[110581] in North American Network Operators' Group
Re: Anyone notice strange announcements for 174.128.31.0/24
daemon@ATHENA.MIT.EDU (Majdi S. Abbas)
Mon Jan 12 13:48:48 2009
Date: Mon, 12 Jan 2009 18:48:42 +0000
From: "Majdi S. Abbas" <msa@latt.net>
To: Michienne Dixon <mdixon@nkc.org>
In-Reply-To: <6316CD198EC8BC44A9D200F375869F1E4A16BA@nkc-mailsrv.nkc.org>
Cc: nanog@nanog.org
Errors-To: nanog-bounces@nanog.org
On Mon, Jan 12, 2009 at 12:40:42PM -0600, Michienne Dixon wrote:
> I'm not entirely certain what is going on but has anyone noticed some
> strange announcements for 174.128.31.0/24?
>
> I received a hijack notice that my AS (AS11708) was announcing the above
> IP range. I verified that I was not when I started noticing some
> strange announcements for that range. Around 10 Am CST AS11911 was
> announcing it (AS_PATH: 1239 2914 3130 11911) then around 11:30 AM CST
> I observed AS12083 announcing it (AS_PATH: 1239 2914 3130 12083).
>
> Interestingly enough, ARIN indicates this is a part of range they have
> assigned for reachability testing.
> http://ws.arin.net/whois/?queryinput=174.128.31.0
randy lied but
no packets died
enough now
More seriously, this is indeed reachability research. Try emailing
the AS 3130 contacts although I'd imagine Randy will see this.
Thanks,
--msa
