[lacnog] Fwd: hijacking of 128.255.192.0/22

[Hernan Moguilevsky]

Yo diria que en primer lugar es error de AS263971.
Luego de HE, a quien habría que acercarle MANRS.

https://www.manrs.org/

Saludos.

HM

2018-03-21 11:06 GMT-03:00 Luis Balbinot <luis en luisbalbinot.com>:

> Erro da HE em primeiro lugar.
>
> On Wed, 21 Mar 2018 at 10:07 Hernan Moguilevsky <noc.hernan en gmail.com>
> wrote:
>
>> Al parecer no han hecho los ROA.
>> Sería una buena oportunidad para que lo hagan...
>> Saludos.
>>
>> HM
>>
>> 2018-03-21 7:57 GMT-03:00 Uesley Correa <uesleycorrea en gmail.com>:
>>
>>> Opa!
>>>
>>> Eu ia fazer isso agora, mas valeu Rogério!
>>>
>>> Att,
>>>
>>> Uesley Corrêa - Analista de Telecomunicações
>>> Instrutor Network Education
>>> CEO Telecom Conectividade
>>>
>>> 2018-03-20 17:10 GMT-03:00 Alejandro Acosta <alejandroacostaalamo en gmail.
>>> com>:
>>>
>>>> Hola Sergio,
>>>>
>>>>   Muchas gracias por tu pronta y excelente respuesta.
>>>>
>>>>
>>>> Saludos,
>>>>
>>>>
>>>> Alejandro,
>>>>
>>>>
>>>>
>>>> El 20/3/18 a las 4:38 p. m., Sergio Rojas. . . escribió:
>>>>
>>>> Hola Alejandro,
>>>>
>>>> Es un típico error de big finger, o secuestro accidental. Según el
>>>> whois de LACNIC:
>>>>
>>>> http://lacnic.net/cgi-bin/lacnic/whois?lg=EN&stkey=22200603-2285528621
>>>>
>>>> El bloque IPv4 asignado a esta organización es el 138.255.192.0/22 y
>>>> no el 128.255.192.0/22.
>>>>
>>>> No estoy suscripto a la lista de NANOG pero si puedes/quieres
>>>> responderle que en el whois mostrato arriba encontrará información de
>>>> contacto. O en todo caso esta es la web de la organización que recibió el
>>>> ASN http://www.falemais.net.br/contato/
>>>>
>>>> Otra alternativa es que contacte con el CERT de Brasil y enseguida
>>>> canalizarán el asunto: https://www.cert.br/about/
>>>>
>>>> Saludos!
>>>>
>>>> Sergio. . .
>>>>
>>>> 2018-03-20 16:21 GMT-03:00 Alejandro Acosta <
>>>> alejandroacostaalamo en gmail.com>:
>>>>
>>>>> FYI
>>>>>
>>>>>
>>>>> -------- Mensaje reenviado --------
>>>>> Asunto: hijacking of 128.255.192.0/22
>>>>> Fecha: Tue, 20 Mar 2018 12:35:53 -0500 (CDT)
>>>>> De: Jay Ford <jnford en uiowa.net> <jnford en uiowa.net>
>>>>> Responder a: Jay Ford <jnford en headset.its.uiowa.edu>
>>>>> <jnford en headset.its.uiowa.edu>
>>>>> Para: nanog en nanog.org
>>>>>
>>>>> Something apparently in Brazil is hijacking 128.255.192.0/22, part of 128.255.0.0/16 which is held by the University of Iowa.  AS 263971 is
>>>>> announcing 128.255.192.0/22 which Hurricane Electric is accepting &
>>>>> propagating.  None of that has any authorization.
>>>>>
>>>>> I can't find any decent contact information for the originating entity, so I
>>>>> have reported it to abuse en he.net, but it'd be fabulous if some HE folks
>>>>> listening here could whack the hijacking faster than the abuse channels will
>>>>> get to it.  Also useful would be some functional contact for AS263971.
>>>>>
>>>>> Any help will be appreciated.
>>>>>
>>>>> ________________________________________________________________________
>>>>> Jay Ford, Network Engineering Group, Information Technology Services
>>>>> University of Iowa, Iowa City, IA 52242
>>>>> email: jay-ford en uiowa.edu, phone: 319-335-5555
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> LACNOG mailing list
>>>>> LACNOG en lacnic.net
>>>>> https://mail.lacnic.net/mailman/listinfo/lacnog
>>>>> Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog
>>>>>
>>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> LACNOG mailing listLACNOG en lacnic.nethttps://mail.lacnic.net/mailman/listinfo/lacnog
>>>> Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> LACNOG mailing list
>>>> LACNOG en lacnic.net
>>>> https://mail.lacnic.net/mailman/listinfo/lacnog
>>>> Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog
>>>>
>>>>
>>>
>>> _______________________________________________
>>> LACNOG mailing list
>>> LACNOG en lacnic.net
>>> https://mail.lacnic.net/mailman/listinfo/lacnog
>>> Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog
>>>
>>>
>> _______________________________________________
>> LACNOG mailing list
>> LACNOG en lacnic.net
>> https://mail.lacnic.net/mailman/listinfo/lacnog
>> Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog
>>
>
> _______________________________________________
> LACNOG mailing list
> LACNOG en lacnic.net
> https://mail.lacnic.net/mailman/listinfo/lacnog
> Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog
>
>
------------ próxima parte ------------
Se ha borrado un adjunto en formato HTML...
URL: <https://mail.lacnic.net/pipermail/lacnog/attachments/20180321/1b0de314/attachment-0001.html>