<div><div dir="auto">Erro da HE em primeiro lugar. </div><br><div class="gmail_quote"><div>On Wed, 21 Mar 2018 at 10:07 Hernan Moguilevsky <<a href="mailto:noc.hernan@gmail.com">noc.hernan@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div><div>Al parecer no han hecho los ROA.<br></div>Sería una buena oportunidad para que lo hagan...<br></div>Saludos.<br><div class="gmail_extra"></div></div><div><div class="gmail_extra"><br clear="all"><div><div class="m_-3490719394688901628gmail_signature" data-smartmail="gmail_signature"><div>HM<br></div></div></div></div></div><div><div class="gmail_extra">
<br><div class="gmail_quote">2018-03-21 7:57 GMT-03:00 Uesley Correa <span><<a href="mailto:uesleycorrea@gmail.com" target="_blank">uesleycorrea@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div>Opa!<div><br></div><div>Eu ia fazer isso agora, mas valeu Rogério!</div><div><br></div><div>Att,</div></div><div class="gmail_extra"><br clear="all"><div><div class="m_-3490719394688901628m_-8778600149293897209gmail_signature" data-smartmail="gmail_signature"><div><div><div><div><div><div><div><div>Uesley Corrêa - Analista de Telecomunicações<br></div>Instrutor Network Education<br></div></div><div>CEO Telecom Conectividade</div></div></div></div></div></div></div></div><div><div class="m_-3490719394688901628h5">
<br><div class="gmail_quote">2018-03-20 17:10 GMT-03:00 Alejandro Acosta <span><<a href="mailto:alejandroacostaalamo@gmail.com" target="_blank">alejandroacostaalamo@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
  
    
  
  <div text="#000000" bgcolor="#FFFFFF">
    <p>Hola Sergio,</p>
    <p>  Muchas gracias por tu pronta y excelente respuesta.</p>
    <p><br>
    </p>
    <p>Saludos,</p>
    <p><br>
    </p>
    <p>Alejandro,</p>
    <p><br>
    </p>
    <br>
    <div class="m_-3490719394688901628m_-8778600149293897209m_-7496203260472260853moz-cite-prefix">El 20/3/18 a las 4:38 p. m., Sergio
      Rojas. . . escribió:<br>
    </div><div><div class="m_-3490719394688901628m_-8778600149293897209h5">
    <blockquote type="cite">
      <div>Hola Alejandro,
        <div><br>
        </div>
        <div>Es un típico error de big finger, o secuestro accidental.
          Según el whois de LACNIC:</div>
        <div><br>
        </div>
        <div><a href="http://lacnic.net/cgi-bin/lacnic/whois?lg=EN&stkey=22200603-2285528621" target="_blank">http://lacnic.net/cgi-bin/lacnic/whois?lg=EN&stkey=22200603-2285528621</a></div>
        <div><br>
        </div>
        <div>El bloque IPv4 asignado a esta organización es el <a href="http://138.255.192.0/22" target="_blank">138.255.192.0/22</a>
          y no el <a href="http://128.255.192.0/22" target="_blank">128.255.192.0/22</a>.</div>
        <div><br>
        </div>
        <div>No estoy suscripto a la lista de NANOG pero si
          puedes/quieres responderle que en el whois mostrato arriba
          encontrará información de contacto. O en todo caso esta es la
          web de la organización que recibió el ASN <a href="http://www.falemais.net.br/contato/" target="_blank">http://www.falemais.net.br/contato/</a></div>
        <div><br>
        </div>
        <div>Otra alternativa es que contacte con el CERT de Brasil y
          enseguida canalizarán el asunto: <a href="https://www.cert.br/about/" target="_blank">https://www.cert.br/about/</a></div>
        <div><br>
        </div>
        <div>Saludos!</div>
        <div><br>
        </div>
        <div>Sergio. . .</div>
      </div>
      <div class="gmail_extra"><br>
        <div class="gmail_quote">2018-03-20 16:21 GMT-03:00 Alejandro
          Acosta <span><<a href="mailto:alejandroacostaalamo@gmail.com" target="_blank">alejandroacostaalamo@gmail.com</a>></span>:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
            <div text="#000000" bgcolor="#FFFFFF">
              <p>FYI<br>
              </p>
              <div class="m_-3490719394688901628m_-8778600149293897209m_-7496203260472260853m_-7837173889143859627moz-forward-container"><br>
                <br>
                -------- Mensaje reenviado --------
                <table class="m_-3490719394688901628m_-8778600149293897209m_-7496203260472260853m_-7837173889143859627moz-email-headers-table" cellspacing="0" cellpadding="0" border="0">
                  <tbody>
                    <tr>
                      <th valign="BASELINE" nowrap align="RIGHT">Asunto: </th>
                      <td>hijacking of <a href="http://128.255.192.0/22" target="_blank">128.255.192.0/22</a></td>
                    </tr>
                    <tr>
                      <th valign="BASELINE" nowrap align="RIGHT">Fecha: </th>
                      <td>Tue, 20 Mar 2018 12:35:53 -0500 (CDT)</td>
                    </tr>
                    <tr>
                      <th valign="BASELINE" nowrap align="RIGHT">De: </th>
                      <td>Jay Ford <a class="m_-3490719394688901628m_-8778600149293897209m_-7496203260472260853m_-7837173889143859627moz-txt-link-rfc2396E" href="mailto:jnford@uiowa.net" target="_blank"><jnford@uiowa.net></a></td>
                    </tr>
                    <tr>
                      <th valign="BASELINE" nowrap align="RIGHT">Responder a: </th>
                      <td>Jay Ford <a class="m_-3490719394688901628m_-8778600149293897209m_-7496203260472260853m_-7837173889143859627moz-txt-link-rfc2396E" href="mailto:jnford@headset.its.uiowa.edu" target="_blank"><jnford@headset.its.uiowa.edu></a></td>
                    </tr>
                    <tr>
                      <th valign="BASELINE" nowrap align="RIGHT">Para: </th>
                      <td><a class="m_-3490719394688901628m_-8778600149293897209m_-7496203260472260853m_-7837173889143859627moz-txt-link-abbreviated" href="mailto:nanog@nanog.org" target="_blank">nanog@nanog.org</a></td>
                    </tr>
                  </tbody>
                </table>
                <br>
                <br>
                <pre>Something apparently in Brazil is hijacking <a href="http://128.255.192.0/22" target="_blank">128.255.192.0/22</a>, part of 
<a href="http://128.255.0.0/16" target="_blank">128.255.0.0/16</a> which is held by the University of Iowa.  AS 263971 is 
announcing <a href="http://128.255.192.0/22" target="_blank">128.255.192.0/22</a> which Hurricane Electric is accepting & 
propagating.  None of that has any authorization.

I can't find any decent contact information for the originating entity, so I 
have reported it to <a class="m_-3490719394688901628m_-8778600149293897209m_-7496203260472260853m_-7837173889143859627moz-txt-link-abbreviated" href="mailto:abuse@he.net" target="_blank">abuse@he.net</a>, but it'd be fabulous if some HE folks 
listening here could whack the hijacking faster than the abuse channels will 
get to it.  Also useful would be some functional contact for AS263971.

Any help will be appreciated.

________________________________________________________________________
Jay Ford, Network Engineering Group, Information Technology Services
University of Iowa, Iowa City, IA 52242
email: <a class="m_-3490719394688901628m_-8778600149293897209m_-7496203260472260853m_-7837173889143859627moz-txt-link-abbreviated" href="mailto:jay-ford@uiowa.edu" target="_blank">jay-ford@uiowa.edu</a>, phone: 319-335-5555
</pre>
              </div>
            </div>
            <br>
            _______________________________________________<br>
            LACNOG mailing list<br>
            <a href="mailto:LACNOG@lacnic.net" target="_blank">LACNOG@lacnic.net</a><br>
            <a href="https://mail.lacnic.net/mailman/listinfo/lacnog" rel="noreferrer" target="_blank">https://mail.lacnic.net/mailman/listinfo/lacnog</a><br>
            Cancelar suscripcion: <a href="https://mail.lacnic.net/mailman/options/lacnog" rel="noreferrer" target="_blank">https://mail.lacnic.net/mailman/options/lacnog</a><br>
            <br>
          </blockquote>
        </div>
        <br>
      </div>
      <br>
      <fieldset class="m_-3490719394688901628m_-8778600149293897209m_-7496203260472260853mimeAttachmentHeader"></fieldset>
      <br>
      <pre>_______________________________________________
LACNOG mailing list
<a class="m_-3490719394688901628m_-8778600149293897209m_-7496203260472260853moz-txt-link-abbreviated" href="mailto:LACNOG@lacnic.net" target="_blank">LACNOG@lacnic.net</a>
<a class="m_-3490719394688901628m_-8778600149293897209m_-7496203260472260853moz-txt-link-freetext" href="https://mail.lacnic.net/mailman/listinfo/lacnog" target="_blank">https://mail.lacnic.net/mailman/listinfo/lacnog</a>
Cancelar suscripcion: <a class="m_-3490719394688901628m_-8778600149293897209m_-7496203260472260853moz-txt-link-freetext" href="https://mail.lacnic.net/mailman/options/lacnog" target="_blank">https://mail.lacnic.net/mailman/options/lacnog</a>
</pre>
    </blockquote>
    <br>
  </div></div></div>

<br>_______________________________________________<br>
LACNOG mailing list<br>
<a href="mailto:LACNOG@lacnic.net" target="_blank">LACNOG@lacnic.net</a><br>
<a href="https://mail.lacnic.net/mailman/listinfo/lacnog" rel="noreferrer" target="_blank">https://mail.lacnic.net/mailman/listinfo/lacnog</a><br>
Cancelar suscripcion: <a href="https://mail.lacnic.net/mailman/options/lacnog" rel="noreferrer" target="_blank">https://mail.lacnic.net/mailman/options/lacnog</a><br>
<br></blockquote></div><br></div></div></div>
<br>_______________________________________________<br>
LACNOG mailing list<br>
<a href="mailto:LACNOG@lacnic.net" target="_blank">LACNOG@lacnic.net</a><br>
<a href="https://mail.lacnic.net/mailman/listinfo/lacnog" rel="noreferrer" target="_blank">https://mail.lacnic.net/mailman/listinfo/lacnog</a><br>
Cancelar suscripcion: <a href="https://mail.lacnic.net/mailman/options/lacnog" rel="noreferrer" target="_blank">https://mail.lacnic.net/mailman/options/lacnog</a><br>
<br></blockquote></div><br></div></div>
_______________________________________________<br>
LACNOG mailing list<br>
<a href="mailto:LACNOG@lacnic.net" target="_blank">LACNOG@lacnic.net</a><br>
<a href="https://mail.lacnic.net/mailman/listinfo/lacnog" rel="noreferrer" target="_blank">https://mail.lacnic.net/mailman/listinfo/lacnog</a><br>
Cancelar suscripcion: <a href="https://mail.lacnic.net/mailman/options/lacnog" rel="noreferrer" target="_blank">https://mail.lacnic.net/mailman/options/lacnog</a><br>
</blockquote></div></div>