Hijacked IP space: Arthur Andersen & Co., S.C. — dead POC used to hijack: p01243@psilink.com

Purchased or leasing domain. Using p01243@psilink.com to create false LOAs:

;; QUESTION SECTION:
;psilink.com. IN A

;; ANSWER SECTION:
psilink.com. 299 IN A 104.21.23.21
psilink.com. 299 IN A 172.67.208.108

psilink.com. 299 IN MX 10 mx.yandex.net.

Hijacking /16 range from long-dead corporation.

_____________________________________________

April/21: Hijacked by AS398968 — INTERCONTINENTAL INTERNET DATA CORP

This netblock appears to Spamhaus to be hijacked. Illegally hijacking and routing ARIN & LACNIC IP space seems like a bad idea. Can’t wait to find out who’s really behind this.

psilink.com. 299 IN MX 10 mx1.improvmx.com. 51.91.128.110
psilink.com. 299 IN MX 20 mx2.improvmx.com. 51.91.128.125
_____________________________________________

Was hijacked routed by:
Awknet Communications, LLC/LAFiber, LLC

http://cidr-report.org/cgi-bin/as-report?as=AS17048
>> http://cidr-report.org/cgi-bin/as-report?as=AS33333

148.178.0.0/16 4777 2497 27524 17048 33333
67.220.68.0/22 4777 2516 27524 17048 33333
68.168.16.0/20 4777 2497 27524 17048 33333

>> http://cidr-report.org/cgi-bin/as-report?as=AS27703

140.170.64.0/18 4777 2497 27524 17048 27703
150.230.0.0/19 4777 2516 27524 17048 27703
150.230.96.0/19 Announced
150.230.160.0/19 Announced
150.230.224.0/19 Announced
150.141.0.0/19 Withdrawn
150.141.32.0/19 Withdrawn
150.141.64.0/19 Withdrawn
150.141.96.0/19 Withdrawn
150.141.128.0/19 Withdrawn
150.141.160.0/19 Withdrawn
150.141.192.0/19 Withdrawn
150.141.224.0/19 Withdrawn

________________________________

OrgName: Arthur Andersen & Co., S.C.
OrgID: AACS-1
Address: 1100 Empire Central Place
City: Dallas
StateProv: TX
PostalCode: 75247
Country: US

NetRange: 148.178.0.0 — 148.178.255.255
CIDR: 148.178.0.0/16
NetName: AADALLAS
NetHandle: NET-148-178-0-0-1
Parent: NET-148-0-0-0-0
NetType: Direct Assignment
Comment:
RegDate: 1991-05-13
Updated: 1991-05-13

RTechHandle: TG130-ARIN
RTechName: Grisham, Tom
RTechPhone: +1-214-689-1425
RTechEmail: p01243@psilink.com
________________________________

________________________________

See also:

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL77385
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL78129

SBL75681 — AS17048 170.155.128.0/17 — via Awknet Communications, LLC

______________________________________________

_______________________________________

Добавить комментарий

Ваш адрес email не будет опубликован. Обязательные поля помечены *