North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Blackhole route advertisements by AS14037 of our IP space - please filter them out at your end

  • From: Suresh Ramasubramanian
  • Date: Wed Nov 19 21:33:45 2008 
Hi

We blocked some prefixes belonging to AS14037 (rackvibe llc) due to
their hosting spammers.

Rackvibe decided to nullroute us back in reply - thats up to them I guess

Only they're dumb enough to inject these blackhole announcements into
the cloud, and various other networks are picking up on these
announcements

TIA for filtering these out at your end

Our IPs are below - at least 208.36.123/24 seems to be announced as a
blackhole route by rackvibe -

205.158.62.0/24
208.36.123.0/24
203.86.166.0/24
65.49.50.0/24
65.49.50.0/24
64.71.166.192/27
64.62.181.80/28

srs

Paths: (7 available, best #7, table Default-IP-Routing-Table)
  Not advertised to any peer
  16150 6939 19318 14037
    217.75.96.60 from 217.75.96.60 (217.75.96.60)
      Origin IGP, metric 0, localpref 100, valid, external
      Community: 16150:63392 16150:65320 16150:65426
  3333 1103 1273 19318 14037
    193.0.0.56 from 193.0.0.56 (193.0.0.56)
      Origin IGP, localpref 100, valid, external
      Community: 1103:1000 1273:21000 1273:21971 14037:6855 19318:999
19318:4000 19318:6855 19318:40012 21698:999 21698:4000 21698:6855
  3277 3216 1273 19318 14037
    194.85.4.55 from 194.85.4.55 (194.85.4.16)
      Origin IGP, localpref 100, valid, external
      Community: 1273:21000 1273:21971 3216:3000 3216:3001 3277:3216
14037:6855 19318:999 19318:4000 19318:6855 19318:40012 21698:999
21698:4000 21698:6855
  812 19318 14037