Hunting for bogus BGP announcement for 204.106.93.155

Thu Oct 3 16:48:53 UTC 2002

On Thu, Oct 03, 2002 at 04:35:45PM +0100, Michael.Dillon at radianz.com
wrote:

> For the last two days, between approximately 7pm to 2am Eastern
> time, a spammer hijacked a piece of our address space, presumably
> by announcing some size of aggregate containing the IP address
> 204.106.93.155. During the time that the spammer had connectivity
> using this bogus announcement,

RIS didn't pick anything up

<http://www.ris.ripe.net/cgi-bin/risprefix.cgi?net=204.106.0.0%2F17&startDay=20021003&startHour=00&startMin=00&startSec=00&endDay=20021003&endHour=16&endMin=45&endSec=31&rrcb=rrc00&type=%25&sortby=stime&outype=html&action=Search&.cgifields=type>

/Jesper

-- 
Jesper Skriver, jesper(at)skriver(dot)dk  -  CCIE #5456
Senior network engineer @ AS3292, TDC Tele Danmark

One Unix to rule them all, One Resolver to find them,
One IP to bring them all and in the zone to bind them.