North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: 66.164.232.0/24 HI-JACKED, I need some help

  • From: Stephen J. Wilcox
  • Date: Sun May 23 16:45:08 2004 
Hi,
 I would speak to your upstream.. you're goal has to be to get the Ga upstreams 
to not accept the route, so you need to find someone with clue and contacts 
within whatever international backbones are being used..

Steve

-- 
Stephen J. Wilcox
BSc (Hons).  CCIE #10730
Technical Director, Telecomplete
http://www.telecomplete.co.uk/


On Thu, 20 May 2004, P.Schroebel wrote:

> Hello Folks,
> 
>     I have tried everything but keep running into walls, someone has hi-jacked a block 66.164.232.0/24 and  is routing it out of Ga. They come online, we catch heck, they go offline and so it goes. I have called everyone and can't seem to get anyone to take the route out of their session. Can anyone in Nanog help out here, please.
> 
> Sincerely,
> 
> Peter
> 
> 
> 
> BGP routing table entry for , version 46510837
> Paths: (4 available, best #2, table Default-IP-Routing-Table)
>   Not advertised to any peer
>   209 19262 6350 30174  <-----------------OK THIS IS US ;-)
>     165.117.201.58 from 165.117.201.58 (205.171.0.124)
>       Origin IGP, metric 100, localpref 100, valid, external
>       Community: 2548:666
>   
> 701 6389 6197 (HI-JACKED  BLOCK 66.164.232.0/24) <------- BAD NEWS
>     204.255.169.61 (metric 342) from 165.117.162.200 (165.117.162.200)
>       Origin IGP, metric 100, localpref 100, valid, internal, best
>       Community: 2548:666
>       Originator: 165.117.162.10, Cluster list: 165.117.162.200
>  
>  701 6389 6197(HI JACKED OUR IPS)
>     204.255.169.61 (metric 342) from 165.117.162.201 (165.117.162.201)
>       Origin IGP, metric 100, localpref 100, valid, internal
>       Community: 2548:666
>       Originator: 165.117.162.10, Cluster list: 165.117.162.201
>   
> 701 6389 6197 (HI JACKED OUR IPS)
>     204.255.169.61 (metric 342) from 165.117.162.202 (165.117.162.202)
>       Origin IGP, metric 100, localpref 100, valid, internal
>       Community: 2548:666
>       Originator: 165.117.162.10, Cluster list: 165.117.162.202, 165.117.162.200
> 
> AS6197 -------------------------------------------------------------|
>                                                                          \/
> 
> OrgName:    BellSouth Network Solutions, Inc
> OrgID:      BNS-14
> Address:    1100 Ashwood Parkway, Suite 200
> City:
> StateProv:  GA
> PostalCode:
> Country:    US
> 
> ASNumber:   6197
> ASName:     BATI-ATL
> ASHandle:   AS6197
> Comment:
> RegDate:
> Updated:    1996-01-04
> 
> TechHandle: WD14-ARIN
> TechName:   Dawson, Willard
> TechPhone:  +1-770-814-5099
> TechEmail:  [email protected]
> 
> **There is a old timer that answers the phone and has no idea what is going on; he mops the floors in the switch gear room.
> 
> AS6389.
> http://ws.arin.net/cgi-bin/whois.pl
> 
> No match found for AS6389 !!
> 
> However . . 
> ASNumber:   6380 - 6389
> ASName:     BELLSOUTH-NET-BLK
> ASHandle:   AS6380
> Comment:
> RegDate:    1996-03-28
> Updated:    2001-01-03
> 
> TechHandle: DR791-ARIN
> TechName:   Ringen, Deron
> TechPhone:  +1-678-441-7919
> TechEmail:  [email protected]
> 
> OrgAbuseHandle: ABUSE81-ARINOrgAbuseName:   Abuse Group
> OrgAbusePhone:  +1-404-499-5224OrgAbuseEmail:  [email protected]
> OrgTechHandle: JG726-ARIN
> OrgTechName:   Geurin, Joe
> OrgTechPhone:  +1-404-499-5240
> OrgTechEmail:  [email protected]
> 
> 
> 
> 
> 
> 
>