[109187] in North American Network Operators' Group
Potential Prefix Hijack
daemon@ATHENA.MIT.EDU (Mark Tinka)
Mon Nov 10 21:54:33 2008
From: Mark Tinka <mtinka@globaltransit.net>
To: "nanog@nanog.org" <nanog@nanog.org>
Date: Tue, 11 Nov 2008 10:54:01 +0800
Reply-To: mtinka@globaltransit.net
Errors-To: nanog-bounces@nanog.org
--nextPart3061585.1MRbJKLr8R
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Hi all.
Anyone know how we can contact AS16735 and their upstream=20
AS27664. We think they are hijacking a number of our=20
prefixes (AS24218- and AS17992-originated). Thanks BGPmon:
e.g.,
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Possible Prefix Hijack (Code: 11)
1 number of peer(s) detected this updates for your prefix=20
61.11.208.0/20:=20
Update details: 2008-11-11 02:24 (UTC)
61.11.208.0/20=20
Announced by: AS16735 (Companhia de Telecomunicacoes do=20
Brasil Central)
Transit AS: 27664 (CTBC Multim=EDdia)
ASpath: 27664 16735
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
RIPE's RIS BGPlay confirms the same, for about the last=20
hour.
E-mails to them won't get there (of course), so our NOC are=20
contacting them via Gmail/Yahoo.
All help appreciated.
Cheers,
Mark.
--nextPart3061585.1MRbJKLr8R
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
iQIcBAABAgAGBQJJGPPRAAoJEGcZuYTeKm+GeooP/iVSWHNWOYQrsO9NPr+41iku
R+dVHnAxH3Ts3P3I7OmdsG98yxL47USCl67dCWZ0K7sAxFPuwt6T/zZOzK7ckt2O
sKkO74wfC+2DCJhombQcyI4jaV0eZJDZb9CzxujEtT0/ZGQlLoMn5LoTws2L5pTy
z2WNm1/ttVtJZrE1uPKT5F4df64Kf0Nn1GBArm0V2hZhdg75TCj5JnFkqRgKZTpH
mzVsS+F2tqnWaEjepE9FDuJJrRUEPtWwN2Nu1S5HZFmXSrVwz0SoeMz6aPhfqf9u
8Fwes1qqzRY2QDB5zMLIaooVlpqzFCT7+9hRyASkjSoMDbiXylS3nj+Z15mUYj2D
NwvQgJMNr7cRHgt7CLjOqf6elI2ft8hizQxuD/8aqhSNsGO2+vM4tkaP7ovPKqyt
iPacK+kwQBzIRdsn1sz+Q7+7dA+KOfBJfQAsSdcoFShXfp8djQ0xWx4HF/C3IUBy
yjPyH8k4oFEeldXJHHM468Q7WRLjPJLQ+No1og7BRd0FRDfQdxY8Alc9aWRhJvem
ID3rsstF0N9G7zFdtK5VQ0KLTHEYKIE5z+GQqu0/PqIV7QgUJqtDz9JEqA46fi+J
E9uHHHPPmYHmyqkHYDSTanA4VSgZnl53n+uw24QgH0nFQNJzNsViq1NAKXXwWbp/
CXFCGdKPBt/QZgembzue
=9HuD
-----END PGP SIGNATURE-----
--nextPart3061585.1MRbJKLr8R--
