[lacnog] Fwd: hijacking of 128.255.192.0/22

Hernan Moguilevsky noc.hernan en gmail.com
Mie Mar 21 10:06:59 BRT 2018


Al parecer no han hecho los ROA.
Sería una buena oportunidad para que lo hagan...
Saludos.

HM

2018-03-21 7:57 GMT-03:00 Uesley Correa <uesleycorrea en gmail.com>:

> Opa!
>
> Eu ia fazer isso agora, mas valeu Rogério!
>
> Att,
>
> Uesley Corrêa - Analista de Telecomunicações
> Instrutor Network Education
> CEO Telecom Conectividade
>
> 2018-03-20 17:10 GMT-03:00 Alejandro Acosta <alejandroacostaalamo en gmail.
> com>:
>
>> Hola Sergio,
>>
>>   Muchas gracias por tu pronta y excelente respuesta.
>>
>>
>> Saludos,
>>
>>
>> Alejandro,
>>
>>
>>
>> El 20/3/18 a las 4:38 p. m., Sergio Rojas. . . escribió:
>>
>> Hola Alejandro,
>>
>> Es un típico error de big finger, o secuestro accidental. Según el whois
>> de LACNIC:
>>
>> http://lacnic.net/cgi-bin/lacnic/whois?lg=EN&stkey=22200603-2285528621
>>
>> El bloque IPv4 asignado a esta organización es el 138.255.192.0/22 y no
>> el 128.255.192.0/22.
>>
>> No estoy suscripto a la lista de NANOG pero si puedes/quieres responderle
>> que en el whois mostrato arriba encontrará información de contacto. O en
>> todo caso esta es la web de la organización que recibió el ASN
>> http://www.falemais.net.br/contato/
>>
>> Otra alternativa es que contacte con el CERT de Brasil y enseguida
>> canalizarán el asunto: https://www.cert.br/about/
>>
>> Saludos!
>>
>> Sergio. . .
>>
>> 2018-03-20 16:21 GMT-03:00 Alejandro Acosta <
>> alejandroacostaalamo en gmail.com>:
>>
>>> FYI
>>>
>>>
>>> -------- Mensaje reenviado --------
>>> Asunto: hijacking of 128.255.192.0/22
>>> Fecha: Tue, 20 Mar 2018 12:35:53 -0500 (CDT)
>>> De: Jay Ford <jnford en uiowa.net> <jnford en uiowa.net>
>>> Responder a: Jay Ford <jnford en headset.its.uiowa.edu>
>>> <jnford en headset.its.uiowa.edu>
>>> Para: nanog en nanog.org
>>>
>>> Something apparently in Brazil is hijacking 128.255.192.0/22, part of 128.255.0.0/16 which is held by the University of Iowa.  AS 263971 is
>>> announcing 128.255.192.0/22 which Hurricane Electric is accepting &
>>> propagating.  None of that has any authorization.
>>>
>>> I can't find any decent contact information for the originating entity, so I
>>> have reported it to abuse en he.net, but it'd be fabulous if some HE folks
>>> listening here could whack the hijacking faster than the abuse channels will
>>> get to it.  Also useful would be some functional contact for AS263971.
>>>
>>> Any help will be appreciated.
>>>
>>> ________________________________________________________________________
>>> Jay Ford, Network Engineering Group, Information Technology Services
>>> University of Iowa, Iowa City, IA 52242
>>> email: jay-ford en uiowa.edu, phone: 319-335-5555
>>>
>>>
>>> _______________________________________________
>>> LACNOG mailing list
>>> LACNOG en lacnic.net
>>> https://mail.lacnic.net/mailman/listinfo/lacnog
>>> Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog
>>>
>>>
>>
>>
>> _______________________________________________
>> LACNOG mailing listLACNOG en lacnic.nethttps://mail.lacnic.net/mailman/listinfo/lacnog
>> Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog
>>
>>
>>
>> _______________________________________________
>> LACNOG mailing list
>> LACNOG en lacnic.net
>> https://mail.lacnic.net/mailman/listinfo/lacnog
>> Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog
>>
>>
>
> _______________________________________________
> LACNOG mailing list
> LACNOG en lacnic.net
> https://mail.lacnic.net/mailman/listinfo/lacnog
> Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog
>
>
------------ próxima parte ------------
Se ha borrado un adjunto en formato HTML...
URL: <https://mail.lacnic.net/pipermail/lacnog/attachments/20180321/9f19ad29/attachment-0001.html>


Más información sobre la lista de distribución LACNOG