[52500] in North American Network Operators' Group
Re: Hunting for bogus BGP announcement for 204.106.93.155
daemon@ATHENA.MIT.EDU (Jesper Skriver)
Thu Oct 3 12:49:16 2002
Date: Thu, 3 Oct 2002 18:48:53 +0200
From: Jesper Skriver <jesper@skriver.dk>
To: Michael.Dillon@radianz.com
Cc: nanog@merit.edu
Mail-Followup-To: Jesper Skriver <jesper@skriver.dk>,
Michael.Dillon@radianz.com, nanog@merit.edu
In-Reply-To: <OF8489449C.B332BC50-ON80256C47.00545664-80256C47.0055ABDB@radianz.com>
Errors-To: owner-nanog-outgoing@merit.edu
On Thu, Oct 03, 2002 at 04:35:45PM +0100, Michael.Dillon@radianz.com
wrote:
> For the last two days, between approximately 7pm to 2am Eastern
> time, a spammer hijacked a piece of our address space, presumably
> by announcing some size of aggregate containing the IP address
> 204.106.93.155. During the time that the spammer had connectivity
> using this bogus announcement,
RIS didn't pick anything up
<http://www.ris.ripe.net/cgi-bin/risprefix.cgi?net=204.106.0.0%2F17&startDay=20021003&startHour=00&startMin=00&startSec=00&endDay=20021003&endHour=16&endMin=45&endSec=31&rrcb=rrc00&type=%25&sortby=stime&outype=html&action=Search&.cgifields=type>
/Jesper
--
Jesper Skriver, jesper(at)skriver(dot)dk - CCIE #5456
Senior network engineer @ AS3292, TDC Tele Danmark
One Unix to rule them all, One Resolver to find them,
One IP to bring them all and in the zone to bind them.
