|
North American Network Operators Group Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical Re: Hunting for bogus BGP announcement for 204.106.93.155
We did _not_ see 204.106.93.155 here at AS 16517 in our multicast status runs in either BGP or MBGP announcements - this means that Sprint and UUNet were not announcing it (nor was Internet2). -- Regards Marshall Eubanks David G. Andersen wrote: On Thu, Oct 03, 2002 at 06:48:53PM +0200, Jesper Skriver mooed:On Thu, Oct 03, 2002 at 04:35:45PM +0100, [email protected] wrote:For the last two days, between approximately 7pm to 2am Eastern time, a spammer hijacked a piece of our address space, presumably by announcing some size of aggregate containing the IP address 204.106.93.155. During the time that the spammer had connectivity using this bogus announcement,RIS didn't pick anything upNor did our BGP monitors, nor our db of Routeviews. http://bgp.lcs.mit.edu/ Interestingly, we se _no_ announcements of any netblock containing this address, ever. I assume you haven't brought this address space on-line yet? -Dave T.M. Eubanks Multicast Technologies, Inc 10301 Democracy Lane, Suite 410 Fairfax, Virginia 22030 Phone : 703-293-9624 Fax : 703-293-9609 e-mail : [email protected] http://www.multicasttech.com Test your network for multicast : http://www.multicasttech.com/mt/ Status of Multicast on the Web : http://www.multicasttech.com/status/index.html
|