[AusNOG] Hijacked Prefix

[Skeeve Stevens]

There is NO excuse that any provider would have a valid reason to blackhole
someone ranges.

I actually think this extends to the point of illegal activity.  Not just
denying the use of the range, but intercepting traffic and potentially
abusing that traffic.

I had this happen years ago, and got the police involved.  They weren't a
lot of use back then, but they generally are these days.  I would shame TPG
into doing the right thing then they are actively facilitating their
customer commit an offence.


...Skeeve


--

Skeeve Stevens - The ISP Guy

Email: skeeve at theispguy.com ; Twitter: @TheISPGuy
<https://twitter.com/TheISPGuy>
Blog: TheISPGuy.com <http://theispguy.com/> ; Facebook: TheISPGuy
<https://www.facebook.com/theispguy>

Linkedin: /in/skeeve <http://www.linkedin.com/in/skeeve> ; Expert360:
Profile <https://expert360.com/profile/d54a9>


On Fri, Feb 13, 2015 at 12:38 PM, Nathan Brookfield <
Nathan.Brookfield at simtronic.com.au> wrote:

>  Daniel,
>
>
>
> There may be a handful of reasons that this is occurring, such as your
> client owing the old provider money etc which is likely the case.  This is
> a legal issue between the IP Address owner and TCR Holdings, you should
> leave it up to them.
>
>
>
> Kindest Regards,
>
> Nathan Brookfield (VK2NAB)
>
>
>
> *From:* AusNOG [mailto:ausnog-bounces at lists.ausnog.net] *On Behalf Of *
> daniel at glovine.com.au
> *Sent:* Friday, 13 February 2015 12:34 PM
> *To:* ausnog at lists.ausnog.net
> *Subject:* [AusNOG] Hijacked Prefix
>
>
>
> Hi Guys
>
>
>
> I need a bit of assistance here,
>
>
>
> One of our customers has a prefix 203.55.215.0/24 which is a /24 of
> 203.55.214.0/23,
>
>
>
> TCR Holdings / Metwide are advertising this prefix without permission and
> thus far all attempts to contact them and have this removed are ending at
> failure,
>
>
>
> The owner of these prefixes has even been to the extent of contacting
> their upstream provider TPG without success
>
>
>
> I was wondering if anybody else has ever had any issues like this, and
> might be able to point me in the right direction for the next step,
>
>
>
> The customer has already updated this /24 prefix description stating that
> its been hijacked so it appears all over the address space
>
>
>
> Appreciate any help on or off-list
>
>
>
> Daniel
>
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20150213/01b75008/attachment-0001.html>