I've seen this with increasing frequency in the last 8-12 months, more with ASNs that were either expired/unallocated. Spammers seem to be snatching them up and hijacking IPs via bilateral peering to make it harder to notice. I've found it very difficult in some cases to get traction from IXes or transit providers to take action though. It makes sense ; they both have a financial interest in selling the ports and the pipes. In two cases this year, it took the threat of name and shame to get action taken, so it's a useful tool for sure. On Tue, Sep 27, 2016 at 8:18 PM, Alistair Mackenzie <magicsata@gmail.com> wrote:
Hi,
I've come across a network which seem to be getting transit yet both the ASN and IP space is not allocated by the RIR. It does appear at some point that it was valid however this is no longer the case.
The network is single homed and I tried asking the transit provider what their policy was on this but got no answer.
Has anyone seen anything like this? What has happened in the past with things like this?
Thanks, Alistair