[64852] in North American Network Operators' Group
Re: Hijacked IP space.
daemon@ATHENA.MIT.EDU (James Cowie)
Mon Nov 3 16:30:09 2003
Date: Mon, 3 Nov 2003 21:29:26 +0000
From: James Cowie <cowie@renesys.com>
To: Andrew - Supernews <andrew@supernews.net>
Cc: nanog@merit.edu
Reply-To: James Cowie <cowie@renesys.com>
In-Reply-To: <E1AGm55-00012r-2m@trinity.supernews.net>; from andrew@supernews.net on Mon, Nov 03, 2003 at 09:17:38PM +0000
Errors-To: owner-nanog-outgoing@merit.edu
On Mon, Nov 03, 2003 at 09:17:38PM +0000, Andrew - Supernews wrote:
>
> >>>>> "chuck" == chuck goolsbee <chucklist@forest.net> writes:
>
> chuck> Of course I have no hard data, other than my client's phone
> chuck> call about another phone call, so I can't query based on a
> chuck> timestamp to see where this was being announced from. It
> chuck> appears to vanished, and has remained so according to my
> chuck> casual glances here and there.
>
> chuck> The netblock in question is:
>
> chuck> 204.89.0.0/21
>
> No announcement for that block has been visible here at any time in
> the past couple of weeks (specifically, since Oct 13). We might have
> missed it if it was never announced for more than a few minutes at a
> time, but it's _much_ more likely that the block was never announced
> and was merely forged into headers of a spam.
Our system reports that neither that prefix, nor any of its
more-specifics, has been seen in the global routing tables at
any moment since January 1st, 2002. [ http://www.renesys.com ]
----------
James Cowie
Renesys Corporation
cowie at renesys.com
