[nanog] Traffic destined for 100.114.128.0/24

Michel Py michel.py at tsisemi.com
Wed Apr 8 19:33:43 UTC 2020


> Drew Weaver wrote :
> I've noticed over the past couple of weeks that some hosts on a network I
> manage appear to be trying to reach hosts in this network 100.114.128.0/24

It's part of 100.64.0.0/10 that is used for CGN. Possibly, this is the by-product of a protocol such as SIP that embeds its own IP address into the packet, and there is no ALG. The host on your network is trying to talk to the inside NAT address of the other host. It is similar to seing trafic leaving your network for RFC1918 addresses.

Michel.

TSI Disclaimer:  This message and any files or text attached to it are intended only for the recipients named above and contain information that may be confidential or privileged. If you are not the intended recipient, you must not forward, copy, use or otherwise disclose this communication or the information contained herein. In the event you have received this message in error, please notify the sender immediately by replying to this message, and then delete all copies of it from your system. Thank you!...



More information about the NANOG mailing list