nanog mailing list archives

Re: Hunting for bogus BGP announcement for 204.106.93.155


From: Jesper Skriver <jesper () skriver dk>
Date: Thu, 3 Oct 2002 18:48:53 +0200


On Thu, Oct 03, 2002 at 04:35:45PM +0100, Michael.Dillon () radianz com
wrote:

For the last two days, between approximately 7pm to 2am Eastern
time, a spammer hijacked a piece of our address space, presumably
by announcing some size of aggregate containing the IP address
204.106.93.155. During the time that the spammer had connectivity
using this bogus announcement,

RIS didn't pick anything up

<http://www.ris.ripe.net/cgi-bin/risprefix.cgi?net=204.106.0.0%2F17&startDay=20021003&startHour=00&startMin=00&startSec=00&endDay=20021003&endHour=16&endMin=45&endSec=31&rrcb=rrc00&type=%25&sortby=stime&outype=html&action=Search&.cgifields=type>

/Jesper

-- 
Jesper Skriver, jesper(at)skriver(dot)dk  -  CCIE #5456
Senior network engineer @ AS3292, TDC Tele Danmark

One Unix to rule them all, One Resolver to find them,
One IP to bring them all and in the zone to bind them.


Current thread: