V., MX 7303 1508 1027 189 Telecom Argentina S.A., AR 28573 1087 2241 189 CLARO S.A., BR 3816 1020 508 128 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 933 377 31 Telefonica del Peru S.A.A., PE 11172 929 126 85 Alestra, S. de R.L. de C.V., MX 18881 913 1078 30 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1172 396 48 LINKdotNET-AS, EG 37611 890 107 9 Afrihost, ZA 36903 778 391 137 MT-MPLS, MA 36992 744 1411 40 ETISALAT-MISR, EG 24835 635 818 18 RAYA-AS, EG 8452 602 1730 18 TE-AS TE-AS, EG 37492 474 470 57 ORANGE-, TN 29571 459 68 12 ORANGE-COTE-IVOIRE, CI 37342 386 32 1 MOVITEL, MZ 23889 373 231 15 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5191 3349 607 Uninet S.A. de C.V., MX 4538 4689 4192 74 ERX-CERNET-BKB China Education and Rese 12479 4682 1613 128 UNI2-AS, ES 7545 4405 477 468 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 203 20 ALJAWWALSTC-AS, SA 10620 3483 531 456 Telmex Colombia S.A., CO 6327 3442 1324 82 SHAW - Shaw Communications Inc., CA 22773 3253 2968 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 7552 2969 1153 83 VIETEL-AS-AP Viettel Group, VN 11492 2842 256 421 CABLEONE - CABLE ONE, INC., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4538 4689 4615 ERX-CERNET-BKB China Education and Research Net 12479 4682 4554 UNI2-AS, ES 7545 4405 3937 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3442 3360 SHAW - Shaw Communications Inc., CA 22773 3253 3104 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 10620 3483 3027 Telmex Colombia S.A., CO 7552 2969 2886 VIETEL-AS-AP Viettel Group, VN 8551 2819 2775 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11830 2657 2579 Instituto Costarricense de Electricidad y Telec Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 64514 PRIVATE 5.42.231.0/24 35753 ITC ITC AS number, SA 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 64500 DOCUMENT 45.43.56.0/24 135391 AOFEI-HK AOFEI DATA INTERNATIO 268422 UNALLOCATED 45.160.208.0/24 263321 Ejmnet Tecnologia ltda, BR 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 64513 PRIVATE 62.150.101.0/24 9155 QNET Kuwait, KW 65537 DOCUMENT 62.162.120.0/24 6821 MT-AS-OWN bul. Orce Nikolov bb 419333 UNALLOCATED 84.17.91.0/24 41933 IPRAGAZ-AS Istanbul/ TURKEY, T 64121 UNALLOCATED 98.159.9.0/24 19555 KMI-NETWORK - Kinder Morgan, I Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 100.66.224.0/19 209 CENTURYLINK-US-LEGACY-QWEST - Qwest Communicati 198.18.1.19/32 7497 CSTNET-AS-AP Computer Network Information Cente Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.136.0/24 37500 -Reserved AS-, ZZ 41.76.138.0/24 37500 -Reserved AS-, ZZ 41.76.139.0/24 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ 41.78.92.0/22 14988 BTC-GATE1, BW 41.78.180.0/23 37265 -Reserved AS-, ZZ 43.251.20.0/22 9381 WTT-AS-AP WTT HK Limited, HK 45.121.32.0/22 134356 UNKNOWN Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:14 /9:11 /10:36 /11:99 /12:291 /13:570 /14:1096 /15:1896 /16:13372 /17:7913 /18:13792 /19:25356 /20:39404 /21:45677 /22:88015 /23:71590 /24:399059 /25:800 /26:602 /27:627 /28:35 /29:20 /30:19 /31:4 /32:53 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 3427 4682 UNI2-AS, ES 6327 3231 3442 SHAW - Shaw Communications Inc., CA 39891 2946 3778 ALJAWWALSTC-AS, SA 22773 2515 3253 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 2281 2819 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 2214 2842 CABLEONE - CABLE ONE, INC., US 18566 2060 2166 MEGAPATH5-US - MegaPath Corporation, US 11830 2005 2657 Instituto Costarricense de Electricidad y Telec 30036 1770 2018 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 10620 1575 3483 Telmex Colombia S.A., CO Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1612 2:835 4:18 5:2827 6:43 7:1 8:1128 12:1877 13:210 14:1795 15:31 16:3 17:190 18:54 20:50 23:2464 24:2209 25:2 27:2476 31:2020 32:88 35:29 36:512 37:2883 38:1486 39:254 40:122 41:3154 42:652 43:1967 44:122 45:5309 46:3101 47:197 49:1333 50:1049 51:318 52:1078 54:370 55:1 56:12 57:39 58:1622 59:991 60:403 61:2118 62:1862 63:1793 64:5050 65:2216 66:4705 67:2552 68:1164 69:3290 70:1155 71:582 72:2155 74:2722 75:422 76:463 77:1643 78:1686 79:2133 80:1541 81:1381 82:1031 83:783 84:1034 85:1986 86:566 87:1357 88:918 89:2356 90:216 91:6444 92:1263 93:2368 94:2393 95:2919 96:793 97:357 98:934 99:133 100:85 101:1234 102:174 103:18328 104:3578 105:216 106:769 107:1775 108:714 109:3147 110:1639 111:1798 112:1334 113:1299 114:1136 115:1660 116:1645 117:1774 118:2217 119:1678 120:1009 121:1047 122:2435 123:1767 124:1446 125:1922 128:1109 129:690 130:492 131:1636 132:727 133:195 134:1023 135:232 136:499 137:645 138:1946 139:664 140:471 141:736 142:810 143:1027 144:809 145:484 146:1209 147:730 148:1646 149:748 150:741 151:1100 152:821 153:323 154:1488 155:804 156:1313 157:797 158:655 159:1821 160:1296 161:841 162:2592 163:602 164:1080 165:1528 166:460 167:1296 168:3135 169:828 170:3833 171:492 172:1002 173:2027 174:929 175:779 176:2005 177:4035 178:2505 179:1251 180:2170 181:2421 182:2392 183:1240 184:1041 185:13938 186:3644 187:2401 188:2914 189:2037 190:8357 191:1357 192:9812 193:6099 194:5002 195:3983 196:2660 197:1593 198:5572 199:5911 200:7394 201:5018 202:10247 203:10290 204:4590 205:2923 206:3163 207:3207 208:3962 209:4012 210:3866 211:1989 212:3042 213:2811 214:1043 215:56 216:6041 217:2118 218:859 219:578 220:1813 221:994 222:972 223:1373 End of report

1 0