[139250] in North American Network Operators' Group
Re: HIJACKED: 159.223.0.0/16 -- WTF? Does anybody care?
daemon@ATHENA.MIT.EDU (rr)
Thu Mar 31 13:13:17 2011
In-Reply-To: <4D94B421.7080600@jima.tk>
Date: Thu, 31 Mar 2011 10:12:21 -0700
From: rr <rooknee@gmail.com>
To: Jima <nanog@jima.tk>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
For the record, Integra Telecom did have LOA for said netblock.
Needless to say LOA was forged on company letterhead with appropriate
signatures. Once brought to our attention we attempted to contact
customer to no avail, netblock has been removed until they prove
otherwise.
Randy Rooney
On Thu, Mar 31, 2011 at 10:04 AM, Jima <nanog@jima.tk> wrote:
> On 03/30/2011 03:53 PM, Ronald F. Guilmette wrote:
>>
>> I just stumbled onto this one the other day.
>>
>> Apparently, Spamhaus has known about this one for THREE MONTHS already:
>>
>> =A0 =A0http://www.spamhaus.org/sbl/sbl.lasso?query=3DSBL98308
>>
>> It's being routed by AS11730, aka "Circle Internet LTD", a known spammer=
-
>> friendly provider that I have come across many times in the past.
>>
>> They in turn are getting connectivity from:
>>
>> =A0 =A0AS26769 =A0BandCon
>> =A0 =A0AS7385 =A0 Integra Telecom
>>
>> These companies are also not known for being especially scruplous either=
.
>> But I mean seriously, Jesus Christ! =A0Does ANYBODY even give a crap abo=
ut
>> blatant naked IP space hijacking anymore? =A0Or is the entire net now on
>> its final slow descent into utter chaos?
>
> =A0This address space seems to be offline now. =A0I for one forwarded inf=
o to a
> contact at Integra, but I can't attest to whether that had anything to do
> with it.
>
> =A0I guess we can call this a victory for the community? =A0I dunno.
>
> =A0 =A0 Jima
>
>
