Anyone notice strange announcements for 174.128.31.0/24

Mon Jan 12 19:20:10 UTC 2009

The IAR was the source of my notice as well and is what started me down
this path of cat herding.
I would think that it would only be polite to notify people about what
is going on so that other people do not waste their time looking for
phantom issues.

-
Michienne Dixon
Network Administrator
liNKCity
312 Armour Rd.
North Kansas City, MO  64116
www.linkcity.org <http://www.linkcity.org/> 
(816) 412-7990

________________________________

From: karlinjf at gmail.com [mailto:karlinjf at gmail.com] On Behalf Of Josh
Karlin
Sent: Monday, January 12, 2009 12:57 PM
To: Paul Stewart
Cc: Majdi S. Abbas; Michienne Dixon; nanog at nanog.org
Subject: Re: Anyone notice strange announcements for 174.128.31.0/24

At some point 3130 announced these prefixes, and is now prepending other
ASes to them.  Pretty Good BGP (and hence the IAR) sees them as prefix
hijacks.  If you'd like to see the entire list of prefixes, check out:
http://iar.cs.unm.edu/search.php and enter in 3130 as the "Victim AS"

Josh

On Mon, Jan 12, 2009 at 11:52 AM, Paul Stewart
<pstewart at nexicomgroup.net> wrote:

	Same here.. got a notice this morning and while it's false, I
still have
	no response from Randy neither on this matter...

	If they are going to involve our AS numbers and trigger alarms
it would
	be nice to notify us first... especially on something as major
as a
	prefix hijacking (potentially)

	Paul