<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
        {font-family:Wingdings;
        panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
        {font-family:Wingdings;
        panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
        {font-family:Verdana;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0cm;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
p
        {mso-style-priority:99;
        mso-margin-top-alt:auto;
        margin-right:0cm;
        mso-margin-bottom-alt:auto;
        margin-left:0cm;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
        {mso-style-priority:99;
        mso-style-link:"Balloon Text Char";
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:8.0pt;
        font-family:"Tahoma","sans-serif";}
span.hoenzb
        {mso-style-name:hoenzb;}
span.EmailStyle19
        {mso-style-type:personal-reply;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
span.BalloonTextChar
        {mso-style-name:"Balloon Text Char";
        mso-style-priority:99;
        mso-style-link:"Balloon Text";
        font-family:"Tahoma","sans-serif";
        mso-fareast-language:EN-AU;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-family:"Calibri","sans-serif";
        mso-fareast-language:EN-US;}
@page WordSection1
        {size:612.0pt 792.0pt;
        margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-AU link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>To be fair, that response isn’t much better than not responding at all, so maybe that’s the point he is making </span><span style='font-size:11.0pt;font-family:Wingdings;color:#1F497D'>J</span><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Thanks,<o:p></o:p></span></p><p class=MsoNormal><b><span style='font-family:"Arial","sans-serif";color:#333333'>Ayden Beeson</span></b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> AusNOG [mailto:ausnog-bounces@lists.ausnog.net] <b>On Behalf Of </b>Daniel Hood<br><b>Sent:</b> Thursday, 3 April 2014 1:21 PM<br><b>To:</b> James Morgan<br><b>Cc:</b> ausnog@lists.ausnog.net<br><b>Subject:</b> Re: [AusNOG] BGPMon/Thailand AS4761 Hijacking<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>You get responses from TPG's NOC?!? <o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div></div><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal>On Thu, Apr 3, 2014 at 11:50 AM, James Morgan <<a href="mailto:James.Morgan@vernet.com.au" target="_blank">James.Morgan@vernet.com.au</a>> wrote:<o:p></o:p></p><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:#1F497D'>I suppose it’s better than any response I’ve had from the TPG NOC in the last couple of years.</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:#1F497D'> </span><span style='color:#888888'><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:#1F497D'>James.</span><span style='color:#888888'><o:p></o:p></span></p><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:#1F497D'> </span><o:p></o:p></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> AusNOG [mailto:<a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank">ausnog-bounces@lists.ausnog.net</a>] <b>On Behalf Of </b>Tristram Cheer<br><b>Sent:</b> Thursday, 3 April 2014 11:33 AM<br><b>To:</b> <a href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a><br><b>Subject:</b> Re: [AusNOG] BGPMon/Thailand AS4761 Hijacking</span><o:p></o:p></p></div></div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-NZ style='color:#1F497D'>Just got this response from their NOC contact:</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-NZ style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-NZ style='color:#1F497D'>“</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D'>Dear Sir, </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D'>Today we have trouble with our network and still investigate.</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#E36C0A'>Thank's</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#E36C0A'>xxxxxxxx      </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#E36C0A'>TOC IP Surveillance</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-NZ style='color:#1F497D'>“</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-NZ style='color:#1F497D'> </span><o:p></o:p></p><p><span lang=EN-NZ style='color:#7D7D7D'>--</span><o:p></o:p></p><p><b><span lang=EN-NZ style='font-family:"Verdana","sans-serif";color:#7D7D7D'>Tristram Cheer</span></b><span lang=EN-NZ style='font-size:7.5pt;font-family:"Verdana","sans-serif";color:#7D7D7D'><br>Network Architect - <i>Most problems are the result of previous solutions...</i></span><o:p></o:p></p><p><span lang=EN-NZ><img border=0 width=192 height=79 id="_x0000_i1025" src="cid:image001.jpg@01CF4F42.862744B0"></span><o:p></o:p></p><p><span lang=EN-NZ style='font-size:7.5pt;font-family:"Verdana","sans-serif";color:#7D7D7D'>09 438 5472 Ext 803 |022 412 1985 | PO Box 5083, Whangarei, 0140</span><span lang=EN-NZ> <br></span><span lang=EN-NZ style='font-size:7.5pt;font-family:"Verdana","sans-serif";color:#7D7D7D'><a href="mailto:tristram.cheer@ubergroup.co.nz" target="_blank" title="Click to send email to Tristram Cheer">tristram.cheer@ubergroup.co.nz</a> |<a href="http://www.uber.co.nz" target="_blank" title="">www.ubergroup.co.nz</a></span><o:p></o:p></p><p><span lang=EN-NZ><a href="http://ubergroup.co.nz/fb" target="_blank"><span style='text-decoration:none'><img border=0 width=40 height=40 id="_x0000_i1026" src="cid:image002.png@01CF4F42.862744B0"></span></a>  <a href="https://twitter.com/#!/ubergroupltd" target="_blank"><span style='text-decoration:none'><img border=0 width=40 height=40 id="_x0000_i1027" src="cid:image003.png@01CF4F42.862744B0"></span></a></span><o:p></o:p></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><span lang=EN-US>From:</span></b><span lang=EN-US> AusNOG [<a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank">mailto:ausnog-bounces@lists.ausnog.net</a>] <b>On Behalf Of </b>Michael Gehrmann<br><b>Sent:</b> Thursday, 3 April 2014 12:21 p.m.<br><b>To:</b> <a href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a><br><b>Subject:</b> Re: [AusNOG] BGPMon/Thailand AS4761 Hijacking</span><o:p></o:p></p></div></div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-NZ> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:#1F497D'>We got alerts for several /24’s out of our larger blocks.</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN style='font-size:8.5pt;font-family:"Arial","sans-serif";color:#1F497D'>Michael Gehrmann<br><b>Hosting Support Specialist – Networks <br>Macquarie Telecom</b> </span><o:p></o:p></p><div><div><div><div><div><div class=MsoNormal><span lang=EN style='font-size:8.5pt;font-family:"Arial","sans-serif";color:#1F497D'><hr size=2 width=760 style='width:570.0pt' align=left></span></div></div></div></div></div></div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:#1F497D'> </span><o:p></o:p></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> AusNOG [<a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank">mailto:ausnog-bounces@lists.ausnog.net</a>] <b>On Behalf Of </b>Tristram Cheer<br><b>Sent:</b> Thursday, 3 April 2014 6:08 AM<br><b>To:</b> <a href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a><br><b>Subject:</b> [AusNOG] BGPMon/Thailand AS4761 Hijacking</span><o:p></o:p></p></div></div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-NZ>Hi All,</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-NZ> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-NZ>Is anyone else getting alerts that AS4761 is hijacking IP ranges? I’ve just got alerting from BGPMon that all of our ASN’s announced prefix’s are being announced by AS4761. So far it’s only showing up at a peer in Thailand.</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-NZ> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-NZ> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-NZ> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-NZ>Cheers</span><o:p></o:p></p><p><span lang=EN-NZ style='color:#7D7D7D'>--</span><o:p></o:p></p><p><b><span lang=EN-NZ style='font-family:"Verdana","sans-serif";color:#7D7D7D'>Tristram Cheer</span></b><span lang=EN-NZ style='font-size:7.5pt;font-family:"Verdana","sans-serif";color:#7D7D7D'><br>Network Architect - <i>Most problems are the result of previous solutions...</i></span><o:p></o:p></p><p><span lang=EN-NZ><img border=0 width=192 height=79 id="_x0000_i1029" src="cid:image001.jpg@01CF4F42.862744B0"></span><o:p></o:p></p><p><span lang=EN-NZ style='font-size:7.5pt;font-family:"Verdana","sans-serif";color:#7D7D7D'>09 438 5472 Ext 803 |022 412 1985 | PO Box 5083, Whangarei, 0140</span><span lang=EN-NZ> <br></span><span lang=EN-NZ style='font-size:7.5pt;font-family:"Verdana","sans-serif";color:#7D7D7D'><a href="mailto:tristram.cheer@ubergroup.co.nz" target="_blank" title="Click to send email to Tristram Cheer">tristram.cheer@ubergroup.co.nz</a> |<a href="http://www.uber.co.nz" target="_blank" title="">www.ubergroup.co.nz</a></span><o:p></o:p></p><p><span lang=EN-NZ><a href="http://ubergroup.co.nz/fb" target="_blank"><span style='text-decoration:none'><img border=0 width=40 height=40 id="_x0000_i1030" src="cid:image004.png@01CF4F42.862744B0"></span></a>  <a href="https://twitter.com/#!/ubergroupltd" target="_blank"><span style='text-decoration:none'><img border=0 width=40 height=40 id="_x0000_i1031" src="cid:image005.png@01CF4F42.862744B0"></span></a></span><o:p></o:p></p></div></div></div></div><p class=MsoNormal style='margin-bottom:12.0pt'><br>_______________________________________________<br>AusNOG mailing list<br><a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br><a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><o:p></o:p></p></div><p class=MsoNormal><o:p> </o:p></p></div></div>
<P><A title="Charles Sturt University" href="http://www.csu.edu.au/"><IMG 
alt="Charles Sturt University" 
src="cid:csu-logo491c.bmp" 
border=0></A></P>
<P 
style="FONT-SIZE: 8px; COLOR: #c42129; FONT-FAMILY: Arial, Helvetica, sans-serif">|   ALBURY-WODONGA   |   BATHURST   |   CANBERRA   |   DUBBO   |   GOULBURN   |   MELBOURNE   |   ONTARIO   |   ORANGE   |   PORT 
MACQUARIE   |   SYDNEY   |   WAGGA 
WAGGA   |</P>
<HR>
<SPAN 
style="FONT-WEIGHT: bold; FONT-SIZE: 9px; FONT-FAMILY: Arial, Helvetica, sans-serif">LEGAL 
NOTICE</SPAN><BR><SPAN 
style="FONT-SIZE: 9px; FONT-FAMILY: Arial, Helvetica, sans-serif">This email 
(and any attachment) is confidential and is intended for the use of the 
addressee(s) only. If you are not the intended recipient of this email, you must 
not copy, distribute, take any action in reliance on it or disclose it to 
anyone. Any confidentiality is not waived or lost by reason of mistaken 
delivery. Email should be checked for viruses and defects before opening. 
Charles Sturt University (CSU) does not accept liability for viruses or any 
consequence which arise as a result of this email transmission. Email 
communications with CSU may be subject to automated email filtering, which could 
result in the delay or deletion of a legitimate email before it is read at CSU. 
The views expressed in this email are not necessarily those of CSU.</SPAN> 
<P style="FONT-SIZE: 9px; FONT-FAMILY: Arial, Helvetica, sans-serif"><A 
style="COLOR: #c42129" href="http://www.csu.edu.au">Charles Sturt University in 
Australia</A> The Grange Chancellery, Panorama Avenue, Bathurst NSW Australia 
2795 (ABN: 83 878 708 551; CRICOS Provider Number: 00005F (National)). TEQSA 
Provider Number: PV12018 <BR><A style="COLOR: #c42129" 
href="http://www.charlessturt.ca/">Charles Sturt University in Ontario</A> 860 
Harrington Court, Burlington Ontario Canada L7N 3N4 Registration: <A 
style="COLOR: #c42129" href="http://www.peqab.ca">www.peqab.ca</A></P><SPAN 
style="FONT-SIZE: 9px; FONT-FAMILY: Arial, Helvetica, sans-serif">Consider the 
environment before printing this email.</SPAN> <div style="color:#999999;font-size:11px;font-family:verdana"><br>Disclaimer added by <b>CodeTwo Exchange Rules 2007</b><br><a href="http://www.codetwo.com">www.codetwo.com</a></div><br></body></html>