Hi, I would speak to your upstream.. you're goal has to be to get the Ga upstreams to not accept the route, so you need to find someone with clue and contacts within whatever international backbones are being used.. Steve -- Stephen J. Wilcox BSc (Hons). CCIE #10730 Technical Director, Telecomplete http://www.telecomplete.co.uk/ On Thu, 20 May 2004, P.Schroebel wrote:
Hello Folks,
I have tried everything but keep running into walls, someone has hi-jacked a block 66.164.232.0/24 and is routing it out of Ga. They come online, we catch heck, they go offline and so it goes. I have called everyone and can't seem to get anyone to take the route out of their session. Can anyone in Nanog help out here, please.
Sincerely,
Peter
BGP routing table entry for , version 46510837 Paths: (4 available, best #2, table Default-IP-Routing-Table) Not advertised to any peer 209 19262 6350 30174 <-----------------OK THIS IS US ;-) 165.117.201.58 from 165.117.201.58 (205.171.0.124) Origin IGP, metric 100, localpref 100, valid, external Community: 2548:666
701 6389 6197 (HI-JACKED BLOCK 66.164.232.0/24) <------- BAD NEWS 204.255.169.61 (metric 342) from 165.117.162.200 (165.117.162.200) Origin IGP, metric 100, localpref 100, valid, internal, best Community: 2548:666 Originator: 165.117.162.10, Cluster list: 165.117.162.200
701 6389 6197(HI JACKED OUR IPS) 204.255.169.61 (metric 342) from 165.117.162.201 (165.117.162.201) Origin IGP, metric 100, localpref 100, valid, internal Community: 2548:666 Originator: 165.117.162.10, Cluster list: 165.117.162.201
701 6389 6197 (HI JACKED OUR IPS) 204.255.169.61 (metric 342) from 165.117.162.202 (165.117.162.202) Origin IGP, metric 100, localpref 100, valid, internal Community: 2548:666 Originator: 165.117.162.10, Cluster list: 165.117.162.202, 165.117.162.200
AS6197 -------------------------------------------------------------| \/
OrgName: BellSouth Network Solutions, Inc OrgID: BNS-14 Address: 1100 Ashwood Parkway, Suite 200 City: StateProv: GA PostalCode: Country: US
ASNumber: 6197 ASName: BATI-ATL ASHandle: AS6197 Comment: RegDate: Updated: 1996-01-04
TechHandle: WD14-ARIN TechName: Dawson, Willard TechPhone: +1-770-814-5099 TechEmail: willard.dawson@sbs.siemens.com
**There is a old timer that answers the phone and has no idea what is going on; he mops the floors in the switch gear room.
AS6389. http://ws.arin.net/cgi-bin/whois.pl
No match found for AS6389 !!
However . . ASNumber: 6380 - 6389 ASName: BELLSOUTH-NET-BLK ASHandle: AS6380 Comment: RegDate: 1996-03-28 Updated: 2001-01-03
TechHandle: DR791-ARIN TechName: Ringen, Deron TechPhone: +1-678-441-7919 TechEmail: bgpadmin@corp.bellsouth.net
OrgAbuseHandle: ABUSE81-ARINOrgAbuseName: Abuse Group OrgAbusePhone: +1-404-499-5224OrgAbuseEmail: abuse@bellsouth.net OrgTechHandle: JG726-ARIN OrgTechName: Geurin, Joe OrgTechPhone: +1-404-499-5240 OrgTechEmail: ipoperations@bellsouth.net