[191376] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: "Defensive" BGP hijacking?

daemon@ATHENA.MIT.EDU (Blake Hudson)
Mon Sep 12 12:20:30 2016

X-Original-To: nanog@nanog.org
To: nanog@nanog.org
From: Blake Hudson <blake@ispn.net>
Date: Mon, 12 Sep 2016 11:20:25 -0500
In-Reply-To: <20160912090801.CCA895E5@m0086238.ppops.net>
Errors-To: nanog-bounces@nanog.org



Scott Weeks wrote on 9/12/2016 11:08 AM:
>
>
> From: NANOG <nanog-bounces@nanog.org> on behalf
> of Blake Hudson <blake@ispn.net>
>
> My suggestion is that BackConnect/Bryant Townsend should have their ASN
> revoked for fraudulently announcing another organization's address
> space. They are not law enforcement, they did not have a warrant or
> judicial oversight, they were not in immediate mortal peril, etc, etc.
> -------------------------------------------------
>
>
> Are the RIRs the internet police?
>
> scott
>

ARIN has policies against fraudulently obtaining resources and has 
policies for revoking said resources. One could argue that announcing 
another org's IP resources without authorization is fraud and that said 
ip resources were fraudulently obtained during the time they were 
announced by BlackConnect. That said, this ASN was obtained through RIPE 
(despite the person/company being located in Calfornia, USA) and I did 
not see any RIPE policies related to fraud.

My thought is that if Mr Townsend shows disregard for the stability of 
the internet by hijacking other's IP space, he should not be allowed to 
participate. There are comments to the Kreb's article indicating that 
this was not an isolated incident by Mr Townsend and instead represents 
one event in a pattern of behavior.

home help back first fref pref prev next nref lref last post