[AusNOG] Hijacked Prefix

[frankaue1]

Sent from my Samsung Galaxy smartphone.


-------- Original message --------
From: Skeeve Stevens <skeeve+ausnog at theispguy.com> 
Date:13/02/2015  8:38 PM  (GMT+10:00) 
To: Nathan Brookfield <Nathan.Brookfield at simtronic.com.au> 
Cc: ausnog at lists.ausnog.net 
Subject: Re: [AusNOG] Hijacked Prefix 

There is NO excuse that any provider would have a valid reason to blackhole someone ranges.

I actually think this extends to the point of illegal activity.  Not just denying the use of the range, but intercepting traffic and potentially abusing that traffic.

I had this happen years ago, and got the police involved.  They weren't a lot of use back then, but they generally are these days.  I would shame TPG into doing the right thing then they are actively facilitating their customer commit an offence.


...Skeeve

--
Skeeve Stevens - The ISP Guy
Email: skeeve at theispguy.com ; Twitter: @TheISPGuy
Blog: TheISPGuy.com ; Facebook: TheISPGuy
Linkedin: /in/skeeve ; Expert360: Profile

On Fri, Feb 13, 2015 at 12:38 PM, Nathan Brookfield <Nathan.Brookfield at simtronic.com.au> wrote:
Daniel,

 

There may be a handful of reasons that this is occurring, such as your client owing the old provider money etc which is likely the case.  This is a legal issue between the IP Address owner and TCR Holdings, you should leave it up to them.

 

Kindest Regards,

Nathan Brookfield (VK2NAB)

 

From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of daniel at glovine.com.au
Sent: Friday, 13 February 2015 12:34 PM
To: ausnog at lists.ausnog.net
Subject: [AusNOG] Hijacked Prefix

 

Hi Guys

 

I need a bit of assistance here,

 

One of our customers has a prefix 203.55.215.0/24 which is a /24 of 203.55.214.0/23,

 

TCR Holdings / Metwide are advertising this prefix without permission and thus far all attempts to contact them and have this removed are ending at failure,

 

The owner of these prefixes has even been to the extent of contacting their upstream provider TPG without success

 

I was wondering if anybody else has ever had any issues like this, and might be able to point me in the right direction for the next step,

 

The customer has already updated this /24 prefix description stating that its been hijacked so it appears all over the address space

 

Appreciate any help on or off-list

 

Daniel


_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20150214/cdb9d091/attachment-0001.html>