66.164.232.0/24 HI-JACKED, I need some help

Fri May 21 00:22:35 UTC 2004

Hello Folks,

    I have tried everything but keep running into walls, someone has hi-jacked a block 66.164.232.0/24 and  is routing it out of Ga. They come online, we catch heck, they go offline and so it goes. I have called everyone and can't seem to get anyone to take the route out of their session. Can anyone in Nanog help out here, please.

Sincerely,

Peter

BGP routing table entry for , version 46510837
Paths: (4 available, best #2, table Default-IP-Routing-Table)
  Not advertised to any peer
  209 19262 6350 30174  <-----------------OK THIS IS US ;-)
    165.117.201.58 from 165.117.201.58 (205.171.0.124)
      Origin IGP, metric 100, localpref 100, valid, external
      Community: 2548:666

701 6389 6197 (HI-JACKED  BLOCK 66.164.232.0/24) <------- BAD NEWS
    204.255.169.61 (metric 342) from 165.117.162.200 (165.117.162.200)
      Origin IGP, metric 100, localpref 100, valid, internal, best
      Community: 2548:666
      Originator: 165.117.162.10, Cluster list: 165.117.162.200

 701 6389 6197(HI JACKED OUR IPS)
    204.255.169.61 (metric 342) from 165.117.162.201 (165.117.162.201)
      Origin IGP, metric 100, localpref 100, valid, internal
      Community: 2548:666
      Originator: 165.117.162.10, Cluster list: 165.117.162.201

701 6389 6197 (HI JACKED OUR IPS)
    204.255.169.61 (metric 342) from 165.117.162.202 (165.117.162.202)
      Origin IGP, metric 100, localpref 100, valid, internal
      Community: 2548:666
      Originator: 165.117.162.10, Cluster list: 165.117.162.202, 165.117.162.200

AS6197 -------------------------------------------------------------|
                                                                         \/

OrgName:    BellSouth Network Solutions, Inc
OrgID:      BNS-14
Address:    1100 Ashwood Parkway, Suite 200
City:
StateProv:  GA
PostalCode:
Country:    US

ASNumber:   6197
ASName:     BATI-ATL
ASHandle:   AS6197
Comment:
RegDate:
Updated:    1996-01-04

TechHandle: WD14-ARIN
TechName:   Dawson, Willard
TechPhone:  +1-770-814-5099
TechEmail:  willard.dawson at sbs.siemens.com

**There is a old timer that answers the phone and has no idea what is going on; he mops the floors in the switch gear room.

AS6389.
http://ws.arin.net/cgi-bin/whois.pl

No match found for AS6389 !!

However . . 
ASNumber:   6380 - 6389
ASName:     BELLSOUTH-NET-BLK
ASHandle:   AS6380
Comment:
RegDate:    1996-03-28
Updated:    2001-01-03

TechHandle: DR791-ARIN
TechName:   Ringen, Deron
TechPhone:  +1-678-441-7919
TechEmail:  bgpadmin at corp.bellsouth.net

OrgAbuseHandle: ABUSE81-ARINOrgAbuseName:   Abuse Group
OrgAbusePhone:  +1-404-499-5224OrgAbuseEmail:  abuse at bellsouth.net
OrgTechHandle: JG726-ARIN
OrgTechName:   Geurin, Joe
OrgTechPhone:  +1-404-499-5240
OrgTechEmail:  ipoperations at bellsouth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20040520/ac38561b/attachment.html>