Hijacked Network Ranges

Tue Jan 31 18:27:48 UTC 2012

On Tue, Jan 31, 2012 at 10:00 AM, Kelvin Williams
<kwilliams at altuscgi.com> wrote:
> We've been in a 12+ hour ordeal requesting that AS19181 (Cavecreek Internet
> Exchange) immediately filter out network blocks that are being advertised
> by ASAS33611 (SBJ Media, LLC) who provided to them a forged LOA.
>
> [ ...snip...]

Ugh, what a hassle. I've been there, and it's really no fun.

> Our customers and services have been impaired.  Does anyone have any
> contacts for anyone at Cavecreek that would actually take a look at ARINs
> WHOIS, and IRRs so the networks can be restored and our services back in
> operation?

Have you tried the contacts listed at PeeringDB for AS19181? Check
out: as19181.peeringdb.com

> Additionally, does anyone have any suggestion for mitigating in the
> interim?  Since we can't announce as /25s and IRRs are apparently a pipe
> dream.

If you fail to get AS19181 to respond, you might consider contacting
*their* upstreams and explaining the situation.

Cheers,
jof