[nsp-sec] hijacked netspace

Chris Morrow morrowc at ops-netman.net
Sun Feb 24 18:09:59 EST 2008



On Sun, 24 Feb 2008, Rob Thomas wrote:

> ----------- nsp-security Confidential --------
>
> Hi, Jason.
>
>> If anyone is showing a route of 208.65.153.0/24 belonging to AS 17557,
>> please ping me.
>
> We first saw it announced by origin AS17557 on 2008-02-24 18:47:52
> UTC, and then saw it withdraw on 2008-02-24 20:07:43 UTC.  It showed
> up with origin AS17557 on 2008-02-24 20:22:42 UTC and gone again
> 2008-02-24 20:33:53 UTC.  We saw it last announced by AS17557 on
> 2008-02-24 21:01:22 UTC.  We're presently only seeing it from YouTube
> AS36561.
>
> We've not seen 208.65.153.0/24 prior to 2008-02-24 18:47:52 UTC.

anyone know if this is a standard tactic used by 17557 for censorship 
issues/actions?



More information about the nsp-security mailing list