[AusNOG] 103.0.0.0/8 (Asia Pacific Network Information Centre)

Walt walt at wollny.org
Mon Sep 10 22:45:27 EST 2018


Just two things to clarify

BGP.HE.NET data is not the HE networks production data it is gathered from several public sources and not a reflection of bgp @ AS6939

https://bgp.he.net/ip/103.0.0.0

AS6939 BGP best path can be found @ https://lg.he.net/


Thanks

W



From: AusNOG <ausnog-bounces at lists.ausnog.net<mailto:ausnog-bounces at lists.ausnog.net>> on behalf of Tashi Phuntsho <toebinoz at gmail.com<mailto:toebinoz at gmail.com>>
Date: Saturday, September 8, 2018 at 5:35 AM
To: James Braunegg <james.braunegg at micron21.com<mailto:james.braunegg at micron21.com>>, Nathan Brookfield <Nathan.Brookfield at simtronic.com.au<mailto:Nathan.Brookfield at simtronic.com.au>>, Jonathan Brewer <jon.brewer at gmail.com<mailto:jon.brewer at gmail.com>>
Cc: "ausnog at lists.ausnog.net<mailto:ausnog at lists.ausnog.net>" <ausnog at lists.ausnog.net<mailto:ausnog at lists.ausnog.net>>
Subject: Re: [AusNOG] 103.0.0.0/8 (Asia Pacific Network Information Centre)

HE’s tool might be the problem…

route-views>sh bgp ipv4 unicast 103.0.0.0/8
% Network not in table

Even though it’s a covering prefix, not good to see AS13030 advertising it; more specifics should however limit the damage.

--
Tashi

From: AusNOG <ausnog-bounces at lists.ausnog.net<mailto:ausnog-bounces at lists.ausnog.net>> on behalf of James Braunegg <james.braunegg at micron21.com<mailto:james.braunegg at micron21.com>>
Date: Saturday, 8 September 2018 at 5:52 pm
To: Nathan Brookfield <Nathan.Brookfield at simtronic.com.au<mailto:Nathan.Brookfield at simtronic.com.au>>, Jonathan Brewer <jon.brewer at gmail.com<mailto:jon.brewer at gmail.com>>
Cc: "ausnog at lists.ausnog.net<mailto:ausnog at lists.ausnog.net>" <ausnog at lists.ausnog.net<mailto:ausnog at lists.ausnog.net>>
Subject: Re: [AusNOG] 103.0.0.0/8 (Asia Pacific Network Information Centre)

I count 44  * /8 advertised by AS13030

https://bgp.he.net/AS13030#_prefixes

Strange….

Kindest Regards

James Braunegg



[cid:image001.png at 01D280A4.01865B60]

1300 769 972<tel:1300%20769%20972> / 0488 997 207<tel:1300%20769%20972>

james at micron21.com<mailto:james at micron21.com>

www.micron21.com/<http://www.micron21.com/>


[cid:image002.png at 01D280A4.01865B60]<http://www.micron21.com/>


[cid:image003.png at 01D280A4.01865B60]<https://www.facebook.com/micron21/>

[cid:image004.png at 01D280A4.01865B60]<https://twitter.com/micron21>

Follow us on Twitter<https://twitter.com/micron21> for important service and system updates.


This message is intended for the addressee named above. It may contain privileged or confidential information. If you are not the intended recipient of this message you must not use, copy, distribute or disclose it to anyone other than the addressee. If you have received this message in error please return the message to the sender by replying to it and then delete the message from your computer.




From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Nathan Brookfield
Sent: Saturday, 8 September 2018 4:04 PM
To: Jonathan Brewer <jon.brewer at gmail.com<mailto:jon.brewer at gmail.com>>
Cc: ausnog at lists.ausnog.net<mailto:ausnog at lists.ausnog.net>
Subject: Re: [AusNOG] 103.0.0.0/8 (Asia Pacific Network Information Centre)

Well that’s concerning....
Nathan Brookfield
Chief Executive Officer

Simtronic Technologies Pty Ltd
http://www.simtronic.com.au

On 8 Sep 2018, at 16:02, Jonathan Brewer <jon.brewer at gmail.com<mailto:jon.brewer at gmail.com>> wrote:
Hi Matthew,

What you're seeing is a description of the block that attributes it to APNIC. But in fact it's being originated by AS13030, Init7. https://bgp.he.net/AS13030

RIPE confirms they see it too:

mbp $ whois -h riswhois.ripe.net<http://riswhois.ripe.net> 103.0.0.0/8<http://103.0.0.0/8>
% This is RIPE NCC's Routing Information Service
% whois gateway to collected BGP Routing Tables, version2.0
% IPv4 or IPv6 address to origin prefix match
%
% For more information visit http://www.ripe.net/ris/riswhois.html
%
% Connected to backend ris-whois08.ripe.net<http://ris-whois08.ripe.net>

route:        103.0.0.0/8<http://103.0.0.0/8>
origin:       AS13030
descr:        INIT7 Init7 (Switzerland) Ltd., CH
lastupd-frst: 2018-09-06 10:11Z  198.32.160.103 at rrc11<mailto:198.32.160.103 at rrc11>
lastupd-last: 2018-09-06 10:11Z  198.32.160.103 at rrc11<mailto:198.32.160.103 at rrc11>
seen-at:      rrc11
num-rispeers: 1
source:       RISWHOIS


mbp $

Regards,

Jon



On 8 September 2018 at 15:17, Matthew Matters <mmatters at ausnetservers.net.au<mailto:mmatters at ausnetservers.net.au>> wrote:

Arvo Guys,



Has anyone else noticed that APNIC appears to be advertising the entire 103.0.0.0/8<http://103.0.0.0/8> range for some reason? I have seen this a few times by international carriers.



Is anyone else seeing the same issue on bgp.he.net<http://bgp.he.net> for their ranges.



See screenshot



Matt
[Follow us]

[Facebook]<https://www.facebook.com/ANSASERVERS>

[Twitter]<http://twitter.com/#!/ANSASERVERS>

[Google+]<https://plus.google.com/101907839864050850442/>







The information transmitted in this e-mail is for the exclusive use of the intended addressee and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of it, or the taking of any action in reliance upon this information by persons and/or entities other than the intended recipient is prohibited. If you received this in error, please inform the sender and/or addressee immediately and delete the material. If you have been sent this email and it is not addressed to you please forward the email as is to hostmaster at ausnetservers.net.au<mailto:hostmaster at ausnetservers.net.au> and delete all local and inta-local copies including backups from your system. E-mails may not be secure, may contain computer viruses and may be corrupted in transmission. Please carefully check this e-mail (and any attachment) accordingly. No warranties are given and no liability is accepted for any loss or damage caused by such matters.





This email has been scanned before transmission with business grade antivirus and antispam software but as mentioned above no warranties can be given that the email has not been contaminated after transmission.






_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net<mailto:AusNOG at lists.ausnog.net>
http://lists.ausnog.net/mailman/listinfo/ausnog

_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net<mailto:AusNOG at lists.ausnog.net>
http://lists.ausnog.net/mailman/listinfo/ausnog
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20180910/62b486a9/attachment.html>


More information about the AusNOG mailing list