Latest instalment of the "hijacked /16s" story

Wed Jun 18 05:38:24 UTC 2008

On Wed, Jun 18, 2008 at 9:40 AM, Justin Shore <justin at justinshore.com> wrote:
> Is the whole AS (33302) rogue like the AS advertising the SF Bay Packet
> Radio block is?  Looking at the WHOIS for some of the prefixes advertised by
> both ASs, I see some common company names.  That would lead me to believe
> that 33302 is no better than 33211 but I can't confirm that.  Any takers?

Not sure. The AS announces some more but an arin query for DATA102
simply has this /16 and a smaller netblock

That 47-usc site is not mine either .. its by Ron Guilmette,
interviewed in the Wash Post -
http://blog.washingtonpost.com/securityfix/2008/04/a_case_of_network_identity_the_1.html

suresh at frodo 22:17:45 <~> $ whois -h whois.arin.net Data102*
Data102 Abuse Team  (DAT13-ARIN)     abuse at data102.com +1-719-578-8842
Data102 Network Ops  (DNO44-ARIN)     netops at data102.com +1-719-578-8842
Data Works Inc DATA102984 (NET-63-243-82-144-1) 63.243.82.144 - 63.243.82.159
Gold Hill Computers DATA102 (NET-128-168-0-0-1) 128.168.0.0 - 128.168.255.255