[nsp-sec] AS8997

[Chris Morrow]

On Tue, 23 Sep 2008, David Freedman wrote:

> ----------- nsp-security Confidential --------
>
> Mentioned on IRC earlier:
>
> [22:53] <vato-5413> anyone else noticed AS8997 up to no good?
> [22:53] <vato-5413> various possible hijacks of our space this afternoon
> [22:53] <vato-5413> others reporting same
> [22:54] <vato-5413> interesting announcements visible on route-views
> [22:54] <vato-5413> phas reported it - myasn/iar haven't as yet
> [22:58] <vato-5413> 3277 3267 8997 seems to be the commonest suspicious path
>
> I've had numerous jacking alerts from PHAS about this.
>
> Anybody have any info on this?

I have not, but we've ben beating up on another large provider about their 
customer not being filtered :( NOT 8997 though. I'll have a look at them 
vs us as well now :( boo.

-Chris