Date: Mon, 12 Jan 2009 13:52:17 -0500
From: "Paul Stewart" <pstewart@nexicomgroup.net>Same here.. got a notice this morning and while it's false, I still have
no response from Randy neither on this matter...If they are going to involve our AS numbers and trigger alarms it would
be nice to notify us first... especially on something as major as a
prefix hijacking (potentially)Paul
From: Majdi S. Abbas [mailto:msa@latt.net]
Sent: Monday, January 12, 2009 1:49 PM
To: Michienne Dixon
Cc: nanog@nanog.org
Subject: Re: Anyone notice strange announcements for 174.128.31.0/24> I'm not entirely certain what is going on but has anyone noticed some
> strange announcements for 174.128.31.0/24?
>
> I received a hijack notice that my AS (AS11708) was announcing the
above
> IP range. I verified that I was not when I started noticing some
> strange announcements for that range. Around 10 Am CST AS11911 was
> announcing it (AS_PATH: 1239 2914 3130 11911) then around 11:30 AM
CST
> I observed AS12083 announcing it (AS_PATH: 1239 2914 3130 12083).
>
> Interestingly enough, ARIN indicates this is a part of range they have
> assigned for reachability testing.
> http://ws.arin.net/whois/?queryinput=174.128.31.0randy lied but
no packets died
enough nowMore seriously, this is indeed reachability research. Try
emailing
the AS 3130 contacts although I'd imagine Randy will see this.
173.0.0.0/16 and 174.128.0.0/16 explains what is going on.