[143888] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Prefix hijacking by Michael Lindsay via Internap

daemon@ATHENA.MIT.EDU (William Herrin)
Sat Aug 20 23:42:28 2011

In-Reply-To: <CAArzuovMZ9jgsdSor09AJCd86m7yEEL6r6uPVOkVFsHUfurs+Q@mail.gmail.com>
From: William Herrin <bill@herrin.us>
Date: Sat, 20 Aug 2011 23:41:33 -0400
To: Suresh Ramasubramanian <ops.lists@gmail.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

On Sat, Aug 20, 2011 at 11:18 PM, Suresh Ramasubramanian
<ops.lists@gmail.com> wrote:
> You could ask that they withdraw the prefixes and see if that works?

whois 46.96.0.0

inetnum:        46.96.0.0 - 46.96.39.255
netname:        LINKTEL-MAN-ETHERNET-EXTENSION
Updated:        2011-03-15   *************
e-mail:          noc@link-telecom.net

whois link-telecom.net

Domain Name: LINK-TELECOM.NET
Creation Date: 16-aug-2011  *************

Would YOU filter announcements from YOUR customer based solely on an
email request from noc@link-telecom.net?


The Spamhaus reports appear credible, as does the RIPE registration
issue with those prefixes. If I was InterNAP, I think I'd challenge my
customer about them. Start of business Monday morning.

Regards,
Bill Herrin

--=20
William D. Herrin ................ herrin@dirtside.com=A0 bill@herrin.us
3005 Crane Dr. ...................... Web: <http://bill.herrin.us/>
Falls Church, VA 22042-3004


home help back first fref pref prev next nref lref last post