Cable and Wireless Security Contact?

Mailman List Mirror (Read Only)
1

Could a security contact from C&W PLEASE contact me off list? This is very important!

One of your customers, Net Transactions LLC (doing business under the name "Choopa"), is advertising 146.20.40.0/21. According to ARIN whois and www.completewhois.com, this IP block is illegally hijacked, and used without authorization from its original owners.

I've tried contacting your NOC on several occasions via telephone and e-mail and have been unable to get this advertisement filtered.

In addition, I've called Erie Forge and Steel, the rightful owners of this block, who've articulated they've gotten numerous complaints about port scanning and spam from this IP block.

Route-server output enclosed.

route-server.phx1>sh ip bgp 146.20.40.0
BGP routing table entry for 146.20.40.0/21, version 2398010279
Paths: (14 available, best #3)
  Not advertised to any peer
  6461 20473 20473, (received & used)
    203.192.129.42 (inaccessible) from 203.192.128.96 (203.192.128.96)
      Origin IGP, metric 50, localpref 200, valid, internal
      Community: 3549:2402 3549:32392
      Originator: 203.192.129.16, Cluster list: 0.0.1.155
  6461 20473 20473, (received & used)
    203.192.129.42 (inaccessible) from 203.192.134.97 (203.192.134.97)
      Origin IGP, metric 50, localpref 200, valid, internal
      Community: 3549:2402 3549:32392
      Originator: 203.192.129.16, Cluster list: 0.0.1.155
  6461 20473 20473
    206.132.117.1 from 67.17.81.117 (67.17.81.117)
      Origin IGP, metric 50, localpref 200, valid, internal, best
      Community: 3549:2082 3549:30840
      Originator: 67.17.80.182, Cluster list: 0.0.0.81
  6461 20473 20473, (received-only)
    208.50.13.106 from 67.17.81.117 (67.17.81.117)
      Origin IGP, metric 50, localpref 200, valid, internal
      Community: 3549:2082 3549:30840
      Originator: 67.17.80.182, Cluster list: 0.0.0.81
OrgName: Erie Forge and Steel
OrgID: EFS
Address: 1341 West 16th Street
Address: P.O. Box 180
City: Erie
StateProv: PA
PostalCode: 16512
Country: US

NetRange: 146.20.0.0 - 146.20.255.255
CIDR: 146.20.0.0/16
NetName: IWAVE
NetHandle: NET-146-20-0-0-1
Parent: NET-146-0-0-0-0
NetType: Direct Allocation
Comment: The information for this network has been reported to
Comment: be invalid. ARIN has attempted to obtain updated data, but has
Comment: been unsuccessful. To provide current contact information,
Comment: please e-mail hostmaster@arin.net.
RegDate: 1991-01-18
Updated: 2003-06-30

2

In addition, I've called Erie Forge and Steel, the rightful owners of
this block , who've articulated they've gotten numerous complaints
about port scanning and spam from this IP block.

And let us note in passing the irony of Erie Forge and Steel having
its address block forged and stolen.

Jim Shankland

3

I don't see AS20473 being a C&W customer. Are you perhaps mixing
up C&W and AboveNet?

Regards,
Daniel

4

daniel,

they are a cw customer - http://www.fixedorbit.com/AS/20/AS20473.htm
some of their gear is in the cw dc in jersey city.

paul

5

Paul,

they are a cw customer - http://www.fixedorbit.com/AS/20/AS20473.htm
some of their gear is in the cw dc in jersey city.

Ah I see, my fault. I queried the C&W RR for their ASN and didn't
get a peer object back. Looks like this information is not
publicly available anymore.

$ whois -h rr.cw.net AS20473
[...]
%ERROR:101: no entries found

Regards,
Daniel