nanog mailing list archives
Re: AS11296 -- Hijacked?
From: khatfield () socllc net
Date: Tue, 28 Sep 2010 16:19:21 -0400 (EDT)
Now that's some paranoia ;) -----Original Message----- From: "Heath Jones" <hj1980 () gmail com> Sent: Tuesday, September 28, 2010 4:05pm To: nanog () nanog org Subject: Re: AS11296 -- Hijacked? He blocked google mail? WTF? ---------- Forwarded message ---------- From: Mail Delivery Subsystem <mailer-daemon () googlemail com> Date: 28 September 2010 20:49 Subject: Delivery Status Notification (Failure) To: hj1980 () gmail com Delivery to the following recipient failed permanently: rfg () tristatelogic com Technical details of permanent failure: Google tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 550 550 5.7.1 <mail-qy0-f176.google.com[209.85.216.176]>: Client host rejected: Domain google.com BLACKLISTED - Use http://www.tristatelogic.com/contact.html (state 14). ----- Original message ----- MIME-Version: 1.0 Received: by 10.224.62.217 with SMTP id y25mr308053qah.193.1285703359508; Tue, 28 Sep 2010 12:49:19 -0700 (PDT) Received: by 10.229.226.204 with HTTP; Tue, 28 Sep 2010 12:49:12 -0700 (PDT) In-Reply-To: <63619.1285701703 () tristatelogic com> References: <63619.1285701703 () tristatelogic com> Date: Tue, 28 Sep 2010 20:49:12 +0100 Message-ID: <AANLkTi=qX7cX4F3Y_AZ803WdPmKMTC_hZZPsmdqS1v3r () mail gmail com> Subject: Re: AS11296 -- Hijacked? From: Heath Jones <hj1980 () gmail com> To: "Ronald F. Guilmette" <rfg () tristatelogic com> Cc: nanog () nanog org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Out of curiosity, what led you to this conclusion?
Evidence strongly suggests that AS11296 together with all of the IPv4 space it is currently announcing routes for, i.e.: have all been hijacked. I will be reporting this formally to ARIN today, via their helpful fraud reporting web form.
Current thread:
- AS11296 -- Hijacked? Ronald F. Guilmette (Sep 28)
- Re: AS11296 -- Hijacked? Heath Jones (Sep 28)
- <Possible follow-ups>
- Re: AS11296 -- Hijacked? Heath Jones (Sep 28)
- Re: AS11296 -- Hijacked? khatfield (Sep 28)
- Re: AS11296 -- Hijacked? Ronald F. Guilmette (Sep 29)
- Re: AS11296 -- Hijacked? jim deleskie (Sep 29)
- Re: AS11296 -- Hijacked? Rich Kulawiec (Sep 29)
- Re: AS11296 -- Hijacked? deleskie (Sep 29)
- Re: AS11296 -- Hijacked? Heath Jones (Sep 29)
- Re: AS11296 -- Hijacked? N. Yaakov Ziskind (Sep 29)
- Re: AS11296 -- Hijacked? Andrew Kirch (Sep 29)
- Re: AS11296 -- Hijacked? Scott Howard (Sep 29)
- Re: AS11296 -- Hijacked? William Herrin (Sep 29)
- Re: AS11296 -- Hijacked? jim deleskie (Sep 29)
- Re: AS11296 -- Hijacked? Heath Jones (Sep 29)