Fact Sheets : Network Status in Bangladesh

1. 1
Fact Sheets : Network Status in Bangladesh

2. 2
2
• Network engineer and enthusiast for a long time
• Working as a Trainer/Analyst @ APNIC
• Have an exposer with multi-vendor multi-platform different
technologies
• A security minded person
• Would love to contribute to the community
zobair.khan@apnic.net
$ whois MD ZOBAIR KHAN

3. 3
3
Acknowledgement
• Data and contents taken from SHODAN, APNIC, Cloudflare

4. 4
4
Bangladesh Prefixes – IPv4
rex.apnic.net

5. 5
5
Bangladesh Prefixes – IPv6
rex.apnic.net

6. 6
6
IPv6 Deployment
stats.labs.apnic.net/ipv6/BD

7. 7
7
IPv6 Deployment – Top Networks
ASN AS Name IPv6 Capable IPv6 Preferred
AS13335 CLOUDFLARENET 99.36% 98.44%
AS21859 ZEN-ECN 48.64% 48.25%
AS133168 SUOSAT-AS-AP Shahjalal University of Science and Technology 49.43% 47.53%
AS24389 GRAMEENPHONE-AS-AP GrameenPhone Ltd. 48.19% 47.47%
AS134595 VELOCITYINTERNET-AS-AP Velocity Internet 28.89% 28.78%
AS134712 PIPEXNETWORK-BD Pipex Network 22.19% 22.19%
AS138338 CTGNET-AS-AP CTG.NET 21.44% 21.44%
AS45245 BANGLALINK-AS Banglalink Digital Communications Ltd 21.79% 21.39%
AS133954 EXORDONLINE-BD Exord Online 16.83% 16.62%
AS138915 KAOPU-HK Kaopu Cloud HK Limited 16.44% 15.07%
AS150729 MDMIRAZHOSSAIN-AS-AP Digraj Internet Service Provider 13.22% 13.22%
AS134128 MEGASPEEDNET-AS Mega Speed Net 10.15% 9.90%
AS139786 RAINBOW-AS-AP Rainbow Network 9.19% 9.19%
AS135098 BSN-AS-AP Bright Star Network 6.81% 6.81%
AS58826 ICOMBANGLADESHLTD-BD ping by ICOM Bangladesh Ltd 6.04% 6.04%
AS137023 ASIAN-AS-AP ASIAN CITY ONLINE BD LTD. 5.98% 5.98%
AS134732 DOTINTERNET-AS-AP Dot Internet 6.04% 5.67%
AS142006 GLOBAL5-AS-AP Global ICT Network 5.47% 5.47%
AS138621 CITY-NET-COM-AS-AP City Net Communication 4.68% 4.68%
AS24432 AXIATA-ROBI-AS-AP TM International Bangladesh Ltd.Internet service Provider,Gulshan-1,Dhaka-1212 4.82% 4.67%
stats.labs.apnic.net/ipv6/BD

8. 8
8
Top Ports
shodan.io

9. 9
9
Port 53
More than 70k ports are open
More than 60k have recursion enabled
Vulnerable to DNS exploits including amplification attack, cache poisoning,
spoofing etc
Lots of Mikrotik devices
Filter if not needed
Introduce ACL in recursion
Do security hardening for Mikrotik

10. 10
10
Port 161
More than 70k ports are open
Around 20k have SNMP version 1 enabled with public community
Information like Interface description, IP addresses, routing table etc. can be
accessed without any authorization.
Lots of Mikrotik devices
Use SNMP version 3
Introduce ACL and different SNMP community name
Do security hardening for Mikrotik

11. 11
11
Port 2000
More than 70k ports are open
Almost all of them are Mikrotik Bandwidth Test Server
Opens another attach surface for the attackers
Turn it off in production network
Do security hardening for Mikrotik

12. 12
12
Port 179
More than 55k ports are open
3k are running BGP
Attack surface for DDoS, BGP Hijack, Route Leak, Internet Disruption etc.
Use ACL, GTTL, BGP MD5 or TCP-AO, RPKI, MANRS, BCP 194

13. 13
13
Port 80
More than 50k ports are open
More than 9k are from Mikrotik
All the interface details and PPPoE usernames are visible without any
authorization in Mikrotik via port 80
Attack surface for Apache, nginx, Microsoft IIS, Cisco/Mikrotik HTTP etc.
Use firewall, TLS

14. 14
14
RPKI – ROA IPv4
stats.labs.apnic.net

15. 15
15
RPKI – ROA IPv4
Origin ASN ASN Name ASN
Economy
Route prefix
delegation
Validity No. of routes
23923 AGNI-AS BD apnic invalidAS 6
63890 AIBL-AS-AP BD apnic invalidML 4
136215 SB-AS-AP BD apnic invalidAS 2
58527 DGHS-GOV-BD BD apnic invalidML 2
150389 SPRINTNET-AS-AP BD apnic invalidML 2
139016 EXONHOST-AS-AP BD apnic invalidML 2
151488 AML-AS-AP BD apnic invalidML 2
58715 EARTHTELECOMMUNICATION-AS BD apnic invalidAS 1
38562 IOLBD-AS BD apnic invalidAS 1
64037 FIRSTNFASTITLTD-AS-AP BD apnic invalidAS 1

16. 16
16
RPKI – ROA IPv6
stats.labs.apnic.net

17. 17
17
RPKI – ROA IPv6
Origin ASN ASN Name ASN
Economy
Route prefix
delegation
Validity No. of routes
150385 HKN-AS-AP BD apnic invalidML 60
137961 ABUZZITLIMITED-AS-AP BD apnic invalidML 28
38071 AFTABIT-BD-AS-AP BD apnic invalidML 26
140612 DESHCOMMUNICATIONS-AS-AP BD apnic invalidML 17
17471 CYBERNET-BD-AS BD apnic invalidML 12
132438 APONIT-AS-AP BD apnic invalidML 10
64074 ABS-AS-AP BD apnic invalidML 8
138544 HK-ONLINE-AS BD apnic invalidML 8
9230 BOL-BD-AP BD apnic invalidML 6
134970 TUHINENTERPRISE-AS-AP BD apnic invalidML 6

18. 18
18
RPKI – ROV
stats.labs.apnic.net

19. 19
19
RPKI – Summary
radar.cloudflare.com

20. 20
20
DDoS – Network Layer
radar.cloudflare.com

21. 21
21
DDoS – Network Layer Attack Vector
radar.cloudflare.com

22. 22
22
DDoS – Application Layer
radar.cloudflare.com

23. 23
23
DDoS – Application Layer Activity
radar.cloudflare.com

24. 24
24
DDoS – BD DDoS Source
radar.cloudflare.com
DDoS Attack Trends for 2023 Q3

25. 25
25
DDoS – Emerging Threats
radar.cloudflare.com
DDoS Attack Trends for 2023 Q3

26. 26
26
Routing - Leaks
radar.cloudflare.com

27. 27
27
Routing - Hijacks
radar.cloudflare.com

28. 28
28
Security Status Summary
https://exposure.shodan.io/#/BD

29. 29
29
Rising Security Concerns
• 5G Security Concerns
• IoT (Internet of Things) Security
• AI and Machine Learning Threats
• Supply Chain Attacks
• Zero-Day Exploits and Advanced Persistent Threats (APTs)
• Phishing
• Cloud Security Challenges
• Quantum Computing Impact
• Biometric Security Risks
• Human Element and Insider Threats
• Regulatory Compliance and Privacy Concerns

30. 30
30
Security Hardening References
• https://wiki.mikrotik.com/wiki/Manual:Securing_Your_Router
• https://blog.mikrotik.com/security/
• https://www.cisecurity.org/cis-benchmarks
• https://www.sans.org/white-papers/
• https://cheatsheetseries.owasp.org/index.html
• https://csrc.nist.gov/publications/sp
• https://www.manrs.org/about/
• https://academy.apnic.net/
• https://www.team-cymru.com/
• https://www.apnic.net/community/security/
• https://sec.cloudapps.cisco.com/security/center/publicationListing.x
• https://blog.cloudflare.com/

31. 31
31
Questions !!!