[AusNOG] BGPMon/Thailand AS4761 Hijacking

[Alex Samad - Yieldbroker]

Do we know when this started to happen ?  around 5am our time (AEST) ?


A

From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Tristram Cheer
Sent: Thursday, 3 April 2014 11:33 AM
To: ausnog at lists.ausnog.net
Subject: Re: [AusNOG] BGPMon/Thailand AS4761 Hijacking

Just got this response from their NOC contact:

“
Dear Sir,

Today we have trouble with our network and still investigate.

Thank's
xxxxxxxx
TOC IP Surveillance
“


--

Tristram Cheer
Network Architect - Most problems are the result of previous solutions...

[cid:image001.jpg at 01CF4F31.9FDCC030]

09 438 5472 Ext 803 |022 412 1985 | PO Box 5083, Whangarei, 0140
tristram.cheer at ubergroup.co.nz<mailto:tristram.cheer at ubergroup.co.nz> |www.ubergroup.co.nz<http://www.uber.co.nz>

[cid:image005.png at 01CF4F31.9FDCC030]<http://ubergroup.co.nz/fb>  [cid:image007.png at 01CF4F31.9FDCC030] <https://twitter.com/#!/ubergroupltd>
From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Michael Gehrmann
Sent: Thursday, 3 April 2014 12:21 p.m.
To: ausnog at lists.ausnog.net<mailto:ausnog at lists.ausnog.net>
Subject: Re: [AusNOG] BGPMon/Thailand AS4761 Hijacking

We got alerts for several /24’s out of our larger blocks.

Michael Gehrmann
Hosting Support Specialist – Networks
Macquarie Telecom
________________________________




From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Tristram Cheer
Sent: Thursday, 3 April 2014 6:08 AM
To: ausnog at lists.ausnog.net<mailto:ausnog at lists.ausnog.net>
Subject: [AusNOG] BGPMon/Thailand AS4761 Hijacking

Hi All,

Is anyone else getting alerts that AS4761 is hijacking IP ranges? I’ve just got alerting from BGPMon that all of our ASN’s announced prefix’s are being announced by AS4761. So far it’s only showing up at a peer in Thailand.



Cheers

--

Tristram Cheer
Network Architect - Most problems are the result of previous solutions...

[cid:image001.jpg at 01CF4F31.9FDCC030]

09 438 5472 Ext 803 |022 412 1985 | PO Box 5083, Whangarei, 0140
tristram.cheer at ubergroup.co.nz<mailto:tristram.cheer at ubergroup.co.nz> |www.ubergroup.co.nz<http://www.uber.co.nz>

[cid:image008.png at 01CF4F31.9FDCC030]<http://ubergroup.co.nz/fb>  [cid:image009.png at 01CF4F31.9FDCC030] <https://twitter.com/#!/ubergroupltd>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140403/604043dc/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 10652 bytes
Desc: image001.jpg
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140403/604043dc/attachment-0001.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.png
Type: image/png
Size: 2691 bytes
Desc: image005.png
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140403/604043dc/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image007.png
Type: image/png
Size: 3447 bytes
Desc: image007.png
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140403/604043dc/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image008.png
Type: image/png
Size: 2705 bytes
Desc: image008.png
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140403/604043dc/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image009.png
Type: image/png
Size: 3452 bytes
Desc: image009.png
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140403/604043dc/attachment-0007.png>