[148414] in North American Network Operators' Group
Re: Whois 172/12
daemon@ATHENA.MIT.EDU (Leigh Porter)
Sun Jan 15 03:16:31 2012
From: Leigh Porter <leigh.porter@ukbroadband.com>
To: "<ted@fred.net>" <ted@fred.net>
Date: Sun, 15 Jan 2012 08:17:20 +0000
In-Reply-To: <3bb23a18d74082eb94003592c718b9f4.squirrel@secure.xecu.net>
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On 15 Jan 2012, at 07:39, "Ted Fischer" <ted@fred.net> wrote:
> Hi all,
>=20
> Tearing what's left of my hair out.
>=20
> A customer is getting scanned by a host claiming to be "172.0.1.216".
>=20
> I know this is bogus, but I want to go back to the customer with as
> much authoritative umph as I can (heaven forbid they just take my
> word).
>=20
> I'm pretty sure I read somewhere once that 172/12 was "reserved" or
> something like that. All I can find now is that 172/8 is "administered =
by
> ARIN". Lots of information on 172.16/12, but not a peep about
> 172/12.
>=20
> If anybody could provide some insight as to the
> allocation/non-allocation of this block, it would be much appreciated.
>=20
> Thanks.
>=20
> Ted Fischer
I would look for the prefix in your BGP table and in a couple of looking g=
lasses and show the empty output.
If its not there, then it is bogus.
--=20
Leigh
______________________________________________________________________
This email has been scanned by the Symantec Email Security.cloud service.
For more information please visit http://www.symanteccloud.com
______________________________________________________________________
