[nsp-sec] hijacked netspace
Chris Morrow
morrowc at ops-netman.net
Sun Feb 24 18:09:59 EST 2008
On Sun, 24 Feb 2008, Rob Thomas wrote:
> ----------- nsp-security Confidential --------
>
> Hi, Jason.
>
>> If anyone is showing a route of 208.65.153.0/24 belonging to AS 17557,
>> please ping me.
>
> We first saw it announced by origin AS17557 on 2008-02-24 18:47:52
> UTC, and then saw it withdraw on 2008-02-24 20:07:43 UTC. It showed
> up with origin AS17557 on 2008-02-24 20:22:42 UTC and gone again
> 2008-02-24 20:33:53 UTC. We saw it last announced by AS17557 on
> 2008-02-24 21:01:22 UTC. We're presently only seeing it from YouTube
> AS36561.
>
> We've not seen 208.65.153.0/24 prior to 2008-02-24 18:47:52 UTC.
anyone know if this is a standard tactic used by 17557 for censorship
issues/actions?
More information about the nsp-security
mailing list