New on RIPE Labs: The Curious Case of 128.0/16

Henry Yen henry at AegisInfoSys.com
Tue Dec 6 19:05:48 UTC 2011


On Tue, Dec 06, 2011 at 09:38:31AM -0600, Chris Adams wrote:
> Using RIPE's traceroute web interface, I can see that Sprint is
> filtering 128.0.0.0/16:

> I believe that Sprint is using Cisco, not Juniper.  This is either a
> manual filter or there is another (unidentified) issue with some Cisco
> configurations.

I've been getting spam from NTT for several days in that range; a Sprint-based
traceroute:

   2  sl-gw28-nyc-15-1-3-28-ts0.sprintlink.net (160.81.237.61)  10.880 ms   10.604 ms   9.359 ms
   3  sl-crs1-nyc-0-6-3-0.sprintlink.net (144.232.3.188)  10.345 ms   10.559 ms
  11.802 ms
   4  144.232.4.87 (144.232.4.87)  9.178 ms   7.928 ms 144.232.4.91 (144.232.4.91)  9.304 ms
   5  xe-0-2-0-2.r06.nycmny01.us.bb.gin.ntt.net (129.250.8.73)  8.841 ms   9.977 ms   7.947 ms
   6  ae-2.r22.nycmny01.us.bb.gin.ntt.net (129.250.4.174)  11.497 ms   10.610 ms
   11.682 ms
   7  ae-4.r21.sttlwa01.us.bb.gin.ntt.net (129.250.2.51)  85.541 ms   86.744 ms
  84.994 ms
   8  ae-0.r20.sttlwa01.us.bb.gin.ntt.net (129.250.2.53)  88.498 ms   87.313 ms
  88.387 ms
   9  ae-3.r20.snjsca04.us.bb.gin.ntt.net (129.250.3.53)  95.862 ms   96.692 ms
  96.558 ms
  10  ae-2.r20.mlpsca01.us.bb.gin.ntt.net (129.250.5.6)  97.193 ms   96.742 ms   97.046 ms
  11  * * *
  12  ae-0.r01.mlpsca01.us.wh.verio.net (129.250.26.170)  98.053 ms   97.402 ms
  95.332 ms
  13  ge-26.a0410i.mlpsca01.us.wh.verio.net (204.202.1.226)  99.151 ms   99.001 ms   96.926 ms
  14  ca1-lam00092.vwh.net (192.217.122.217)  95.274 ms   97.104 ms   96.247 ms
  15  arnmarkt.org (128.121.86.33)  90.872 ms   91.109 ms   91.995 ms

-- 
Henry Yen                                       Aegis Information Systems, Inc.
Senior Systems Programmer                       Hicksville, New York




More information about the NANOG mailing list