- routing-wg - mailman.ripe.net

RIPE NCC::Educa Routing Security Event
by Sandra Bras 12 Mar '18

12 Mar '18

Dear all, How secure is your routing? Do you know how to use RIPE NCC tools like RIPEstat and RIS to resolve routing security issues? Confirm your spot for the next RIPE NCC::Educa - a free, online learning event that brings industry experts together to share insight, expertise and best practice on areas critical to your network operations. Gain in-depth knowledge without travelling or leaving your desk. *RIPE NCC::Educa - Routing Security* takes place on *Tuesday, 10 April 2018 from 8:00-14:00 UTC.* Register here: https://www.ripe.net/support/training/ripe-ncc-educa You can join us for one session, multiple sessions or the full programme. We’re updating the agenda constantly, so be sure to check here for the latest additions: https://www.ripe.net/support/training/ripe-ncc-educa/agenda For more information about RIPE::Educa, go check out the agenda for last year’s RIPE NCC::Educa event or read the report on RIPE Labs: https://www.ripe.net/support/training/ripe-ncc-educa/past-ripe-ncc-educa-ev… https://labs.ripe.net/Members/sandra_bras/report-from-first-ripe-ncc-educa-… If you have any questions, please get in touch with us: <e-learning(a)ripe.net> Warm regards, Sandra Brás E-Learning Program Manager RIPE NCC

1 0

Weekly Routing Table Report
by cscora＠apnic.net 09 Mar '18

09 Mar '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 10 Mar, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 689505 Prefixes after maximum aggregation (per Origin AS): 267381 Deaggregation factor: 2.58 Unique aggregates announced (without unneeded subnets): 332013 Total ASes present in the Internet Routing Table: 60061 Prefixes per ASN: 11.48 Origin-only ASes present in the Internet Routing Table: 51878 Origin ASes announcing only one prefix: 22755 Transit ASes present in the Internet Routing Table: 8183 Transit-only ASes present in the Internet Routing Table: 255 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 37 Max AS path prepend of ASN (262865) 25 Prefixes from unregistered ASNs in the Routing Table: 61 Number of instances of unregistered ASNs: 61 Number of 32-bit ASNs allocated by the RIRs: 21745 Number of 32-bit ASNs visible in the Routing Table: 17492 Prefixes from 32-bit ASNs in the Routing Table: 72632 Number of bogon 32-bit ASNs visible in the Routing Table: 12 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 329 Number of addresses announced to Internet: 2855882594 Equivalent to 170 /8s, 57 /16s and 79 /24s Percentage of available address space announced: 77.1 Percentage of allocated address space announced: 77.1 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 98.8 Total number of prefixes smaller than registry allocations: 229062 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 189556 Total APNIC prefixes after maximum aggregation: 54236 APNIC Deaggregation factor: 3.50 Prefixes being announced from the APNIC address blocks: 188509 Unique aggregates announced from the APNIC address blocks: 77335 APNIC Region origin ASes present in the Internet Routing Table: 8697 APNIC Prefixes per ASN: 21.68 APNIC Region origin ASes announcing only one prefix: 2465 APNIC Region transit ASes present in the Internet Routing Table: 1285 Average APNIC Region AS path length visible: 4.3 Max APNIC Region AS path length visible: 27 Number of APNIC region 32-bit ASNs visible in the Routing Table: 3609 Number of APNIC addresses announced to Internet: 767978658 Equivalent to 45 /8s, 198 /16s and 108 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-137529 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 205495 Total ARIN prefixes after maximum aggregation: 98454 ARIN Deaggregation factor: 2.09 Prefixes being announced from the ARIN address blocks: 206400 Unique aggregates announced from the ARIN address blocks: 97400 ARIN Region origin ASes present in the Internet Routing Table: 18111 ARIN Prefixes per ASN: 11.40 ARIN Region origin ASes announcing only one prefix: 6713 ARIN Region transit ASes present in the Internet Routing Table: 1803 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 23 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2316 Number of ARIN addresses announced to Internet: 1104738912 Equivalent to 65 /8s, 216 /16s and 250 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-397212 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 187081 Total RIPE prefixes after maximum aggregation: 91044 RIPE Deaggregation factor: 2.05 Prefixes being announced from the RIPE address blocks: 183286 Unique aggregates announced from the RIPE address blocks: 109499 RIPE Region origin ASes present in the Internet Routing Table: 24958 RIPE Prefixes per ASN: 7.34 RIPE Region origin ASes announcing only one prefix: 11332 RIPE Region transit ASes present in the Internet Routing Table: 3497 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 28 Number of RIPE region 32-bit ASNs visible in the Routing Table: 6747 Number of RIPE addresses announced to Internet: 714623104 Equivalent to 42 /8s, 152 /16s and 72 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 88834 Total LACNIC prefixes after maximum aggregation: 19593 LACNIC Deaggregation factor: 4.53 Prefixes being announced from the LACNIC address blocks: 90204 Unique aggregates announced from the LACNIC address blocks: 40049 LACNIC Region origin ASes present in the Internet Routing Table: 6889 LACNIC Prefixes per ASN: 13.09 LACNIC Region origin ASes announcing only one prefix: 1879 LACNIC Region transit ASes present in the Internet Routing Table: 1267 Average LACNIC Region AS path length visible: 5.1 Max LACNIC Region AS path length visible: 37 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 4422 Number of LACNIC addresses announced to Internet: 172158944 Equivalent to 10 /8s, 66 /16s and 239 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 18476 Total AfriNIC prefixes after maximum aggregation: 4005 AfriNIC Deaggregation factor: 4.61 Prefixes being announced from the AfriNIC address blocks: 20777 Unique aggregates announced from the AfriNIC address blocks: 7466 AfriNIC Region origin ASes present in the Internet Routing Table: 1123 AfriNIC Prefixes per ASN: 18.50 AfriNIC Region origin ASes announcing only one prefix: 365 AfriNIC Region transit ASes present in the Internet Routing Table: 227 Average AfriNIC Region AS path length visible: 4.6 Max AfriNIC Region AS path length visible: 21 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 398 Number of AfriNIC addresses announced to Internet: 95974144 Equivalent to 5 /8s, 184 /16s and 115 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5420 4192 74 ERX-CERNET-BKB China Education and Rese 7545 3962 405 400 TPG-INTERNET-AP TPG Telecom Limited, AU 4766 2858 11132 776 KIXS-AS-KR Korea Telecom, KR 9829 2802 1499 540 BSNL-NIB National Internet Backbone, IN 7552 2667 1161 59 VIETEL-AS-AP Viettel Group, VN 9394 2630 4923 29 CTTNET China TieTong Telecommunications 45899 2530 1561 159 VNPT-AS-VN VNPT Corp, VN 17974 2331 930 80 TELKOMNET-AS2-AP PT Telekomunikasi Indo 9808 2179 8699 32 CMNET-GD Guangdong Mobile Communication 4755 2086 417 215 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3364 1323 86 SHAW - Shaw Communications Inc., CA 22773 3278 2988 148 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 18566 2167 405 108 MEGAPATH5-US - MegaPath Corporation, US 20115 2094 2483 435 CHARTER-NET-HKY-NC - Charter Communicat 16509 2037 4372 605 AMAZON-02 - Amazon.com, Inc., US 30036 1932 338 189 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 209 1929 5055 618 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 6389 1776 3671 36 BELLSOUTH-NET-BLK - BellSouth.net Inc., 11492 1750 228 577 CABLEONE - CABLE ONE, INC., US 7018 1682 20187 1248 ATT-INTERNET4 - AT&T Services, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 39891 3520 187 21 ALJAWWALSTC-AS, SA 12479 3447 1397 785 UNI2-AS, ES 20940 2821 820 2054 AKAMAI-ASN1, US 8551 2101 378 43 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2036 1864 704 ROSTELECOM-AS, RU 34984 1997 332 479 TELLCOM-AS, TR 9121 1926 1692 19 TTNET, TR 13188 1606 100 46 TRIOLAN, UA 6849 1241 355 21 UKRTELNET, UA 8402 1210 544 14 CORBINA-AS OJSC "Vimpelcom", RU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 4313 3386 588 Uninet S.A. de C.V., MX 10620 3599 541 252 Telmex Colombia S.A., CO 11830 2642 370 66 Instituto Costarricense de Electricidad 6503 1631 437 53 Axtel, S.A.B. de C.V., MX 7303 1505 1025 198 Telecom Argentina S.A., AR 28573 1022 2246 194 CLARO S.A., BR 6147 1017 377 27 Telefonica del Peru S.A.A., PE 3816 1006 506 120 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 925 126 85 Alestra, S. de R.L. de C.V., MX 18881 907 1072 29 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1168 398 50 LINKdotNET-AS, EG 37611 813 91 8 Afrihost, ZA 36903 737 370 139 MT-MPLS, MA 36992 683 1380 38 ETISALAT-MISR, EG 8452 615 1730 18 TE-AS TE-AS, EG 24835 602 850 15 RAYA-AS, EG 29571 466 68 12 ORANGE-COTE-IVOIRE, CI 37492 444 376 80 ORANGE-, TN 15399 361 35 7 WANANCHI-, KE 37342 360 32 1 MOVITEL, MZ Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5420 4192 74 ERX-CERNET-BKB China Education and Rese 8151 4313 3386 588 Uninet S.A. de C.V., MX 7545 3962 405 400 TPG-INTERNET-AP TPG Telecom Limited, AU 10620 3599 541 252 Telmex Colombia S.A., CO 39891 3520 187 21 ALJAWWALSTC-AS, SA 12479 3447 1397 785 UNI2-AS, ES 6327 3364 1323 86 SHAW - Shaw Communications Inc., CA 22773 3278 2988 148 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 4766 2858 11132 776 KIXS-AS-KR Korea Telecom, KR 20940 2821 820 2054 AKAMAI-ASN1, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 8151 4313 3725 Uninet S.A. de C.V., MX 7545 3962 3562 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3520 3499 ALJAWWALSTC-AS, SA 10620 3599 3347 Telmex Colombia S.A., CO 6327 3364 3278 SHAW - Shaw Communications Inc., CA 22773 3278 3130 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 12479 3447 2662 UNI2-AS, ES 7552 2667 2608 VIETEL-AS-AP Viettel Group, VN 9394 2630 2601 CTTNET China TieTong Telecommunications Corpora 11830 2642 2576 Instituto Costarricense de Electricidad y Telec Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 65456 PRIVATE 31.171.126.0/23 199311 AZRT-LX Local Internet Exchang 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 64513 PRIVATE 62.150.101.0/24 9155 QNET Kuwait, KW 419333 UNALLOCATED 84.17.91.0/24 41933 IPRAGAZ-AS Istanbul/ TURKEY, T 65024 PRIVATE 87.103.234.0/24 39407 CHITATELECOM-AS, RU 65000 PRIVATE 95.179.2.0/24 65001 -Private Use AS-, ZZ 65000 PRIVATE 95.179.3.0/24 65001 -Private Use AS-, ZZ 65000 PRIVATE 95.179.69.0/24 65001 -Private Use AS-, ZZ 65000 PRIVATE 95.179.70.0/24 65001 -Private Use AS-, ZZ 65000 PRIVATE 95.179.92.0/24 65001 -Private Use AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 100.66.224.0/19 209 CENTURYLINK-US-LEGACY-QWEST - Qwest Communicati Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 14.128.14.0/23 10247 NETLINE, ZA 14.192.50.0/23 10247 NETLINE, ZA 14.192.58.0/23 10247 NETLINE, ZA 27.100.7.0/24 56096 UNKNOWN 36.255.250.0/23 10247 NETLINE, ZA 37.44.224.0/20 48666 AS-MAROSNET Moscow, Russia, RU 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ 41.78.92.0/22 14988 BTC-GATE1, BW 41.78.180.0/23 37265 -Reserved AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:14 /9:11 /10:37 /11:100 /12:289 /13:563 /14:1094 /15:1898 /16:13320 /17:7834 /18:13573 /19:25192 /20:39115 /21:45117 /22:85179 /23:69049 /24:384896 /25:837 /26:599 /27:654 /28:36 /29:20 /30:17 /31:4 /32:57 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6327 3155 3364 SHAW - Shaw Communications Inc., CA 39891 2946 3520 ALJAWWALSTC-AS, SA 22773 2534 3278 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 12479 2246 3447 UNI2-AS, ES 18566 2061 2167 MEGAPATH5-US - MegaPath Corporation, US 11830 1989 2642 Instituto Costarricense de Electricidad y Telec 30036 1687 1932 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 10620 1599 3599 Telmex Colombia S.A., CO 8551 1564 2101 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 1531 1750 CABLEONE - CABLE ONE, INC., US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1567 2:829 4:19 5:2801 6:59 7:1 8:1104 9:1 12:1883 13:207 14:1752 15:26 16:3 17:188 18:68 20:48 21:2 23:2558 24:2176 25:2 27:2304 31:1940 32:89 35:25 36:502 37:2700 38:1458 39:247 40:103 41:3044 42:548 43:1946 44:98 45:3853 46:3046 47:199 49:1354 50:1045 51:48 52:982 54:356 55:5 56:10 57:41 58:1576 59:1019 60:428 61:2142 62:1803 63:1803 64:4708 65:2223 66:4572 67:2358 68:1172 69:3199 70:1183 71:556 72:2101 74:2674 75:410 76:426 77:1541 78:1668 79:1856 80:1488 81:1442 82:1076 83:775 84:1020 85:2038 86:575 87:1267 88:915 89:2315 90:194 91:6284 92:1195 93:2370 94:2386 95:2742 96:656 97:356 98:927 99:124 100:79 101:1426 102:28 103:17255 104:3286 105:221 106:588 107:1799 108:706 109:2702 110:1579 111:1777 112:1329 113:1377 114:1113 115:1649 116:1648 117:1721 118:2173 119:1674 120:967 121:1070 122:2464 123:1820 124:1458 125:1876 128:975 129:618 130:443 131:1586 132:653 133:194 134:996 135:225 136:440 137:495 138:1941 139:572 140:418 141:686 142:787 143:964 144:798 145:453 146:1161 147:740 148:1546 149:700 150:740 151:1045 152:755 153:308 154:1038 155:760 156:850 157:777 158:624 159:1632 160:884 161:745 162:2572 163:527 164:1258 165:1396 166:398 167:1412 168:3045 169:808 170:3707 171:418 172:1058 173:1927 174:879 175:747 176:1866 177:3975 178:2419 179:1185 180:2243 181:2171 182:2462 183:1132 184:907 185:12812 186:3481 187:2299 188:2709 189:1976 190:8114 191:1415 192:9777 193:5879 194:4778 195:3974 196:2450 197:1444 198:5521 199:5880 200:7383 201:5006 202:10378 203:10110 204:4540 205:2846 206:3070 207:3177 208:3993 209:3933 210:4032 211:2118 212:3008 213:2687 214:907 215:61 216:5837 217:2126 218:899 219:621 220:1733 221:996 222:1045 223:1235 End of report

1 0

Quickscan routing security
by Ad Bresser 03 Mar '18

03 Mar '18

Dear routing-wg, Last year I composed a quickscan on routing measures to increase the security of the Internet. You can download it at: http://startupinc.nl/wp-content/uploads/2017/10/20171027-Quickscan-on-routi… In order to improve the overview I also created a Github version. Please add your additions here: https://github.com/AdBresser/measures-to-increase-IP-security Hope this helps in improving the IP security of the Internet. Kind regards, Ad Bresser PS For sharing in your LinkedIN network a version of the quickscan is available on LinkedIN: https://www.linkedin.com/pulse/measures-increase-routing-security-internet-… (likes are also appreciated 😉 )

1 0

Weekly Routing Table Report
by cscora＠apnic.net 02 Mar '18

02 Mar '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG, CaribNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 03 Mar, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 687961 Prefixes after maximum aggregation (per Origin AS): 266895 Deaggregation factor: 2.58 Unique aggregates announced (without unneeded subnets): 331711 Total ASes present in the Internet Routing Table: 59983 Prefixes per ASN: 11.47 Origin-only ASes present in the Internet Routing Table: 51808 Origin ASes announcing only one prefix: 22740 Transit ASes present in the Internet Routing Table: 8175 Transit-only ASes present in the Internet Routing Table: 257 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 37 Max AS path prepend of ASN (262865) 25 Prefixes from unregistered ASNs in the Routing Table: 58 Number of instances of unregistered ASNs: 58 Number of 32-bit ASNs allocated by the RIRs: 21677 Number of 32-bit ASNs visible in the Routing Table: 17438 Prefixes from 32-bit ASNs in the Routing Table: 72349 Number of bogon 32-bit ASNs visible in the Routing Table: 10 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 326 Number of addresses announced to Internet: 2855228258 Equivalent to 170 /8s, 47 /16s and 83 /24s Percentage of available address space announced: 77.1 Percentage of allocated address space announced: 77.1 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 98.8 Total number of prefixes smaller than registry allocations: 228105 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 189669 Total APNIC prefixes after maximum aggregation: 54076 APNIC Deaggregation factor: 3.51 Prefixes being announced from the APNIC address blocks: 188647 Unique aggregates announced from the APNIC address blocks: 77563 APNIC Region origin ASes present in the Internet Routing Table: 8675 APNIC Prefixes per ASN: 21.75 APNIC Region origin ASes announcing only one prefix: 2459 APNIC Region transit ASes present in the Internet Routing Table: 1284 Average APNIC Region AS path length visible: 4.3 Max APNIC Region AS path length visible: 27 Number of APNIC region 32-bit ASNs visible in the Routing Table: 3589 Number of APNIC addresses announced to Internet: 768016418 Equivalent to 45 /8s, 199 /16s and 0 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-137529 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 205098 Total ARIN prefixes after maximum aggregation: 98253 ARIN Deaggregation factor: 2.09 Prefixes being announced from the ARIN address blocks: 205932 Unique aggregates announced from the ARIN address blocks: 97158 ARIN Region origin ASes present in the Internet Routing Table: 18084 ARIN Prefixes per ASN: 11.39 ARIN Region origin ASes announcing only one prefix: 6690 ARIN Region transit ASes present in the Internet Routing Table: 1797 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 23 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2314 Number of ARIN addresses announced to Internet: 1104806432 Equivalent to 65 /8s, 218 /16s and 2 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-397212 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 186339 Total RIPE prefixes after maximum aggregation: 90949 RIPE Deaggregation factor: 2.05 Prefixes being announced from the RIPE address blocks: 182630 Unique aggregates announced from the RIPE address blocks: 109299 RIPE Region origin ASes present in the Internet Routing Table: 24943 RIPE Prefixes per ASN: 7.32 RIPE Region origin ASes announcing only one prefix: 11325 RIPE Region transit ASes present in the Internet Routing Table: 3499 Average RIPE Region AS path length visible: 4.4 Max RIPE Region AS path length visible: 28 Number of RIPE region 32-bit ASNs visible in the Routing Table: 6729 Number of RIPE addresses announced to Internet: 714026880 Equivalent to 42 /8s, 143 /16s and 47 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 88435 Total LACNIC prefixes after maximum aggregation: 19571 LACNIC Deaggregation factor: 4.52 Prefixes being announced from the LACNIC address blocks: 89797 Unique aggregates announced from the LACNIC address blocks: 40020 LACNIC Region origin ASes present in the Internet Routing Table: 6880 LACNIC Prefixes per ASN: 13.05 LACNIC Region origin ASes announcing only one prefix: 1899 LACNIC Region transit ASes present in the Internet Routing Table: 1262 Average LACNIC Region AS path length visible: 5.1 Max LACNIC Region AS path length visible: 37 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 4413 Number of LACNIC addresses announced to Internet: 172137888 Equivalent to 10 /8s, 66 /16s and 157 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 18360 Total AfriNIC prefixes after maximum aggregation: 4000 AfriNIC Deaggregation factor: 4.59 Prefixes being announced from the AfriNIC address blocks: 20629 Unique aggregates announced from the AfriNIC address blocks: 7410 AfriNIC Region origin ASes present in the Internet Routing Table: 1119 AfriNIC Prefixes per ASN: 18.44 AfriNIC Region origin ASes announcing only one prefix: 366 AfriNIC Region transit ASes present in the Internet Routing Table: 229 Average AfriNIC Region AS path length visible: 4.6 Max AfriNIC Region AS path length visible: 21 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 393 Number of AfriNIC addresses announced to Internet: 95837440 Equivalent to 5 /8s, 182 /16s and 93 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5442 4195 92 ERX-CERNET-BKB China Education and Rese 7545 4057 408 415 TPG-INTERNET-AP TPG Telecom Limited, AU 4766 2858 11132 774 KIXS-AS-KR Korea Telecom, KR 9829 2802 1499 540 BSNL-NIB National Internet Backbone, IN 17974 2710 934 80 TELKOMNET-AS2-AP PT Telekomunikasi Indo 7552 2638 1161 59 VIETEL-AS-AP Viettel Group, VN 9394 2630 4923 29 CTTNET China TieTong Telecommunications 45899 2561 1561 160 VNPT-AS-VN VNPT Corp, VN 9808 2180 8699 32 CMNET-GD Guangdong Mobile Communication 4755 2083 417 215 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3383 1323 84 SHAW - Shaw Communications Inc., CA 22773 3276 2988 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 18566 2167 405 108 MEGAPATH5-US - MegaPath Corporation, US 20115 2095 2483 435 CHARTER-NET-HKY-NC - Charter Communicat 16509 2027 4371 603 AMAZON-02 - Amazon.com, Inc., US 30036 1928 338 196 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 209 1927 5055 619 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 6389 1841 3671 36 BELLSOUTH-NET-BLK - BellSouth.net Inc., 11492 1740 227 574 CABLEONE - CABLE ONE, INC., US 7018 1684 20187 1249 ATT-INTERNET4 - AT&T Services, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 39891 3520 187 21 ALJAWWALSTC-AS, SA 12479 3058 1316 804 UNI2-AS, ES 20940 2855 846 2071 AKAMAI-ASN1, US 8551 2066 378 43 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2037 1864 704 ROSTELECOM-AS, RU 34984 1992 332 474 TELLCOM-AS, TR 9121 1922 1692 19 TTNET, TR 13188 1606 100 46 TRIOLAN, UA 6849 1241 355 21 UKRTELNET, UA 8402 1215 544 14 CORBINA-AS OJSC "Vimpelcom", RU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 4161 3388 587 Uninet S.A. de C.V., MX 10620 3594 541 253 Telmex Colombia S.A., CO 11830 2639 370 66 Instituto Costarricense de Electricidad 6503 1625 437 53 Axtel, S.A.B. de C.V., MX 7303 1507 1026 191 Telecom Argentina S.A., AR 28573 1021 2246 189 CLARO S.A., BR 6147 1010 377 27 Telefonica del Peru S.A.A., PE 3816 1007 506 120 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 923 126 85 Alestra, S. de R.L. de C.V., MX 18881 907 1072 29 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1162 398 49 LINKdotNET-AS, EG 37611 809 91 8 Afrihost, ZA 36903 739 371 135 MT-MPLS, MA 36992 681 1380 38 ETISALAT-MISR, EG 8452 615 1730 18 TE-AS TE-AS, EG 24835 557 850 15 RAYA-AS, EG 29571 466 68 12 ORANGE-COTE-IVOIRE, CI 37492 453 376 80 ORANGE-, TN 15399 361 35 7 WANANCHI-, KE 37342 360 32 1 MOVITEL, MZ Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5442 4195 92 ERX-CERNET-BKB China Education and Rese 8151 4161 3388 587 Uninet S.A. de C.V., MX 7545 4057 408 415 TPG-INTERNET-AP TPG Telecom Limited, AU 10620 3594 541 253 Telmex Colombia S.A., CO 39891 3520 187 21 ALJAWWALSTC-AS, SA 6327 3383 1323 84 SHAW - Shaw Communications Inc., CA 22773 3276 2988 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 12479 3058 1316 804 UNI2-AS, ES 4766 2858 11132 774 KIXS-AS-KR Korea Telecom, KR 20940 2855 846 2071 AKAMAI-ASN1, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 7545 4057 3642 TPG-INTERNET-AP TPG Telecom Limited, AU 8151 4161 3574 Uninet S.A. de C.V., MX 39891 3520 3499 ALJAWWALSTC-AS, SA 10620 3594 3341 Telmex Colombia S.A., CO 6327 3383 3299 SHAW - Shaw Communications Inc., CA 22773 3276 3127 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 17974 2710 2630 TELKOMNET-AS2-AP PT Telekomunikasi Indonesia, I 9394 2630 2601 CTTNET China TieTong Telecommunications Corpora 7552 2638 2579 VIETEL-AS-AP Viettel Group, VN 11830 2639 2573 Instituto Costarricense de Electricidad y Telec Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 65456 PRIVATE 31.171.126.0/23 199311 AZRT-LX Local Internet Exchang 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 64513 PRIVATE 62.150.101.0/24 9155 QNET Kuwait, KW 419333 UNALLOCATED 84.17.91.0/24 41933 IPRAGAZ-AS Istanbul/ TURKEY, T 65024 PRIVATE 87.103.234.0/24 39407 CHITATELECOM-AS, RU 65000 PRIVATE 95.179.2.0/24 65001 -Private Use AS-, ZZ 65000 PRIVATE 95.179.3.0/24 65001 -Private Use AS-, ZZ 65000 PRIVATE 95.179.69.0/24 65001 -Private Use AS-, ZZ 65000 PRIVATE 95.179.70.0/24 65001 -Private Use AS-, ZZ 65000 PRIVATE 95.179.92.0/24 65001 -Private Use AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 100.66.224.0/19 209 CENTURYLINK-US-LEGACY-QWEST - Qwest Communicati Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 14.128.14.0/23 10247 NETLINE, ZA 14.192.50.0/23 10247 NETLINE, ZA 14.192.58.0/23 10247 NETLINE, ZA 27.100.7.0/24 56096 UNKNOWN 36.255.250.0/23 10247 NETLINE, ZA 37.44.224.0/20 48666 AS-MAROSNET Moscow, Russia, RU 41.78.180.0/23 37265 -Reserved AS-, ZZ 43.228.144.0/22 9829 BSNL-NIB National Internet Backbone, IN 43.251.20.0/22 9381 WTT-AS-AP WTT HK Limited, HK 43.251.84.0/22 133676 PNPL-AS Precious netcom pvt ltd, IN Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:14 /9:11 /10:37 /11:100 /12:289 /13:563 /14:1094 /15:1896 /16:13317 /17:7834 /18:13616 /19:25232 /20:39103 /21:45091 /22:84770 /23:68868 /24:383905 /25:839 /26:597 /27:652 /28:35 /29:19 /30:17 /31:4 /32:58 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6327 3175 3383 SHAW - Shaw Communications Inc., CA 39891 2946 3520 ALJAWWALSTC-AS, SA 22773 2532 3276 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 18566 2061 2167 MEGAPATH5-US - MegaPath Corporation, US 11830 1986 2639 Instituto Costarricense de Electricidad y Telec 12479 1890 3058 UNI2-AS, ES 30036 1683 1928 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 10620 1594 3594 Telmex Colombia S.A., CO 8551 1529 2066 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 1522 1740 CABLEONE - CABLE ONE, INC., US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1569 2:831 4:19 5:2798 6:59 7:1 8:1100 9:1 12:1872 13:206 14:1755 15:26 16:3 17:187 18:69 20:48 21:3 23:2549 24:2175 25:2 27:2346 31:1950 32:88 35:25 36:497 37:2648 38:1463 39:247 40:103 41:3005 42:545 43:1951 44:100 45:3785 46:3029 47:198 49:1357 50:1043 51:48 52:978 54:353 55:3 56:8 57:42 58:1595 59:1023 60:427 61:2135 62:1800 63:1802 64:4694 65:2225 66:4542 67:2340 68:1169 69:3195 70:1193 71:557 72:2100 74:2670 75:401 76:424 77:1535 78:1669 79:1809 80:1486 81:1418 82:1080 83:778 84:1016 85:2035 86:559 87:1260 88:915 89:2299 90:190 91:6304 92:1186 93:2373 94:2403 95:2734 96:651 97:356 98:928 99:124 100:80 101:1474 102:28 103:17266 104:3274 105:221 106:563 107:1795 108:708 109:2691 110:1588 111:1775 112:1316 113:1379 114:1111 115:1650 116:1646 117:1707 118:2186 119:1674 120:967 121:1072 122:2458 123:1815 124:1460 125:1877 128:975 129:613 130:444 131:1602 132:647 133:194 134:999 135:225 136:440 137:491 138:1950 139:573 140:402 141:686 142:783 143:972 144:799 145:456 146:1159 147:745 148:1535 149:709 150:744 151:1046 152:750 153:308 154:1035 155:753 156:843 157:778 158:623 159:1629 160:869 161:730 162:2550 163:527 164:1025 165:1379 166:397 167:1386 168:3091 169:807 170:3689 171:416 172:1059 173:1925 174:879 175:755 176:1919 177:3927 178:2420 179:1176 180:2237 181:2138 182:2462 183:1132 184:910 185:12725 186:3482 187:2319 188:2702 189:1974 190:8118 191:1450 192:9768 193:5889 194:4774 195:3968 196:2439 197:1428 198:5520 199:5887 200:7311 201:4876 202:10391 203:10083 204:4535 205:2855 206:3062 207:3123 208:3988 209:3932 210:4038 211:2119 212:3010 213:2665 214:903 215:63 216:5852 217:2131 218:899 219:621 220:1735 221:996 222:1053 223:1242 End of report

1 0

Update: New Active Exploit: memcached on port 11211 UDP & TCP being exploited for reflection attacks
by Barry Greene 01 Mar '18

01 Mar '18

[The posting is sent to APOPS, AfNOG, SANOG, PacNOG, SAFNOG, CaribNOG, TZNOG, MENOG, SDNOG, LACNOG, IRNOG, MYNOG, SGOPS, and the RIPE Routing WG.] UPDATE: As of 2018-02-28, more attacks using the memcached reflection vector have been unleashed on the Internet. Operators are asked to port filter (Exploitable Port Filters), rate limits the port 11211 UDP traffic (ingress and egress), and clean up any memcached exposed to the Internet (iptables on UNIX works). These mitigations should be on IPv4 and IPv6! There is not excuse for ISPs, Telcos, and other operators for not acting. NTT is an example of action. As stated by Job Snijders <job(a)ntt.net <mailto:job@ntt.net>> on the NANOG List: “NTT too has deployed rate limiters on all external facing interfaces on the GIN backbone – for UDP/11211 traffic – to dampen the negative impact of open memcached instances on peers and customers. The toxic combination of ‘one spoofed packet can yield multiple reponse packets’ and ‘one small packet can yield a very big response’ makes the memcached UDP protocol a fine example of double trouble with potential for severe operational impact.” This post has been updated with recommendations. Check with your network vendors for deployment/configuration details. http://www.senki.org/memcached-on-port-11211-udp-tcp-being-exploited/ <http://www.senki.org/memcached-on-port-11211-udp-tcp-being-exploited/> ----------------

2 1

New Active Exploit: memcached on port 11211 UDP & TCP being exploited for reflection attacks
by Barry Greene 27 Feb '18

27 Feb '18

The posting is sent to APOPS, AfNOG, SANOG, PacNOG, SAFNOG, CaribNOG, TZNOG, MENOG, SDNOG, LACNOG, IRNOG, MYNOG, SGOPS, and the RIPE Routing WG. If you have not already seen it, experiences it, or read about it, working to head off another reflection DOS vector. This time it is memcached on port 11211 UDP & TCP. There are active exploits using these ports. The attacks started in Europe over the last couple of days. * We’re doing an Operator notification to get more to deploy Exploitable Port Filters (iACLs). Please let me know 1:1 if your team blogs about this (I’ll add to the resource list). * Operators are asked to review their networks and consider updating their Exploitable Port Filters (Infrastructure ACLs) to track or block UDP/TCP port 11211 for all ingress and egress traffic. If you do not know about iACLs or Explorable port filters, you can use this white paper details and examples from peers on Exploitable Port Filters: http://www.senki.org/operators-security-toolkit/filtering-exploitable-ports… <http://www.senki.org/operators-security-toolkit/filtering-exploitable-ports…> * Enterprises are also asked to update their iACLs, Exploitable Port Filters, and Firewalls to track or block UDP/TCP port 11211 for all ingress and egress traffic. Deploying these filters will help protect your network, your organization, your customers, and the Internet. Ping me 1:1 if you have questions. I’m doing updates here: http://www.senki.org/memcached-on-port-11211-udp-tcp-being-exploited/ <http://www.senki.org/memcached-on-port-11211-udp-tcp-being-exploited/>. Sincerely, -- Barry Raveendran Greene Security Geek helping with OPSEC Trust Mobile: +1 408 218 4669 E-mail: bgreene(a)senki.org <mailto:bgreene@senki.org> ---------------------------- Resources on memcached Exploit (to evaluate your risk): More information about this attack vector can be found at the following: • JPCERT – memcached のアクセス制御に関する注意喚起 (JPCERT-AT-2018-0009) http://www.jpcert.or.jp/at/2018/at180009.html <http://www.jpcert.or.jp/at/2018/at180009.html> • Qrator Labs: The memcached amplification attacks reaching 500 Gbps https://medium.com/@qratorlabs/the-memcached-amplification-attack-reaching-… <https://medium.com/@qratorlabs/the-memcached-amplification-attack-reaching-…> • Rapid 7: The Flip Side of memcrashed https://blog.rapid7.com/2018/02/27/the-flip-side-of-memcrashed/ <https://blog.rapid7.com/2018/02/27/the-flip-side-of-memcrashed/> • Akamai: Memcached UDP Reflection Attacks https://blogs.akamai.com/2018/02/memcached-udp-reflection-attacks.html <https://blogs.akamai.com/2018/02/memcached-udp-reflection-attacks.html> • Arbor Networks: memcached Reflection/Amplification Description and DDoS Attack Mitigation Recommendations https://www.arbornetworks.com/blog/asert/memcached-reflection-amplification… <https://www.arbornetworks.com/blog/asert/memcached-reflection-amplification…> • Cloudflare: Memcrashed – Major amplification attacks from UDP port 11211 https://blog.cloudflare.com/memcrashed-major-amplification-attacks-from-por… <https://blog.cloudflare.com/memcrashed-major-amplification-attacks-from-por…> • Link11: New High-Volume Vector: Memcached Reflection Amplification Attacks https://www.link11.com/en/blog/new-high-volume-vector-memcached-reflection-… <https://www.link11.com/en/blog/new-high-volume-vector-memcached-reflection-…> • Blackhat Talk: The New Page of Injections Book: Memcached Injections by Ivan Novikov https://www.blackhat.com/docs/us-14/materials/us-14-Novikov-The-New-Page-Of… <https://www.blackhat.com/docs/us-14/materials/us-14-Novikov-The-New-Page-Of…> • Memcache Exploit http://niiconsulting.com/checkmate/2013/05/memcache-exploit/ <http://niiconsulting.com/checkmate/2013/05/memcache-exploit/>

1 0

Weekly Routing Table Report
by cscora＠apnic.net 23 Feb '18

23 Feb '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG, CaribNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 24 Feb, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 686347 Prefixes after maximum aggregation (per Origin AS): 266472 Deaggregation factor: 2.58 Unique aggregates announced (without unneeded subnets): 331010 Total ASes present in the Internet Routing Table: 59912 Prefixes per ASN: 11.46 Origin-only ASes present in the Internet Routing Table: 51754 Origin ASes announcing only one prefix: 22732 Transit ASes present in the Internet Routing Table: 8158 Transit-only ASes present in the Internet Routing Table: 251 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 35 Max AS path prepend of ASN (262865) 25 Prefixes from unregistered ASNs in the Routing Table: 57 Number of instances of unregistered ASNs: 57 Number of 32-bit ASNs allocated by the RIRs: 21595 Number of 32-bit ASNs visible in the Routing Table: 17346 Prefixes from 32-bit ASNs in the Routing Table: 72025 Number of bogon 32-bit ASNs visible in the Routing Table: 11 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 336 Number of addresses announced to Internet: 2854396258 Equivalent to 170 /8s, 34 /16s and 161 /24s Percentage of available address space announced: 77.1 Percentage of allocated address space announced: 77.1 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 98.8 Total number of prefixes smaller than registry allocations: 227261 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 189162 Total APNIC prefixes after maximum aggregation: 54011 APNIC Deaggregation factor: 3.50 Prefixes being announced from the APNIC address blocks: 188124 Unique aggregates announced from the APNIC address blocks: 77606 APNIC Region origin ASes present in the Internet Routing Table: 8664 APNIC Prefixes per ASN: 21.71 APNIC Region origin ASes announcing only one prefix: 2458 APNIC Region transit ASes present in the Internet Routing Table: 1272 Average APNIC Region AS path length visible: 4.3 Max APNIC Region AS path length visible: 27 Number of APNIC region 32-bit ASNs visible in the Routing Table: 3573 Number of APNIC addresses announced to Internet: 767961378 Equivalent to 45 /8s, 198 /16s and 41 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-137529 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 204886 Total ARIN prefixes after maximum aggregation: 98276 ARIN Deaggregation factor: 2.08 Prefixes being announced from the ARIN address blocks: 205810 Unique aggregates announced from the ARIN address blocks: 97004 ARIN Region origin ASes present in the Internet Routing Table: 18098 ARIN Prefixes per ASN: 11.37 ARIN Region origin ASes announcing only one prefix: 6699 ARIN Region transit ASes present in the Internet Routing Table: 1797 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 24 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2314 Number of ARIN addresses announced to Internet: 1104112928 Equivalent to 65 /8s, 207 /16s and 109 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-397212 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 185727 Total RIPE prefixes after maximum aggregation: 90672 RIPE Deaggregation factor: 2.05 Prefixes being announced from the RIPE address blocks: 181965 Unique aggregates announced from the RIPE address blocks: 108868 RIPE Region origin ASes present in the Internet Routing Table: 24920 RIPE Prefixes per ASN: 7.30 RIPE Region origin ASes announcing only one prefix: 11340 RIPE Region transit ASes present in the Internet Routing Table: 3490 Average RIPE Region AS path length visible: 4.4 Max RIPE Region AS path length visible: 28 Number of RIPE region 32-bit ASNs visible in the Routing Table: 6695 Number of RIPE addresses announced to Internet: 714129024 Equivalent to 42 /8s, 144 /16s and 190 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 88237 Total LACNIC prefixes after maximum aggregation: 19490 LACNIC Deaggregation factor: 4.53 Prefixes being announced from the LACNIC address blocks: 89586 Unique aggregates announced from the LACNIC address blocks: 39876 LACNIC Region origin ASes present in the Internet Routing Table: 6838 LACNIC Prefixes per ASN: 13.10 LACNIC Region origin ASes announcing only one prefix: 1870 LACNIC Region transit ASes present in the Internet Routing Table: 1265 Average LACNIC Region AS path length visible: 5.1 Max LACNIC Region AS path length visible: 35 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 4374 Number of LACNIC addresses announced to Internet: 171976096 Equivalent to 10 /8s, 64 /16s and 37 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 18276 Total AfriNIC prefixes after maximum aggregation: 3978 AfriNIC Deaggregation factor: 4.59 Prefixes being announced from the AfriNIC address blocks: 20526 Unique aggregates announced from the AfriNIC address blocks: 7384 AfriNIC Region origin ASes present in the Internet Routing Table: 1116 AfriNIC Prefixes per ASN: 18.39 AfriNIC Region origin ASes announcing only one prefix: 364 AfriNIC Region transit ASes present in the Internet Routing Table: 225 Average AfriNIC Region AS path length visible: 4.7 Max AfriNIC Region AS path length visible: 21 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 390 Number of AfriNIC addresses announced to Internet: 95808768 Equivalent to 5 /8s, 181 /16s and 237 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5436 4195 92 ERX-CERNET-BKB China Education and Rese 7545 3794 407 414 TPG-INTERNET-AP TPG Telecom Limited, AU 4766 2859 11132 770 KIXS-AS-KR Korea Telecom, KR 9829 2802 1499 540 BSNL-NIB National Internet Backbone, IN 17974 2708 934 80 TELKOMNET-AS2-AP PT Telekomunikasi Indo 7552 2633 1161 59 VIETEL-AS-AP Viettel Group, VN 9394 2629 4923 28 CTTNET China TieTong Telecommunications 45899 2586 1558 154 VNPT-AS-VN VNPT Corp, VN 9808 2181 8699 32 CMNET-GD Guangdong Mobile Communication 4755 2083 417 215 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3363 1323 86 SHAW - Shaw Communications Inc., CA 22773 3272 2987 148 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 18566 2166 405 108 MEGAPATH5-US - MegaPath Corporation, US 20115 2089 2411 433 CHARTER-NET-HKY-NC - Charter Communicat 16509 2034 4277 595 AMAZON-02 - Amazon.com, Inc., US 209 1938 5062 626 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 30036 1922 337 199 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 6389 1862 3671 36 BELLSOUTH-NET-BLK - BellSouth.net Inc., 11492 1729 227 579 CABLEONE - CABLE ONE, INC., US 7018 1683 20179 1248 ATT-INTERNET4 - AT&T Services, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 39891 3520 187 21 ALJAWWALSTC-AS, SA 20940 2843 837 2059 AKAMAI-ASN1, US 12479 2780 1254 671 UNI2-AS, ES 8551 2099 378 43 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2028 1862 704 ROSTELECOM-AS, RU 34984 1992 332 474 TELLCOM-AS, TR 9121 1987 1692 19 TTNET, TR 13188 1606 100 46 TRIOLAN, UA 6849 1241 355 21 UKRTELNET, UA 8402 1239 544 14 CORBINA-AS OJSC "Vimpelcom", RU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 4163 3389 588 Uninet S.A. de C.V., MX 10620 3599 542 238 Telmex Colombia S.A., CO 11830 2643 370 66 Instituto Costarricense de Electricidad 6503 1628 437 53 Axtel, S.A.B. de C.V., MX 7303 1507 1026 191 Telecom Argentina S.A., AR 3816 1018 511 116 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 1015 377 27 Telefonica del Peru S.A.A., PE 28573 1011 2244 187 CLARO S.A., BR 11172 923 126 86 Alestra, S. de R.L. de C.V., MX 18881 907 1072 29 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1182 398 49 LINKdotNET-AS, EG 37611 803 91 8 Afrihost, ZA 36903 739 371 135 MT-MPLS, MA 36992 671 1380 36 ETISALAT-MISR, EG 8452 596 1730 18 TE-AS TE-AS, EG 24835 522 850 15 RAYA-AS, EG 29571 467 68 12 ORANGE-COTE-IVOIRE, CI 37492 454 376 80 ORANGE-, TN 15399 362 35 7 WANANCHI-, KE 37342 360 32 1 MOVITEL, MZ Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5436 4195 92 ERX-CERNET-BKB China Education and Rese 8151 4163 3389 588 Uninet S.A. de C.V., MX 7545 3794 407 414 TPG-INTERNET-AP TPG Telecom Limited, AU 10620 3599 542 238 Telmex Colombia S.A., CO 39891 3520 187 21 ALJAWWALSTC-AS, SA 6327 3363 1323 86 SHAW - Shaw Communications Inc., CA 22773 3272 2987 148 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 4766 2859 11132 770 KIXS-AS-KR Korea Telecom, KR 20940 2843 837 2059 AKAMAI-ASN1, US 9829 2802 1499 540 BSNL-NIB National Internet Backbone, IN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 8151 4163 3575 Uninet S.A. de C.V., MX 39891 3520 3499 ALJAWWALSTC-AS, SA 7545 3794 3380 TPG-INTERNET-AP TPG Telecom Limited, AU 10620 3599 3361 Telmex Colombia S.A., CO 6327 3363 3277 SHAW - Shaw Communications Inc., CA 22773 3272 3124 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 17974 2708 2628 TELKOMNET-AS2-AP PT Telekomunikasi Indonesia, I 9394 2629 2601 CTTNET China TieTong Telecommunications Corpora 11830 2643 2577 Instituto Costarricense de Electricidad y Telec 7552 2633 2574 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 65456 PRIVATE 31.171.126.0/23 199311 AZRT-LX Local Internet Exchang 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 64513 PRIVATE 62.150.101.0/24 9155 QNET Kuwait, KW 419333 UNALLOCATED 84.17.91.0/24 41933 IPRAGAZ-AS Istanbul/ TURKEY, T 65024 PRIVATE 87.103.234.0/24 39407 CHITATELECOM-AS, RU 65000 PRIVATE 95.179.2.0/24 65001 -Private Use AS-, ZZ 65000 PRIVATE 95.179.3.0/24 65001 -Private Use AS-, ZZ 65000 PRIVATE 95.179.69.0/24 65001 -Private Use AS-, ZZ 65000 PRIVATE 95.179.70.0/24 65001 -Private Use AS-, ZZ 65000 PRIVATE 95.179.92.0/24 65001 -Private Use AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 100.66.224.0/19 209 CENTURYLINK-US-LEGACY-QWEST - Qwest Communicati Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 14.128.14.0/23 10247 NETLINE, ZA 14.192.50.0/23 10247 NETLINE, ZA 14.192.58.0/23 10247 NETLINE, ZA 27.100.7.0/24 56096 UNKNOWN 36.255.250.0/23 10247 NETLINE, ZA 37.44.224.0/20 48666 AS-MAROSNET Moscow, Russia, RU 41.78.180.0/23 37265 -Reserved AS-, ZZ 43.228.144.0/22 9829 BSNL-NIB National Internet Backbone, IN 43.251.20.0/22 9381 WTT-AS-AP WTT HK Limited, HK 43.251.84.0/22 133676 PNPL-AS Precious netcom pvt ltd, IN Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:14 /9:11 /10:37 /11:100 /12:290 /13:563 /14:1094 /15:1900 /16:13325 /17:7788 /18:13608 /19:25221 /20:39069 /21:45132 /22:84561 /23:68585 /24:382819 /25:842 /26:599 /27:654 /28:35 /29:20 /30:18 /31:4 /32:58 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6327 3154 3363 SHAW - Shaw Communications Inc., CA 39891 2946 3520 ALJAWWALSTC-AS, SA 22773 2530 3272 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 18566 2060 2166 MEGAPATH5-US - MegaPath Corporation, US 11830 1989 2643 Instituto Costarricense de Electricidad y Telec 30036 1677 1922 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 12479 1644 2780 UNI2-AS, ES 10620 1592 3599 Telmex Colombia S.A., CO 8551 1562 2099 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 1515 1729 CABLEONE - CABLE ONE, INC., US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1568 2:843 4:18 5:2652 6:59 7:1 8:1106 9:1 12:1868 13:204 14:1755 15:26 16:3 17:186 18:68 20:49 21:3 23:2541 24:2136 25:2 27:2346 31:1937 32:88 35:24 36:492 37:2629 38:1463 39:245 40:103 41:2997 42:538 43:1953 44:97 45:3727 46:3018 47:200 49:1362 50:1041 51:48 52:976 54:360 55:6 56:7 57:42 58:1596 59:1038 60:387 61:2062 62:1801 63:1803 64:4721 65:2226 66:4534 67:2342 68:1169 69:3189 70:1171 71:559 72:2099 74:2671 75:398 76:425 77:1520 78:1685 79:1845 80:1487 81:1414 82:1082 83:794 84:1006 85:2020 86:556 87:1258 88:919 89:2295 90:186 91:6283 92:1178 93:2369 94:2410 95:2735 96:650 97:357 98:928 99:120 100:79 101:1474 102:26 103:17188 104:3275 105:220 106:542 107:1803 108:708 109:2697 110:1572 111:1773 112:1312 113:1379 114:1129 115:1636 116:1642 117:1699 118:2202 119:1675 120:968 121:1059 122:2463 123:1802 124:1458 125:1855 128:987 129:602 130:434 131:1604 132:615 133:194 134:997 135:226 136:439 137:477 138:1961 139:568 140:402 141:684 142:779 143:989 144:797 145:454 146:1164 147:747 148:1535 149:704 150:736 151:987 152:761 153:309 154:1024 155:755 156:838 157:772 158:623 159:1617 160:865 161:737 162:2548 163:523 164:1021 165:1391 166:396 167:1389 168:3095 169:805 170:3657 171:414 172:1038 173:1921 174:877 175:753 176:1920 177:3952 178:2423 179:1156 180:2240 181:2143 182:2467 183:1131 184:906 185:12596 186:3452 187:2318 188:2676 189:1968 190:8118 191:1365 192:9789 193:5889 194:4778 195:3981 196:2419 197:1418 198:5523 199:5890 200:7320 201:4881 202:10372 203:10038 204:4542 205:2870 206:3064 207:3120 208:3989 209:3926 210:4039 211:2116 212:2995 213:2623 214:902 215:61 216:5850 217:2137 218:899 219:621 220:1726 221:996 222:1053 223:1238 End of report

1 0

Weekly Routing Table Report
by cscora＠apnic.net 16 Feb '18

16 Feb '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG, CaribNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 17 Feb, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 684637 Prefixes after maximum aggregation (per Origin AS): 265970 Deaggregation factor: 2.57 Unique aggregates announced (without unneeded subnets): 330947 Total ASes present in the Internet Routing Table: 59858 Prefixes per ASN: 11.44 Origin-only ASes present in the Internet Routing Table: 51687 Origin ASes announcing only one prefix: 22724 Transit ASes present in the Internet Routing Table: 8171 Transit-only ASes present in the Internet Routing Table: 246 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 35 Max AS path prepend of ASN (262865) 25 Prefixes from unregistered ASNs in the Routing Table: 60 Number of instances of unregistered ASNs: 65 Number of 32-bit ASNs allocated by the RIRs: 21513 Number of 32-bit ASNs visible in the Routing Table: 17291 Prefixes from 32-bit ASNs in the Routing Table: 71701 Number of bogon 32-bit ASNs visible in the Routing Table: 16 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 327 Number of addresses announced to Internet: 2859150498 Equivalent to 170 /8s, 107 /16s and 44 /24s Percentage of available address space announced: 77.2 Percentage of allocated address space announced: 77.2 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 98.8 Total number of prefixes smaller than registry allocations: 226547 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 188710 Total APNIC prefixes after maximum aggregation: 53959 APNIC Deaggregation factor: 3.50 Prefixes being announced from the APNIC address blocks: 187716 Unique aggregates announced from the APNIC address blocks: 77588 APNIC Region origin ASes present in the Internet Routing Table: 8644 APNIC Prefixes per ASN: 21.72 APNIC Region origin ASes announcing only one prefix: 2446 APNIC Region transit ASes present in the Internet Routing Table: 1277 Average APNIC Region AS path length visible: 4.3 Max APNIC Region AS path length visible: 27 Number of APNIC region 32-bit ASNs visible in the Routing Table: 3548 Number of APNIC addresses announced to Internet: 767863586 Equivalent to 45 /8s, 196 /16s and 171 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-137529 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 204508 Total ARIN prefixes after maximum aggregation: 98090 ARIN Deaggregation factor: 2.08 Prefixes being announced from the ARIN address blocks: 205428 Unique aggregates announced from the ARIN address blocks: 96860 ARIN Region origin ASes present in the Internet Routing Table: 18091 ARIN Prefixes per ASN: 11.36 ARIN Region origin ASes announcing only one prefix: 6692 ARIN Region transit ASes present in the Internet Routing Table: 1802 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 24 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2311 Number of ARIN addresses announced to Internet: 1108954656 Equivalent to 66 /8s, 25 /16s and 78 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-397212 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 185052 Total RIPE prefixes after maximum aggregation: 90426 RIPE Deaggregation factor: 2.05 Prefixes being announced from the RIPE address blocks: 181322 Unique aggregates announced from the RIPE address blocks: 109009 RIPE Region origin ASes present in the Internet Routing Table: 24892 RIPE Prefixes per ASN: 7.28 RIPE Region origin ASes announcing only one prefix: 11332 RIPE Region transit ASes present in the Internet Routing Table: 3495 Average RIPE Region AS path length visible: 4.4 Max RIPE Region AS path length visible: 28 Number of RIPE region 32-bit ASNs visible in the Routing Table: 6670 Number of RIPE addresses announced to Internet: 713989248 Equivalent to 42 /8s, 142 /16s and 156 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 88104 Total LACNIC prefixes after maximum aggregation: 19488 LACNIC Deaggregation factor: 4.52 Prefixes being announced from the LACNIC address blocks: 89436 Unique aggregates announced from the LACNIC address blocks: 39904 LACNIC Region origin ASes present in the Internet Routing Table: 6840 LACNIC Prefixes per ASN: 13.08 LACNIC Region origin ASes announcing only one prefix: 1887 LACNIC Region transit ASes present in the Internet Routing Table: 1260 Average LACNIC Region AS path length visible: 5.1 Max LACNIC Region AS path length visible: 35 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 4369 Number of LACNIC addresses announced to Internet: 172280544 Equivalent to 10 /8s, 68 /16s and 202 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 18201 Total AfriNIC prefixes after maximum aggregation: 3960 AfriNIC Deaggregation factor: 4.60 Prefixes being announced from the AfriNIC address blocks: 20408 Unique aggregates announced from the AfriNIC address blocks: 7329 AfriNIC Region origin ASes present in the Internet Routing Table: 1118 AfriNIC Prefixes per ASN: 18.25 AfriNIC Region origin ASes announcing only one prefix: 366 AfriNIC Region transit ASes present in the Internet Routing Table: 224 Average AfriNIC Region AS path length visible: 4.7 Max AfriNIC Region AS path length visible: 21 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 393 Number of AfriNIC addresses announced to Internet: 95677696 Equivalent to 5 /8s, 179 /16s and 237 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5436 4195 92 ERX-CERNET-BKB China Education and Rese 7545 3778 407 412 TPG-INTERNET-AP TPG Telecom Limited, AU 4766 2869 11132 770 KIXS-AS-KR Korea Telecom, KR 9829 2801 1499 540 BSNL-NIB National Internet Backbone, IN 17974 2711 934 76 TELKOMNET-AS2-AP PT Telekomunikasi Indo 7552 2635 1161 60 VIETEL-AS-AP Viettel Group, VN 9394 2629 4923 28 CTTNET China TieTong Telecommunications 45899 2587 1558 154 VNPT-AS-VN VNPT Corp, VN 9808 2181 8699 32 CMNET-GD Guangdong Mobile Communication 4755 2079 416 214 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3391 1323 86 SHAW - Shaw Communications Inc., CA 22773 3272 2987 147 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 18566 2166 405 108 MEGAPATH5-US - MegaPath Corporation, US 20115 2088 2406 435 CHARTER-NET-HKY-NC - Charter Communicat 16509 2019 4164 592 AMAZON-02 - Amazon.com, Inc., US 209 1937 5060 625 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 30036 1919 337 197 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 6389 1862 3671 36 BELLSOUTH-NET-BLK - BellSouth.net Inc., 11492 1732 229 571 CABLEONE - CABLE ONE, INC., US 7018 1685 20187 1251 ATT-INTERNET4 - AT&T Services, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 39891 3520 187 21 ALJAWWALSTC-AS, SA 20940 2835 828 2054 AKAMAI-ASN1, US 12479 2538 1193 511 UNI2-AS, ES 8551 2073 378 43 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2058 1862 704 ROSTELECOM-AS, RU 34984 1995 332 474 TELLCOM-AS, TR 9121 1972 1692 19 TTNET, TR 13188 1606 100 46 TRIOLAN, UA 6849 1241 355 21 UKRTELNET, UA 8402 1237 544 14 CORBINA-AS OJSC "Vimpelcom", RU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 4159 3388 585 Uninet S.A. de C.V., MX 10620 3594 541 252 Telmex Colombia S.A., CO 11830 2642 370 66 Instituto Costarricense de Electricidad 6503 1629 437 53 Axtel, S.A.B. de C.V., MX 7303 1507 1026 191 Telecom Argentina S.A., AR 3816 1018 511 116 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 28573 1018 2243 186 CLARO S.A., BR 6147 1002 377 27 Telefonica del Peru S.A.A., PE 11172 921 126 86 Alestra, S. de R.L. de C.V., MX 18881 906 1069 29 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1177 398 49 LINKdotNET-AS, EG 37611 802 91 8 Afrihost, ZA 36903 739 371 135 MT-MPLS, MA 36992 678 1380 37 ETISALAT-MISR, EG 8452 612 1730 18 TE-AS TE-AS, EG 24835 517 850 15 RAYA-AS, EG 29571 464 68 12 ORANGE-COTE-IVOIRE, CI 37492 451 368 78 ORANGE-, TN 15399 362 35 7 WANANCHI-, KE 37342 358 32 1 MOVITEL, MZ Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5436 4195 92 ERX-CERNET-BKB China Education and Rese 8151 4159 3388 585 Uninet S.A. de C.V., MX 7545 3778 407 412 TPG-INTERNET-AP TPG Telecom Limited, AU 10620 3594 541 252 Telmex Colombia S.A., CO 39891 3520 187 21 ALJAWWALSTC-AS, SA 6327 3391 1323 86 SHAW - Shaw Communications Inc., CA 22773 3272 2987 147 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 4766 2869 11132 770 KIXS-AS-KR Korea Telecom, KR 20940 2835 828 2054 AKAMAI-ASN1, US 9829 2801 1499 540 BSNL-NIB National Internet Backbone, IN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 8151 4159 3574 Uninet S.A. de C.V., MX 39891 3520 3499 ALJAWWALSTC-AS, SA 7545 3778 3366 TPG-INTERNET-AP TPG Telecom Limited, AU 10620 3594 3342 Telmex Colombia S.A., CO 6327 3391 3305 SHAW - Shaw Communications Inc., CA 22773 3272 3125 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 17974 2711 2635 TELKOMNET-AS2-AP PT Telekomunikasi Indonesia, I 9394 2629 2601 CTTNET China TieTong Telecommunications Corpora 11830 2642 2576 Instituto Costarricense de Electricidad y Telec 7552 2635 2575 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 65249 PRIVATE 5.42.234.0/23 35753 ITC ITC AS number, SA 65249 PRIVATE 5.42.234.0/24 35753 ITC ITC AS number, SA 65456 PRIVATE 31.171.126.0/23 199311 AZRT-LX Local Internet Exchang 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 64513 PRIVATE 62.150.101.0/24 9155 QNET Kuwait, KW 419333 UNALLOCATED 84.17.91.0/24 41933 IPRAGAZ-AS Istanbul/ TURKEY, T 65024 PRIVATE 87.103.234.0/24 39407 CHITATELECOM-AS, RU 65000 PRIVATE 95.179.2.0/24 65001 -Private Use AS-, ZZ 65000 PRIVATE 95.179.3.0/24 65001 -Private Use AS-, ZZ 65000 PRIVATE 95.179.69.0/24 65001 -Private Use AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 14.128.14.0/23 10247 NETLINE, ZA 14.192.50.0/23 10247 NETLINE, ZA 14.192.58.0/23 10247 NETLINE, ZA 27.100.7.0/24 56096 UNKNOWN 36.255.250.0/23 10247 NETLINE, ZA 41.78.180.0/23 37265 -Reserved AS-, ZZ 43.228.144.0/22 9829 BSNL-NIB National Internet Backbone, IN 43.251.20.0/22 9381 WTT-AS-AP WTT HK Limited, HK 43.251.84.0/22 133676 PNPL-AS Precious netcom pvt ltd, IN 43.251.84.0/23 133676 PNPL-AS Precious netcom pvt ltd, IN Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:15 /9:12 /10:37 /11:100 /12:290 /13:563 /14:1093 /15:1897 /16:13322 /17:7772 /18:13608 /19:25217 /20:38997 /21:45069 /22:84323 /23:68271 /24:381816 /25:840 /26:603 /27:656 /28:36 /29:20 /30:18 /31:4 /32:58 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6327 3182 3391 SHAW - Shaw Communications Inc., CA 39891 2946 3520 ALJAWWALSTC-AS, SA 22773 2532 3272 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 18566 2060 2166 MEGAPATH5-US - MegaPath Corporation, US 11830 1988 2642 Instituto Costarricense de Electricidad y Telec 30036 1675 1919 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 10620 1589 3594 Telmex Colombia S.A., CO 8551 1536 2073 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 1514 1732 CABLEONE - CABLE ONE, INC., US 9121 1457 1972 TTNET, TR Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1535 2:843 4:18 5:2650 6:59 8:1102 9:1 12:1849 13:203 14:1754 15:26 16:3 17:182 18:67 20:49 21:3 23:2540 24:2065 25:2 27:2354 31:1944 32:88 35:24 36:491 37:2609 38:1463 39:245 40:101 41:2986 42:453 43:1959 44:96 45:3706 46:2988 47:200 49:1380 50:1043 51:47 52:957 54:351 55:6 56:7 57:42 58:1565 59:1037 60:388 61:2061 62:1794 63:1810 64:4720 65:2228 66:4519 67:2342 68:1174 69:3196 70:1134 71:560 72:2092 74:2668 75:398 76:424 77:1553 78:1669 79:1821 80:1472 81:1410 82:1077 83:786 84:1007 85:2007 86:559 87:1247 88:917 89:2316 90:183 91:6271 92:1168 93:2382 94:2408 95:2730 96:644 97:359 98:929 99:120 100:79 101:1515 102:26 103:17197 104:3275 105:216 106:533 107:1801 108:707 109:2695 110:1580 111:1779 112:1314 113:1350 114:1117 115:1634 116:1641 117:1710 118:2024 119:1674 120:964 121:1063 122:2461 123:1797 124:1456 125:1849 128:988 129:603 130:442 131:1626 132:610 133:194 134:1001 135:226 136:438 137:474 138:1961 139:563 140:397 141:681 142:776 143:974 144:792 145:453 146:1162 147:742 148:1535 149:700 150:735 151:988 152:757 153:309 154:1015 155:754 156:833 157:772 158:619 159:1612 160:865 161:739 162:2543 163:526 164:1017 165:1368 166:397 167:1387 168:3102 169:801 170:3647 171:413 172:1032 173:1916 174:876 175:760 176:1919 177:3915 178:2416 179:1185 180:2238 181:2131 182:2462 183:1122 184:907 185:12537 186:3491 187:2321 188:2667 189:1951 190:8071 191:1349 192:9779 193:5885 194:4775 195:3986 196:2367 197:1426 198:5529 199:5898 200:7301 201:4889 202:10365 203:10027 204:4537 205:2862 206:3055 207:3114 208:3994 209:3934 210:4001 211:2129 212:2972 213:2623 214:895 215:61 216:5857 217:2124 218:898 219:621 220:1725 221:996 222:1054 223:1241 End of report

1 0

Implementation of NWI-5 out of region ROUTE(6) objects
by denis walker 12 Feb '18

12 Feb '18

Colleagues Based on the proposal by Tim for NWI-5 and the following discussions, the DB-WG co-chairs would like the RIPE NCC to schedule implementation of the following actions: -Remove the ASN authorisation requirement for ROUTE(6) object creation -Deprecate the "mnt-routes:" attribute in the AUT-NUM object -Remove the 'pending object creation' functionality for route creation -Create the source 'RIPE-NONAUTH' -Move all ROUTE(6) objects relating to non RIPE managed address space to this new source (pending eventual deletion after further discussion) -Move all non ripe managed AUT-NUM objects to this new source (pending eventual deletion after further discussion) -Adjust the query service as suggested in Tim's proposal -Disallow creation of any new AUT-NUM or ROUTE(6) objects in the RIPE Database for non RIPE managed resources, but allow existing objects to be modified or deleted -Remove the "mnt-routes:" attribute from all the placeholder INET(6)NUM objects in the RIPE Database for non RIPE managed address space -Delete the MNTNER object with the public password ('fixing' any other database objects that may refer to it) -Update all documentation to reflect the new processes -Ensure that the inter RIR transfer process for resources moving into the RIPE managed address space does not allow the transfer of ROUTE(6) objects from source RIPE-NONAUTH to source RIPE without the agreement of the resource holder cheersDenis & Williamco-chairs DB-WG

1 0

Weekly Routing Table Report
by cscora＠apnic.net 09 Feb '18

09 Feb '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG, CaribNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 10 Feb, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 683940 Prefixes after maximum aggregation (per Origin AS): 265286 Deaggregation factor: 2.58 Unique aggregates announced (without unneeded subnets): 330027 Total ASes present in the Internet Routing Table: 59792 Prefixes per ASN: 11.44 Origin-only ASes present in the Internet Routing Table: 51639 Origin ASes announcing only one prefix: 22710 Transit ASes present in the Internet Routing Table: 8153 Transit-only ASes present in the Internet Routing Table: 244 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 35 Max AS path prepend of ASN (262865) 25 Prefixes from unregistered ASNs in the Routing Table: 62 Number of instances of unregistered ASNs: 62 Number of 32-bit ASNs allocated by the RIRs: 21449 Number of 32-bit ASNs visible in the Routing Table: 17216 Prefixes from 32-bit ASNs in the Routing Table: 71349 Number of bogon 32-bit ASNs visible in the Routing Table: 14 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 335 Number of addresses announced to Internet: 2858858914 Equivalent to 170 /8s, 102 /16s and 185 /24s Percentage of available address space announced: 77.2 Percentage of allocated address space announced: 77.2 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 98.8 Total number of prefixes smaller than registry allocations: 225953 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 188822 Total APNIC prefixes after maximum aggregation: 53851 APNIC Deaggregation factor: 3.51 Prefixes being announced from the APNIC address blocks: 187878 Unique aggregates announced from the APNIC address blocks: 77445 APNIC Region origin ASes present in the Internet Routing Table: 8634 APNIC Prefixes per ASN: 21.76 APNIC Region origin ASes announcing only one prefix: 2446 APNIC Region transit ASes present in the Internet Routing Table: 1272 Average APNIC Region AS path length visible: 4.3 Max APNIC Region AS path length visible: 28 Number of APNIC region 32-bit ASNs visible in the Routing Table: 3536 Number of APNIC addresses announced to Internet: 767608098 Equivalent to 45 /8s, 192 /16s and 197 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-137529 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 204235 Total ARIN prefixes after maximum aggregation: 97874 ARIN Deaggregation factor: 2.09 Prefixes being announced from the ARIN address blocks: 205079 Unique aggregates announced from the ARIN address blocks: 96641 ARIN Region origin ASes present in the Internet Routing Table: 18085 ARIN Prefixes per ASN: 11.34 ARIN Region origin ASes announcing only one prefix: 6696 ARIN Region transit ASes present in the Internet Routing Table: 1799 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 24 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2308 Number of ARIN addresses announced to Internet: 1109188128 Equivalent to 66 /8s, 28 /16s and 222 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-397212 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 184461 Total RIPE prefixes after maximum aggregation: 90070 RIPE Deaggregation factor: 2.05 Prefixes being announced from the RIPE address blocks: 180786 Unique aggregates announced from the RIPE address blocks: 108513 RIPE Region origin ASes present in the Internet Routing Table: 24866 RIPE Prefixes per ASN: 7.27 RIPE Region origin ASes announcing only one prefix: 11318 RIPE Region transit ASes present in the Internet Routing Table: 3485 Average RIPE Region AS path length visible: 4.4 Max RIPE Region AS path length visible: 28 Number of RIPE region 32-bit ASNs visible in the Routing Table: 6632 Number of RIPE addresses announced to Internet: 713714560 Equivalent to 42 /8s, 138 /16s and 107 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 88156 Total LACNIC prefixes after maximum aggregation: 19487 LACNIC Deaggregation factor: 4.52 Prefixes being announced from the LACNIC address blocks: 89484 Unique aggregates announced from the LACNIC address blocks: 39901 LACNIC Region origin ASes present in the Internet Routing Table: 6824 LACNIC Prefixes per ASN: 13.11 LACNIC Region origin ASes announcing only one prefix: 1886 LACNIC Region transit ASes present in the Internet Routing Table: 1264 Average LACNIC Region AS path length visible: 5.1 Max LACNIC Region AS path length visible: 35 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 4351 Number of LACNIC addresses announced to Internet: 172348384 Equivalent to 10 /8s, 69 /16s and 211 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 18202 Total AfriNIC prefixes after maximum aggregation: 3957 AfriNIC Deaggregation factor: 4.60 Prefixes being announced from the AfriNIC address blocks: 20378 Unique aggregates announced from the AfriNIC address blocks: 7260 AfriNIC Region origin ASes present in the Internet Routing Table: 1112 AfriNIC Prefixes per ASN: 18.33 AfriNIC Region origin ASes announcing only one prefix: 363 AfriNIC Region transit ASes present in the Internet Routing Table: 221 Average AfriNIC Region AS path length visible: 4.6 Max AfriNIC Region AS path length visible: 21 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 389 Number of AfriNIC addresses announced to Internet: 95610624 Equivalent to 5 /8s, 178 /16s and 231 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5435 4195 92 ERX-CERNET-BKB China Education and Rese 7545 3781 406 411 TPG-INTERNET-AP TPG Telecom Limited, AU 4766 2854 11132 769 KIXS-AS-KR Korea Telecom, KR 9829 2788 1499 539 BSNL-NIB National Internet Backbone, IN 17974 2762 934 77 TELKOMNET-AS2-AP PT Telekomunikasi Indo 9394 2634 4923 27 CTTNET China TieTong Telecommunications 7552 2611 1161 63 VIETEL-AS-AP Viettel Group, VN 45899 2583 1554 155 VNPT-AS-VN VNPT Corp, VN 9808 2179 8699 32 CMNET-GD Guangdong Mobile Communication 4755 2079 417 215 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3392 1323 86 SHAW - Shaw Communications Inc., CA 22773 3269 2951 143 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 18566 2167 405 108 MEGAPATH5-US - MegaPath Corporation, US 20115 2086 2386 434 CHARTER-NET-HKY-NC - Charter Communicat 16509 2001 4162 574 AMAZON-02 - Amazon.com, Inc., US 6389 1937 3671 39 BELLSOUTH-NET-BLK - BellSouth.net Inc., 209 1933 5059 620 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 30036 1912 335 209 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 11492 1733 229 564 CABLEONE - CABLE ONE, INC., US 7018 1683 20187 1249 ATT-INTERNET4 - AT&T Services, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 39891 3520 187 21 ALJAWWALSTC-AS, SA 20940 2828 822 2049 AKAMAI-ASN1, US 12479 2317 1149 357 UNI2-AS, ES 12389 2104 1859 703 ROSTELECOM-AS, RU 8551 2042 378 43 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 34984 2003 332 474 TELLCOM-AS, TR 9121 1955 1692 19 TTNET, TR 13188 1606 100 46 TRIOLAN, UA 8402 1265 544 14 CORBINA-AS OJSC "Vimpelcom", RU 6849 1240 355 21 UKRTELNET, UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 4154 3380 592 Uninet S.A. de C.V., MX 10620 3590 541 254 Telmex Colombia S.A., CO 11830 2637 370 66 Instituto Costarricense de Electricidad 6503 1618 437 53 Axtel, S.A.B. de C.V., MX 7303 1506 1026 191 Telecom Argentina S.A., AR 6147 1020 377 27 Telefonica del Peru S.A.A., PE 28573 1017 2242 192 CLARO S.A., BR 3816 1015 509 115 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 920 126 85 Alestra, S. de R.L. de C.V., MX 18881 906 1069 29 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1131 398 49 LINKdotNET-AS, EG 37611 797 91 8 Afrihost, ZA 36903 739 371 135 MT-MPLS, MA 36992 675 1380 37 ETISALAT-MISR, EG 8452 584 1730 18 TE-AS TE-AS, EG 24835 505 850 15 RAYA-AS, EG 29571 461 68 12 ORANGE-COTE-IVOIRE, CI 37492 450 368 78 ORANGE-, TN 15399 360 35 7 WANANCHI-, KE 37342 360 32 1 MOVITEL, MZ Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5435 4195 92 ERX-CERNET-BKB China Education and Rese 8151 4154 3380 592 Uninet S.A. de C.V., MX 7545 3781 406 411 TPG-INTERNET-AP TPG Telecom Limited, AU 10620 3590 541 254 Telmex Colombia S.A., CO 39891 3520 187 21 ALJAWWALSTC-AS, SA 6327 3392 1323 86 SHAW - Shaw Communications Inc., CA 22773 3269 2951 143 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 4766 2854 11132 769 KIXS-AS-KR Korea Telecom, KR 20940 2828 822 2049 AKAMAI-ASN1, US 9829 2788 1499 539 BSNL-NIB National Internet Backbone, IN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 8151 4154 3562 Uninet S.A. de C.V., MX 39891 3520 3499 ALJAWWALSTC-AS, SA 7545 3781 3370 TPG-INTERNET-AP TPG Telecom Limited, AU 10620 3590 3336 Telmex Colombia S.A., CO 6327 3392 3306 SHAW - Shaw Communications Inc., CA 22773 3269 3126 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 17974 2762 2685 TELKOMNET-AS2-AP PT Telekomunikasi Indonesia, I 9394 2634 2607 CTTNET China TieTong Telecommunications Corpora 11830 2637 2571 Instituto Costarricense de Electricidad y Telec 7552 2611 2548 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 65249 PRIVATE 5.42.234.0/23 35753 ITC ITC AS number, SA 65249 PRIVATE 5.42.234.0/24 35753 ITC ITC AS number, SA 65456 PRIVATE 31.171.126.0/23 199311 AZRT-LX Local Internet Exchang 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 64513 PRIVATE 62.150.101.0/24 9155 QNET Kuwait, KW 419333 UNALLOCATED 84.17.91.0/24 41933 IPRAGAZ-AS Istanbul/ TURKEY, T 65024 PRIVATE 87.103.234.0/24 39407 CHITATELECOM-AS, RU 65000 PRIVATE 95.179.2.0/24 65001 -Private Use AS-, ZZ 65000 PRIVATE 95.179.3.0/24 65001 -Private Use AS-, ZZ 65000 PRIVATE 95.179.69.0/24 65001 -Private Use AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 14.128.14.0/23 10247 NETLINE, ZA 14.192.50.0/23 10247 NETLINE, ZA 14.192.58.0/23 10247 NETLINE, ZA 27.100.7.0/24 56096 UNKNOWN 36.255.250.0/23 10247 NETLINE, ZA 41.78.180.0/23 37265 -Reserved AS-, ZZ 43.228.144.0/22 9829 BSNL-NIB National Internet Backbone, IN 43.251.20.0/22 9381 WTT-AS-AP WTT HK Limited, HK 43.251.84.0/22 133676 PNPL-AS Precious netcom pvt ltd, IN 43.251.84.0/23 133676 PNPL-AS Precious netcom pvt ltd, IN Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:15 /9:12 /10:37 /11:100 /12:290 /13:563 /14:1093 /15:1899 /16:13313 /17:7789 /18:13645 /19:25298 /20:38917 /21:44994 /22:84062 /23:68095 /24:381610 /25:820 /26:600 /27:652 /28:34 /29:20 /30:18 /31:4 /32:60 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6327 3183 3392 SHAW - Shaw Communications Inc., CA 39891 2946 3520 ALJAWWALSTC-AS, SA 22773 2533 3269 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 18566 2061 2167 MEGAPATH5-US - MegaPath Corporation, US 11830 1983 2637 Instituto Costarricense de Electricidad y Telec 30036 1669 1912 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 10620 1587 3590 Telmex Colombia S.A., CO 11492 1517 1733 CABLEONE - CABLE ONE, INC., US 8551 1505 2042 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 9121 1439 1955 TTNET, TR Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1572 2:845 4:18 5:2652 6:58 8:1098 9:1 12:1851 13:202 14:1757 15:26 16:3 17:184 18:65 20:49 21:3 23:2533 24:2058 25:2 27:2358 31:1958 32:89 35:24 36:489 37:2561 38:1454 39:245 40:101 41:3040 42:538 43:1952 44:95 45:3664 46:3045 47:199 49:1370 50:1040 51:47 52:940 54:352 55:4 56:7 57:42 58:1587 59:1018 60:386 61:2060 62:1796 63:1805 64:4702 65:2224 66:4509 67:2342 68:1179 69:3192 70:1135 71:560 72:2086 74:2685 75:398 76:421 77:1547 78:1676 79:1755 80:1479 81:1406 82:1069 83:777 84:996 85:1995 86:559 87:1241 88:913 89:2330 90:182 91:6280 92:1162 93:2379 94:2395 95:2734 96:645 97:358 98:930 99:118 100:79 101:1516 102:16 103:17120 104:3275 105:218 106:526 107:1792 108:707 109:2694 110:1578 111:1779 112:1313 113:1377 114:1134 115:1621 116:1637 117:1707 118:2200 119:1675 120:962 121:1061 122:2459 123:1805 124:1458 125:1836 128:1006 129:599 130:439 131:1629 132:609 133:193 134:1003 135:227 136:438 137:478 138:1975 139:565 140:401 141:678 142:778 143:984 144:803 145:450 146:1170 147:752 148:1532 149:718 150:738 151:987 152:751 153:311 154:983 155:754 156:832 157:776 158:624 159:1608 160:844 161:723 162:2545 163:525 164:994 165:1365 166:397 167:1390 168:3103 169:799 170:3655 171:412 172:1029 173:1912 174:877 175:766 176:1882 177:3900 178:2409 179:1169 180:2234 181:2128 182:2454 183:1110 184:905 185:12439 186:3434 187:2362 188:2639 189:2005 190:8116 191:1342 192:9766 193:5878 194:4771 195:3991 196:2360 197:1426 198:5531 199:5912 200:7325 201:4882 202:10370 203:9952 204:4537 205:2849 206:3050 207:3118 208:4000 209:3932 210:4016 211:2143 212:2928 213:2612 214:895 215:61 216:5842 217:2126 218:899 219:623 220:1722 221:997 222:1055 223:1239 End of report

1 0