nanog mailing list archives
Re: Hijacked IP space.
From: Suresh Ramasubramanian <suresh () outblaze com>
Date: Tue, 04 Nov 2003 05:24:16 -0500
Jamie Reid writes on 11/4/2003 12:54 AM:
Are they taking advantage of sloppy redistribution configurations, 0wning routers, spoofing OSPF updates, taking advantage of default staticroutes, or is there something more complicated at work?
Sometimes as simple as social engineering - a company goes out of business, but still has a /16 allocated to it. So what happens is that some fake letterheads get typed up (and possibly the company name re-registered "under new management), and a request for routing these blocks goes out ...
Then you get (say) a T1 from some random ISP, and then get them to announce the /16.
srs -- srs (postmaster|suresh)@outblaze.com // gpg : EDEDEFB9 manager, outblaze.com security and antispam operations
Current thread:
- Re: Hijacked IP space., (continued)
- Re: Hijacked IP space. E.B. Dreger (Nov 03)
- Re: Hijacked IP space. Owen DeLong (Nov 04)
- Re: Hijacked IP space. Hank Nussbacher (Nov 04)
- Re: Hijacked IP space. Owen DeLong (Nov 04)
- Re: Hijacked IP space. william (Nov 04)
- Re: Hijacked IP space. Owen DeLong (Nov 04)
- Re: Hijacked IP space. william (Nov 04)
- Re: Hijacked IP space. Chris Lewis (Nov 04)
- Re: Hijacked IP space. Brian Bruns (Nov 03)
- Re: Hijacked IP space. Suresh Ramasubramanian (Nov 04)
- RE: Hijacked IP space. Bill Woodcock (Nov 04)
- RE: Hijacked IP space. Randy Bush (Nov 04)
- Re: Hijacked IP space. Joe Abley (Nov 04)
- Re: Hijacked IP space. Brian Bruns (Nov 04)
- Re: Hijacked IP space. Greg Maxwell (Nov 04)
- Re: Hijacked IP space. Randy Bush (Nov 04)
- Re: Hijacked IP space. Nipper, Arnold (Nov 04)