Home page logo
/

nanog logo nanog mailing list archives

Re: Anyone notice strange announcements for 174.128.31.0/24
From: "Kevin Oberman" <oberman () es net>
Date: Mon, 12 Jan 2009 11:07:40 -0800

Date: Mon, 12 Jan 2009 13:52:17 -0500
From: "Paul Stewart" <pstewart () nexicomgroup net>

Same here.. got a notice this morning and while it's false, I still have
no response from Randy neither on this matter...

If they are going to involve our AS numbers and trigger alarms it would
be nice to notify us first... especially on something as major as a
prefix hijacking (potentially)

Paul



-----Original Message-----
From: Majdi S. Abbas [mailto:msa () latt net] 
Sent: Monday, January 12, 2009 1:49 PM
To: Michienne Dixon
Cc: nanog () nanog org
Subject: Re: Anyone notice strange announcements for 174.128.31.0/24

On Mon, Jan 12, 2009 at 12:40:42PM -0600, Michienne Dixon wrote:
I'm not entirely certain what is going on but has anyone noticed some
strange announcements for 174.128.31.0/24? 

I received a hijack notice that my AS (AS11708) was announcing the
above
IP range.  I verified that I was not when I started noticing some
strange announcements for that range.  Around 10 Am CST AS11911 was
announcing it  (AS_PATH: 1239 2914 3130 11911) then around 11:30 AM
CST
I observed AS12083 announcing it (AS_PATH: 1239 2914 3130 12083). 

Interestingly enough, ARIN indicates this is a part of range they have
assigned for reachability testing. 
http://ws.arin.net/whois/?queryinput=174.128.31.0

      randy lied but
      no packets died
      enough now

      More seriously, this is indeed reachability research.  Try
emailing
the AS 3130 contacts although I'd imagine Randy will see this.

http://psg.com/173-174/ explains what is going on.
-- 
R. Kevin Oberman, Network Engineer
Energy Sciences Network (ESnet)
Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab)
E-mail: oberman () es net                       Phone: +1 510 486-8634
Key fingerprint:059B 2DDF 031C 9BA3 14A4  EADA 927D EBB3 987B 3751

Attachment: _bin
Description:


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]