[AusNOG] BGPMon/Thailand AS4761 Hijacking

[Ben Peters]

5:05 here

--

Ben Peters                         email: ben at apnic.net<mailto:ben at apnic.net>

Network Engineer, APNIC           direct: +61 7 3858 3154

http://www.apnic.net<http://www.apnic.net/>

From: Branko Stanic <branko.stanic at rea-group.com<mailto:branko.stanic at rea-group.com>>
Date: Thursday, 3 April 2014 10:54 am
To: Damien Luke <damien.luke at gmail.com<mailto:damien.luke at gmail.com>>
Cc: "ausnog at lists.ausnog.net<mailto:ausnog at lists.ausnog.net>" <ausnog at lists.ausnog.net<mailto:ausnog at lists.ausnog.net>>
Subject: Re: [AusNOG] BGPMon/Thailand AS4761 Hijacking

I’ve got first one at 6:20AM


Branko Stanic
Network Engineer

T +61 4 0574 0061

Email branko.stanic at rea-group.com<mailto:branko.stanic at rea-group.com>
Visit www.rea-group.com<http://www.rea-group.com/>



On 3 Apr 2014, at 11:47 am, Damien Luke <damien.luke at gmail.com<mailto:damien.luke at gmail.com>> wrote:

First notification from BGPmon was around 6:50am AEST.  They're usually pretty quick with notifications.

Damien




On Thu, Apr 3, 2014 at 11:41 AM, Alex Samad - Yieldbroker <Alex.Samad at yieldbroker.com<mailto:Alex.Samad at yieldbroker.com>> wrote:
Do we know when this started to happen ?  around 5am our time (AEST) ?


A

From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net<mailto:ausnog-bounces at lists.ausnog.net>] On Behalf Of Tristram Cheer
Sent: Thursday, 3 April 2014 11:33 AM

To: ausnog at lists.ausnog.net<mailto:ausnog at lists.ausnog.net>
Subject: Re: [AusNOG] BGPMon/Thailand AS4761 Hijacking


Just got this response from their NOC contact:

“
Dear Sir,

Today we have trouble with our network and still investigate.

Thank's
xxxxxxxx
TOC IP Surveillance
“


--

Tristram Cheer
Network Architect - Most problems are the result of previous solutions...

<image001.jpg>

09 438 5472 Ext 803 |022 412 1985<tel:022%20412%201985> | PO Box 5083, Whangarei, 0140
tristram.cheer at ubergroup.co.nz<mailto:tristram.cheer at ubergroup.co.nz> |www.ubergroup.co.nz<http://www.uber.co.nz/>

<image005.png><http://ubergroup.co.nz/fb>  <image007.png><https://twitter.com/#!/ubergroupltd>
From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Michael Gehrmann
Sent: Thursday, 3 April 2014 12:21 p.m.
To: ausnog at lists.ausnog.net<mailto:ausnog at lists.ausnog.net>
Subject: Re: [AusNOG] BGPMon/Thailand AS4761 Hijacking

We got alerts for several /24’s out of our larger blocks.

Michael Gehrmann
Hosting Support Specialist – Networks
Macquarie Telecom
________________________________




From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Tristram Cheer
Sent: Thursday, 3 April 2014 6:08 AM
To: ausnog at lists.ausnog.net<mailto:ausnog at lists.ausnog.net>
Subject: [AusNOG] BGPMon/Thailand AS4761 Hijacking

Hi All,

Is anyone else getting alerts that AS4761 is hijacking IP ranges? I’ve just got alerting from BGPMon that all of our ASN’s announced prefix’s are being announced by AS4761. So far it’s only showing up at a peer in Thailand.



Cheers

--

Tristram Cheer
Network Architect - Most problems are the result of previous solutions...

<image001.jpg>

09 438 5472 Ext 803 |022 412 1985<tel:022%20412%201985> | PO Box 5083, Whangarei, 0140
tristram.cheer at ubergroup.co.nz<mailto:tristram.cheer at ubergroup.co.nz> |www.ubergroup.co.nz<http://www.uber.co.nz/>

<image008.png><http://ubergroup.co.nz/fb>  <image009.png><https://twitter.com/#!/ubergroupltd>

_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net<mailto:AusNOG at lists.ausnog.net>
http://lists.ausnog.net/mailman/listinfo/ausnog


_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net<mailto:AusNOG at lists.ausnog.net>
http://lists.ausnog.net/mailman/listinfo/ausnog

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140403/d152bb53/attachment.html>