[afnog] SPAMMER
Jean-Robert Hountomey
hrobert at iservices.tg
Mon Oct 26 08:19:34 UTC 2009
http://www.afrinic.net/cgi-bin/whois
inetnum: 41.220.75.0 - 41.220.75.255
netname: MTNNG-0001-MDSN01-OJT
descr: IP Block Assigned for Mobile Data Services Network at Ojota
country: NG
admin-c: HM10-AFRINIC
tech-c: HM10-AFRINIC
org: ORG-MN1-AFRINIC
status: ASSIGNED PA
mnt-by: MTNNIGERA1-MNT
notify: hostmaster at mtnnigeria.net
changed: hostmaster at mtnnigeria.net 20081113
source: AFRINIC
parent: 41.220.64.0 - 41.220.79.255
organisation: ORG-MN1-AFRINIC
org-name: MTN Nigeria
org-type: LIR
country: NG
address: Golden Plaza,
address: Falomo Roundabout,
address: Ikoyi
address: Lagos
e-mail: hostmaster at mtnnigeria.net
e-mail: ChukwuNk at mtnnigeria.net
phone: +234 803 200 5038
admin-c: CN6-AFRINIC
tech-c: BO5-AFRINIC
mnt-ref: AFRINIC-HM-MNT
mnt-ref: MTNNIGERA1-MNT
mnt-by: AFRINIC-HM-MNT
notify: hostmaster at afrinic.net
changed: hostmaster at afrinic.net 20070119
changed: hostmaster at afrinic.net 20070726
changed: hostmaster at afrinic.net 20080904
changed: hostmaster at afrinic.net 20090109
source: AFRINIC
role: HostMaster MTN_Nigeria
address: Golden Plaza,
Falomo Roundabout, Ikoyi
Lagos State
Nigeria
phone: +2348032005038
phone: +2348032009018
e-mail: hostmaster at mtnnigeria.net
admin-c: CN6-AFRINIC
admin-c: BO5-AFRINIC
tech-c: OI4-AFRINIC
tech-c: BO5-AFRINIC
nic-hdl: HM10-AFRINIC
mnt-by: MTNNIGERA1-MNT
notify: hostmaster at mtnnigeria.net
changed: hostmaster at mtnnigeria.net 20081009
source: AFRINIC
----------------
Date: Fri, 23 Oct 2009 15:35:22 +0200
From: "Antonio Godinho" <antonio at uem.mz>
Subject: [afnog] SPAMMER
To: afnog at afnog.org
Message-ID: <20091023133258.M98071 at uem.mz>
Content-Type: text/plain; charset=iso-8859-1
Hi All,
There is an IP address (41.220.75.3) always trying to attack my mail server
to send SPAM. Anyone knows this IP? It has a reverse lookup of mtnngprs.com.
with no A record!
Cheers,
--
Antonio Godinho
B.Sc., MCP+I, MCSE, CCNA, CCNP
CIUEM
Maputo
Mozambique
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
------------------------------
Message: 2
Date: Fri, 23 Oct 2009 15:44:30 +0200
From: Phil Regnauld <regnauld at nsrc.org>
Subject: Re: [afnog] SPAMMER
To: Antonio Godinho <antonio at uem.mz>
Cc: afnog at afnog.org
Message-ID: <20091023134427.GA5426 at macbook.catpipe.net>
Content-Type: text/plain; charset=us-ascii
Antonio Godinho (antonio) writes:
> Hi All,
>
> There is an IP address (41.220.75.3) always trying to attack my mail server
> to send SPAM. Anyone knows this IP? It has a reverse lookup of mtnngprs.com.
> with no A record!
Probably hacked - start my blacklisting/nullrouting it. Seems filtered
from here.
Afrinic whois doesn't indicate who owns the block -- but traceroute
shows tinet.net.
mtnngprs.com gives a contact in ZA:
http://www.mtnbusiness.co.za/Pages/Default.aspx
Maybe you should contact them ?
Also found:
www.mtnngprs.com. A 41.220.75.126
but doesn't answer either.
------------------------------
Message: 3
Date: Fri, 23 Oct 2009 15:50:24 +0200
From: "Antonio Godinho" <antonio at uem.mz>
Subject: Re: [afnog] SPAMMER
To: Phil Regnauld <regnauld at nsrc.org>
Cc: afnog at afnog.org
Message-ID: <20091023135000.M74204 at uem.mz>
Content-Type: text/plain; charset=iso-8859-1
Thanks, will null route it...
Cheers,
AG
On Fri, 23 Oct 2009 15:44:30 +0200, Phil Regnauld wrote
> Antonio Godinho (antonio) writes:
> > Hi All,
> >
> > There is an IP address (41.220.75.3) always trying to attack my mail
server
> > to send SPAM. Anyone knows this IP? It has a reverse lookup of
mtnngprs.com.
> > with no A record!
>
> Probably hacked - start my blacklisting/nullrouting it. Seems
filtered
> from here.
>
> Afrinic whois doesn't indicate who owns the block -- but traceroute
> shows tinet.net.
>
> mtnngprs.com gives a contact in ZA:
>
> http://www.mtnbusiness.co.za/Pages/Default.aspx
>
> Maybe you should contact them ?
>
> Also found:
>
> www.mtnngprs.com. A 41.220.75.126
>
> but doesn't answer either.
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
--
Antonio Godinho
B.Sc., MCP+I, MCSE, CCNA, CCNP
CIUEM
Maputo
Mozambique
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
------------------------------
Message: 4
Date: Fri, 23 Oct 2009 15:52:19 +0200
From: Stephane Bortzmeyer <bortzmeyer at nic.fr>
Subject: Re: [afnog] SPAMMER
To: Antonio Godinho <antonio at uem.mz>
Cc: afnog at afnog.org
Message-ID: <20091023135219.GA19515 at nic.fr>
Content-Type: text/plain; charset=us-ascii
On Fri, Oct 23, 2009 at 03:35:22PM +0200,
Antonio Godinho <antonio at uem.mz> wrote
a message of 26 lines which said:
> There is an IP address (41.220.75.3) always trying to attack my mail
> server to send SPAM. Anyone knows this IP?
Why don't you ask Afrinic's whois server?
inetnum: 41.220.75.0 - 41.220.75.255
netname: MTNNG-0001-MDSN01-OJT
descr: IP Block Assigned for Mobile Data Services Network at Ojota
country: NG
It is indeed known:
% rblcheck 41.220.75.3
41.220.75.3 listed by sbl.spamhaus.org
41.220.75.3 listed by xbl.spamhaus.org
41.220.75.3 listed by pbl.spamhaus.org
41.220.75.3 listed by bl.spamcop.net
41.220.75.3 not listed by list.dsbl.org
41.220.75.3 not listed by dnsbl.njabl.org
41.220.75.3 not listed by dul.dnsbl.sorbs.net
------------------------------
Message: 5
Date: Fri, 23 Oct 2009 15:59:02 +0200
From: "Antonio Godinho" <antonio at uem.mz>
Subject: Re: [afnog] SPAMMER
To: Stephane Bortzmeyer <bortzmeyer at nic.fr>
Cc: afnog at afnog.org
Message-ID: <20091023135829.M65546 at uem.mz>
Content-Type: text/plain; charset=iso-8859-1
I did get that info, I just thought someone here might know the network so
that I could talk to them.
Cheers,
AG
On Fri, 23 Oct 2009 15:52:19 +0200, Stephane Bortzmeyer wrote
> On Fri, Oct 23, 2009 at 03:35:22PM +0200,
> Antonio Godinho <antonio at uem.mz> wrote
> a message of 26 lines which said:
>
> > There is an IP address (41.220.75.3) always trying to attack my mail
> > server to send SPAM. Anyone knows this IP?
>
> Why don't you ask Afrinic's whois server?
>
> inetnum: 41.220.75.0 - 41.220.75.255
> netname: MTNNG-0001-MDSN01-OJT
> descr: IP Block Assigned for Mobile Data Services Network
> at Ojota country: NG
>
> It is indeed known:
>
> % rblcheck 41.220.75.3
> 41.220.75.3 listed by sbl.spamhaus.org
> 41.220.75.3 listed by xbl.spamhaus.org
> 41.220.75.3 listed by pbl.spamhaus.org
> 41.220.75.3 listed by bl.spamcop.net
> 41.220.75.3 not listed by list.dsbl.org
> 41.220.75.3 not listed by dnsbl.njabl.org
> 41.220.75.3 not listed by dul.dnsbl.sorbs.net
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
--
Antonio Godinho
B.Sc., MCP+I, MCSE, CCNA, CCNP
CIUEM
Maputo
Mozambique
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
------------------------------
Message: 6
Date: Fri, 23 Oct 2009 07:29:38 -0700
From: SM <sm at resistor.net>
Subject: Re: [afnog] SPAMMER
To: Antonio Godinho <antonio at uem.mz>
Cc: afnog at afnog.org
Message-ID: <6.2.5.6.2.20091023070222.04336f00 at resistor.net>
Content-Type: text/plain; charset="us-ascii"; format=flowed
Hi Antonio,
This message is also copied to the listed contacts for the IP address
block and the domain.
At 06:35 23-10-2009, Antonio Godinho wrote:
>There is an IP address (41.220.75.3) always trying to attack my mail server
>to send SPAM. Anyone knows this IP? It has a reverse lookup of mtnngprs.com.
>with no A record!
The IP address is within a block assigned to MTN Nigeria. Contact
MTN Nigeria and see whether they can take action at their end. The
administrative contact for mtnngprs.com is Prince Msimang. MTN
Network Solutions (South Africa) may be able to help.
If you do not want to go through all that, you can null route the IP
address or block inbound SMTP connections at the firewall or mail server level.
Regards,
-sm
------------------------------
Message: 7
Date: Fri, 23 Oct 2009 07:51:35 -0700 (PDT)
From: Lucy Lynch <llynch at civil-tongue.net>
Subject: Re: [afnog] SPAMMER
To: Phil Regnauld <regnauld at nsrc.org>
Cc: afnog at afnog.org
Message-ID: <alpine.BSF.2.00.0910230748310.83376 at hiroshima.bogus.com>
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
On Fri, 23 Oct 2009, Phil Regnauld wrote:
> Antonio Godinho (antonio) writes:
>> Hi All,
>>
>> There is an IP address (41.220.75.3) always trying to attack my mail server
>> to send SPAM. Anyone knows this IP? It has a reverse lookup of mtnngprs.com.
>> with no A record!
>
> Probably hacked - start my blacklisting/nullrouting it. Seems filtered
> from here.
>
> Afrinic whois doesn't indicate who owns the block -- but traceroute
> shows tinet.net.
>
> mtnngprs.com gives a contact in ZA:
>
> http://www.mtnbusiness.co.za/Pages/Default.aspx
>
> Maybe you should contact them ?
>
> Also found:
>
> www.mtnngprs.com. A 41.220.75.126
>
> but doesn't answer either.
>
Antonio -
NetEx says:
http://www.robtex.com/ip/41.220.75.3.html
xanatosng.com and swift-service.com point to 41.220.75.3.
LISTED IN BLACKLIST!
ivmSIP
2 days, threat score 44, suspicious, harvester
Project Honeypot
b.barracudacentral.org
spamcop
sbl.spamhaus.org
xbl.spamhaus.org
cbl.abuseat.org
access.redhawk.org
sbl-xbl.spamhaus.org
see:
http://www.robtex.com/ip/41.220.75.3.html#blacklists
for more
>
>
> _______________________________________________
> afnog mailing list
> http://afnog.org/mailman/listinfo/afnog
>
------------------------------
Message: 8
Date: Fri, 23 Oct 2009 17:19:24 +0200
From: "Antonio Godinho" <antonio at uem.mz>
Subject: Re: [afnog] SPAMMER
To: Jacqui Isaacs <Jacqui.Isaacs at mtnbusiness.co.za>,SM
<sm at resistor.net>
Cc: "afnog at afnog.org" <afnog at afnog.org>
Message-ID: <20091023151910.M98814 at uem.mz>
Content-Type: text/plain; charset=iso-8859-1
Thanks everyone.
Cheers,
AG
On Fri, 23 Oct 2009 17:07:03 +0200, Jacqui Isaacs wrote
> Hi SM
>
> Thank you for bringing this to our attention.
>
> I have forwarded this to Prince and we will investigate.
>
> Kindest regards
>
> Jacqui Isaacs
> Dns Administrator
> Customer Support
>
> phone: +27 21 658-8518
>
> Cell: +27 83 200 2726
>
> email: jacqui.isaacs at mtnbusiness.co.za
>
> www.mtnbusiness.co.za
>
> -----Original Message-----
> From: SM [mailto:sm at resistor.net]
> Sent: Friday, October 23, 2009 4:30 PM
> To: Antonio Godinho
> Cc: afnog at afnog.org
> Subject: Re: [afnog] SPAMMER
>
> Hi Antonio,
>
> This message is also copied to the listed contacts for the IP address
> block and the domain.
>
> At 06:35 23-10-2009, Antonio Godinho wrote:
> >There is an IP address (41.220.75.3) always trying to attack my mail
server
> >to send SPAM. Anyone knows this IP? It has a reverse lookup of
mtnngprs.com.
> >with no A record!
>
> The IP address is within a block assigned to MTN Nigeria. Contact
> MTN Nigeria and see whether they can take action at their end. The
> administrative contact for mtnngprs.com is Prince Msimang. MTN
> Network Solutions (South Africa) may be able to help.
>
> If you do not want to go through all that, you can null route the IP
> address or block inbound SMTP connections at the firewall or mail
> server level.
>
> Regards,
> -sm
>
> NOTE: This e-mail message and all attachments thereto contain
> confidential information intended for a specific addressee and
> purpose. If you are not the addressee (a) you may not disclose, copy,
> distribute or take any action based on the contents hereof; (b)
> kindly inform the sender immediately and destroy all copies hereof.
> Any copying, publication or disclosure of this message, or part
> hereof, in any form whatsoever, without the sender's express written
> consent, is prohibited. No opinion expressed or implied by the
> sender necessarily constitutes the opinion of MTN. This message does
> not constitute a guarantee or proof of the facts mentioned herein.
> No Employee or intermediary is authorised to conclude a binding
> agreement on behalf of MTN Group Limited, or any of its subsidiary
> companies, by e-mail without the express written confirmation by a
> duly authorised representative of MTN Group Limited.
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
--
Antonio Godinho
B.Sc., MCP+I, MCSE, CCNA, CCNP
CIUEM
Maputo
Mozambique
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
------------------------------
Message: 9
Date: Sat, 24 Oct 2009 04:31:51 +1000 (EST)
From: Routing Analysis Role Account <cscora at apnic.net>
Subject: [afnog] Weekly Routing Table Report
To: apops at apops.net, nanog at nanog.org, routing-wg at ripe.net,
afnog at afnog.org, ausnog at ausnog.net, sanog at sanog.org
Message-ID: <200910231831.n9NIVplf018275 at thyme.apnic.net>
This is an automated weekly mailing describing the state of the Internet
Routing Table as seen from APNIC's router in Japan.
Daily listings are sent to bgp-stats at lists.apnic.net
For historical data, please see http://thyme.apnic.net.
If you have any comments please contact Philip Smith <pfs at cisco.com>.
Routing Table Report 04:00 +10GMT Sat 24 Oct, 2009
Report Website: http://thyme.apnic.net
Detailed Analysis: http://thyme.apnic.net/current/
Analysis Summary
----------------
BGP routing table entries examined: 301090
Prefixes after maximum aggregation: 141242
Deaggregation factor: 2.13
Unique aggregates announced to Internet: 149275
Total ASes present in the Internet Routing Table: 32521
Prefixes per ASN: 9.26
Origin-only ASes present in the Internet Routing Table: 28255
Origin ASes announcing only one prefix: 13771
Transit ASes present in the Internet Routing Table: 4266
Transit-only ASes present in the Internet Routing Table: 105
Average AS path length visible in the Internet Routing Table: 3.6
Max AS path length visible: 30
Max AS path prepend of ASN (12026) 22
Prefixes from unregistered ASNs in the Routing Table: 604
Unregistered ASNs in the Routing Table: 123
Number of 32-bit ASNs allocated by the RIRs: 300
Prefixes from 32-bit ASNs in the Routing Table: 242
Special use prefixes present in the Routing Table: 0
Prefixes being announced from unallocated address space: 189
Number of addresses announced to Internet: 2116891488
Equivalent to 126 /8s, 45 /16s and 51 /24s
Percentage of available address space announced: 57.1
Percentage of allocated address space announced: 64.7
Percentage of available address space allocated: 88.2
Percentage of address space in use by end-sites: 79.4
Total number of prefixes smaller than registry allocations: 144872
APNIC Region Analysis Summary
-----------------------------
Prefixes being announced by APNIC Region ASes: 72260
Total APNIC prefixes after maximum aggregation: 25358
APNIC Deaggregation factor: 2.85
Prefixes being announced from the APNIC address blocks: 68831
Unique aggregates announced from the APNIC address blocks: 30562
APNIC Region origin ASes present in the Internet Routing Table: 3842
APNIC Prefixes per ASN: 17.92
APNIC Region origin ASes announcing only one prefix: 1047
APNIC Region transit ASes present in the Internet Routing Table: 589
Average APNIC Region AS path length visible: 3.6
Max APNIC Region AS path length visible: 14
Number of APNIC addresses announced to Internet: 462803232
Equivalent to 27 /8s, 149 /16s and 209 /24s
Percentage of available APNIC address space announced: 78.8
APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431
(pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079
55296-56319, 131072-132095
APNIC Address Blocks 43/8, 58/8, 59/8, 60/8, 61/8, 110/8, 111/8,
112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8,
119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8,
126/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8,
210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8,
ARIN Region Analysis Summary
----------------------------
Prefixes being announced by ARIN Region ASes: 127136
Total ARIN prefixes after maximum aggregation: 67099
ARIN Deaggregation factor: 1.89
Prefixes being announced from the ARIN address blocks: 101658
Unique aggregates announced from the ARIN address blocks: 38678
ARIN Region origin ASes present in the Internet Routing Table: 13315
ARIN Prefixes per ASN: 7.63
ARIN Region origin ASes announcing only one prefix: 5144
ARIN Region transit ASes present in the Internet Routing Table: 1313
Average ARIN Region AS path length visible: 3.3
Max ARIN Region AS path length visible: 24
Number of ARIN addresses announced to Internet: 708690432
Equivalent to 42 /8s, 61 /16s and 194 /24s
Percentage of available ARIN address space announced: 62.1
ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106
(pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153
3354-4607, 4865-5119, 5632-6655, 6912-7466
7723-8191, 10240-12287, 13312-15359, 16384-17407
18432-20479, 21504-23551, 25600-26591,
26624-27647, 29696-30719, 31744-33791
35840-36863, 39936-40959, 46080-47103
53248-55295, 393216-394239
ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8,
12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8,
20/8, 21/8, 22/8, 24/8, 26/8, 28/8, 29/8,
30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8,
44/8, 45/8, 47/8, 48/8, 52/8, 54/8, 55/8,
56/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8,
69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8,
76/8, 96/8, 97/8, 98/8, 99/8, 108/8, 173/8,
174/8, 184/8, 199/8, 204/8, 205/8, 206/8, 207/8,
208/8, 209/8, 214/8, 215/8, 216/8,
RIPE Region Analysis Summary
----------------------------
Prefixes being announced by RIPE Region ASes: 69365
Total RIPE prefixes after maximum aggregation: 40565
RIPE Deaggregation factor: 1.71
Prefixes being announced from the RIPE address blocks: 62853
Unique aggregates announced from the RIPE address blocks: 42173
RIPE Region origin ASes present in the Internet Routing Table: 13646
RIPE Prefixes per ASN: 4.61
RIPE Region origin ASes announcing only one prefix: 7107
RIPE Region transit ASes present in the Internet Routing Table: 2053
Average RIPE Region AS path length visible: 3.9
Max RIPE Region AS path length visible: 20
Number of RIPE addresses announced to Internet: 402504512
Equivalent to 23 /8s, 253 /16s and 187 /24s
Percentage of available RIPE address space announced: 75.0
RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614
(pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631
6656-6911, 8192-9215, 12288-13311, 15360-16383
20480-21503, 24576-25599, 28672-29695
30720-31743, 33792-35839, 38912-39935
40960-45055, 47104-52223, 196608-197631
RIPE Address Blocks 2/8, 25/8, 46/8, 51/8, 62/8, 77/8, 78/8,
79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8,
86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8,
93/8, 94/8, 95/8, 109/8, 178/8, 193/8, 194/8,
195/8, 212/8, 213/8, 217/8,
LACNIC Region Analysis Summary
------------------------------
Prefixes being announced by LACNIC Region ASes: 25911
Total LACNIC prefixes after maximum aggregation: 6365
LACNIC Deaggregation factor: 4.07
Prefixes being announced from the LACNIC address blocks: 24217
Unique aggregates announced from the LACNIC address blocks: 13306
LACNIC Region origin ASes present in the Internet Routing Table: 1195
LACNIC Prefixes per ASN: 20.27
LACNIC Region origin ASes announcing only one prefix: 375
LACNIC Region transit ASes present in the Internet Routing Table: 196
Average LACNIC Region AS path length visible: 4.1
Max LACNIC Region AS path length visible: 30
Number of LACNIC addresses announced to Internet: 67503616
Equivalent to 4 /8s, 6 /16s and 6 /24s
Percentage of available LACNIC address space announced: 67.1
LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247,
262144-263167 plus ERX transfers
LACNIC Address Blocks 186/8, 187/8, 189/8, 190/8, 200/8, 201/8,
AfriNIC Region Analysis Summary
-------------------------------
Prefixes being announced by AfriNIC Region ASes: 5949
Total AfriNIC prefixes after maximum aggregation: 1574
AfriNIC Deaggregation factor: 3.78
Prefixes being announced from the AfriNIC address blocks: 4309
Unique aggregates announced from the AfriNIC address blocks: 1581
AfriNIC Region origin ASes present in the Internet Routing Table: 331
AfriNIC Prefixes per ASN: 13.02
AfriNIC Region origin ASes announcing only one prefix: 98
AfriNIC Region transit ASes present in the Internet Routing Table: 68
Average AfriNIC Region AS path length visible: 3.8
Max AfriNIC Region AS path length visible: 15
Number of AfriNIC addresses announced to Internet: 12602112
Equivalent to 0 /8s, 192 /16s and 75 /24s
Percentage of available AfriNIC address space announced: 37.6
AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers
AfriNIC Address Blocks 41/8, 197/8,
APNIC Region per AS prefix count summary
----------------------------------------
ASN No of nets /20 equiv MaxAgg Description
4766 1763 6991 454 Korea Telecom (KIX)
17488 1470 138 142 Hathway IP Over Cable Interne
4755 1266 292 145 TATA Communications formerly
9583 1103 87 532 Sify Limited
4134 1005 18177 392 CHINANET-BACKBONE
18101 980 204 32 Reliance Infocom Ltd Internet
7545 901 199 101 TPG Internet Pty Ltd
9829 849 661 20 BSNL National Internet Backbo
17974 797 249 94 PT TELEKOMUNIKASI INDONESIA
24560 781 290 164 Bharti Airtel Ltd., Telemedia
Complete listing at http://thyme.apnic.net/current/data-ASnet-APNIC
ARIN Region per AS prefix count summary
---------------------------------------
ASN No of nets /20 equiv MaxAgg Description
6389 4164 3882 312 bellsouth.net, inc.
4323 3711 1037 384 Time Warner Telecom
1785 1776 714 139 PaeTec Communications, Inc.
7018 1574 5844 1059 AT&T WorldNet Services
20115 1488 1481 670 Charter Communications
6478 1347 275 437 AT&T Worldnet Services
2386 1306 637 945 AT&T Data Communications Serv
3356 1224 10964 439 Level 3 Communications, LLC
11492 1134 206 13 Cable One
22773 1113 2604 67 Cox Communications, Inc.
Complete listing at http://thyme.apnic.net/current/data-ASnet-ARIN
RIPE Region per AS prefix count summary
---------------------------------------
ASN No of nets /20 equiv MaxAgg Description
30890 514 94 208 Evolva Telecom
35805 465 40 5 United Telecom of Georgia
3292 451 1908 394 TDC Tele Danmark
702 415 1822 334 UUNET - Commercial IP service
9198 387 138 12 Kazakhtelecom Data Network Ad
8866 360 110 23 Bulgarian Telecommunication C
3320 356 7068 304 Deutsche Telekom AG
3301 350 1428 307 TeliaNet Sweden
3215 349 3144 111 France Telecom Transpac
8551 316 294 40 Bezeq International
Complete listing at http://thyme.apnic.net/current/data-ASnet-RIPE
LACNIC Region per AS prefix count summary
-----------------------------------------
ASN No of nets /20 equiv MaxAgg Description
8151 1520 2899 237 UniNet S.A. de C.V.
10620 1020 227 100 TVCABLE BOGOTA
28573 779 652 90 NET Servicos de Comunicao S.A
7303 658 347 98 Telecom Argentina Stet-France
22047 545 302 14 VTR PUNTO NET S.A.
11830 475 310 61 Instituto Costarricense de El
11172 443 99 71 Servicios Alestra S.A de C.V
14117 438 29 11 Telefonica del Sur S.A.
7738 428 858 29 Telecomunicacoes da Bahia S.A
6471 421 96 31 ENTEL CHILE S.A.
Complete listing at http://thyme.apnic.net/current/data-ASnet-LACNIC
AfriNIC Region per AS prefix count summary
------------------------------------------
ASN No of nets /20 equiv MaxAgg Description
8452 990 188 7 TEDATA
24863 874 96 73 LINKdotNET AS number
3741 272 856 233 The Internet Solution
2018 195 188 118 Tertiary Education Network
6713 176 167 12 Itissalat Al-MAGHRIB
29571 142 14 6 Ci Telecom Autonomous system
33776 124 7 11 Starcomms Nigeria Limited
5536 121 8 18 Internet Egypt Network
5713 116 508 67 Telkom SA Ltd
20858 109 34 6 EgyNet
Complete listing at http://thyme.apnic.net/current/data-ASnet-AFRINIC
Global Per AS prefix count summary
----------------------------------
ASN No of nets /20 equiv MaxAgg Description
6389 4164 3882 312 bellsouth.net, inc.
4323 3711 1037 384 Time Warner Telecom
1785 1776 714 139 PaeTec Communications, Inc.
4766 1763 6991 454 Korea Telecom (KIX)
7018 1574 5844 1059 AT&T WorldNet Services
8151 1520 2899 237 UniNet S.A. de C.V.
20115 1488 1481 670 Charter Communications
17488 1470 138 142 Hathway IP Over Cable Interne
6478 1347 275 437 AT&T Worldnet Services
2386 1306 637 945 AT&T Data Communications Serv
Complete listing at http://thyme.apnic.net/current/data-ASnet
Global Per AS Maximum Aggr summary
----------------------------------
ASN No of nets Net Savings Description
4323 3711 3327 Time Warner Telecom
1785 1776 1637 PaeTec Communications, Inc.
17488 1470 1328 Hathway IP Over Cable Interne
4766 1763 1309 Korea Telecom (KIX)
8151 1520 1283 UniNet S.A. de C.V.
4755 1266 1121 TATA Communications formerly
11492 1134 1121 Cable One
18566 1062 1052 Covad Communications
22773 1113 1046 Cox Communications, Inc.
8452 990 983 TEDATA
Complete listing at http://thyme.apnic.net/current/data-CIDRnet
List of Unregistered Origin ASNs (Global)
-----------------------------------------
Bad AS Designation Network Transit AS Description
16927 UNALLOCATED 12.0.252.0/23 7018 AT&T WorldNet Servic
15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic
32567 UNALLOCATED 12.14.170.0/24 7018 AT&T WorldNet Servic
13746 UNALLOCATED 12.24.56.0/24 7018 AT&T WorldNet Servic
32567 UNALLOCATED 12.25.107.0/24 7018 AT&T WorldNet Servic
26973 UNALLOCATED 12.39.152.0/24 7018 AT&T WorldNet Servic
26973 UNALLOCATED 12.39.154.0/23 7018 AT&T WorldNet Servic
26973 UNALLOCATED 12.39.159.0/24 7018 AT&T WorldNet Servic
32326 UNALLOCATED 12.40.49.0/24 7018 AT&T WorldNet Servic
25639 UNALLOCATED 12.41.169.0/24 7018 AT&T WorldNet Servic
Complete listing at http://thyme.apnic.net/current/data-badAS
Advertised Unallocated Addresses
--------------------------------
Network Origin AS Description
2.0.0.0/16 12654 RIPE NCC RIS Project
2.1.0.0/21 12654 RIPE NCC RIS Project
2.1.24.0/24 12654 RIPE NCC RIS Project
41.223.92.0/22 36936 >>UNKNOWN<<
41.223.188.0/24 22351 Intelsat
41.223.189.0/24 26452 Local Communications Networks
43.245.0.0/16 7502 Internetwork Kyoto
46.0.0.0/16 12654 RIPE NCC RIS Project
46.1.0.0/21 12654 RIPE NCC RIS Project
46.1.24.0/24 12654 RIPE NCC RIS Project
Complete listing at http://thyme.apnic.net/current/data-add-IANA
Number of prefixes announced per prefix length (Global)
-------------------------------------------------------
/1:0 /2:0 /3:0 /4:0 /5:0 /6:0
/7:0 /8:20 /9:10 /10:24 /11:63 /12:177
/13:355 /14:629 /15:1210 /16:10692 /17:4886 /18:8472
/19:17517 /20:21113 /21:21075 /22:27386 /23:26945 /24:157743
/25:926 /26:1113 /27:557 /28:154 /29:8 /30:7
/31:0 /32:8
Advertised prefixes smaller than registry allocations
-----------------------------------------------------
ASN No of nets Total ann. Description
6389 2691 4164 bellsouth.net, inc.
4323 2350 3711 Time Warner Telecom
4766 1436 1763 Korea Telecom (KIX)
1785 1241 1776 PaeTec Communications, Inc.
17488 1231 1470 Hathway IP Over Cable Interne
11492 1058 1134 Cable One
18566 1043 1062 Covad Communications
9583 955 1103 Sify Limited
7018 932 1574 AT&T WorldNet Services
10620 926 1020 TVCABLE BOGOTA
Complete listing at http://thyme.apnic.net/current/data-sXXas-nos
Number of /24s announced per /8 block (Global)
----------------------------------------------
2:1 4:14 8:225 12:2147 13:7 15:22
16:3 17:5 20:36 24:1199 32:52 34:2
38:605 40:97 41:1767 43:1 44:2 46:1
47:21 52:6 55:2 56:2 57:25 58:607
59:640 60:441 61:1088 62:973 63:2005 64:3661
65:2374 66:4090 67:1758 68:984 69:2761 70:572
71:154 72:1725 73:2 74:1989 75:183 76:357
77:866 78:566 79:390 80:913 81:814 82:479
83:436 84:533 85:1006 86:372 87:692 88:422
89:1517 90:53 91:2616 92:417 93:1279 94:1317
95:1145 96:190 97:271 98:371 99:30 109:86
110:246 111:456 112:142 113:155 114:274 115:446
116:1096 117:592 118:358 119:790 120:132 121:797
122:1293 123:778 124:1043 125:1373 128:219 129:220
130:130 131:421 132:76 133:10 134:186 135:42
136:224 137:171 138:174 139:82 140:440 141:123
142:385 143:348 144:365 145:49 146:391 147:170
148:551 149:202 150:151 151:176 152:212 153:158
154:2 155:273 156:168 157:310 158:91 159:358
160:292 161:171 162:279 163:171 164:278 165:467
166:478 167:391 168:754 169:163 170:466 171:42
172:2 173:386 174:382 175:1 178:1 180:96
182:1 186:148 187:167 188:1179 189:610 190:3168
192:5745 193:4270 194:3326 195:2736 196:1170 198:3551
199:3352 200:5202 201:1360 202:7891 203:8237 204:3915
205:2180 206:2400 207:2987 208:3972 209:3456 210:2570
211:1142 212:1603 213:1619 214:172 215:39 216:4425
217:1335 218:415 219:456 220:1135 221:449 222:304
End of report
------------------------------
_______________________________________________
afnog mailing list
End of afnog Digest, Vol 67, Issue 16
*************************************
--
Thanks for reading my mail.
Please reply.
Oke-Salako Olayiwola
+234-805-260-3665
+234-805-557-0604
------------------------------------------------------------------------------
_______________________________________________
afnog mailing list
http://afnog.org/mailman/listinfo/afnog
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://afnog.org/pipermail/afnog/attachments/20091026/7ff0b8f3/attachment-0001.html>
More information about the afnog
mailing list