[AusNOG] BGPMon/Thailand AS4761 Hijacking

[Damien Luke]

First notification from BGPmon was around 6:50am AEST.  They're usually
pretty quick with notifications.

Damien




On Thu, Apr 3, 2014 at 11:41 AM, Alex Samad - Yieldbroker <
Alex.Samad at yieldbroker.com> wrote:

>  Do we know when this started to happen ?  around 5am our time (AEST) ?
>
>
>
>
>
> A
>
>
>
> *From:* AusNOG [mailto:ausnog-bounces at lists.ausnog.net] *On Behalf Of *Tristram
> Cheer
> *Sent:* Thursday, 3 April 2014 11:33 AM
>
> *To:* ausnog at lists.ausnog.net
> *Subject:* Re: [AusNOG] BGPMon/Thailand AS4761 Hijacking
>
>
>
> Just got this response from their NOC contact:
>
>
>
> "
>
> Dear Sir,
>
>
>
> Today we have trouble with our network and still investigate.
>
>
>
> Thank's
>
> xxxxxxxx
>
> TOC IP Surveillance
>
> "
>
>
>
> --
>
> *Tristram Cheer*
> Network Architect - *Most problems are the result of previous
> solutions...*
>
>  09 438 5472 Ext 803 |022 412 1985 | PO Box 5083, Whangarei, 0140
> tristram.cheer at ubergroup.co.nz |www.ubergroup.co.nz<http://www.uber.co.nz>
>
> <http://ubergroup.co.nz/fb>  <https://twitter.com/#!/ubergroupltd>
>
> *From:* AusNOG [mailto:ausnog-bounces at lists.ausnog.net<ausnog-bounces at lists.ausnog.net>]
> *On Behalf Of *Michael Gehrmann
> *Sent:* Thursday, 3 April 2014 12:21 p.m.
> *To:* ausnog at lists.ausnog.net
> *Subject:* Re: [AusNOG] BGPMon/Thailand AS4761 Hijacking
>
>
>
> We got alerts for several /24's out of our larger blocks.
>
>
>
> Michael Gehrmann
>
> *Hosting Support Specialist - Networks Macquarie Telecom*
>    ------------------------------
>
>
>
>
>
>
>
>
>
> *From:* AusNOG [mailto:ausnog-bounces at lists.ausnog.net<ausnog-bounces at lists.ausnog.net>]
> *On Behalf Of *Tristram Cheer
> *Sent:* Thursday, 3 April 2014 6:08 AM
> *To:* ausnog at lists.ausnog.net
> *Subject:* [AusNOG] BGPMon/Thailand AS4761 Hijacking
>
>
>
> Hi All,
>
>
>
> Is anyone else getting alerts that AS4761 is hijacking IP ranges? I've
> just got alerting from BGPMon that all of our ASN's announced prefix's are
> being announced by AS4761. So far it's only showing up at a peer in
> Thailand.
>
>
>
>
>
>
>
> Cheers
>
> --
>
> *Tristram Cheer*
> Network Architect - *Most problems are the result of previous
> solutions...*
>
>  09 438 5472 Ext 803 |022 412 1985 | PO Box 5083, Whangarei, 0140
> tristram.cheer at ubergroup.co.nz |www.ubergroup.co.nz<http://www.uber.co.nz>
>
> <http://ubergroup.co.nz/fb>  <https://twitter.com/#!/ubergroupltd>
>
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140403/abb29ae2/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image008.png
Type: image/png
Size: 2705 bytes
Desc: not available
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140403/abb29ae2/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image007.png
Type: image/png
Size: 3447 bytes
Desc: not available
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140403/abb29ae2/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.png
Type: image/png
Size: 2691 bytes
Desc: not available
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140403/abb29ae2/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image009.png
Type: image/png
Size: 3452 bytes
Desc: not available
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140403/abb29ae2/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 10652 bytes
Desc: not available
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140403/abb29ae2/attachment.jpg>