Interesting Announcements

Replying to myself is stupid, but...

Also, perhaps Internap (AS10910) might explain the story behind
seemingly
stolen ASN 8143 and their many seemingly stolen IP blocks...

Perhaps Internap (AS10910) can ALSO explain the seemingly jacked IP space
being announced by seemingly legitimately registered, but rogue AS27255...

And if you traceroute from something that goes over their internap (say
a verio customer, perhaps), it looks like they come from the SAME internap
router, one port away... interesting.... (Perhaps AS8143 and AS27255
have something in common) Hello? Internap? Are you out there?

Concerned about your privacy? Follow this link to get
FREE encrypted email: Hushmail - Encrypted Email, Web Forms & E-Signatures

Big $$$ to be made with the HushMail Affiliate Program:
https://www.hushmail.com/about.php?subloc=affiliate&l=427

I have an even better idea that seems to have left everyones mind on this
list.

How about asking them directly instead of this ublic non operational
content.

Internap has an extremely responsive noc for example. They I'm sure would
respond very quickly to your question and maybe even withdraw the
announcement as it seems would be appropriate.

If the noc's don't respond then maybe and only maybe nanog is the place but
that is even questionable.

I have an even better idea that seems to have left everyones mind on
this list. How about asking them directly instead of this public non
operational content.

In most cases that's just fine. I had already been in contact with
Internap. In other cases it's really better for people here to see
responses directly for themselves, rather than by means of forwards.

There are some cases where concerns are serious enough for the question
to be asked here, so that any lack of response will be equally visible.

Internap has an extremely responsive noc for example. They I'm sure
would respond very quickly to your question and maybe even withdraw
the announcement as it seems would be appropriate.

I believe Internap has been aware of at least some of the concerns for
a while now - it's up to them to say what they're doing about them.

> I have an even better idea that seems to have left everyones mind on
> this list. How about asking them directly instead of this public non
> operational content.

In most cases that's just fine. I had already been in contact with
Internap. In other cases it's really better for people here to see
responses directly for themselves, rather than by means of forwards.

There are some cases where concerns are serious enough for the question
to be asked here, so that any lack of response will be equally visible.

Unless the space is being announced by its actual owner and by someone else
at the same time and this is causing unreachability or disruption its not
serious enough to speak about in specifics. Just as specific or general
cases of spam or other non operational topics aren't allowed on this list,
this isn't appropriate either at least in specific. As Richard is fond of
saying, try noc@ first.

Although I think counter measures and proper verification would be good
ontopic discussion.

I have an even better idea that seems to have left everyones mind on
this list.

How about asking them directly instead of this ublic non operational
content.

[...]

If the noc's don't respond then maybe and only maybe nanog is the
place but that is even questionable.

FWIW, I've sent emails regarding this particular issue (re: AS 8143)
to the address I was given by XO's NOC, abuse @ xo, as well as to an
individual within the abuse department there, and I know that others
have as well. I have not yet received a response.

I will say, however, that they did appear to be responsive to another
similar issue recently, but that (presumably hijacked) prefix was being
advertised directly by 2828.

http://groups.google.com/groups?threadm=pnttavsippodidn5q20kmft69mkicnvc2d%404ax.com