[110579] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Anyone notice strange announcements for 174.128.31.0/24

daemon@ATHENA.MIT.EDU (Michienne Dixon)
Mon Jan 12 13:40:51 2009

Date: Mon, 12 Jan 2009 12:40:42 -0600
From: "Michienne Dixon" <mdixon@nkc.org>
To: <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org

I'm not entirely certain what is going on but has anyone noticed some
strange announcements for 174.128.31.0/24?=20

I received a hijack notice that my AS (AS11708) was announcing the above
IP range.  I verified that I was not when I started noticing some
strange announcements for that range.  Around 10 Am CST AS11911 was
announcing it  (AS_PATH: 1239 2914 3130 11911) then around 11:30 AM CST
I observed AS12083 announcing it (AS_PATH: 1239 2914 3130 12083).=20

Interestingly enough, ARIN indicates this is a part of range they have
assigned for reachability testing.=20
http://ws.arin.net/whois/?queryinput=3D174.128.31.0


This was from this AM around 10 AM CST:
 telnet@MLX4AP3#sho ip bgp route 174.128.31.0/24
Number of BGP Routes matching display condition : 1

       Prefix             Next Hop        Metric     LocPrf     Weight
Status
1      174.128.31.0/24    160.81.151.109  88         200        100
BE
         AS_PATH: 1239 2914 3130 11911
       Last update to IP routing table: 2h24m33s, 1 path(s) installed:

This was from this AM around 11:30 AM CST:
Number of BGP Routes matching display condition : 1

       Prefix             Next Hop        Metric     LocPrf     Weight
Status
1      174.128.31.0/24    160.81.151.109  88         200        100
BE
         AS_PATH: 1239 2914 3130 12083
       Last update to IP routing table: 0h0m43s, 1 path(s) installed:
     =20
=20
-
Michienne Dixon
liNKCity
312 Armour Rd.
North Kansas City, MO  64116
www.linkcity.org =20
(816) 412-7990


home help back first fref pref prev next nref lref last post