Re: AS6517 - Reliance Globalcom -- routing three more hijacked blocks

2010-10-07 Thread Jason Bertoch
On 2010/10/06 11:36 PM, Ronald F. Guilmette wrote: Well, anyway, here's three more hijacked blocks that they (AS6517) are routing. This is in addition to the 75 such blocks I've already reported. (I guess that makes 78 hijacked blocks for them, in total.) Out of curiosity, are you also

Re: AS6517 - Reliance Globalcom -- routing three more hijacked blocks

2010-10-07 Thread Heath Jones
Well, anyway, here's three more hijacked blocks that they (AS6517) are routing.  This is in addition to the 75 such blocks I've already reported.  (I guess that makes 78 hijacked blocks for them, in total.) Out of curiosity, are you also reporting these blocks to Spamhaus?  I expect

Re: AS6517 - Reliance Globalcom -- routing three more hijacked blocks

2010-10-07 Thread Christopher Morrow
On Thu, Oct 7, 2010 at 10:09 AM, Heath Jones hj1...@gmail.com wrote: Well, anyway, here's three more hijacked blocks that they (AS6517) are routing.  This is in addition to the 75 such blocks I've already reported.  (I guess that makes 78 hijacked blocks for them, in total.) Out of curiosity

Re: AS6517 - Reliance Globalcom -- routing three more hijacked blocks - bulk Whois

2010-10-07 Thread John Curran
On Oct 7, 2010, at 10:25 AM, Christopher Morrow wrote: in stabbing around today on the ARIN online website I noticed this: ARIN provides access to a list of number resources in the database which have no valid POC data. A POC handle is marked invalid by ARIN staff when the POC has not

AS6517 - Reliance Globalcom -- routing three more hijacked blocks

2010-10-06 Thread Ronald F. Guilmette
that via smoke signal or something. Well, anyway, here's three more hijacked blocks that they (AS6517) are routing. This is in addition to the 75 such blocks I've already reported. (I guess that makes 78 hijacked blocks for them, in total.) 198.99.245.0/24NET-198-99-245-0-1

Re: Hijacked Blocks

2009-09-15 Thread Valdis . Kletnieks
On Mon, 14 Sep 2009 16:52:26 CDT, Jorge Amodio said: In the transition from the old IANA to FrICANNstein Well, that monitor needed cleaning anynow... ;) pgpnWwneWCOxL.pgp Description: PGP signature

Re: Hijacked Blocks (was: Repeated Blacklisting / IP reputation)

2009-09-14 Thread John Curran
On Sep 14, 2009, at 6:49 AM, Rich Kulawiec wrote: ... For example: Ron Guilmette has recently pointed out that notorious spammer Scott Richter has apparently hijacked *another* /16 block -- 150.230.0.0/16. I've dropped that block into various local blacklists, and in some cases,

Re: Hijacked Blocks

2009-09-14 Thread Christopher Morrow
On Mon, Sep 14, 2009 at 11:58 AM, Chris Marlatt cmarl...@rxsec.com wrote: Christopher Morrow wrote: The end of the discussion was along the lines of: Yes, we know this guy is bad news, but he always comes to us with the proper paperwork and numbers, there's nothing in the current policy set to

Re: Hijacked Blocks (was: Repeated Blacklisting / IP reputation)

2009-09-14 Thread Christopher Morrow
On Mon, Sep 14, 2009 at 7:05 AM, John Curran jcur...@arin.net wrote: On Sep 14, 2009, at 6:49 AM, Rich Kulawiec wrote: ... For example: Ron Guilmette has recently pointed out that notorious spammer Scott Richter has apparently hijacked *another* /16 block -- 150.230.0.0/16. oh lokoie,

Re: Hijacked Blocks

2009-09-14 Thread Chris Marlatt
Christopher Morrow wrote: The end of the discussion was along the lines of: Yes, we know this guy is bad news, but he always comes to us with the proper paperwork and numbers, there's nothing in the current policy set to deny him address resources. Happily though he never pays his bill after

RE: Hijacked Blocks

2009-09-14 Thread Azinger, Marla
, September 14, 2009 9:40 AM To: Chris Marlatt Cc: John Curran; nanog@nanog.org Subject: Re: Hijacked Blocks On Mon, Sep 14, 2009 at 11:58 AM, Chris Marlatt cmarl...@rxsec.com wrote: Christopher Morrow wrote: The end of the discussion was along the lines of: Yes, we know this guy is bad news, but he

RE: Hijacked Blocks

2009-09-14 Thread Azinger, Marla
Morrow; Chris Marlatt Cc: John Curran; nanog@nanog.org Subject: RE: Hijacked Blocks I haven't followed this entire string. Are you saying ARIN is repeatedly handing out address space to known abusers? If that's the case then yes, some form of policy should be worked on. If on the administrative

Re: Hijacked Blocks

2009-09-14 Thread Adrian Minta
In Europe RIPE has a nice database. Hijacking is not possible since most ISP's use filters based on RIPE Database. Why ARIN don't use a similar tool ?

Re: Hijacked Blocks

2009-09-14 Thread Mikael Abrahamsson
On Mon, 14 Sep 2009, Adrian Minta wrote: Hijacking is not possible since most ISP's use filters based on RIPE Database. This is not true. Some filter, but most don't. -- Mikael Abrahamssonemail: swm...@swm.pp.se

RE: Hijacked Blocks

2009-09-14 Thread Lee Howard
If this is the case one could argue that ARIN should be reserving this worthless address space to be used when they receive similar requests in the future. There's no reason personX should get fresh, clean address space when they make additional requests. That implies some process

Re: Hijacked Blocks

2009-09-14 Thread Randy Bush
I haven't followed this entire string. Are you saying ARIN is repeatedly handing out address space to known abusers? If that's the case then yes, some form of policy should be worked on. i might walk more slowly and with a bit less self-righteousness. this is not a simple area. are we

Re: Hijacked Blocks

2009-09-14 Thread Christopher Morrow
On Mon, Sep 14, 2009 at 4:47 PM, Randy Bush ra...@psg.com wrote: I haven't followed this entire string.  Are you saying ARIN is repeatedly handing out address space to known abusers?  If that's the case then yes, some form of policy should be worked on. i might walk more slowly and with a

Re: Hijacked Blocks

2009-09-14 Thread Randy Bush
1) not allocating to known offendors (even those who've been through the court system and had judgements against them, which would be following your proposed path) [ i made no proposal. i was just a bit scared by the instant we need to DO SOMETHING reaction. ] but what you say seems somewhat

Re: Hijacked Blocks

2009-09-14 Thread Christopher Morrow
On Mon, Sep 14, 2009 at 5:12 PM, Randy Bush ra...@psg.com wrote: 1) not allocating to known offendors (even those who've been through the court system and had judgements against them, which would be following your proposed path) [ i made no proposal.  i was just a bit scared by the instant we

Re: Hijacked Blocks

2009-09-14 Thread Jorge Amodio
Be careful about what you are asking for. i am not saying all is well here.  i am just trying to move slowly and pretend to think while on my first cuppa. I agree with Randy that this is a reasonable approach. In the transition from the old IANA to FrICANNstein and the separation of numbers