[outages] Spectrum/LTWC Ohio/KY

Doug Madory dmadory at kentik.com
Tue Sep 7 20:45:07 EDT 2021


Looks like AS398994 appeared in the global routing table at 16:46 UTC
hijacking Spectrum (AS10796) routes along the following AS path:
...7843 10796 398994
Likely some internal routing that leaked out.

( Also here: https://twitter.com/DougMadory/status/1435394595274334208 )

On Tue, Sep 7, 2021 at 7:04 PM Jared Mauch via Outages <outages at outages.org>
wrote:

> Sorry just saw this. I think this may have been related to some unknown
> BGP attributes today and I expect their BGP was flapping as a result.
>
> Sent from my TI-99/4a
>
> On Sep 7, 2021, at 6:24 PM, Ben Groves via Outages <outages at outages.org>
> wrote:
>
> 
> Per Spectrum NOC, the issue has been resolved.
> "The Spectrum Enterprise NOC confirmed that a routing issue was found by
> Spectrum Enterprise Engineering team once corrected the severe packet loss
> and intermittent connectivity that customers were experiencing. This will
> serve as the final notification for this event. "
>
> On Tue, Sep 7, 2021, 1:14 PM Josh Luthman via Outages <outages at outages.org>
> wrote:
>
>> Looks like there is an issue with the coax network.
>> > /tool traceroute 1.1.1.1
>>  # ADDRESS                          LOSS SENT    LAST     AVG    BEST
>> WORST
>>  1 142.254.145.13                   9.8%  143 timeout    13.5     7.9
>> 100.7
>>  2 24.29.6.105                      9.1%  143  24.3ms    42.4    13.4
>> 226.8
>>  3 65.29.36.238                     10..  143  14.1ms    19.7     9.8
>> 179.4
>>  4 65.29.1.46                        14%  143    25ms    27.2    16.7
>>  95.6
>>  5 66.109.6.66                      10..  143  34.1ms    30.7    23.8
>> 141.6
>>  6 66.109.3.24                      13..  143  26.6ms    35.4    24.5
>> 202
>>  7 209.18.43.59                     8.4%  143  28.3ms    30.7    24.3
>>  95.1
>>  8 173.245.63.56                    12..  143  42.2ms    39.3    27.5
>> 135.5
>>  9 172.70.44.4                      11..  142  43.5ms    35.1    24.2
>> 161.6
>> 10 1.1.1.1                          6.3%  142  44.1ms    33.4    24.1
>> 149.8
>> 11 1.1.1.1                            0%    1  26.1ms    26.1    26.1
>>  26.1
>>
>>
>> Fiber DIA seems just fine to me.
>>
>>  > /tool traceroute 1.1.1.1
>>  # ADDRESS                          LOSS SENT    LAST     AVG    BEST
>> WORST
>>  1 10.10.10.1                         0%  171   0.3ms     0.3     0.3
>> 3.6
>>  2 192.149.254.1                      0%  171   0.4ms     0.4     0.3
>> 1.3
>>  3 74.218.88.129                      0%  171     2ms     1.4     0.6
>>  31.9
>>  4 65.189.190.189                     0%  171   8.7ms    10.4     0.8
>> 143.4
>>  5 65.29.38.112                       0%  171  14.2ms    12.5     8.3
>>  16.9
>>  6 65.29.1.46                         0%  170  11.4ms     9.6     8.2
>>  14.9
>>  7 66.109.6.12                        0%  170  17.5ms    16.5    16.1
>>  20
>>  8 66.109.3.24                        0%  170  16.9ms    17.1    16.5
>>  42.2
>>  9 209.18.43.59                       0%  170  26.2ms    20.2    16.2
>>  64.7
>> 10 24.30.200.73                       0%  170  20.4ms    31.1    16.7
>>  89.4
>> 11 172.70.44.2                        0%  170  17.2ms    19.5    16.6
>>  72.3
>> 12 1.1.1.1                            0%  170  16.2ms    16.4    16.2
>>  31.5
>>
>> Josh Luthman
>> 24/7 Help Desk: 937-552-2340
>> Direct: 937-552-2343
>> 1100 Wayne St
>> Suite 1337
>> Troy, OH 45373
>>
>>
>> On Tue, Sep 7, 2021 at 1:09 PM Savarrah Goss via Outages <
>> outages at outages.org> wrote:
>>
>>>
>>> https://app.fing.com/internet/outage/DROP:US-Ohio--Spectrum%20Business@2021-09-07-1650-00000
>>>
>>>
>>>
>>> *Savarrah Goss |* *Hamilton Relay *
>>>
>>> *O: 229.338.7086 | C: 229.854.8872 | Savarrah.Goss at hamiltonrelay.com
>>> <Savarrah.Goss at hamiltonrelay.com> **| HamiltonRelay.com
>>> <http://www.hamiltonrelay.com> *
>>>
>>> *[image: 1575557226300]* <https://hamiltonrelay.com/>
>>>
>>> [image: 1575557235476]  *Hamilton Relay
>>> <http://facebook.com/HamiltonRelay> ** |  *[image: 1575557246386]* @HamiltonRelay
>>> <http://twitter.com/HamiltonRelay> *
>>>
>>>
>>>
>>> *From:* Outages <outages-bounces at outages.org> *On Behalf Of *Mike
>>> Markwood via Outages
>>> *Sent:* Tuesday, September 7, 2021 1:00 PM
>>> *To:* 'outages at outages.org' <outages at outages.org>; Neader, Brent <
>>> Brent.Neader at druryhotels.com>
>>> *Subject:* Re: [outages] Spectrum/LTWC Ohio/KY
>>>
>>>
>>>
>>> **This email originated from outside of the Hamilton network.  Please
>>> use extra caution with links and attachments. **
>>>
>>> We're seeing our Spectrum cable modem customers across Northeast Ohio
>>> bouncing as well as Columbus, OH and a few customers in TN.
>>>
>>>
>>>
>>> Mike Markwood | Director of Network Operations
>>> P: 866.986.1066  E: mmarkwood at geostarllc.net
>>>
>>> 1000 S. Cleveland Massillon Road, Suite 3
>>> Fairlawn, OH 44333
>>>
>>>
>>> ------------------------------
>>>
>>> *From:* Outages <outages-bounces at outages.org> on behalf of Neader,
>>> Brent via Outages <outages at outages.org>
>>> *Sent:* Tuesday, September 7, 2021 12:52 PM
>>> *To:* 'outages at outages.org' <outages at outages.org>
>>> *Subject:* [outages] Spectrum/LTWC Ohio/KY
>>>
>>>
>>>
>>> Seeing enterprise DIA sites drop off and come back repeatedly in these
>>> areas, Dayton, Cinci, Cleveland, Middletown, Louisville.
>>>
>>>
>>>
>>>
>>> CONFIDENTIALITY NOTE: This email and any attachments are confidential
>>> and may be protected by legal privilege. If you have received this email in
>>> error, please immediately notify the sender by return email and delete all
>>> copies of this email.
>>> _______________________________________________
>>> Outages mailing list
>>> Outages at outages.org
>>> https://puck.nether.net/mailman/listinfo/outages
>>>
>> _______________________________________________
>> Outages mailing list
>> Outages at outages.org
>> https://puck.nether.net/mailman/listinfo/outages
>>
> _______________________________________________
> Outages mailing list
> Outages at outages.org
> https://puck.nether.net/mailman/listinfo/outages
>
> _______________________________________________
> Outages mailing list
> Outages at outages.org
> https://puck.nether.net/mailman/listinfo/outages
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/outages/attachments/20210907/f7d525f5/attachment-0001.htm>


More information about the Outages mailing list