[lacnog] Fwd: hijacking of 128.255.192.0/22

Luis Balbinot luis en luisbalbinot.com
Mie Mar 21 11:06:51 BRT 2018


Erro da HE em primeiro lugar.

On Wed, 21 Mar 2018 at 10:07 Hernan Moguilevsky <noc.hernan en gmail.com>
wrote:

> Al parecer no han hecho los ROA.
> Sería una buena oportunidad para que lo hagan...
> Saludos.
>
> HM
>
> 2018-03-21 7:57 GMT-03:00 Uesley Correa <uesleycorrea en gmail.com>:
>
>> Opa!
>>
>> Eu ia fazer isso agora, mas valeu Rogério!
>>
>> Att,
>>
>> Uesley Corrêa - Analista de Telecomunicações
>> Instrutor Network Education
>> CEO Telecom Conectividade
>>
>> 2018-03-20 17:10 GMT-03:00 Alejandro Acosta <
>> alejandroacostaalamo en gmail.com>:
>>
>>> Hola Sergio,
>>>
>>>   Muchas gracias por tu pronta y excelente respuesta.
>>>
>>>
>>> Saludos,
>>>
>>>
>>> Alejandro,
>>>
>>>
>>>
>>> El 20/3/18 a las 4:38 p. m., Sergio Rojas. . . escribió:
>>>
>>> Hola Alejandro,
>>>
>>> Es un típico error de big finger, o secuestro accidental. Según el whois
>>> de LACNIC:
>>>
>>> http://lacnic.net/cgi-bin/lacnic/whois?lg=EN&stkey=22200603-2285528621
>>>
>>> El bloque IPv4 asignado a esta organización es el 138.255.192.0/22 y no
>>> el 128.255.192.0/22.
>>>
>>> No estoy suscripto a la lista de NANOG pero si puedes/quieres
>>> responderle que en el whois mostrato arriba encontrará información de
>>> contacto. O en todo caso esta es la web de la organización que recibió el
>>> ASN http://www.falemais.net.br/contato/
>>>
>>> Otra alternativa es que contacte con el CERT de Brasil y enseguida
>>> canalizarán el asunto: https://www.cert.br/about/
>>>
>>> Saludos!
>>>
>>> Sergio. . .
>>>
>>> 2018-03-20 16:21 GMT-03:00 Alejandro Acosta <
>>> alejandroacostaalamo en gmail.com>:
>>>
>>>> FYI
>>>>
>>>>
>>>> -------- Mensaje reenviado --------
>>>> Asunto: hijacking of 128.255.192.0/22
>>>> Fecha: Tue, 20 Mar 2018 12:35:53 -0500 (CDT)
>>>> De: Jay Ford <jnford en uiowa.net> <jnford en uiowa.net>
>>>> Responder a: Jay Ford <jnford en headset.its.uiowa.edu>
>>>> <jnford en headset.its.uiowa.edu>
>>>> Para: nanog en nanog.org
>>>>
>>>> Something apparently in Brazil is hijacking 128.255.192.0/22, part of 128.255.0.0/16 which is held by the University of Iowa.  AS 263971 is
>>>> announcing 128.255.192.0/22 which Hurricane Electric is accepting &
>>>> propagating.  None of that has any authorization.
>>>>
>>>> I can't find any decent contact information for the originating entity, so I
>>>> have reported it to abuse en he.net, but it'd be fabulous if some HE folks
>>>> listening here could whack the hijacking faster than the abuse channels will
>>>> get to it.  Also useful would be some functional contact for AS263971.
>>>>
>>>> Any help will be appreciated.
>>>>
>>>> ________________________________________________________________________
>>>> Jay Ford, Network Engineering Group, Information Technology Services
>>>> University of Iowa, Iowa City, IA 52242
>>>> email: jay-ford en uiowa.edu, phone: 319-335-5555
>>>>
>>>>
>>>> _______________________________________________
>>>> LACNOG mailing list
>>>> LACNOG en lacnic.net
>>>> https://mail.lacnic.net/mailman/listinfo/lacnog
>>>> Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog
>>>>
>>>>
>>>
>>>
>>> _______________________________________________
>>> LACNOG mailing listLACNOG en lacnic.nethttps://mail.lacnic.net/mailman/listinfo/lacnog
>>> Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog
>>>
>>>
>>>
>>> _______________________________________________
>>> LACNOG mailing list
>>> LACNOG en lacnic.net
>>> https://mail.lacnic.net/mailman/listinfo/lacnog
>>> Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog
>>>
>>>
>>
>> _______________________________________________
>> LACNOG mailing list
>> LACNOG en lacnic.net
>> https://mail.lacnic.net/mailman/listinfo/lacnog
>> Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog
>>
>>
> _______________________________________________
> LACNOG mailing list
> LACNOG en lacnic.net
> https://mail.lacnic.net/mailman/listinfo/lacnog
> Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog
>
------------ próxima parte ------------
Se ha borrado un adjunto en formato HTML...
URL: <https://mail.lacnic.net/pipermail/lacnog/attachments/20180321/11068692/attachment.html>


Más información sobre la lista de distribución LACNOG