[nsp-sec] hijacked netspace

[Rob Thomas]

Hi, Jason.

> If anyone is showing a route of 208.65.153.0/24 belonging to AS 17557,
> please ping me.

We first saw it announced by origin AS17557 on 2008-02-24 18:47:52  
UTC, and then saw it withdraw on 2008-02-24 20:07:43 UTC.  It showed  
up with origin AS17557 on 2008-02-24 20:22:42 UTC and gone again  
2008-02-24 20:33:53 UTC.  We saw it last announced by AS17557 on  
2008-02-24 21:01:22 UTC.  We're presently only seeing it from YouTube  
AS36561.

We've not seen 208.65.153.0/24 prior to 2008-02-24 18:47:52 UTC.

Thanks,
Rob.
-- 
Rob Thomas
Team Cymru
http://www.cymru.com/
ASSERT(coffee != empty);