nanog mailing list archives

hijacked block - 160.116.0.0/16


From: <ddragon () hushmail com>
Date: Mon, 12 May 2003 07:21:13 -0700



And you can see previous affiliation to advistechsa.com (remember
my 
previous post that VMX INC block 157.156.0.0/16 that is probably
supposed 
to be Lucent block now? Well vmxnetworks was their upstream!).
Spews has a lot of info on that gang:
http://www.spews.org/html/S367.html
http://www.spews.org/html/S2425.html (publicom!)

Here we are, over a week after this being pointed out on the NANOG list,
 and Cogent continues to let them advertise this netblock illegally.
 Since they are incapable of filtering themselves, could someone from
MFN (their upstream) step up to the plate and put down some prefix-lists
or null routes or them?   Any Cogent peers reading this list?

Besides that it seems publicom which is possibly same as networktron
has long history of spamming and ip block hijacking back from 1999
http://groups.google.com/groups?q=networldtron

Networldtron is the company for which most of the ip blocks which
I listed 
as announced by AS8143 are swipped to at ARIN database. Their main
domain 
networldtron.net is now expired and inactive (if you do whois on
it you'll 
find connection to publicom yet again). But ntwt.net is active and
has 
been taken over by company called Naronda with domain naronda.com
- be on 
the lookout for such a client who maybe spammer and hijacker!

Or maybe AS 8143 has no connection to Advisetech at all.  In today's
global economy, it's common to have an ASN from a defunct company in
Florida, and IP space from Lucent Technologies, Mansfield MA, a PO box
in ZA, a company with IP's in New York but a domain in Beverly Hills,
 VE, and HT all routed to servers in NYC (do a traceroute).  What's a
few million SMTP connections between friends?

Yeah, hats off to XO's abuse department.  Keep up the good work guys.



Concerned about your privacy? Follow this link to get
FREE encrypted email: https://www.hushmail.com/?l=2

Free, ultra-private instant messaging with Hush Messenger
https://www.hushmail.com/services.php?subloc=messenger&l=434

Big $$$ to be made with the HushMail Affiliate Program: 
https://www.hushmail.com/about.php?subloc=affiliate&l=427


Current thread: