Also note that these IPs may sit on interfacs accompanied by 'routable' IPs, such as the 'secondary' keyword is used in Cisco-Speak (maybe others as well, I dunno). I've seen cases where customer's use RFC 1918 addreses as the primary and their real addresses as secondaries, so as to make it difficult to attack the router. TTL exceeded messages then get returned with the primary IP.... -Chris

-----Original Message----- From: Tim Wolfe [mailto:tim@clipper.net] Sent: Wednesday, October 14, 1998 7:16 PM To: Dean Anderson Cc: Barry Shein; nanog@merit.edu Subject: Re: Maybe I'm misreading this but...

On Wed, 14 Oct 1998, Dean Anderson wrote:

...

The 172.16 to 172.31 block is reserved in RFC1918 for private internets.

The last address 209.149.111.17 belongs to a bellsouth block. It's a safe bet that libidomax.com is a bellsouth customer, or a customer of a bellsouth customer. Probably bellsouth and alternet are peering and using a private network between themselves.

--Dean

Or Bellsouth is using Alter.Net for their transit provider just as US West is in the Pacific NW...

Tim

---------------------------------------------------- Timothy M. Wolfe | Why surf when you can Sail? tim@clipper.net | Join Oregon's Premier Sr. Network Engineer | Wireless Internet Provider! ClipperNet Corporation | http://www.clipper.net/ ----------------------------------------------------