Re: Potential Prefix Hijack

From: Gustavo Rodrigues Ramos (no email)
Date: Tue Nov 11 2008 - 01:21:05 EST

  • Next message: Hank Nussbacher: "Re: Fwd: RE: Potential Prefix Hijack"

    I've just contacted (after three looong hours waiting...) and forward
    those e-mails to them. Hope that helps ...

    Can someone confirm that the issue is still happening? Maybe a show
    bgp something would help me talk to them.

    On Tue, Nov 11, 2008 at 4:12 AM, Frank Bulk <frnkblk at iname dot com> wrote:
    > More contact people here:
    > http://www.bovespa.com.br/Companies/FormConsultaImpressao.asp?CodCVM=21032
    >
    > If I knew someone (readily available) who spoke Portuguese I would call them, but alas, they are sleeping and not technical.
    >
    > Frank
    >
    > -----Original Message-----
    > From: Tim Peiffer [mailto:peiffer at umn dot edu]
    > Sent: Monday, November 10, 2008 9:04 PM
    > To: mtinka at globaltransit dot net
    > Cc: nanog at nanog dot org
    > Subject: Re: Potential Prefix Hijack
    >
    > Mark Tinka wrote:
    >> Hi all.
    >>
    >> Anyone know how we can contact AS16735 and their upstream
    >> AS27664. We think they are hijacking a number of our
    >> prefixes (AS24218- and AS17992-originated). Thanks BGPmon:
    >>
    >>
    > All 19 of my prefixes for AS57, AS217 and AS1998 are being hijacked by
    > the same ASN. I sent a note to the ASN contact
    > adrianamr at CTBCTELECOM dot NET dot BR dot I can't seem to contact lacnic for more
    > than a few queries without being blacked out.
    >
    >
    > Tim Peiffer
    > Network Support Engineer
    > Office of Information Technology
    > University of Minnesota/NorthernLights GigaPOP
    >
    > % Joint Whois - whois.lacnic.net
    > % This server accepts single ASN, IPv4 or IPv6 queries
    >
    > % LACNIC resource: whois.lacnic.net
    >
    >
    > % Copyright LACNIC lacnic.net
    > % The data below is provided for information purposes
    > % and to assist persons in obtaining information about or
    > % related to AS and IP numbers registrations
    > % By submitting a whois query, you agree to use this data
    > % only for lawful purposes.
    > % 2008-11-11 00:51:09 (BRST -02:00)
    >
    > aut-num: AS16735
    > owner: Companhia de Telecomunicacoes do Brasil Central
    > ownerid: BR-CTBC1-LACNIC
    > responsible: Adriana Maria Rocha Paula
    > address: Av Jo�o Pinheiro, 620, Centro
    > address: 38400-126 - Uberl�ndia - MG
    > country: BR
    > phone: +34 3256 2575 [2575]
    > owner-c: AMP
    > routing-c: AMP
    > abuse-c: AMP
    > created: 20000605
    > changed: 20040415
    >
    > nic-hdl: AMP
    > person: Adriana Maria Rocha Paula
    > e-mail: adrianamr at CTBCTELECOM dot NET dot BR
    > address: Rua Jos� Alves Garcia, 415,
    > address: 38400710 - Uberl�ndia -
    > country: BR
    > phone: +34 3256 2575 [2575]
    > created: 20040628
    > changed: 20040628
    >
    > % whois.lacnic.net accepts only direct match queries.
    > % Types of queries are: POCs, ownerid, CIDR blocks, IP
    > % and AS numbers.
    >
    >
    >> e.g.,
    >>
    >> ====================
    >> Possible Prefix Hijack (Code: 11)
    >> 1 number of peer(s) detected this updates for your prefix
    >> 61.11.208.0/20:
    >> Update details: 2008-11-11 02:24 (UTC)
    >> 61.11.208.0/20
    >> Announced by: AS16735 (Companhia de Telecomunicacoes do
    >> Brasil Central)
    >> Transit AS: 27664 (CTBC Multim�dia)
    >> ASpath: 27664 16735
    >> =====================
    >>
    >> RIPE's RIS BGPlay confirms the same, for about the last
    >> hour.
    >>
    >> E-mails to them won't get there (of course), so our NOC are
    >> contacting them via Gmail/Yahoo.
    >>
    >> All help appreciated.
    >>
    >> Cheers,
    >>
    >> Mark.
    >>
    >
    >
    >
    >
    >


  • Next message: Hank Nussbacher: "Re: Fwd: RE: Potential Prefix Hijack"





    Hosted Email Solutions

    Invaluement Anti-Spam DNSBLs



    Powered By FreeBSD   Powered By FreeBSD