[139223] in North American Network Operators' Group
RE: HIJACKED: 148.163.0.0/16 -- WTF? Level3 is now doing
daemon@ATHENA.MIT.EDU (Jim Gonzalez)
Wed Mar 30 17:52:36 2011
From: "Jim Gonzalez" <jim@impactbusiness.com>
To: "'Bill Woodcock'" <woody@pch.net>,
"'Ronald F. Guilmette'" <rfg@tristatelogic.com>
In-Reply-To: <BE8C4985-F955-4868-8145-146E57BBF639@pch.net>
Date: Wed, 30 Mar 2011 17:52:18 -0400
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
I have a level 3 circuit with BGP. Level 3 set me up a maintainer. To
communicate with this program I just send an email to the maintainer, based
on my email address and the maintainer name it will allow the route I
request advertisement. I don't believe any one monitors this system and I
would imagine if no one complains about this company advertising hijacked
routes to level 3 then it would be quite easy to advertise a network that
has been abandon.
-----Original Message-----
From: Bill Woodcock [mailto:woody@pch.net]
Sent: Wednesday, March 30, 2011 5:04 PM
To: Ronald F. Guilmette
Cc: nanog@nanog.org
Subject: Re: HIJACKED: 148.163.0.0/16 -- WTF? Level3 is now doing IP
hijacking??
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Mar 30, 2011, at 1:58 PM, Ronald F. Guilmette wrote:
> As I already mentioned, 159.223.0.0/16, which is actually registered to
> the Hoechst Celanese Corporation, has quite obviously been hijacked
And have you reported this to ARIN?
https://www.arin.net/public/fraud/index.xhtml
Obviously it's not fraud on Celanese's part, but it certainly seems to be
evidence that they don't need the space anymore. If someone who needed it
more had it, they might not put up with the hijacking.
-Bill
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (Darwin)
iEYEARECAAYFAk2TmqwACgkQGvQy4xTRsBGkiwCgvHVFs1qz55H+FNCj+Apwrcev
sFIAoMluDV11me+X8I9MoVie611H8e9P
=p+yS
-----END PGP SIGNATURE-----