[143901] in North American Network Operators' Group
Re: Prefix hijacking by Michael Lindsay via Internap
daemon@ATHENA.MIT.EDU (chip)
Sun Aug 21 09:52:20 2011
In-Reply-To: <CAL+GGzGzkB76Br-R=5EPvRJHiDvhOU6hcn+pMRL_h+GmLvx-tQ@mail.gmail.com>
Date: Sun, 21 Aug 2011 09:51:47 -0400
From: chip <chip.gwyn@gmail.com>
To: Denis Spirin <noc@link-telecom.net>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Sun, Aug 21, 2011 at 6:44 AM, Denis Spirin <noc@link-telecom.net> wrote:
> Where do you see the permission of Internap to transit our AS31733?
>
> aut-num: =A0 =A0 =A0 =A0 AS31733
> as-name: =A0 =A0 =A0 =A0 LINKTEL-AS
> descr: =A0 =A0 =A0 =A0 =A0 Link Telecom PJSC
> org: =A0 =A0 =A0 =A0 =A0 =A0 ORG-LTP1-RIPE
> import: =A0 =A0 =A0 =A0 =A0from AS8342 accept ANY
> import: =A0 =A0 =A0 =A0 =A0from AS12695 accept ANY
> import: =A0 =A0 =A0 =A0 =A0from AS44109 accept ANY
> export: =A0 =A0 =A0 =A0 =A0to AS8342 announce AS31733
> export: =A0 =A0 =A0 =A0 =A0to AS12695 announce AS31733
> export: =A0 =A0 =A0 =A0 =A0to AS44109 announce AS31733
> admin-c: =A0 =A0 =A0 =A0 LN1688-RIPE
> tech-c: =A0 =A0 =A0 =A0 =A0LN1688-RIPE
> mnt-by: =A0 =A0 =A0 =A0 =A0RIPE-NCC-END-MNT
> mnt-by: =A0 =A0 =A0 =A0 =A0MNT-LINKTEL
> mnt-routes: =A0 =A0 =A0MNT-LINKTEL
> changed: =A0 =A0 =A0 =A0 noc@link-telecom.biz 20080917
> changed: =A0 =A0 =A0 =A0 hostmaster@ripe.net 20110414
> source: =A0 =A0 =A0 =A0 =A0RIPE
>
> AS8342, AS12695, AS44109 can. AS12182 - can't.
>
> We already in touch with RIPE NCC and Internap. But networks are continue=
to
> be hijacked. That is the reason I wrote to this list.
>
>
> 2011/8/21 Arturo Servin <arturo.servin@gmail.com>
>
>>
>> On 21 Aug 2011, at 00:28, Denis Spirin wrote:
>>
>> > Yes, they are using our ASN 31733 to originate networks. All the visib=
le
>> > paths are through AS12182. Internap was contacted about a week ago, bu=
t
>> did
>> > nothing.
>>
>> =A0 =A0 =A0 =A0 Which seems to be the right decision because the whois d=
ata backed
>> it on.
>>
>>
>> > No, I'm not a venture capitalist, but IT specialist.
>> >
>> > I am too sleepy, so replied to Adrian directly while wanted to post in
>> the
>> > list.
>>
>> =A0 =A0 =A0 =A0 If you are claiming right over these prefixes I suggest =
you to
>> contact RIPE NCC.
>>
>> /as
>>
>> >
>> > 2011/8/21 Arturo Servin <aservin@lacnic.net>
>> >
>> >>
>> >> These prefix are originated by AS31733 which seems to be assigned to =
the
>> >> same organisation than the ASN, which in turn seems to be you.
>> >>
>> >> I can see AS12182 in the path but not originating the route. So I do =
not
>> >> understand what are your claiming.
>> >>
>> >> .as
>> >>
>> >>
>> >> On 20 Aug 2011, at 23:05, Denis Spirin wrote:
>> >>
>> >> Right now there are:
>> >> 46.96.0.0/16
>> >> 83.223.224.0/19
>> >> 94.250.128.0/19
>> >> 94.250.160.0/19
>> >> 188.164.0.0/24
>> >>
>> >>
>> >>
>>
>>
>
/me puts on Internap hat.
I don't see much of the goings-on in the NOC these days, but am
looking into this.
--chip
--=20
Just my $.02, your mileage may vary,=A0 batteries not included, etc....
