North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: 198.32.64.12 -- Harmless mis-route or potential exploit?

  • From: Christopher Morrow
  • Date: Wed Sep 03 10:00:49 2008 
On Wed, Sep 3, 2008 at 8:48 AM,  <[email protected]> wrote:
> On Tue, Sep 02, 2008 at 10:08:10PM -0400, Christopher Morrow wrote:
>> On 9/2/08, Todd Underwood <[email protected]> wrote:
>>
>> >  checking our current data, that block is not currently routed by any
>> >  of our peers over the last month (i would assume ripe ris and
>> >  routeviews report similar data, but i did not check them.
>>
>> it's also probably worth stating that parts of 198.32/16 are never
>> routed anywhere on the Internet (here comes bill to tell me 'who's
>> Internet?' .....). Some is in use on private networks, some is in use
>> at exchange points and not routed outside the immediate peers.
>
>        grump... ok...  "who's internet"?

there he is!!! :) (thanks for restoring my faith in... humanity)

>
>> Most times, as I recall, epnet does a decent job of keeping the whois
>> data or rdns data updated though, for things in use. (though possibly
>> not for private uses)
>
>        rdns moreso that whois...

198.32.64.12 == AS-20144-has-not-REGISTERED-the-use-of-this-prefix.

for instance?

-chris