HIJACKED: 148.163.0.0/16 -- WTF? Level3 is now doing IP hijacking??

Thu Mar 31 04:00:15 UTC 2011

On Wed, 30 Mar 2011, Ronald F. Guilmette wrote:

> So that _really_ begs the question... Why did Circle Internet and (apparently)
> Level3's customer, BANDCON, blindly accept _any_ sort of assertion that the
> crook who hijacked these two /16s had the right to use them?

What makes you think it was blind?  The standard industry practice is to 
ask someone requesting to announce a route for a letter on the owner's 
letter head authorizing the announcement.  Is it really that hard to 
invent some letterhead and sign a letter?

It's probably one of the easiest to circumvent "security" procedures ever.

Frankly it's a giant waste of time and does nothing other than frustrate 
legitimate work.

-- 
Brandon Ross                                              AIM:  BrandonNRoss
                                                                ICQ:  2269442
                                    Skype:  brandonross  Yahoo:  BrandonNRoss