[afnog] SPAMMER (Layi Salako)
Oke-Salako Olayiwola
layi.salako at gmail.com
Mon Oct 26 06:12:04 UTC 2009
Hi Antonio
the IP address belongs to MTN Nigeria Ltd, its owned by their ISP division
(I used to work there before)
You can get in touch with their ISP team lead; Seyi (oluwasog at mtnnigeria.net)
to complain
Cheers!!!
2009/10/23 <afnog-request at afnog.org>
> Send afnog mailing list submissions to
> afnog at afnog.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://afnog.org/mailman/listinfo/afnog
> or, via email, send a message with subject or body 'help' to
> afnog-request at afnog.org
>
> You can reach the person managing the list at
> afnog-owner at afnog.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of afnog digest..."
>
>
> Today's Topics:
>
> 1. SPAMMER (Antonio Godinho)
> 2. Re: SPAMMER (Phil Regnauld)
> 3. Re: SPAMMER (Antonio Godinho)
> 4. Re: SPAMMER (Stephane Bortzmeyer)
> 5. Re: SPAMMER (Antonio Godinho)
> 6. Re: SPAMMER (SM)
> 7. Re: SPAMMER (Lucy Lynch)
> 8. Re: SPAMMER (Antonio Godinho)
> 9. Weekly Routing Table Report (Routing Analysis Role Account)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Fri, 23 Oct 2009 15:35:22 +0200
> From: "Antonio Godinho" <antonio at uem.mz>
> Subject: [afnog] SPAMMER
> To: afnog at afnog.org
> Message-ID: <20091023133258.M98071 at uem.mz>
> Content-Type: text/plain; charset=iso-8859-1
>
> Hi All,
>
> There is an IP address (41.220.75.3) always trying to attack my mail server
> to send SPAM. Anyone knows this IP? It has a reverse lookup of
> mtnngprs.com.
> with no A record!
>
>
> Cheers,
>
> --
> Antonio Godinho
> B.Sc., MCP+I, MCSE, CCNA, CCNP
> CIUEM
> Maputo
> Mozambique
>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>
>
>
> ------------------------------
>
> Message: 2
> Date: Fri, 23 Oct 2009 15:44:30 +0200
> From: Phil Regnauld <regnauld at nsrc.org>
> Subject: Re: [afnog] SPAMMER
> To: Antonio Godinho <antonio at uem.mz>
> Cc: afnog at afnog.org
> Message-ID: <20091023134427.GA5426 at macbook.catpipe.net>
> Content-Type: text/plain; charset=us-ascii
>
> Antonio Godinho (antonio) writes:
> > Hi All,
> >
> > There is an IP address (41.220.75.3) always trying to attack my mail
> server
> > to send SPAM. Anyone knows this IP? It has a reverse lookup of
> mtnngprs.com.
> > with no A record!
>
> Probably hacked - start my blacklisting/nullrouting it. Seems
> filtered
> from here.
>
> Afrinic whois doesn't indicate who owns the block -- but traceroute
> shows tinet.net.
>
> mtnngprs.com gives a contact in ZA:
>
> http://www.mtnbusiness.co.za/Pages/Default.aspx
>
> Maybe you should contact them ?
>
> Also found:
>
> www.mtnngprs.com. A 41.220.75.126
>
> but doesn't answer either.
>
>
>
>
>
>
> ------------------------------
>
> Message: 3
> Date: Fri, 23 Oct 2009 15:50:24 +0200
> From: "Antonio Godinho" <antonio at uem.mz>
> Subject: Re: [afnog] SPAMMER
> To: Phil Regnauld <regnauld at nsrc.org>
> Cc: afnog at afnog.org
> Message-ID: <20091023135000.M74204 at uem.mz>
> Content-Type: text/plain; charset=iso-8859-1
>
> Thanks, will null route it...
>
> Cheers,
>
> AG
>
> On Fri, 23 Oct 2009 15:44:30 +0200, Phil Regnauld wrote
> > Antonio Godinho (antonio) writes:
> > > Hi All,
> > >
> > > There is an IP address (41.220.75.3) always trying to attack my mail
> server
> > > to send SPAM. Anyone knows this IP? It has a reverse lookup of
> mtnngprs.com.
> > > with no A record!
> >
> > Probably hacked - start my blacklisting/nullrouting it. Seems
> filtered
> > from here.
> >
> > Afrinic whois doesn't indicate who owns the block -- but traceroute
> > shows tinet.net.
> >
> > mtnngprs.com gives a contact in ZA:
> >
> > http://www.mtnbusiness.co.za/Pages/Default.aspx
> >
> > Maybe you should contact them ?
> >
> > Also found:
> >
> > www.mtnngprs.com. A 41.220.75.126
> >
> > but doesn't answer either.
> >
> > --
> > This message has been scanned for viruses and
> > dangerous content by MailScanner, and is
> > believed to be clean.
>
>
> --
> Antonio Godinho
> B.Sc., MCP+I, MCSE, CCNA, CCNP
> CIUEM
> Maputo
> Mozambique
>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>
>
>
> ------------------------------
>
> Message: 4
> Date: Fri, 23 Oct 2009 15:52:19 +0200
> From: Stephane Bortzmeyer <bortzmeyer at nic.fr>
> Subject: Re: [afnog] SPAMMER
> To: Antonio Godinho <antonio at uem.mz>
> Cc: afnog at afnog.org
> Message-ID: <20091023135219.GA19515 at nic.fr>
> Content-Type: text/plain; charset=us-ascii
>
> On Fri, Oct 23, 2009 at 03:35:22PM +0200,
> Antonio Godinho <antonio at uem.mz> wrote
> a message of 26 lines which said:
>
> > There is an IP address (41.220.75.3) always trying to attack my mail
> > server to send SPAM. Anyone knows this IP?
>
> Why don't you ask Afrinic's whois server?
>
> inetnum: 41.220.75.0 - 41.220.75.255
> netname: MTNNG-0001-MDSN01-OJT
> descr: IP Block Assigned for Mobile Data Services Network at Ojota
> country: NG
>
> It is indeed known:
>
> % rblcheck 41.220.75.3
> 41.220.75.3 listed by sbl.spamhaus.org
> 41.220.75.3 listed by xbl.spamhaus.org
> 41.220.75.3 listed by pbl.spamhaus.org
> 41.220.75.3 listed by bl.spamcop.net
> 41.220.75.3 not listed by list.dsbl.org
> 41.220.75.3 not listed by dnsbl.njabl.org
> 41.220.75.3 not listed by dul.dnsbl.sorbs.net
>
>
>
> ------------------------------
>
> Message: 5
> Date: Fri, 23 Oct 2009 15:59:02 +0200
> From: "Antonio Godinho" <antonio at uem.mz>
> Subject: Re: [afnog] SPAMMER
> To: Stephane Bortzmeyer <bortzmeyer at nic.fr>
> Cc: afnog at afnog.org
> Message-ID: <20091023135829.M65546 at uem.mz>
> Content-Type: text/plain; charset=iso-8859-1
>
> I did get that info, I just thought someone here might know the network so
> that I could talk to them.
>
> Cheers,
>
> AG
>
> On Fri, 23 Oct 2009 15:52:19 +0200, Stephane Bortzmeyer wrote
> > On Fri, Oct 23, 2009 at 03:35:22PM +0200,
> > Antonio Godinho <antonio at uem.mz> wrote
> > a message of 26 lines which said:
> >
> > > There is an IP address (41.220.75.3) always trying to attack my mail
> > > server to send SPAM. Anyone knows this IP?
> >
> > Why don't you ask Afrinic's whois server?
> >
> > inetnum: 41.220.75.0 - 41.220.75.255
> > netname: MTNNG-0001-MDSN01-OJT
> > descr: IP Block Assigned for Mobile Data Services Network
> > at Ojota country: NG
> >
> > It is indeed known:
> >
> > % rblcheck 41.220.75.3
> > 41.220.75.3 listed by sbl.spamhaus.org
> > 41.220.75.3 listed by xbl.spamhaus.org
> > 41.220.75.3 listed by pbl.spamhaus.org
> > 41.220.75.3 listed by bl.spamcop.net
> > 41.220.75.3 not listed by list.dsbl.org
> > 41.220.75.3 not listed by dnsbl.njabl.org
> > 41.220.75.3 not listed by dul.dnsbl.sorbs.net
> >
> > --
> > This message has been scanned for viruses and
> > dangerous content by MailScanner, and is
> > believed to be clean.
>
>
> --
> Antonio Godinho
> B.Sc., MCP+I, MCSE, CCNA, CCNP
> CIUEM
> Maputo
> Mozambique
>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>
>
>
> ------------------------------
>
> Message: 6
> Date: Fri, 23 Oct 2009 07:29:38 -0700
> From: SM <sm at resistor.net>
> Subject: Re: [afnog] SPAMMER
> To: Antonio Godinho <antonio at uem.mz>
> Cc: afnog at afnog.org
> Message-ID: <6.2.5.6.2.20091023070222.04336f00 at resistor.net>
> Content-Type: text/plain; charset="us-ascii"; format=flowed
>
> Hi Antonio,
>
> This message is also copied to the listed contacts for the IP address
> block and the domain.
>
> At 06:35 23-10-2009, Antonio Godinho wrote:
> >There is an IP address (41.220.75.3) always trying to attack my mail
> server
> >to send SPAM. Anyone knows this IP? It has a reverse lookup of
> mtnngprs.com.
> >with no A record!
>
> The IP address is within a block assigned to MTN Nigeria. Contact
> MTN Nigeria and see whether they can take action at their end. The
> administrative contact for mtnngprs.com is Prince Msimang. MTN
> Network Solutions (South Africa) may be able to help.
>
> If you do not want to go through all that, you can null route the IP
> address or block inbound SMTP connections at the firewall or mail server
> level.
>
> Regards,
> -sm
>
>
>
>
> ------------------------------
>
> Message: 7
> Date: Fri, 23 Oct 2009 07:51:35 -0700 (PDT)
> From: Lucy Lynch <llynch at civil-tongue.net>
> Subject: Re: [afnog] SPAMMER
> To: Phil Regnauld <regnauld at nsrc.org>
> Cc: afnog at afnog.org
> Message-ID: <alpine.BSF.2.00.0910230748310.83376 at hiroshima.bogus.com>
> Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
>
> On Fri, 23 Oct 2009, Phil Regnauld wrote:
>
> > Antonio Godinho (antonio) writes:
> >> Hi All,
> >>
> >> There is an IP address (41.220.75.3) always trying to attack my mail
> server
> >> to send SPAM. Anyone knows this IP? It has a reverse lookup of
> mtnngprs.com.
> >> with no A record!
> >
> > Probably hacked - start my blacklisting/nullrouting it. Seems
> filtered
> > from here.
> >
> > Afrinic whois doesn't indicate who owns the block -- but traceroute
> > shows tinet.net.
> >
> > mtnngprs.com gives a contact in ZA:
> >
> > http://www.mtnbusiness.co.za/Pages/Default.aspx
> >
> > Maybe you should contact them ?
> >
> > Also found:
> >
> > www.mtnngprs.com. A 41.220.75.126
> >
> > but doesn't answer either.
> >
>
> Antonio -
>
> NetEx says:
>
> http://www.robtex.com/ip/41.220.75.3.html
>
> xanatosng.com and swift-service.com point to 41.220.75.3.
>
> LISTED IN BLACKLIST!
> ivmSIP
> 2 days, threat score 44, suspicious, harvester
> Project Honeypot
> b.barracudacentral.org
> spamcop
> sbl.spamhaus.org
> xbl.spamhaus.org
> cbl.abuseat.org
> access.redhawk.org
> sbl-xbl.spamhaus.org
>
> see:
> http://www.robtex.com/ip/41.220.75.3.html#blacklists
>
> for more
>
>
>
> >
> >
> > _______________________________________________
> > afnog mailing list
> > http://afnog.org/mailman/listinfo/afnog
> >
>
>
>
> ------------------------------
>
> Message: 8
> Date: Fri, 23 Oct 2009 17:19:24 +0200
> From: "Antonio Godinho" <antonio at uem.mz>
> Subject: Re: [afnog] SPAMMER
> To: Jacqui Isaacs <Jacqui.Isaacs at mtnbusiness.co.za>,SM
> <sm at resistor.net>
> Cc: "afnog at afnog.org" <afnog at afnog.org>
> Message-ID: <20091023151910.M98814 at uem.mz>
> Content-Type: text/plain; charset=iso-8859-1
>
> Thanks everyone.
>
> Cheers,
>
> AG
>
> On Fri, 23 Oct 2009 17:07:03 +0200, Jacqui Isaacs wrote
> > Hi SM
> >
> > Thank you for bringing this to our attention.
> >
> > I have forwarded this to Prince and we will investigate.
> >
> > Kindest regards
> >
> > Jacqui Isaacs
> > Dns Administrator
> > Customer Support
> >
> > phone: +27 21 658-8518
> >
> > Cell: +27 83 200 2726
> >
> > email: jacqui.isaacs at mtnbusiness.co.za
> >
> > www.mtnbusiness.co.za
> >
> > -----Original Message-----
> > From: SM [mailto:sm at resistor.net]
> > Sent: Friday, October 23, 2009 4:30 PM
> > To: Antonio Godinho
> > Cc: afnog at afnog.org
> > Subject: Re: [afnog] SPAMMER
> >
> > Hi Antonio,
> >
> > This message is also copied to the listed contacts for the IP address
> > block and the domain.
> >
> > At 06:35 23-10-2009, Antonio Godinho wrote:
> > >There is an IP address (41.220.75.3) always trying to attack my mail
> server
> > >to send SPAM. Anyone knows this IP? It has a reverse lookup of
> mtnngprs.com.
> > >with no A record!
> >
> > The IP address is within a block assigned to MTN Nigeria. Contact
> > MTN Nigeria and see whether they can take action at their end. The
> > administrative contact for mtnngprs.com is Prince Msimang. MTN
> > Network Solutions (South Africa) may be able to help.
> >
> > If you do not want to go through all that, you can null route the IP
> > address or block inbound SMTP connections at the firewall or mail
> > server level.
> >
> > Regards,
> > -sm
> >
> > NOTE: This e-mail message and all attachments thereto contain
> > confidential information intended for a specific addressee and
> > purpose. If you are not the addressee (a) you may not disclose, copy,
> > distribute or take any action based on the contents hereof; (b)
> > kindly inform the sender immediately and destroy all copies hereof.
> > Any copying, publication or disclosure of this message, or part
> > hereof, in any form whatsoever, without the sender's express written
> > consent, is prohibited. No opinion expressed or implied by the
> > sender necessarily constitutes the opinion of MTN. This message does
> > not constitute a guarantee or proof of the facts mentioned herein.
> > No Employee or intermediary is authorised to conclude a binding
> > agreement on behalf of MTN Group Limited, or any of its subsidiary
> > companies, by e-mail without the express written confirmation by a
> > duly authorised representative of MTN Group Limited.
> >
> > --
> > This message has been scanned for viruses and
> > dangerous content by MailScanner, and is
> > believed to be clean.
>
>
> --
> Antonio Godinho
> B.Sc., MCP+I, MCSE, CCNA, CCNP
> CIUEM
> Maputo
> Mozambique
>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>
>
>
> ------------------------------
>
> Message: 9
> Date: Sat, 24 Oct 2009 04:31:51 +1000 (EST)
> From: Routing Analysis Role Account <cscora at apnic.net>
> Subject: [afnog] Weekly Routing Table Report
> To: apops at apops.net, nanog at nanog.org, routing-wg at ripe.net,
> afnog at afnog.org, ausnog at ausnog.net, sanog at sanog.org
> Message-ID: <200910231831.n9NIVplf018275 at thyme.apnic.net>
>
> This is an automated weekly mailing describing the state of the Internet
> Routing Table as seen from APNIC's router in Japan.
> Daily listings are sent to bgp-stats at lists.apnic.net
>
> For historical data, please see http://thyme.apnic.net.
>
> If you have any comments please contact Philip Smith <pfs at cisco.com>.
>
> Routing Table Report 04:00 +10GMT Sat 24 Oct, 2009
>
> Report Website: http://thyme.apnic.net
> Detailed Analysis: http://thyme.apnic.net/current/
>
> Analysis Summary
> ----------------
>
> BGP routing table entries examined: 301090
> Prefixes after maximum aggregation: 141242
> Deaggregation factor: 2.13
> Unique aggregates announced to Internet: 149275
> Total ASes present in the Internet Routing Table: 32521
> Prefixes per ASN: 9.26
> Origin-only ASes present in the Internet Routing Table: 28255
> Origin ASes announcing only one prefix: 13771
> Transit ASes present in the Internet Routing Table: 4266
> Transit-only ASes present in the Internet Routing Table: 105
> Average AS path length visible in the Internet Routing Table: 3.6
> Max AS path length visible: 30
> Max AS path prepend of ASN (12026) 22
> Prefixes from unregistered ASNs in the Routing Table: 604
> Unregistered ASNs in the Routing Table: 123
> Number of 32-bit ASNs allocated by the RIRs: 300
> Prefixes from 32-bit ASNs in the Routing Table: 242
> Special use prefixes present in the Routing Table: 0
> Prefixes being announced from unallocated address space: 189
> Number of addresses announced to Internet: 2116891488
> Equivalent to 126 /8s, 45 /16s and 51 /24s
> Percentage of available address space announced: 57.1
> Percentage of allocated address space announced: 64.7
> Percentage of available address space allocated: 88.2
> Percentage of address space in use by end-sites: 79.4
> Total number of prefixes smaller than registry allocations: 144872
>
> APNIC Region Analysis Summary
> -----------------------------
>
> Prefixes being announced by APNIC Region ASes: 72260
> Total APNIC prefixes after maximum aggregation: 25358
> APNIC Deaggregation factor: 2.85
> Prefixes being announced from the APNIC address blocks: 68831
> Unique aggregates announced from the APNIC address blocks: 30562
> APNIC Region origin ASes present in the Internet Routing Table: 3842
> APNIC Prefixes per ASN: 17.92
> APNIC Region origin ASes announcing only one prefix: 1047
> APNIC Region transit ASes present in the Internet Routing Table: 589
> Average APNIC Region AS path length visible: 3.6
> Max APNIC Region AS path length visible: 14
> Number of APNIC addresses announced to Internet: 462803232
> Equivalent to 27 /8s, 149 /16s and 209 /24s
> Percentage of available APNIC address space announced: 78.8
>
> APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431
> (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079
> 55296-56319, 131072-132095
> APNIC Address Blocks 43/8, 58/8, 59/8, 60/8, 61/8, 110/8, 111/8,
> 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8,
> 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8,
> 126/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8,
> 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8,
>
>
> ARIN Region Analysis Summary
> ----------------------------
>
> Prefixes being announced by ARIN Region ASes: 127136
> Total ARIN prefixes after maximum aggregation: 67099
> ARIN Deaggregation factor: 1.89
> Prefixes being announced from the ARIN address blocks: 101658
> Unique aggregates announced from the ARIN address blocks: 38678
> ARIN Region origin ASes present in the Internet Routing Table: 13315
> ARIN Prefixes per ASN: 7.63
> ARIN Region origin ASes announcing only one prefix: 5144
> ARIN Region transit ASes present in the Internet Routing Table: 1313
> Average ARIN Region AS path length visible: 3.3
> Max ARIN Region AS path length visible: 24
> Number of ARIN addresses announced to Internet: 708690432
> Equivalent to 42 /8s, 61 /16s and 194 /24s
> Percentage of available ARIN address space announced: 62.1
>
> ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106
> (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153
> 3354-4607, 4865-5119, 5632-6655, 6912-7466
> 7723-8191, 10240-12287, 13312-15359, 16384-17407
> 18432-20479, 21504-23551, 25600-26591,
> 26624-27647, 29696-30719, 31744-33791
> 35840-36863, 39936-40959, 46080-47103
> 53248-55295, 393216-394239
> ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8,
> 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8,
> 20/8, 21/8, 22/8, 24/8, 26/8, 28/8, 29/8,
> 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8,
> 44/8, 45/8, 47/8, 48/8, 52/8, 54/8, 55/8,
> 56/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8,
> 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8,
> 76/8, 96/8, 97/8, 98/8, 99/8, 108/8, 173/8,
> 174/8, 184/8, 199/8, 204/8, 205/8, 206/8, 207/8,
> 208/8, 209/8, 214/8, 215/8, 216/8,
>
> RIPE Region Analysis Summary
> ----------------------------
>
> Prefixes being announced by RIPE Region ASes: 69365
> Total RIPE prefixes after maximum aggregation: 40565
> RIPE Deaggregation factor: 1.71
> Prefixes being announced from the RIPE address blocks: 62853
> Unique aggregates announced from the RIPE address blocks: 42173
> RIPE Region origin ASes present in the Internet Routing Table: 13646
> RIPE Prefixes per ASN: 4.61
> RIPE Region origin ASes announcing only one prefix: 7107
> RIPE Region transit ASes present in the Internet Routing Table: 2053
> Average RIPE Region AS path length visible: 3.9
> Max RIPE Region AS path length visible: 20
> Number of RIPE addresses announced to Internet: 402504512
> Equivalent to 23 /8s, 253 /16s and 187 /24s
> Percentage of available RIPE address space announced: 75.0
>
> RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614
> (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631
> 6656-6911, 8192-9215, 12288-13311, 15360-16383
> 20480-21503, 24576-25599, 28672-29695
> 30720-31743, 33792-35839, 38912-39935
> 40960-45055, 47104-52223, 196608-197631
> RIPE Address Blocks 2/8, 25/8, 46/8, 51/8, 62/8, 77/8, 78/8,
> 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8,
> 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8,
> 93/8, 94/8, 95/8, 109/8, 178/8, 193/8, 194/8,
> 195/8, 212/8, 213/8, 217/8,
>
> LACNIC Region Analysis Summary
> ------------------------------
>
> Prefixes being announced by LACNIC Region ASes: 25911
> Total LACNIC prefixes after maximum aggregation: 6365
> LACNIC Deaggregation factor: 4.07
> Prefixes being announced from the LACNIC address blocks: 24217
> Unique aggregates announced from the LACNIC address blocks: 13306
> LACNIC Region origin ASes present in the Internet Routing Table: 1195
> LACNIC Prefixes per ASN: 20.27
> LACNIC Region origin ASes announcing only one prefix: 375
> LACNIC Region transit ASes present in the Internet Routing Table: 196
> Average LACNIC Region AS path length visible: 4.1
> Max LACNIC Region AS path length visible: 30
> Number of LACNIC addresses announced to Internet: 67503616
> Equivalent to 4 /8s, 6 /16s and 6 /24s
> Percentage of available LACNIC address space announced: 67.1
>
> LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247,
> 262144-263167 plus ERX transfers
> LACNIC Address Blocks 186/8, 187/8, 189/8, 190/8, 200/8, 201/8,
>
> AfriNIC Region Analysis Summary
> -------------------------------
>
> Prefixes being announced by AfriNIC Region ASes: 5949
> Total AfriNIC prefixes after maximum aggregation: 1574
> AfriNIC Deaggregation factor: 3.78
> Prefixes being announced from the AfriNIC address blocks: 4309
> Unique aggregates announced from the AfriNIC address blocks: 1581
> AfriNIC Region origin ASes present in the Internet Routing Table: 331
> AfriNIC Prefixes per ASN: 13.02
> AfriNIC Region origin ASes announcing only one prefix: 98
> AfriNIC Region transit ASes present in the Internet Routing Table: 68
> Average AfriNIC Region AS path length visible: 3.8
> Max AfriNIC Region AS path length visible: 15
> Number of AfriNIC addresses announced to Internet: 12602112
> Equivalent to 0 /8s, 192 /16s and 75 /24s
> Percentage of available AfriNIC address space announced: 37.6
>
> AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers
> AfriNIC Address Blocks 41/8, 197/8,
>
> APNIC Region per AS prefix count summary
> ----------------------------------------
>
> ASN No of nets /20 equiv MaxAgg Description
> 4766 1763 6991 454 Korea Telecom (KIX)
> 17488 1470 138 142 Hathway IP Over Cable Interne
> 4755 1266 292 145 TATA Communications formerly
> 9583 1103 87 532 Sify Limited
> 4134 1005 18177 392 CHINANET-BACKBONE
> 18101 980 204 32 Reliance Infocom Ltd Internet
> 7545 901 199 101 TPG Internet Pty Ltd
> 9829 849 661 20 BSNL National Internet Backbo
> 17974 797 249 94 PT TELEKOMUNIKASI INDONESIA
> 24560 781 290 164 Bharti Airtel Ltd., Telemedia
>
> Complete listing at http://thyme.apnic.net/current/data-ASnet-APNIC
>
> ARIN Region per AS prefix count summary
> ---------------------------------------
>
> ASN No of nets /20 equiv MaxAgg Description
> 6389 4164 3882 312 bellsouth.net, inc.
> 4323 3711 1037 384 Time Warner Telecom
> 1785 1776 714 139 PaeTec Communications, Inc.
> 7018 1574 5844 1059 AT&T WorldNet Services
> 20115 1488 1481 670 Charter Communications
> 6478 1347 275 437 AT&T Worldnet Services
> 2386 1306 637 945 AT&T Data Communications Serv
> 3356 1224 10964 439 Level 3 Communications, LLC
> 11492 1134 206 13 Cable One
> 22773 1113 2604 67 Cox Communications, Inc.
>
> Complete listing at http://thyme.apnic.net/current/data-ASnet-ARIN
>
> RIPE Region per AS prefix count summary
> ---------------------------------------
>
> ASN No of nets /20 equiv MaxAgg Description
> 30890 514 94 208 Evolva Telecom
> 35805 465 40 5 United Telecom of Georgia
> 3292 451 1908 394 TDC Tele Danmark
> 702 415 1822 334 UUNET - Commercial IP service
> 9198 387 138 12 Kazakhtelecom Data Network Ad
> 8866 360 110 23 Bulgarian Telecommunication C
> 3320 356 7068 304 Deutsche Telekom AG
> 3301 350 1428 307 TeliaNet Sweden
> 3215 349 3144 111 France Telecom Transpac
> 8551 316 294 40 Bezeq International
>
> Complete listing at http://thyme.apnic.net/current/data-ASnet-RIPE
>
> LACNIC Region per AS prefix count summary
> -----------------------------------------
>
> ASN No of nets /20 equiv MaxAgg Description
> 8151 1520 2899 237 UniNet S.A. de C.V.
> 10620 1020 227 100 TVCABLE BOGOTA
> 28573 779 652 90 NET Servicos de Comunicao S.A
> 7303 658 347 98 Telecom Argentina Stet-France
> 22047 545 302 14 VTR PUNTO NET S.A.
> 11830 475 310 61 Instituto Costarricense de El
> 11172 443 99 71 Servicios Alestra S.A de C.V
> 14117 438 29 11 Telefonica del Sur S.A.
> 7738 428 858 29 Telecomunicacoes da Bahia S.A
> 6471 421 96 31 ENTEL CHILE S.A.
>
> Complete listing at http://thyme.apnic.net/current/data-ASnet-LACNIC
>
> AfriNIC Region per AS prefix count summary
> ------------------------------------------
>
> ASN No of nets /20 equiv MaxAgg Description
> 8452 990 188 7 TEDATA
> 24863 874 96 73 LINKdotNET AS number
> 3741 272 856 233 The Internet Solution
> 2018 195 188 118 Tertiary Education Network
> 6713 176 167 12 Itissalat Al-MAGHRIB
> 29571 142 14 6 Ci Telecom Autonomous system
> 33776 124 7 11 Starcomms Nigeria Limited
> 5536 121 8 18 Internet Egypt Network
> 5713 116 508 67 Telkom SA Ltd
> 20858 109 34 6 EgyNet
>
> Complete listing at http://thyme.apnic.net/current/data-ASnet-AFRINIC
>
> Global Per AS prefix count summary
> ----------------------------------
>
> ASN No of nets /20 equiv MaxAgg Description
> 6389 4164 3882 312 bellsouth.net, inc.
> 4323 3711 1037 384 Time Warner Telecom
> 1785 1776 714 139 PaeTec Communications, Inc.
> 4766 1763 6991 454 Korea Telecom (KIX)
> 7018 1574 5844 1059 AT&T WorldNet Services
> 8151 1520 2899 237 UniNet S.A. de C.V.
> 20115 1488 1481 670 Charter Communications
> 17488 1470 138 142 Hathway IP Over Cable Interne
> 6478 1347 275 437 AT&T Worldnet Services
> 2386 1306 637 945 AT&T Data Communications Serv
>
> Complete listing at http://thyme.apnic.net/current/data-ASnet
>
> Global Per AS Maximum Aggr summary
> ----------------------------------
>
> ASN No of nets Net Savings Description
> 4323 3711 3327 Time Warner Telecom
> 1785 1776 1637 PaeTec Communications, Inc.
> 17488 1470 1328 Hathway IP Over Cable Interne
> 4766 1763 1309 Korea Telecom (KIX)
> 8151 1520 1283 UniNet S.A. de C.V.
> 4755 1266 1121 TATA Communications formerly
> 11492 1134 1121 Cable One
> 18566 1062 1052 Covad Communications
> 22773 1113 1046 Cox Communications, Inc.
> 8452 990 983 TEDATA
>
> Complete listing at http://thyme.apnic.net/current/data-CIDRnet
>
> List of Unregistered Origin ASNs (Global)
> -----------------------------------------
>
> Bad AS Designation Network Transit AS Description
> 16927 UNALLOCATED 12.0.252.0/23 7018 AT&T WorldNet
> Servic
> 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet
> Servic
> 32567 UNALLOCATED 12.14.170.0/24 7018 AT&T WorldNet
> Servic
> 13746 UNALLOCATED 12.24.56.0/24 7018 AT&T WorldNet
> Servic
> 32567 UNALLOCATED 12.25.107.0/24 7018 AT&T WorldNet
> Servic
> 26973 UNALLOCATED 12.39.152.0/24 7018 AT&T WorldNet
> Servic
> 26973 UNALLOCATED 12.39.154.0/23 7018 AT&T WorldNet
> Servic
> 26973 UNALLOCATED 12.39.159.0/24 7018 AT&T WorldNet
> Servic
> 32326 UNALLOCATED 12.40.49.0/24 7018 AT&T WorldNet
> Servic
> 25639 UNALLOCATED 12.41.169.0/24 7018 AT&T WorldNet
> Servic
>
> Complete listing at http://thyme.apnic.net/current/data-badAS
>
> Advertised Unallocated Addresses
> --------------------------------
>
> Network Origin AS Description
> 2.0.0.0/16 12654 RIPE NCC RIS Project
> 2.1.0.0/21 12654 RIPE NCC RIS Project
> 2.1.24.0/24 12654 RIPE NCC RIS Project
> 41.223.92.0/22 36936 >>UNKNOWN<<
> 41.223.188.0/24 22351 Intelsat
> 41.223.189.0/24 26452 Local Communications Networks
> 43.245.0.0/16 7502 Internetwork Kyoto
> 46.0.0.0/16 12654 RIPE NCC RIS Project
> 46.1.0.0/21 12654 RIPE NCC RIS Project
> 46.1.24.0/24 12654 RIPE NCC RIS Project
>
> Complete listing at http://thyme.apnic.net/current/data-add-IANA
>
> Number of prefixes announced per prefix length (Global)
> -------------------------------------------------------
>
> /1:0 /2:0 /3:0 /4:0 /5:0 /6:0
> /7:0 /8:20 /9:10 /10:24 /11:63 /12:177
> /13:355 /14:629 /15:1210 /16:10692 /17:4886 /18:8472
> /19:17517 /20:21113 /21:21075 /22:27386 /23:26945 /24:157743
> /25:926 /26:1113 /27:557 /28:154 /29:8 /30:7
> /31:0 /32:8
>
> Advertised prefixes smaller than registry allocations
> -----------------------------------------------------
>
> ASN No of nets Total ann. Description
> 6389 2691 4164 bellsouth.net, inc.
> 4323 2350 3711 Time Warner Telecom
> 4766 1436 1763 Korea Telecom (KIX)
> 1785 1241 1776 PaeTec Communications, Inc.
> 17488 1231 1470 Hathway IP Over Cable Interne
> 11492 1058 1134 Cable One
> 18566 1043 1062 Covad Communications
> 9583 955 1103 Sify Limited
> 7018 932 1574 AT&T WorldNet Services
> 10620 926 1020 TVCABLE BOGOTA
>
> Complete listing at http://thyme.apnic.net/current/data-sXXas-nos
>
> Number of /24s announced per /8 block (Global)
> ----------------------------------------------
>
> 2:1 4:14 8:225 12:2147 13:7 15:22
> 16:3 17:5 20:36 24:1199 32:52 34:2
> 38:605 40:97 41:1767 43:1 44:2 46:1
> 47:21 52:6 55:2 56:2 57:25 58:607
> 59:640 60:441 61:1088 62:973 63:2005 64:3661
> 65:2374 66:4090 67:1758 68:984 69:2761 70:572
> 71:154 72:1725 73:2 74:1989 75:183 76:357
> 77:866 78:566 79:390 80:913 81:814 82:479
> 83:436 84:533 85:1006 86:372 87:692 88:422
> 89:1517 90:53 91:2616 92:417 93:1279 94:1317
> 95:1145 96:190 97:271 98:371 99:30 109:86
> 110:246 111:456 112:142 113:155 114:274 115:446
> 116:1096 117:592 118:358 119:790 120:132 121:797
> 122:1293 123:778 124:1043 125:1373 128:219 129:220
> 130:130 131:421 132:76 133:10 134:186 135:42
> 136:224 137:171 138:174 139:82 140:440 141:123
> 142:385 143:348 144:365 145:49 146:391 147:170
> 148:551 149:202 150:151 151:176 152:212 153:158
> 154:2 155:273 156:168 157:310 158:91 159:358
> 160:292 161:171 162:279 163:171 164:278 165:467
> 166:478 167:391 168:754 169:163 170:466 171:42
> 172:2 173:386 174:382 175:1 178:1 180:96
> 182:1 186:148 187:167 188:1179 189:610 190:3168
> 192:5745 193:4270 194:3326 195:2736 196:1170 198:3551
> 199:3352 200:5202 201:1360 202:7891 203:8237 204:3915
> 205:2180 206:2400 207:2987 208:3972 209:3456 210:2570
> 211:1142 212:1603 213:1619 214:172 215:39 216:4425
> 217:1335 218:415 219:456 220:1135 221:449 222:304
>
>
> End of report
>
>
>
> ------------------------------
>
> _______________________________________________
> afnog mailing list
>
> End of afnog Digest, Vol 67, Issue 16
> *************************************
>
--
Thanks for reading my mail.
Please reply.
Oke-Salako Olayiwola
+234-805-260-3665
+234-805-557-0604
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://afnog.org/pipermail/afnog/attachments/20091026/f230d033/attachment-0001.html>
More information about the afnog
mailing list