[143888] in North American Network Operators' Group
Re: Prefix hijacking by Michael Lindsay via Internap
daemon@ATHENA.MIT.EDU (William Herrin)
Sat Aug 20 23:42:28 2011
In-Reply-To: <CAArzuovMZ9jgsdSor09AJCd86m7yEEL6r6uPVOkVFsHUfurs+Q@mail.gmail.com>
From: William Herrin <bill@herrin.us>
Date: Sat, 20 Aug 2011 23:41:33 -0400
To: Suresh Ramasubramanian <ops.lists@gmail.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Sat, Aug 20, 2011 at 11:18 PM, Suresh Ramasubramanian
<ops.lists@gmail.com> wrote:
> You could ask that they withdraw the prefixes and see if that works?
whois 46.96.0.0
inetnum: 46.96.0.0 - 46.96.39.255
netname: LINKTEL-MAN-ETHERNET-EXTENSION
Updated: 2011-03-15 *************
e-mail: noc@link-telecom.net
whois link-telecom.net
Domain Name: LINK-TELECOM.NET
Creation Date: 16-aug-2011 *************
Would YOU filter announcements from YOUR customer based solely on an
email request from noc@link-telecom.net?
The Spamhaus reports appear credible, as does the RIPE registration
issue with those prefixes. If I was InterNAP, I think I'd challenge my
customer about them. Start of business Monday morning.
Regards,
Bill Herrin
--=20
William D. Herrin ................ herrin@dirtside.com=A0 bill@herrin.us
3005 Crane Dr. ...................... Web: <http://bill.herrin.us/>
Falls Church, VA 22042-3004