Home page logo
/

nanog logo nanog mailing list archives

Re: Prefix hijacking by Michael Lindsay via Internap
From: William Herrin <bill () herrin us>
Date: Sat, 20 Aug 2011 23:41:33 -0400

On Sat, Aug 20, 2011 at 11:18 PM, Suresh Ramasubramanian
<ops.lists () gmail com> wrote:
You could ask that they withdraw the prefixes and see if that works?

whois 46.96.0.0

inetnum:        46.96.0.0 - 46.96.39.255
netname:        LINKTEL-MAN-ETHERNET-EXTENSION
Updated:        2011-03-15   *************
e-mail:          noc () link-telecom net

whois link-telecom.net

Domain Name: LINK-TELECOM.NET
Creation Date: 16-aug-2011  *************

Would YOU filter announcements from YOUR customer based solely on an
email request from noc () link-telecom net?


The Spamhaus reports appear credible, as does the RIPE registration
issue with those prefixes. If I was InterNAP, I think I'd challenge my
customer about them. Start of business Monday morning.

Regards,
Bill Herrin

-- 
William D. Herrin ................ herrin () dirtside comĀ  bill () herrin us
3005 Crane Dr. ...................... Web: <http://bill.herrin.us/>
Falls Church, VA 22042-3004


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault