Cable and Wireless Security Contact?
Could a security contact from C&W PLEASE contact me off list? This is very important! One of your customers, Net Transactions LLC (doing business under the name "Choopa"), is advertising 146.20.40.0/21. According to ARIN whois and www.completewhois.com, this IP block is illegally hijacked, and used without authorization from its original owners. I've tried contacting your NOC on several occasions via telephone and e-mail and have been unable to get this advertisement filtered. In addition, I've called Erie Forge and Steel, the rightful owners of this block, who've articulated they've gotten numerous complaints about port scanning and spam from this IP block. Route-server output enclosed. route-server.phx1>sh ip bgp 146.20.40.0 BGP routing table entry for 146.20.40.0/21, version 2398010279 Paths: (14 available, best #3) Not advertised to any peer 6461 20473 20473, (received & used) 203.192.129.42 (inaccessible) from 203.192.128.96 (203.192.128.96) Origin IGP, metric 50, localpref 200, valid, internal Community: 3549:2402 3549:32392 Originator: 203.192.129.16, Cluster list: 0.0.1.155 6461 20473 20473, (received & used) 203.192.129.42 (inaccessible) from 203.192.134.97 (203.192.134.97) Origin IGP, metric 50, localpref 200, valid, internal Community: 3549:2402 3549:32392 Originator: 203.192.129.16, Cluster list: 0.0.1.155 6461 20473 20473 206.132.117.1 from 67.17.81.117 (67.17.81.117) Origin IGP, metric 50, localpref 200, valid, internal, best Community: 3549:2082 3549:30840 Originator: 67.17.80.182, Cluster list: 0.0.0.81 6461 20473 20473, (received-only) 208.50.13.106 from 67.17.81.117 (67.17.81.117) Origin IGP, metric 50, localpref 200, valid, internal Community: 3549:2082 3549:30840 Originator: 67.17.80.182, Cluster list: 0.0.0.81 OrgName: Erie Forge and Steel OrgID: EFS Address: 1341 West 16th Street Address: P.O. Box 180 City: Erie StateProv: PA PostalCode: 16512 Country: US NetRange: 146.20.0.0 - 146.20.255.255 CIDR: 146.20.0.0/16 NetName: IWAVE NetHandle: NET-146-20-0-0-1 Parent: NET-146-0-0-0-0 NetType: Direct Allocation Comment: The information for this network has been reported to Comment: be invalid. ARIN has attempted to obtain updated data, but has Comment: been unsuccessful. To provide current contact information, Comment: please e-mail hostmaster@arin.net. RegDate: 1991-01-18 Updated: 2003-06-30 -- ____________________________________________________ Get your own Hello Kitty email @ www.sanriotown.com Powered by Outblaze
In addition, I've called Erie Forge and Steel, the rightful owners of this block , who've articulated they've gotten numerous complaints about port scanning and spam from this IP block.
And let us note in passing the irony of Erie Forge and Steel having its address block forged and stolen. Jim Shankland
On Fri, Jan 02, 2004 at 02:41:17PM +0800, Hijacked L wrote:
Could a security contact from C&W PLEASE contact me off list? This is very important! One of your customers, Net Transactions LLC
I don't see AS20473 being a C&W customer. Are you perhaps mixing up C&W and AboveNet? Regards, Daniel
daniel, they are a cw customer - http://www.fixedorbit.com/AS/20/AS20473.htm some of their gear is in the cw dc in jersey city. paul ----- Original Message ----- From: "Daniel Roesen" <dr@cluenet.de> To: <nanog@merit.edu> Sent: Friday, January 02, 2004 8:50 AM Subject: Re: Cable and Wireless Security Contact?
On Fri, Jan 02, 2004 at 02:41:17PM +0800, Hijacked L wrote:
Could a security contact from C&W PLEASE contact me off list? This is very important! One of your customers, Net Transactions LLC
I don't see AS20473 being a C&W customer. Are you perhaps mixing up C&W and AboveNet?
Regards, Daniel
Paul, On Fri, Jan 02, 2004 at 10:55:29AM -0500, Paul wrote:
they are a cw customer - http://www.fixedorbit.com/AS/20/AS20473.htm some of their gear is in the cw dc in jersey city.
Ah I see, my fault. I queried the C&W RR for their ASN and didn't get a peer object back. Looks like this information is not publicly available anymore. $ whois -h rr.cw.net AS20473 [...] %ERROR:101: no entries found Regards, Daniel
participants (4)
-
Daniel Roesen
-
Hijacked L
-
Jim Shankland
-
Paul