Cable and Wireless Security Contact?

Paul if you look closer you'll see they have pipes to not only CWUSA, but Abovenet and NetAccess. All of these providers are announcing the hijacked IP block.

Richard

no need to look closer, im reasonably familiar with who they do business
with. i was merely correcting the 'they are not a cw customer' statement. i
wish whoever tries good luck in getting this filtered.

paul

{snip}

For the record, neither that post, nor the earlier post which asserted
a Sender name of "Hijacked-L" were from, or in any way authorised by me.

I'm sure colleagues here are capable of header analysis, probably more
so than I am, so I won't attempt to analyse them here, apart from this:

  nycmny1-ar7-4-46-056-062.nycmny1.elnk.dsl.genuity.net
  [4.46.56.62] dnsbl.njabl.org : BLOCKED
  [4.46.56.62] dnsbl.sorbs.net : BLOCKED

{snip}

    > For the record, neither that post, nor the earlier post
    > which asserted a Sender name of "Hijacked-L" were from,
    > or in any way authorised by me.

Richard,

The account investigator@hellokitty.com has been terminated for a
violation of our AUP.

nycmny1-ar7-4-46-056-062.nycmny1.elnk.dsl.genuity.net
[4.46.56.62] dnsbl.njabl.org : BLOCKED
[4.46.56.62] dnsbl.sorbs.net : BLOCKED

That's just because it is a dynamic IP. A previous post (the
hijacked-l one I think) came from a roadrunner DSL line, also in new
york.

Might be interesting to find out which nanog poster

1. Lives in or around New York
2. Is interested in suppressing hijacked netblocks

[both of which are really excellent things, in themselves]

... and ...

3. Is willing to forge another nanog poster's name in an attempt to
   stay anonymous, or maybe get around filters / nanog moderators etc.

   srs

"nanog in spoof name shocker!"