pacnog December 2010

pacnog@pacnog.org

12 participants
13 discussions

by noreply＠apnic.net

Dear Subscriber, This is the monthly reminder of subscription information for the pacnog list, hosted at APNIC. For subscription information including how to un-subscribe go to http://mailman.apnic.net/mailman/listinfo/pacnog Thank you for participating in this discussion. Kind Regards, List administrator

11 years, 6 months

AusCERT Week in Review - Week Ending 24/12/2010 (AUSCERT#20073f686)

by Jonathan Levine

AusCERT Week in Review 24 December 2010 Papers, Articles and other documents: - ------------------------------------- Title: AusCERT incident response metrics Date: 22 December 2010 URL: http://www.auscert.org.au/13760 Web Log Entries: - ---------------- Title: Something to think about... Date: 23 December 2010 URL: http://www.auscert.org.au/13769 Title: Update to ASB-2010.0254 Date: 21 December 2010 URL: http://www.auscert.org.au/13759 Alerts, Advisories and Updates: - ------------------------------- Title: ASB-2010.0253.2 - UPDATE [Win][Linux][Mac][OSX] Google Chrome prior to 8.0.552.224: Multiple vulnerabilities Date: 22 December 2010 URL: http://www.auscert.org.au/13753 Title: ASB-2010.0254 - ALERT [Win] Not applicable: Execute arbitrary code/commands - Remote with user interaction Date: 21 December 2010 URL: http://www.auscert.org.au/13757 Title: ASB-2010.0252 - [Win][UNIX/Linux] Opera prior to version 11: Provide misleading information - Remote with user interaction Date: 20 December 2010 URL: http://www.auscert.org.au/13752 External Security Bulletins: - ---------------------------- Title: ESB-2010.1179 - [SUSE][OpenSUSE] SUSE: Multiple vulnerabilities Date: 24 December 2010 OS: Other Linux Variants, SUSE URL: http://www.auscert.org.au/13772 Title: ESB-2010.1178 - [Win][UNIX/Linux] Image (Drupal third-party module): Cross-site scripting - Remote with user interaction Date: 24 December 2010 OS: IRIX, HP Tru64 UNIX, Solaris, Windows 2003, Red Hat Linux, Windows 7, Mac OS X, Ubuntu, Debian GNU/Linux, Windows XP, HP-UX, Other BSD Variants, SUSE, Windows 2000, OpenBSD, AIX, Windows Vista, FreeBSD, Windows Server 2008, Other Linux Variants URL: http://www.auscert.org.au/13771 Title: ESB-2010.1177 - [Win] Microsoft WMI Administrative Tools: Execute arbitrary code/commands - Remote with user interaction Date: 24 December 2010 OS: Windows 2003, Windows XP, Windows 2000, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13770 Title: ESB-2010.1176 - ALERT [Win] Microsoft Internet Explorer: Execute arbitrary code/commands - Remote with user interaction Date: 23 December 2010 OS: Windows 2003, Windows XP, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13768 Title: ESB-2010.1175 - [Win][UNIX/Linux] oEmbed (Drupal third-party module): Unauthorised access - Remote/unauthenticated Date: 23 December 2010 OS: IRIX, HP Tru64 UNIX, Solaris, Windows 2003, Red Hat Linux, Windows 7, Mac OS X, Ubuntu, Debian GNU/Linux, Windows XP, HP-UX, Other BSD Variants, SUSE, Windows 2000, OpenBSD, AIX, Windows Vista, FreeBSD, Windows Server 2008, Other Linux Variants URL: http://www.auscert.org.au/13767 Title: ESB-2010.1174.2 - UPDATE [Win] Microsoft IIS 7.5.7600.16385 and prior: Execute arbitrary code/commands - Remote/unauthenticated Date: 24 December 2010 OS: Windows Server 2008, Windows Vista, Windows 7, Windows 2000, Windows XP, Windows 2003 URL: http://www.auscert.org.au/13766 Title: ESB-2010.1173 - [VMware ESX] VMware ESXi 4.1 Update Installer: Unauthorised access - Remote/unauthenticated Date: 22 December 2010 OS: Virtualisation URL: http://www.auscert.org.au/13765 Title: ESB-2010.1172 - [UNIX/Linux][RedHat] git: Cross-site scripting - Remote with user interaction Date: 22 December 2010 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/13764 Title: ESB-2010.1171 - [RedHat] mod_auth_mysql: Modify arbitrary files - Remote/unauthenticated Date: 22 December 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13763 Title: ESB-2010.1170 - [Win][UNIX/Linux][Debian] tor: Execute arbitrary code/commands - Remote/unauthenticated Date: 22 December 2010 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Windows 2003, Windows 7, Mac OS X, Debian GNU/Linux, Ubuntu, HP-UX, Windows XP, Other BSD Variants, SUSE, OpenBSD, Windows 2000, AIX, FreeBSD, Windows Vista, Other Linux Variants, Windows Server 2008 URL: http://www.auscert.org.au/13762 Title: ESB-2010.1169 - [Debian] xpdf: Execute arbitrary code/commands - Remote with user interaction Date: 22 December 2010 OS: Debian GNU/Linux URL: http://www.auscert.org.au/13761 Title: ESB-2010.1168.2 - UPDATE [Win][Linux] HP StorageWorks Storage Mirroring: Execute arbitrary code/commands - Remote/unauthenticated Date: 24 December 2010 OS: Windows Server 2008, Other Linux Variants, Windows Vista, Windows 2000, SUSE, Windows XP, Ubuntu, Debian GNU/Linux, Windows 7, Red Hat Linux, Windows 2003 URL: http://www.auscert.org.au/13758 Title: ESB-2010.1167 - [RedHat] bind: Denial of service - Remote/unauthenticated Date: 21 December 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13756 Title: ESB-2010.1166 - [RedHat] libvpx: Execute arbitrary code/commands - Remote with user interaction Date: 21 December 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13754 Title: ESB-2010.1165 - [RedHat] kvm: Access privileged data - Existing account Date: 21 December 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13755 Title: ESB-2010.1164 - [SUSE] java-1_4_2-ibm and IBMJava2-JRE: Multiple vulnerabilities Date: 20 December 2010 OS: SUSE URL: http://www.auscert.org.au/13751 Title: ESB-2010.1163 - [Debian] Upcoming changes to Debian advisory format Date: 20 December 2010 OS: Debian GNU/Linux URL: http://www.auscert.org.au/13750 Title: ESB-2010.1161.2 - UPDATE [Win][UNIX/Linux] Drupal third-party modules: Cross-site request forgery - Remote with user interaction Date: 24 December 2010 OS: Windows Server 2008, Other Linux Variants, Windows Vista, FreeBSD, AIX, OpenBSD, Windows 2000, SUSE, Other BSD Variants, HP-UX, Windows XP, Ubuntu, Debian GNU/Linux, Mac OS X, Windows 7, Red Hat Linux, Windows 2003, Solaris, HP Tru64 UNIX, IRIX URL: http://www.auscert.org.au/13747 ========================================================================== = Australian Computer Emergency Response Team The University of Queensland Brisbane Qld 4072 Internet Email: auscert(a)auscert.org.au Facsimile: (07) 3365 7031 Telephone: (07) 3365 4417 (International: +61 7 3365 4417) AusCERT personnel answer during Queensland business hours which are GMT+10:00 (AEST). On call after hours for member emergencies only. ========================================================================== =

11 years, 6 months

Splitting mail for one domain

by Tarau Bauia

Is it possible to have more than one mx for your single domain? Problem is that I am going to migrate some of my staff to our web hosting company which offer mail for free so I want to test it. Route all mail to our hosting company and for addresses that are not recognized will then be forward to our local mail here. Has anyone know how to do it? -- ************************************************ Tarau Bauia IT Specialist MLPID RONTON Christmas Island itspecialist(a)mlpid.gov.ki ************************************************

11 years, 6 months

2010 in Review

by Elly Tawhai

_______________________________________________________________________ 2010 in Review _______________________________________________________________________ Hi PACNOG Community, The APNIC Secretariat thanks the Internet community for its support during 2010 and wishes everyone a happy and prosperous 2011. As we face the challenges of IPv4 runout, we have created a video reminding the community of the importance of IPv6 deployment, not only to the future of the Internet, but to future generations. http://www.apnic.net/yearinreview We look forward to working with you again. Warm regards The staff of the APNIC Secretariat _______________________________________________________________________ APNIC Secretariat secretariat(a)apnic.net Asia Pacific Network Information Centre (APNIC) Tel: +61 7 3858 3100 PO Box 3646 South Brisbane, QLD 4101 Australia Fax: +61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http://www.apnic.net _______________________________________________________________________ * Sent by email to save paper. Print only if necessary.

11 years, 6 months

Weekly Routing Table Report

by Routing Analysis Role Account

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 18 Dec, 2010 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 338766 Prefixes after maximum aggregation: 153020 Deaggregation factor: 2.21 Unique aggregates announced to Internet: 166625 Total ASes present in the Internet Routing Table: 35498 Prefixes per ASN: 9.54 Origin-only ASes present in the Internet Routing Table: 30573 Origin ASes announcing only one prefix: 14921 Transit ASes present in the Internet Routing Table: 4925 Transit-only ASes present in the Internet Routing Table: 119 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 31 Max AS path prepend of ASN (36992) 29 Prefixes from unregistered ASNs in the Routing Table: 325 Unregistered ASNs in the Routing Table: 127 Number of 32-bit ASNs allocated by the RIRs: 960 Prefixes from 32-bit ASNs in the Routing Table: 4 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 191 Number of addresses announced to Internet: 2341188448 Equivalent to 139 /8s, 139 /16s and 179 /24s Percentage of available address space announced: 63.2 Percentage of allocated address space announced: 65.2 Percentage of available address space allocated: 96.8 Percentage of address space in use by end-sites: 86.7 Total number of prefixes smaller than registry allocations: 139416 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 83366 Total APNIC prefixes after maximum aggregation: 28387 APNIC Deaggregation factor: 2.94 Prefixes being announced from the APNIC address blocks: 80309 Unique aggregates announced from the APNIC address blocks: 34993 APNIC Region origin ASes present in the Internet Routing Table: 4272 APNIC Prefixes per ASN: 18.80 APNIC Region origin ASes announcing only one prefix: 1204 APNIC Region transit ASes present in the Internet Routing Table: 693 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 20 Number of APNIC addresses announced to Internet: 575398688 Equivalent to 34 /8s, 75 /16s and 227 /24s Percentage of available APNIC address space announced: 77.9 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079 55296-56319, 131072-132095 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 136919 Total ARIN prefixes after maximum aggregation: 69999 ARIN Deaggregation factor: 1.96 Prefixes being announced from the ARIN address blocks: 108053 Unique aggregates announced from the ARIN address blocks: 43916 ARIN Region origin ASes present in the Internet Routing Table: 14079 ARIN Prefixes per ASN: 7.67 ARIN Region origin ASes announcing only one prefix: 5392 ARIN Region transit ASes present in the Internet Routing Table: 1489 Average ARIN Region AS path length visible: 4.0 Max ARIN Region AS path length visible: 23 Number of ARIN addresses announced to Internet: 743817600 Equivalent to 44 /8s, 85 /16s and 193 /24s Percentage of available ARIN address space announced: 62.4 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 54/8, 55/8, 56/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 107/8, 108/8, 173/8, 174/8, 184/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 79524 Total RIPE prefixes after maximum aggregation: 45494 RIPE Deaggregation factor: 1.75 Prefixes being announced from the RIPE address blocks: 73010 Unique aggregates announced from the RIPE address blocks: 47168 RIPE Region origin ASes present in the Internet Routing Table: 15132 RIPE Prefixes per ASN: 4.82 RIPE Region origin ASes announcing only one prefix: 7752 RIPE Region transit ASes present in the Internet Routing Table: 2342 Average RIPE Region AS path length visible: 4.5 Max RIPE Region AS path length visible: 30 Number of RIPE addresses announced to Internet: 451844992 Equivalent to 26 /8s, 238 /16s and 155 /24s Percentage of available RIPE address space announced: 74.8 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 196608-197631 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 176/8, 178/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 30995 Total LACNIC prefixes after maximum aggregation: 7106 LACNIC Deaggregation factor: 4.36 Prefixes being announced from the LACNIC address blocks: 29743 Unique aggregates announced from the LACNIC address blocks: 15445 LACNIC Region origin ASes present in the Internet Routing Table: 1404 LACNIC Prefixes per ASN: 21.18 LACNIC Region origin ASes announcing only one prefix: 436 LACNIC Region transit ASes present in the Internet Routing Table: 252 Average LACNIC Region AS path length visible: 4.4 Max LACNIC Region AS path length visible: 19 Number of LACNIC addresses announced to Internet: 78639552 Equivalent to 4 /8s, 175 /16s and 241 /24s Percentage of available LACNIC address space announced: 58.6 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 262144-263167 plus ERX transfers LACNIC Address Blocks 177/8, 181/8, 186/8, 187/8, 189/8, 190/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 7724 Total AfriNIC prefixes after maximum aggregation: 1916 AfriNIC Deaggregation factor: 4.03 Prefixes being announced from the AfriNIC address blocks: 6024 Unique aggregates announced from the AfriNIC address blocks: 1777 AfriNIC Region origin ASes present in the Internet Routing Table: 430 AfriNIC Prefixes per ASN: 14.01 AfriNIC Region origin ASes announcing only one prefix: 137 AfriNIC Region transit ASes present in the Internet Routing Table: 93 Average AfriNIC Region AS path length visible: 5.3 Max AfriNIC Region AS path length visible: 31 Number of AfriNIC addresses announced to Internet: 21619712 Equivalent to 1 /8s, 73 /16s and 228 /24s Percentage of available AfriNIC address space announced: 43.0 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 105/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 1867 9453 519 Korea Telecom (KIX) 7545 1558 299 76 TPG Internet Pty Ltd 4755 1406 651 138 TATA Communications formerly 17974 1342 459 28 PT TELEKOMUNIKASI INDONESIA 24560 1042 312 175 Bharti Airtel Ltd., Telemedia 9583 1041 76 488 Sify Limited 4808 996 1717 273 CNCGROUP IP network: China169 17488 954 157 111 Hathway IP Over Cable Interne 18101 909 116 139 Reliance Infocom Ltd Internet 9829 823 696 31 BSNL National Internet Backbo Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3734 3872 270 bellsouth.net, inc. 4323 2641 1077 399 Time Warner Telecom 19262 1836 4873 283 Verizon Global Networks 1785 1788 697 132 PaeTec Communications, Inc. 20115 1514 1531 640 Charter Communications 6478 1437 290 52 AT&T Worldnet Services 7018 1361 5652 872 AT&T WorldNet Services 2386 1313 570 933 AT&T Data Communications Serv 11492 1271 233 75 Cable One 22773 1257 2864 74 Cox Communications, Inc. Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6830 503 1763 310 UPC Distribution Services 3292 443 2010 386 TDC Tele Danmark 34984 440 96 133 BILISIM TELEKOM 8866 439 133 23 Bulgarian Telecommunication C 9121 435 1690 29 TTnet Autonomous System 9198 417 202 13 Kazakhtelecom Data Network Ad 8551 402 353 46 Bezeq International 702 397 1864 311 UUNET - Commercial IP service 12479 393 577 6 Uni2 Autonomous System 3320 392 7609 344 Deutsche Telekom AG Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 1347 2617 363 UniNet S.A. de C.V. 10620 1343 250 154 TVCABLE BOGOTA 28573 1225 933 79 NET Servicos de Comunicao S.A 6503 1187 355 80 AVANTEL, S.A. 7303 832 441 109 Telecom Argentina Stet-France 14420 584 49 88 CORPORACION NACIONAL DE TELEC 22047 565 310 15 VTR PUNTO NET S.A. 3816 494 216 101 Empresa Nacional de Telecomun 7738 478 922 30 Telecomunicacoes da Bahia S.A 14117 452 32 30 Telefonica del Sur S.A. Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 8452 1125 445 10 TEDATA 24863 746 147 39 LINKdotNET AS number 36992 658 276 158 Etisalat MISR 3741 263 986 225 The Internet Solution 24835 217 78 10 RAYA Telecom - Egypt 6713 203 199 12 Itissalat Al-MAGHRIB 29571 199 19 11 Ci Telecom Autonomous system 2018 196 277 64 Tertiary Education Network 33776 184 12 14 Starcomms Nigeria Limited 16637 161 440 88 MTN Network Solutions Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3734 3872 270 bellsouth.net, inc. 4323 2641 1077 399 Time Warner Telecom 4766 1867 9453 519 Korea Telecom (KIX) 19262 1836 4873 283 Verizon Global Networks 1785 1788 697 132 PaeTec Communications, Inc. 7545 1558 299 76 TPG Internet Pty Ltd 20115 1514 1531 640 Charter Communications 6478 1437 290 52 AT&T Worldnet Services 4755 1406 651 138 TATA Communications formerly 7018 1361 5652 872 AT&T WorldNet Services Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4323 2641 2242 Time Warner Telecom 1785 1788 1656 PaeTec Communications, Inc. 19262 1836 1553 Verizon Global Networks 7545 1558 1482 TPG Internet Pty Ltd 6478 1437 1385 AT&T Worldnet Services 4766 1867 1348 Korea Telecom (KIX) 17974 1342 1314 PT TELEKOMUNIKASI INDONESIA 4755 1406 1268 TATA Communications formerly 11492 1271 1196 Cable One 10620 1343 1189 TVCABLE BOGOTA Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 16927 UNALLOCATED 12.0.252.0/23 7018 AT&T WorldNet Servic 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.14.170.0/24 4323 Time Warner Telecom 13746 UNALLOCATED 12.24.56.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.25.107.0/24 4323 Time Warner Telecom 26973 UNALLOCATED 12.39.152.0/24 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.154.0/23 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.155.0/24 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.159.0/24 7018 AT&T WorldNet Servic 25639 UNALLOCATED 12.41.169.0/24 7018 AT&T WorldNet Servic Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 5.0.0.0/16 12654 RIPE NCC RIS Project 5.1.0.0/21 12654 RIPE NCC RIS Project 5.1.24.0/24 12654 RIPE NCC RIS Project 24.129.192.0/19 7922 Continental Cablevision 37.0.0.0/16 12654 RIPE NCC RIS Project 37.1.0.0/21 12654 RIPE NCC RIS Project 37.1.24.0/24 12654 RIPE NCC RIS Project 41.222.79.0/24 36938 >>UNKNOWN<< 41.223.92.0/22 36936 >>UNKNOWN<< 46.211.0.0/16 15895 Kyivstar GSM Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:20 /9:10 /10:25 /11:70 /12:212 /13:431 /14:753 /15:1346 /16:11410 /17:5526 /18:9208 /19:18676 /20:23969 /21:24284 /22:31827 /23:30881 /24:177306 /25:991 /26:1065 /27:579 /28:155 /29:12 /30:2 /31:0 /32:8 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6389 2306 3734 bellsouth.net, inc. 4323 1429 2641 Time Warner Telecom 6478 1394 1437 AT&T Worldnet Services 10620 1235 1343 TVCABLE BOGOTA 11492 1226 1271 Cable One 18566 1076 1095 Covad Communications 7011 1071 1174 Citizens Utilities 1785 1062 1788 PaeTec Communications, Inc. 8452 1021 1125 TEDATA 6503 972 1187 AVANTEL, S.A. Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:140 2:11 4:13 5:1 8:317 12:2034 13:6 14:94 15:17 16:3 17:8 20:9 24:1447 27:491 32:61 33:5 34:2 36:1 37:1 38:714 40:102 41:2716 42:1 44:3 46:387 47:4 49:73 50:27 52:12 55:3 56:2 57:29 58:858 59:502 60:393 61:1105 62:1047 63:1941 64:3718 65:2322 66:4082 67:1757 68:991 69:2815 70:714 71:389 72:1946 73:1 74:2283 75:289 76:319 77:852 78:746 79:434 80:1042 81:786 82:516 83:444 84:631 85:1053 86:514 87:708 88:406 89:1586 90:143 91:3342 92:473 93:1010 94:1129 95:698 96:409 97:247 98:709 99:33 101:3 107:2 108:77 109:813 110:474 111:671 112:309 113:321 114:478 115:639 116:890 117:655 118:608 119:1014 120:199 121:725 122:1570 123:1025 124:1232 125:1211 128:230 129:153 130:170 131:564 132:234 133:20 134:206 135:50 136:212 137:148 138:290 139:109 140:481 141:197 142:352 143:358 144:480 145:52 146:424 147:190 148:629 149:327 150:150 151:230 152:297 153:172 154:3 155:372 156:166 157:338 158:126 159:369 160:315 161:198 162:276 163:164 164:434 165:334 166:470 167:417 168:738 169:151 170:726 171:67 172:2 173:1142 174:475 175:264 176:1 177:2 178:654 180:726 182:467 183:241 184:190 186:839 187:773 188:889 189:1041 190:4225 192:5781 193:4795 194:3474 195:2888 196:1191 197:1 198:3535 199:3682 200:5543 201:1581 202:8252 203:8380 204:4048 205:2331 206:2522 207:2971 208:3857 209:3486 210:2559 211:1314 212:1887 213:1705 214:744 215:62 216:4791 217:1622 218:524 219:386 220:1175 221:443 222:342 223:81 End of report

11 years, 6 months

AusCERT Week in Review - Week Ending 17/12/2010 (AUSCERT#20073f686)

by Jonathan Levine

AusCERT Week in Review 17 December 2010 Alerts, Advisories and Updates: - ------------------------------- Title: ASB-2010.0251 - [Linux][BSD][Solaris] ISC DHCP Server prior to 4.2.0-P2: Denial of service - Remote/unauthenticated Date: 14 December 2010 URL: http://www.auscert.org.au/13715 Title: ASB-2010.0250 - [Win] Sophos SafeGuard Enterprise Device Encryption Client: Unauthorised access - Remote with user interaction Date: 13 December 2010 URL: http://www.auscert.org.au/13709 External Security Bulletins: - ---------------------------- Title: ESB-2010.1162.2 - UPDATE [Appliance] Apple Time Capsule and AirPort Base Station: Multiple vulnerabilities Date: 17 December 2010 URL: http://www.auscert.org.au/13748 Title: ESB-2010.1161 - [Win][UNIX/Linux] Drupal third-party modules: Cross-site request forgery - Remote with user interaction Date: 17 December 2010 OS: IRIX, HP Tru64 UNIX, Solaris, Windows 2003, Red Hat Linux, Windows 7, Mac OS X, Ubuntu, Debian GNU/Linux, Windows XP, HP-UX, Other BSD Variants, SUSE, Windows 2000, OpenBSD, AIX, Windows Vista, FreeBSD, Windows Server 2008, Other Linux Variants URL: http://www.auscert.org.au/13747 Title: ESB-2010.1160 - [Win][UNIX/Linux][Appliance] HP StorageWorks Modular Smart Array P2000 G3: Unauthorised access - Remote/unauthenticated Date: 17 December 2010 OS: IRIX, HP Tru64 UNIX, Solaris, Windows 2003, Red Hat Linux, Windows 7, Mac OS X, Ubuntu, Debian GNU/Linux, Windows XP, HP-UX, Other BSD Variants, SUSE, Windows 2000, OpenBSD, AIX, Windows Vista, FreeBSD, Windows Server 2008, Other Linux Variants URL: http://www.auscert.org.au/13746 Title: ESB-2010.1159 - [Win] HP Discovery & Dependency Mapping Inventory: Cross-site scripting - Remote with user interaction Date: 17 December 2010 OS: Windows 2003, HP-UX, Windows XP, Windows 2000, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13745 Title: ESB-2010.1158 - [Win][Linux] HP Power Manager: Execute arbitrary code/commands - Remote/unauthenticated Date: 17 December 2010 OS: Windows 7, Windows 2003, Red Hat Linux, Debian GNU/Linux, Ubuntu, HP-UX, Windows XP, SUSE, Windows 2000, Windows Vista, Other Linux Variants, Windows Server 2008 URL: http://www.auscert.org.au/13744 Title: ESB-2010.1157 - HP OpenVMS Integrity Servers: Increased privileges - Existing account Date: 16 December 2010 OS: HP-UX URL: http://www.auscert.org.au/13743 Title: ESB-2010.1156 - [Win][Linux] HP Insight Management Agents: Access privileged data - Remote/unauthenticated Date: 16 December 2010 OS: Red Hat Linux, Windows 2003, Windows 7, Debian GNU/Linux, Ubuntu, HP-UX, Windows XP, SUSE, Windows 2000, Windows Vista, Other Linux Variants, Windows Server 2008 URL: http://www.auscert.org.au/13741 Title: ESB-2010.1155 - [Win][Linux] HP Insight Diagnostics Online Edition: Cross-site scripting - Remote with user interaction Date: 16 December 2010 OS: Red Hat Linux, Windows 2003, Windows 7, Debian GNU/Linux, Ubuntu, HP-UX, Windows XP, SUSE, Windows 2000, Windows Vista, Other Linux Variants, Windows Server 2008 URL: http://www.auscert.org.au/13742 Title: ESB-2010.1154 - [RedHat] java-1.6.0-ibm: Multiple vulnerabilities Date: 16 December 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13740 Title: ESB-2010.1153 - [RedHat] java-1.4.2-ibm-sap: Multiple vulnerabilities Date: 16 December 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13739 Title: ESB-2010.1152 - [Win][VMware ESX][Linux] Symantec Endpoint Protection: Execute arbitrary code/commands - Remote/unauthenticated Date: 16 December 2010 OS: Windows 2003, Red Hat Linux, Windows 7, Ubuntu, Debian GNU/Linux, Windows XP, Virtualisation, SUSE, Windows 2000, Windows Vista, Windows Server 2008, Other Linux Variants URL: http://www.auscert.org.au/13738 Title: ESB-2010.1151 - [Win] SAP NetWeaver: Execute arbitrary code/commands - Remote with user interaction Date: 15 December 2010 OS: Windows 2003, Windows 7, Windows XP, Windows 2000, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13737 Title: ESB-2010.1150 - [SUSE] kernel: Multiple vulnerabilities Date: 15 December 2010 OS: SUSE URL: http://www.auscert.org.au/13736 Title: ESB-2010.1149 - [RedHat] HelixPlayer: Execute arbitrary code/commands - Remote with user interaction Date: 15 December 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13735 Title: ESB-2009.1148.4 - UPDATE [HP-UX] BIND: Denial of service - Remote/unauthenticated Date: 17 December 2010 OS: HP-UX URL: http://www.auscert.org.au/11443 Title: ESB-2010.1148 - [Win][Netware][Linux][Solaris][AIX] BlackBerry Enterprise Server: Execute arbitrary code/commands - Remote with user interaction Date: 15 December 2010 OS: Solaris, Windows 2003, Red Hat Linux, Windows 7, Novell Netware, Ubuntu, Debian GNU/Linux, Windows XP, SUSE, Windows 2000, AIX, Windows Vista, Windows Server 2008, Other Linux Variants URL: http://www.auscert.org.au/13734 Title: ESB-2010.1147 - [Win] Microsoft Exchange Server 2007 Service Pack 2: Denial of service - Existing account Date: 15 December 2010 OS: Windows 2003, Windows Server 2008 URL: http://www.auscert.org.au/13733 Title: ESB-2010.1146 - [Win] Microsoft Office Graphics Filters: Execute arbitrary code/commands - Remote with user interaction Date: 15 December 2010 OS: Windows 2003, Windows XP, Windows 2000, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13732 Title: ESB-2010.1145 - [Win] Microsoft Office SharePoint Server 2007 Service Pack 2: Execute arbitrary code/commands - Remote/unauthenticated Date: 15 December 2010 OS: Windows 2003, Windows Server 2008 URL: http://www.auscert.org.au/13731 Title: ESB-2010.1144 - [Win] Microsoft Publisher: Execute arbitrary code/commands - Remote with user interaction Date: 15 December 2010 OS: Windows 2003, Windows XP, Windows 2000, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13730 Title: ESB-2010.1143 - [Win] Hyper-V: Denial of service - Existing account Date: 15 December 2010 OS: Windows Server 2008 URL: http://www.auscert.org.au/13729 Title: ESB-2010.1142 - [Win] Windows Netlogon Service: Denial of service - Existing account Date: 15 December 2010 OS: Windows 2003, Windows Server 2008 URL: http://www.auscert.org.au/13728 Title: ESB-2010.1141 - [Win] Consent User Interface: Administrator compromise - Existing account Date: 15 December 2010 OS: Windows Vista, Windows Server 2008, Windows 7 URL: http://www.auscert.org.au/13727 Title: ESB-2010.1140 - [Win] Routing and Remote Access NDProxy component: Administrator compromise - Existing account Date: 15 December 2010 OS: Windows 2003, Windows XP URL: http://www.auscert.org.au/13726 Title: ESB-2010.1139 - [Win] Microsoft Windows: Administrator compromise - Existing account Date: 15 December 2010 OS: Windows 2003, Windows XP, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13725 Title: ESB-2010.1138 - [Win] Internet Connection Signup Wizard: Execute arbitrary code/commands - Remote with user interaction Date: 15 December 2010 OS: Windows 2003, Windows XP URL: http://www.auscert.org.au/13724 Title: ESB-2010.1137 - [Win] Windows Address Book: Execute arbitrary code/commands - Remote with user interaction Date: 15 December 2010 OS: Windows 2003, Windows XP, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13723 Title: ESB-2010.1136 - [Win] Windows BranchCache: Execute arbitrary code/commands - Remote with user interaction Date: 15 December 2010 OS: Windows Server 2008, Windows 7 URL: http://www.auscert.org.au/13722 Title: ESB-2010.1135 - [Win] Windows Media Encoder: Execute arbitrary code/commands - Remote with user interaction Date: 15 December 2010 OS: Windows Vista, Windows 2003, Windows XP, Windows Server 2008 URL: http://www.auscert.org.au/13721 Title: ESB-2010.1134 - [Win] Windows Movie Maker 2.6: Execute arbitrary code/commands - Remote with user interaction Date: 15 December 2010 OS: Windows Vista URL: http://www.auscert.org.au/13720 Title: ESB-2010.1133 - [Win] Task Scheduler: Administrator compromise - Existing account Date: 15 December 2010 OS: Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13719 Title: ESB-2010.1132 - ALERT [Win] Windows Open Type Font (OTF) driver: Administrator compromise - Remote with user interaction Date: 15 December 2010 OS: Windows 2003, Windows XP, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13718 Title: ESB-2010.1131 - ALERT [Win] Microsoft Internet Explorer: Multiple vulnerabilities Date: 15 December 2010 OS: Windows 2003, Windows XP, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13717 Title: ESB-2010.1130 - [Appliance] Avaya CMS and Avaya IR: Denial of service - Existing account Date: 14 December 2010 URL: http://www.auscert.org.au/13716 Title: ESB-2010.1129 - [UNIX/Linux][Debian] collectd: Denial of service - Remote/unauthenticated Date: 14 December 2010 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Debian GNU/Linux, Ubuntu, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/13714 Title: ESB-2010.1128 - [Win][Netware][Linux] Novell ZENWorks: Multiple vulnerabilities Date: 14 December 2010 OS: Windows 2003, Red Hat Linux, Windows 7, Novell Netware, Ubuntu, Debian GNU/Linux, Windows XP, SUSE, Windows 2000, Windows Vista, Windows Server 2008, Other Linux Variants URL: http://www.auscert.org.au/13713 Title: ESB-2010.1127 - [Win] Symantec Antivirus Corporate Edition 10.1.4.4010 and prior: Denial of service - Remote/unauthenticated Date: 14 December 2010 OS: Windows 2003, Windows XP, Windows 2000, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13712 Title: ESB-2010.1126 - [RedHat] openssl: Multiple vulnerabilities Date: 14 December 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13711 Title: ESB-2010.1125.2 - UPDATE [RedHat] bind: Multiple vulnerabilities Date: 14 December 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13710 Title: ESB-2010.1124.2 - UPDATE [Win][UNIX/Linux] RealPlayer: Execute arbitrary code/commands - Remote with user interaction Date: 15 December 2010 OS: Windows Server 2008, Other Linux Variants, Windows Vista, FreeBSD, AIX, OpenBSD, Windows 2000, SUSE, Other BSD Variants, HP-UX, Windows XP, Ubuntu, Debian GNU/Linux, Mac OS X, Windows 7, Red Hat Linux, Windows 2003, Solaris, HP Tru64 UNIX, IRIX URL: http://www.auscert.org.au/13708 Title: ESB-2010.1123.2 - UPDATE [HP-UX] Java: Multiple vulnerabilities Date: 14 December 2010 OS: HP-UX URL: http://www.auscert.org.au/13707 Title: ESB-2010.1122 - [Debian] xulrunner: Multiple vulnerabilities Date: 13 December 2010 OS: Debian GNU/Linux URL: http://www.auscert.org.au/13706 Title: ESB-2010.1121 - [Debian] bind9: Denial of service - Remote/unauthenticated Date: 13 December 2010 OS: Debian GNU/Linux URL: http://www.auscert.org.au/13705 Title: ESB-2010.1120 - [RedHat] exim: Root compromise - Remote/unauthenticated Date: 13 December 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13703 Title: ESB-2010.1119 - ALERT [UNIX/Linux][Debian] exim4: Multiple vulnerabilities Date: 13 December 2010 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Debian GNU/Linux, Ubuntu, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/13704 Title: ESB-2010.1118 - [RedHat] seamonkey: Multiple vulnerabilities Date: 13 December 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13702 =========================================================================== Australian Computer Emergency Response Team The University of Queensland Brisbane Qld 4072 Internet Email: auscert(a)auscert.org.au Facsimile: (07) 3365 7031 Telephone: (07) 3365 4417 (International: +61 7 3365 4417) AusCERT personnel answer during Queensland business hours which are GMT+10:00 (AEST). On call after hours for member emergencies only. ===========================================================================

11 years, 6 months

Weekly Routing Table Report

by Routing Analysis Role Account

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 11 Dec, 2010 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 338487 Prefixes after maximum aggregation: 152765 Deaggregation factor: 2.22 Unique aggregates announced to Internet: 166476 Total ASes present in the Internet Routing Table: 35460 Prefixes per ASN: 9.55 Origin-only ASes present in the Internet Routing Table: 30540 Origin ASes announcing only one prefix: 14921 Transit ASes present in the Internet Routing Table: 4920 Transit-only ASes present in the Internet Routing Table: 118 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 31 Max AS path prepend of ASN (36992) 29 Prefixes from unregistered ASNs in the Routing Table: 684 Unregistered ASNs in the Routing Table: 323 Number of 32-bit ASNs allocated by the RIRs: 939 Prefixes from 32-bit ASNs in the Routing Table: 4 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 193 Number of addresses announced to Internet: 2317458720 Equivalent to 138 /8s, 33 /16s and 157 /24s Percentage of available address space announced: 62.5 Percentage of allocated address space announced: 64.6 Percentage of available address space allocated: 96.8 Percentage of address space in use by end-sites: 86.6 Total number of prefixes smaller than registry allocations: 139176 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 83574 Total APNIC prefixes after maximum aggregation: 28342 APNIC Deaggregation factor: 2.95 Prefixes being announced from the APNIC address blocks: 80522 Unique aggregates announced from the APNIC address blocks: 34882 APNIC Region origin ASes present in the Internet Routing Table: 4270 APNIC Prefixes per ASN: 18.86 APNIC Region origin ASes announcing only one prefix: 1209 APNIC Region transit ASes present in the Internet Routing Table: 691 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 20 Number of APNIC addresses announced to Internet: 571740448 Equivalent to 34 /8s, 20 /16s and 17 /24s Percentage of available APNIC address space announced: 77.5 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079 55296-56319, 131072-132095 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 136853 Total ARIN prefixes after maximum aggregation: 69866 ARIN Deaggregation factor: 1.96 Prefixes being announced from the ARIN address blocks: 107840 Unique aggregates announced from the ARIN address blocks: 43908 ARIN Region origin ASes present in the Internet Routing Table: 14068 ARIN Prefixes per ASN: 7.67 ARIN Region origin ASes announcing only one prefix: 5390 ARIN Region transit ASes present in the Internet Routing Table: 1494 Average ARIN Region AS path length visible: 4.0 Max ARIN Region AS path length visible: 23 Number of ARIN addresses announced to Internet: 741824128 Equivalent to 44 /8s, 55 /16s and 86 /24s Percentage of available ARIN address space announced: 62.3 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 54/8, 55/8, 56/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 107/8, 108/8, 173/8, 174/8, 184/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 79084 Total RIPE prefixes after maximum aggregation: 45393 RIPE Deaggregation factor: 1.74 Prefixes being announced from the RIPE address blocks: 72578 Unique aggregates announced from the RIPE address blocks: 47126 RIPE Region origin ASes present in the Internet Routing Table: 15108 RIPE Prefixes per ASN: 4.80 RIPE Region origin ASes announcing only one prefix: 7748 RIPE Region transit ASes present in the Internet Routing Table: 2336 Average RIPE Region AS path length visible: 4.6 Max RIPE Region AS path length visible: 30 Number of RIPE addresses announced to Internet: 450700800 Equivalent to 26 /8s, 221 /16s and 38 /24s Percentage of available RIPE address space announced: 74.6 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 196608-197631 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 176/8, 178/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 31053 Total LACNIC prefixes after maximum aggregation: 7139 LACNIC Deaggregation factor: 4.35 Prefixes being announced from the LACNIC address blocks: 29788 Unique aggregates announced from the LACNIC address blocks: 15473 LACNIC Region origin ASes present in the Internet Routing Table: 1408 LACNIC Prefixes per ASN: 21.16 LACNIC Region origin ASes announcing only one prefix: 439 LACNIC Region transit ASes present in the Internet Routing Table: 253 Average LACNIC Region AS path length visible: 4.4 Max LACNIC Region AS path length visible: 18 Number of LACNIC addresses announced to Internet: 78606336 Equivalent to 4 /8s, 175 /16s and 112 /24s Percentage of available LACNIC address space announced: 58.6 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 262144-263167 plus ERX transfers LACNIC Address Blocks 177/8, 181/8, 186/8, 187/8, 189/8, 190/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 7683 Total AfriNIC prefixes after maximum aggregation: 1907 AfriNIC Deaggregation factor: 4.03 Prefixes being announced from the AfriNIC address blocks: 5972 Unique aggregates announced from the AfriNIC address blocks: 1792 AfriNIC Region origin ASes present in the Internet Routing Table: 426 AfriNIC Prefixes per ASN: 14.02 AfriNIC Region origin ASes announcing only one prefix: 135 AfriNIC Region transit ASes present in the Internet Routing Table: 92 Average AfriNIC Region AS path length visible: 5.3 Max AfriNIC Region AS path length visible: 31 Number of AfriNIC addresses announced to Internet: 21769216 Equivalent to 1 /8s, 76 /16s and 44 /24s Percentage of available AfriNIC address space announced: 43.3 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 105/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 1874 9453 520 Korea Telecom (KIX) 7545 1573 299 79 TPG Internet Pty Ltd 4755 1422 648 141 TATA Communications formerly 17974 1331 459 27 PT TELEKOMUNIKASI INDONESIA 17488 1102 158 113 Hathway IP Over Cable Interne 9583 1043 107 487 Sify Limited 24560 1035 309 170 Bharti Airtel Ltd., Telemedia 4808 990 1715 271 CNCGROUP IP network: China169 18101 939 116 138 Reliance Infocom Ltd Internet 9829 838 696 31 BSNL National Internet Backbo Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3736 3887 269 bellsouth.net, inc. 4323 2641 1077 400 Time Warner Telecom 19262 1834 4869 282 Verizon Global Networks 1785 1795 697 132 PaeTec Communications, Inc. 20115 1512 1531 640 Charter Communications 6478 1427 289 75 AT&T Worldnet Services 7018 1360 5652 873 AT&T WorldNet Services 2386 1308 571 926 AT&T Data Communications Serv 22773 1261 2864 74 Cox Communications, Inc. 11492 1256 234 73 Cable One Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6830 502 1763 309 UPC Distribution Services 3292 443 2010 385 TDC Tele Danmark 8866 435 137 24 Bulgarian Telecommunication C 9121 431 1690 29 TTnet Autonomous System 34984 422 92 191 BILISIM TELEKOM 9198 414 202 13 Kazakhtelecom Data Network Ad 8551 402 353 46 Bezeq International 702 397 1864 311 UUNET - Commercial IP service 12479 397 577 6 Uni2 Autonomous System 3301 385 1696 341 TeliaNet Sweden Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 1351 2649 369 UniNet S.A. de C.V. 10620 1344 250 156 TVCABLE BOGOTA 28573 1209 932 79 NET Servicos de Comunicao S.A 6503 1175 355 80 AVANTEL, S.A. 7303 830 441 106 Telecom Argentina Stet-France 14420 584 49 88 CORPORACION NACIONAL DE TELEC 22047 563 310 15 VTR PUNTO NET S.A. 3816 492 214 100 Empresa Nacional de Telecomun 7738 478 922 30 Telecomunicacoes da Bahia S.A 14117 452 32 30 Telefonica del Sur S.A. Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 8452 1109 445 10 TEDATA 24863 746 147 39 LINKdotNET AS number 36992 657 274 160 Etisalat MISR 3741 263 986 225 The Internet Solution 6713 203 199 12 Itissalat Al-MAGHRIB 29571 199 19 11 Ci Telecom Autonomous system 24835 198 78 10 RAYA Telecom - Egypt 2018 196 277 64 Tertiary Education Network 33776 184 12 14 Starcomms Nigeria Limited 16637 162 440 89 MTN Network Solutions Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3736 3887 269 bellsouth.net, inc. 4323 2641 1077 400 Time Warner Telecom 4766 1874 9453 520 Korea Telecom (KIX) 19262 1834 4869 282 Verizon Global Networks 1785 1795 697 132 PaeTec Communications, Inc. 7545 1573 299 79 TPG Internet Pty Ltd 20115 1512 1531 640 Charter Communications 6478 1427 289 75 AT&T Worldnet Services 4755 1422 648 141 TATA Communications formerly 7018 1360 5652 873 AT&T WorldNet Services Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4323 2641 2241 Time Warner Telecom 1785 1795 1663 PaeTec Communications, Inc. 19262 1834 1552 Verizon Global Networks 7545 1573 1494 TPG Internet Pty Ltd 4766 1874 1354 Korea Telecom (KIX) 6478 1427 1352 AT&T Worldnet Services 17974 1331 1304 PT TELEKOMUNIKASI INDONESIA 4755 1422 1281 TATA Communications formerly 10620 1344 1188 TVCABLE BOGOTA 22773 1261 1187 Cox Communications, Inc. Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 46164 UNALLOCATED 4.23.88.0/24 7018 AT&T WorldNet Servic 46164 UNALLOCATED 4.23.89.0/24 7018 AT&T WorldNet Servic 46164 UNALLOCATED 4.23.92.0/23 7018 AT&T WorldNet Servic 46164 UNALLOCATED 4.23.94.0/23 7018 AT&T WorldNet Servic 46164 UNALLOCATED 4.38.0.0/21 7018 AT&T WorldNet Servic 46164 UNALLOCATED 4.38.8.0/21 7018 AT&T WorldNet Servic 46164 UNALLOCATED 4.43.50.0/24 7018 AT&T WorldNet Servic 46164 UNALLOCATED 4.43.51.0/24 7018 AT&T WorldNet Servic 46164 UNALLOCATED 4.67.96.0/21 7018 AT&T WorldNet Servic 46164 UNALLOCATED 4.67.104.0/21 7018 AT&T WorldNet Servic Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 5.0.0.0/16 12654 RIPE NCC RIS Project 5.1.0.0/21 12654 RIPE NCC RIS Project 5.1.24.0/24 12654 RIPE NCC RIS Project 24.129.192.0/19 7922 Continental Cablevision 37.0.0.0/16 12654 RIPE NCC RIS Project 37.1.0.0/21 12654 RIPE NCC RIS Project 37.1.24.0/24 12654 RIPE NCC RIS Project 41.222.79.0/24 36938 >>UNKNOWN<< 41.223.92.0/22 36936 >>UNKNOWN<< 46.164.128.0/18 21219 Datacom Autonomous System Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:19 /9:10 /10:25 /11:70 /12:210 /13:429 /14:751 /15:1338 /16:11355 /17:5518 /18:9199 /19:18627 /20:23904 /21:24216 /22:31803 /23:30778 /24:177411 /25:997 /26:1075 /27:572 /28:158 /29:12 /30:2 /31:0 /32:8 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6389 2307 3736 bellsouth.net, inc. 4323 1430 2641 Time Warner Telecom 6478 1384 1427 AT&T Worldnet Services 10620 1236 1344 TVCABLE BOGOTA 11492 1213 1256 Cable One 18566 1070 1089 Covad Communications 7011 1069 1172 Citizens Utilities 1785 1068 1795 PaeTec Communications, Inc. 8452 972 1109 TEDATA 6503 960 1175 AVANTEL, S.A. Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:128 2:16 4:13 5:1 8:316 12:2029 13:6 14:88 15:17 16:3 17:8 20:9 24:1423 27:488 32:61 33:6 34:2 36:1 37:1 38:718 40:101 41:2635 42:1 44:3 46:323 47:4 49:38 50:17 52:12 55:6 56:2 57:29 58:856 59:515 60:418 61:1127 62:1025 63:1938 64:3713 65:2319 66:4068 67:1758 68:1002 69:2825 70:716 71:389 72:1947 74:2279 75:287 76:319 77:870 78:738 79:437 80:1059 81:803 82:511 83:445 84:632 85:1040 86:488 87:705 88:406 89:1589 90:137 91:3309 92:457 93:1018 94:1098 95:698 96:406 97:246 98:698 99:33 101:3 107:2 108:69 109:800 110:469 111:668 112:309 113:323 114:482 115:676 116:1000 117:664 118:608 119:1007 120:198 121:731 122:1572 123:1031 124:1224 125:1232 128:232 129:153 130:170 131:567 132:230 133:20 134:208 135:47 136:213 137:148 138:289 139:110 140:477 141:196 142:352 143:516 144:487 145:54 146:424 147:179 148:641 149:326 150:150 151:230 152:295 153:172 154:3 155:367 156:166 157:339 158:126 159:369 160:311 161:197 162:276 163:165 164:434 165:334 166:470 167:420 168:737 169:151 170:723 171:67 172:2 173:1132 174:466 175:274 176:1 178:641 180:734 182:532 183:241 184:190 186:893 187:759 188:875 189:1009 190:4265 192:5786 193:4802 194:3468 195:2894 196:1205 197:1 198:3533 199:3670 200:5539 201:1582 202:8246 203:8368 204:4045 205:2344 206:2517 207:2978 208:3851 209:3477 210:2543 211:1314 212:1875 213:1730 214:727 215:62 216:4795 217:1616 218:522 219:403 220:1207 221:442 222:341 223:76 End of report

11 years, 6 months

AusCERT Week in Review - Week Ending 10/12/2010 (AUSCERT#20073f686)

by Zane Jarvis

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 AusCERT Week in Review 10 December 2010 Greetings, Popular applications in focus this week, with Firefox[1], Google Chrome[2], Thunderbird[3] and Quicktime[4] all corrected for multiple vulnerabilities. Next week is Microsoft patch week and the Advance Notification[5] is out: 17 bulletins in total, with critical impacts on Windows, Internet Explorer and Office. regards, The AusCERT Team [1] Mozilla Firefox http://www.auscert.org.au/13697 [2] Google Chrome http://www.auscert.org.au/13678 [3] Mozilla Thunderbird http://www.auscert.org.au/13698 [4] Apple Quicktime http://www.auscert.org.au/13687 [5] Microsoft Advance Notification http://www.auscert.org.au/13694 Alerts, Advisories and Updates: - ------------------------------- Title: ASB-2010.0248 - ALERT [Win][UNIX/Linux] Firefox: Multiple vulnerabilities Date: 10 December 2010 URL: http://www.auscert.org.au/13697 Title: ASB-2010.0249 - [Win][UNIX/Linux] Thunderbird: Multiple vulnerabilities Date: 10 December 2010 URL: http://www.auscert.org.au/13698 Title: ASB-2010.0247 - [Win][UNIX/Linux] WordPress prior to version 3.0.3: Increased privileges - Existing account Date: 09 December 2010 URL: http://www.auscert.org.au/13693 Title: ASB-2010.0246.2 - UPDATE [Win][Linux][OSX] Google Chrome prior to 8.0.552.215: Multiple vulnerabilities Date: 08 December 2010 URL: http://www.auscert.org.au/13678 External Security Bulletins: - ---------------------------- Title: ESB-2010.1117 - [RedHat] thunderbird: Multiple vulnerabilities Date: 10 December 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13700 Title: ESB-2010.1116 - [RedHat] firefox: Multiple vulnerabilities Date: 10 December 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13699 Title: ESB-2010.1115 - [Win] CA XOsoft: Execute arbitrary code/commands - Remote/unauthenticated Date: 10 December 2010 OS: Windows 2003, Windows XP, Windows 2000, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13696 Title: ESB-2010.1114 - [HP-UX] HP-UX Apache-based Web Server: Multiple vulnerabilities Date: 10 December 2010 OS: HP-UX URL: http://www.auscert.org.au/13695 Title: ESB-2010.1113 - [Win] Microsoft Security Bulletin Advance Notification for December 2010 Date: 10 December 2010 OS: Windows 2003, Windows XP, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13694 Title: ESB-2010.1112 - [Win][UNIX/Linux] Drupal third-party modules: Execute arbitrary code/commands - Remote with user interaction Date: 09 December 2010 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Windows 2003, Windows 7, Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Windows XP, Other BSD Variants, SUSE, OpenBSD, Windows 2000, AIX, FreeBSD, Windows Vista, Other Linux Variants, Windows Server 2008 URL: http://www.auscert.org.au/13692 Title: ESB-2010.1111 - [SUSE][OpenSUSE] SUSE: Multiple vulnerabilities Date: 09 December 2010 OS: Other Linux Variants, SUSE URL: http://www.auscert.org.au/13691 Title: ESB-2010.1110 - [SUSE][OpenSUSE] acoread: Multiple vulnerabilities Date: 09 December 2010 OS: Other Linux Variants, SUSE URL: http://www.auscert.org.au/13690 Title: ESB-2010.1109 - [RedHat] JBoss: Denial of service - Remote with user interaction Date: 09 December 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13689 Title: ESB-2010.1108 - [RedHat] kernel-rt: Multiple vulnerabilities Date: 09 December 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13688 Title: ESB-2010.1107 - [Win][OSX] QuickTime prior to 7.6.9: Multiple vulnerabilities Date: 08 December 2010 OS: Windows 2003, Windows XP, Windows 2000, Windows 7, Windows Vista, Mac OS X, Windows Server 2008 URL: http://www.auscert.org.au/13687 Title: ESB-2010.1106 - [Win][UNIX/Linux][Mandriva] clamav: Multiple vulnerabilities Date: 08 December 2010 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Windows 2003, Windows 7, Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Windows XP, Other BSD Variants, SUSE, OpenBSD, Windows 2000, AIX, FreeBSD, Windows Vista, Other Linux Variants, Windows Server 2008 URL: http://www.auscert.org.au/13686 Title: ESB-2010.1105 - [VMware ESX] VMware ESX 3.5: Multiple vulnerabilities Date: 08 December 2010 OS: Virtualisation URL: http://www.auscert.org.au/13685 Title: ESB-2010.1104 - [HP-UX] HP-UX: Denial of service - Remote/unauthenticated Date: 08 December 2010 OS: HP-UX URL: http://www.auscert.org.au/13684 Title: ESB-2010.1103 - [RedHat] apr-util: Denial of service - Existing account Date: 08 December 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13683 Title: ESB-2010.1102 - [Win][UNIX/Linux] Atlassian JIRA prior to 4.2.1: Cross-site request forgery - Remote with user interaction Date: 07 December 2010 OS: IRIX, HP Tru64 UNIX, Solaris, Windows 2003, Red Hat Linux, Windows 7, Mac OS X, Ubuntu, Debian GNU/Linux, Windows XP, HP-UX, Other BSD Variants, SUSE, Windows 2000, OpenBSD, AIX, Windows Vista, FreeBSD, Windows Server 2008, Other Linux Variants URL: http://www.auscert.org.au/13682 Title: ESB-2010.1101 - [RedHat] quagga: Multiple vulnerabilities Date: 07 December 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13681 Title: ESB-2010.1100 - [RedHat] kvm: Denial of service - Existing account Date: 07 December 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13680 Title: ESB-2010.1099 - [RedHat] Red Hat Enterprise Virtualization Manager: Increased privileges - Existing account Date: 07 December 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13679 =========================================================================== Australian Computer Emergency Response Team The University of Queensland Brisbane Qld 4072 Internet Email: auscert(a)auscert.org.au Facsimile: (07) 3365 7031 Telephone: (07) 3365 4417 (International: +61 7 3365 4417) AusCERT personnel answer during Queensland business hours which are GMT+10:00 (AEST). On call after hours for member emergencies only. =========================================================================== -----BEGIN PGP SIGNATURE----- Comment: http://www.auscert.org.au/render.html?it=1967 iD8DBQFNAdK4/iFOrG6YcBERAvs8AJ9hjObTC1fXpLXyC6RFqenLbmOR6ACfTGpH TNtsZAWeIuPfYCsZ0OF3Rs4= =3MNr -----END PGP SIGNATURE-----

11 years, 6 months

IPv6 in the Pacific

by Franck Martin

http://tunnelbroker.net/usage/sages_by_country_and_state.php There is only one organization in Fiji to have reached Sage level (wink, wink, say no more), I think in Cook Islands it is Timothy Tanguiruaine who passed it. Pity that there is no other people in the Pacific Islands at sage level. Do the test and get a t-shirt! http://ipv6.he.net/certification/ Google has just released their IPv6 statistics. Native IPv6 is now most of the IPv6 traffic (tunnels are going away, ISPs are providing IPv6 to their customers). http://www.google.com/intl/en/ipv6/statistics/ IPv6 represent 0.3% of Google overall traffic, and as per Arbor Networks (http://googlesystem.blogspot.com/2010/10/google-traffic-stats.html ), Google represents 7% of overall Internet traffic. Some people estimate overall Google traffic around 1Tb/s (or more). So IPv6 is like 3Gb/s of traffic for Google only. Franck Martin http://www.avonsys.com/ http://www.facebook.com/Avonsys twitter: FranckMartin Avonsys Check your domain reputation: http://gurl.im/b69d4o

11 years, 6 months

IP6.ARPA Nameserver Change Completed

by Joe Abley

IP6.ARPA NAMESERVER CHANGE COMPLETED This is a courtesy notification of a change to the nameserver set for the IP6.ARPA zone. There is no expected impact on the functional operation of the DNS due to this change. There are no actions required by DNS server operators or end users. DETAIL The IP6.ARPA zone is used to provide reverse mapping (number to name) for IPv6, as described in RFC 3596. The servers which previously provided authoritative DNS service for the IP6.ARPA zone were as follows: TINNIE.ARIN.NET NS-SEC.RIPE.NET NS2.LACNIC.NET SEC1.APNIC.NET NS.ICANN.ORG As previously advised, processing began on Wednesday 2010-12-01 to change the nameserver set to the following, as described in RFC 5855: A.IP6-SERVERS.ARPA (operated by ARIN) B.IP6-SERVERS.ARPA (operated by ICANN) C.IP6-SERVERS.ARPA (operated by AfriNIC) D.IP6-SERVERS.ARPA (operated by LACNIC) E.IP6-SERVERS.ARPA (operated by APNIC) F.IP6-SERVERS.ARPA (operated by RIPE NCC) This change is now complete. Regards, Joe Abley Director DNS Operations ICANN

11 years, 7 months

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

pacnog December 2010