[182442] in North American Network Operators' Group
AW: AW: Prefix-Hijack by AS7514
daemon@ATHENA.MIT.EDU (=?iso-8859-1?Q?J=FCrgen_Jaritsch?=)
Fri Jul 17 02:41:29 2015
X-Original-To: nanog@nanog.org
From: =?iso-8859-1?Q?J=FCrgen_Jaritsch?= <jj@anexia.at>
To: Hank Nussbacher <hank@efes.iucc.ac.il>, Hugo Slabbert
<hslabbert@stargate.ca>
Date: Fri, 17 Jul 2015 06:35:37 +0000
In-Reply-To: <5.1.1.6.2.20150717093146.0495ceb8@efes.iucc.ac.il>
Cc: "'nanog@nanog.org'" <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
Hi,
all affected prefixes starts with 37... no other prefixes from AS42473 are =
affected.
Best regards
J=FCrgen Jaritsch
Head of Network & Infrastructure
ANEXIA Internetdienstleistungs GmbH
Telefon: +43-5-0556-300
Telefax: +43-5-0556-500
E-Mail: jj@anexia.at=20
Web: http://www.anexia.at
Anschrift Hauptsitz Klagenfurt: Feldkirchnerstra=DFe 140, 9020 Klagenfurt
Gesch=E4ftsf=FChrer: Alexander Windbichler
Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U632166=
01
-----Urspr=FCngliche Nachricht-----
Von: Hank Nussbacher [mailto:hank@efes.iucc.ac.il]=20
Gesendet: Freitag, 17. Juli 2015 08:33
An: J=FCrgen Jaritsch <jj@anexia.at>; Hugo Slabbert <hslabbert@stargate.ca>
Cc: 'nanog@nanog.org' <nanog@nanog.org>
Betreff: Re: AW: Prefix-Hijack by AS7514
At 06:23 17/07/2015 +0000, J=FCrgen Jaritsch wrote:
>We already informed AS2497 but I have no idea if they we'll cooperate.
All prefixes I see have the first octet as being 2 digits rather than=20
3. That is common among about 30 different alerts I have=20
received. Curious if this is common worldwide.
-Hank
>Best regards
>
>
>J=FCrgen Jaritsch
>Head of Network & Infrastructure
>
>ANEXIA Internetdienstleistungs GmbH
>
>Telefon: +43-5-0556-300
>Telefax: +43-5-0556-500
>
>E-Mail: jj@anexia.at
>Web: http://www.anexia.at
>
>Anschrift Hauptsitz Klagenfurt: Feldkirchnerstra=DFe 140, 9020 Klagenfurt
>Gesch=E4ftsf=FChrer: Alexander Windbichler
>Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216=
601
>
>-----Urspr=FCngliche Nachricht-----
>Von: Hugo Slabbert [mailto:hslabbert@stargate.ca]
>Gesendet: Freitag, 17. Juli 2015 08:23
>An: J=FCrgen Jaritsch <jj@anexia.at>
>Cc: 'nanog@nanog.org' <nanog@nanog.org>
>Betreff: Re: Prefix-Hijack by AS7514
>
>Seeing the same; a /19.
>
>BGPMon reports an alert at 2015-07-17 05:29 (UTC) and that it's being
>accepted by 2497.
>
>--
>Hugo Slabbert
>Stargate Connections - AS19171
>
>-----Original Message-----
> >Date: Fri, 17 Jul 2015 06:15:36 +0000
> >From: J=FCrgen Jaritsch <jj@anexia.at>
> >To: "'nanog@nanog.org'" <nanog@nanog.org>
> >Subject: Prefix-Hijack by AS7514
> >
> >Hi,
> >
> >does anyone else see some prefix hijacks from AS7514? They started to=20
> announce some of our /24 ....
> >
> >
> >Thanks & best regards
> >
> >J=FCrgen Jaritsch
> >Head of Network & Infrastructure
> >
> >ANEXIA Internetdienstleistungs GmbH
> >
> >Telefon: +43-5-0556-300
> >Telefax: +43-5-0556-500
> >
> >E-Mail: jj@anexia.at<mailto:jj@anexia.at>
> >Web: http://www.anexia.at<http://www.anexia.at/>
> >
> >Anschrift Hauptsitz Klagenfurt: Feldkirchnerstra=DFe 140, 9020 Klagenfur=
t
> >Gesch=E4ftsf=FChrer: Alexander Windbichler
> >Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT=20
> U63216601
> >
