[anti-abuse-wg] Mysteries of the Internet: AS65000

As I believe I have made abundantly clear, I am in favor of the proposal
2019-03, and more generally, I am supportive of the notion that order
is preferable to chaos, particularly when it comes to routing on the
Internet.  The reasons for this preference of mine are so manifest that
they do not even warrant recitation here.

My hope is that I have made Carlos and Jordi aware, via my postings
here, of at least some of the particular points on which we may differ,
and which I would like to see changed in the next draft of 2019-03.

There is one important point of disagreement on which I have not yet
spoken however, and that is Carlos' belief, which may or may not be
shared also by Jordi, that I personally qualify as an "expert" (for
purposes of 2019-03) simply because I have, in some small number of
instances, become aware of what have appeared to be quite deliberate
and malevolent hijackings.

I need to state for the record that this is just wrong.  I am NOT an
"expert" with regard to Internet routing, either legitimate or otherwise.
I do not run a network.  Nor have I ever done so, with the only exception
being my own tiny little network here at home .  I do not own any
equipment that speaks BGP, nor have I ever done so.  I am just a simple
end-luser who has been mad as hell about spammers for about the past 20
years, and who has simply educated himself, as best as he could, to
follow clues and to try to figure how what the spammers are doing and
how they are doing it.  In this process, I have been required to learn
a small bit about routing along the way, but that does not in any sense
qualify me as an "expert" in the area of Internet routing.

In fact, there are and have been, up to and including the present day,
things that I see happening on the Internet that make absolutely no sense
to me whatsoever, and that I cannot for the life of me explain.  I have
just seen one such thing today, and I would like to ask those on this list
who actually -are- qualified experts to please explain it to me, because
all I see here is a mystery wrapped inside of a riddle and stuffed inside
of an enigma.  Here is what I am hoping some actual expert can explain to me:

https://bgp.he.net/AS65000#_asinfo
https://bgp.he.net/AS65000#_prefixes
https://bgp.he.net/AS65000#_prefixes6
https://bgp.he.net/AS65000#_peers
https://bgp.he.net/AS65000#_peers6

I will save all further comment until someone offers me some kind of an
explanation of this apparently strange stuff.  For now, I will only add
that whereas bgp.he.net is showing there as being a total of 66 IPv4
prefixes announced by this (reserved) ASN, the data I am getting from
RIPEstat is indicating a much smaller number of IPv4 announcements (35).
Either way, I am unable to fathom how and why a reserved ASN should be
announcing -anything- at -any- place or point where anybody on the outside
can see it.  (And at least some of those blocks -can- be successfully
tracerout'd to from where I am sitting here in California, so this is by
no means a merely local phenomenon.)

The only other thing I feel compelled to say, or ask right now, is just
this:   Who should I be notifying if there is an issue with this ASN?
It has no WHOIS reords, and thus, no contacts... no email addresses, no
phone numbers, no snail-mail addresses.  Nothing...

... and yet this thing has, according to bgp.he.net, no fewer than 27 IPv4
peers and another 2 for IPv6 only!

I await an explanation from some actual expert.  For myself, I can only
say that none of this makes a damn bit of sense to me.  But I am willing
and eager to be educated.


Regards,
rfg


P.S.  If I have seems self-effacing about the limits of my knowledge above,
that was entirely intentional and deliberate.  Upon looking at this case
of AS65000, I was convinced rather quickly that something is horribly wrong
here.  But trying to figure out who should be held accountable for this mess
is, I confess, utterly beyond me.