<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Arnaud,<div class=""><br class=""></div><div class="">You are mistaken on a number of points.</div><div class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On May 28, 2020, at 13:05 , Arnaud AMELINA <<a href="mailto:amelnaud@gmail.com" class="">amelnaud@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="auto" class=""><div dir="auto" style="font-family:sans-serif;font-size:12.8px" class="">Hi, all communities </div><div dir="auto" style="font-family:sans-serif;font-size:12.8px" class=""><br class=""></div><div dir="auto" style="font-family:sans-serif;font-size:12.8px" class=""><div dir="auto" class="">It was said that the hijacking of AS37353 was a configuration mistake, coupled with poor oversight in checking the right to use of the ASN by a certain IPDC customer. </div><div dir="auto" class=""><br class=""></div><div dir="auto" class="">It was also said that this would have been facilitated by old and stalled IRR objects from MacroLAN before the service contract ended in December 2019. </div><div dir="auto" class=""><br class=""></div><div dir="auto" class="">It was also stated that the BGP announcement was stopped and some actions taken to delete the stalled routing registry object from IRR. </div></div></div></div></blockquote><div><br class=""></div>Yes… The registry objects created by MacroLAN have been deleted.</div><div><br class=""></div><div><blockquote type="cite" class=""><div class=""><div dir="auto" class=""><div dir="auto" style="font-family:sans-serif;font-size:12.8px" class=""><div dir="auto" class="">Below are some data which gives some extra information and confirm previous claim that this incident was not accidental. </div></div></div></div></blockquote><div><br class=""></div>Below is some very redacted data which gives virtually no information. </div><div><br class=""></div><div><blockquote type="cite" class=""><div class=""><div dir="auto" class=""><div dir="auto" style="font-family:sans-serif;font-size:12.8px" class=""><div dir="auto" class="">NB: All data are collected from their source, Today, 28 May 2020, at 10:00 UTC. </div><div dir="auto" class=""><br class=""></div><div dir="auto" class="">IRRs created in March 2020 with AS37353 as Origin for <a href="http://156.241.3.0/24" style="text-decoration-line:none;color:rgb(66,133,244)" class="">156.241.3.0/24</a> by HGC </div><div dir="auto" class=""><br class=""></div><div dir="auto" class=""> $ whois -h <a href="http://whois.radb.net/" style="text-decoration-line:none;color:rgb(66,133,244)" class="">whois.radb.net</a> '<a href="http://156.241.3.0/24" style="text-decoration-line:none;color:rgb(66,133,244)" class="">156.241.3.0/24</a>' </div><div dir="auto" class=""><br class=""></div><div dir="auto" class="">route: <a href="http://156.241.3.0/24" style="text-decoration-line:none;color:rgb(66,133,244)" class="">156.241.3.0/24</a> descr: Proxy-registered route object origin: AS37353 notify: <a href="mailto:matthew.chan@hgc.com.hk" style="text-decoration-line:none;color:rgb(66,133,244)" class="">matthew.chan@hgc.com.hk</a> mnt-by: MAINT-HGC-INTL changed: <a href="mailto:matthew.chan@hgc.com.hk" style="text-decoration-line:none;color:rgb(66,133,244)" class="">matthew.chan@hgc.com.hk</a> 20200304 source: RADB </div><div dir="auto" class=""><br class=""></div><div dir="auto" class="">===== </div><div dir="auto" class="">route: <a href="http://156.241.3.0/24" style="text-decoration-line:none;color:rgb(66,133,244)" class="">156.241.3.0/24</a> </div><div dir="auto" class="">descr: Proxy-registered route object origin: AS37353 </div><div dir="auto" class="">remarks: This is a HGC customer route-object </div><div dir="auto" class="">remarks: which is being exported under this origin AS. </div><div dir="auto" class="">remarks: </div><div dir="auto" class="">remarks: This route object was created because no existing remarks: route object with the same origin was found. </div><div dir="auto" class="">remarks: </div><div dir="auto" class="">remarks: Please contact <a href="mailto:radb@hutchcity.com" style="text-decoration-line:none;color:rgb(66,133,244)" class="">radb@hutchcity.com</a> if you have any remarks: questions regarding this object. </div><div dir="auto" class="">notify: <a href="mailto:radb@hutchcity.com" style="text-decoration-line:none;color:rgb(66,133,244)" class="">radb@hutchcity.com</a> </div><div dir="auto" class="">mnt-by: MAINT-AS9304 </div><div dir="auto" class="">changed: <a href="mailto:radb@hutchcity.com" style="text-decoration-line:none;color:rgb(66,133,244)" class="">radb@hutchcity.com</a> 20200304 </div><div dir="auto" class="">source: NTTCOM </div><div dir="auto" class="">====</div></div></div></div></blockquote><div><br class=""></div>We haven changed anything, but here’s the full text of that whois command:</div><div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">owen (121) ~ % whois -h <a href="http://whois.radb.net" class="">whois.radb.net</a> 156.241.3.0/24 2020/05/28 16:58:50</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">route: 156.241.3.0/24</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">origin: AS138145</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">descr: Customer-AS45250</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">admin-c: MAINT-AS138145</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">tech-c: MAINT-AS138145</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">mnt-by: MAINT-AS138145</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">changed: <a href="mailto:admin@cloudix.online" class="">admin@cloudix.online</a> 20200512 #18:26:20Z</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">source: RADB</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392); min-height: 21px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">route: 156.241.3.0/24</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">origin: AS134190</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">descr: IPDC Solution PteLtd</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">mnt-by: MAINT-LARUS</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">changed: <a href="mailto:t.t.xu@laruscloudservice.net" class="">t.t.xu@laruscloudservice.net</a> 20200508 #10:43:19Z</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">source: RADB</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392); min-height: 21px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">route: 156.241.3.0/24</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">descr: Proxy-registered route object</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">origin: AS37353</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">notify: <a href="mailto:matthew.chan@hgc.com.hk" class="">matthew.chan@hgc.com.hk</a></span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">mnt-by: MAINT-HGC-INTL</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">changed: <a href="mailto:matthew.chan@hgc.com.hk" class="">matthew.chan@hgc.com.hk</a> 20200304</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">source: RADB</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392); min-height: 21px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">route: 156.241.3.0/24</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">descr: Proxy-registered route object</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">origin: AS134548</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">changed: <a href="mailto:radb@hgcbroadband.com" class="">radb@hgcbroadband.com</a> 20191003</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">source: RADB</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392); min-height: 21px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">route: 156.241.0.0/16</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">origin: AS37353</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">mnt-by: paulwollner</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">mnt-by: hk-larus-1-mnt</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">created: 2017-08-07T12:27:22Z</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">last-modified: 2018-09-04T18:54:09Z</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">source: RIPE-NONAUTH</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">remarks: ****************************</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">remarks: * THIS OBJECT IS MODIFIED</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">remarks: * Please note that all data that is generally regarded as personal</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">remarks: * data has been removed from this object.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">remarks: * To view the original object, please query the RIPE Database at:</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">remarks: * <a href="http://www.ripe.net/whois" class="">http://www.ripe.net/whois</a></span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">remarks: ****************************</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392); min-height: 21px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">route: 156.241.3.0/24</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">descr: Proxy-registered route object</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">origin: AS37353</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">remarks: This is a HGC customer route-object</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">remarks: which is being exported under this origin AS.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">remarks:</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">remarks: This route object was created because no existing</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">remarks: route object with the same origin was found.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">remarks:</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">remarks: Please contact <a href="mailto:radb@hutchcity.com" class="">radb@hutchcity.com</a> if you have any</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">remarks: questions regarding this object.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">notify: <a href="mailto:radb@hutchcity.com" class="">radb@hutchcity.com</a></span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">mnt-by: MAINT-AS9304</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">changed: <a href="mailto:radb@hutchcity.com" class="">radb@hutchcity.com</a> 20200304</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">source: NTTCOM</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392); min-height: 21px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">route: 156.241.3.0/24</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">descr: Proxy-registered route object</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">origin: AS134548</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">remarks: This is a HGC customer route-object</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">remarks: which is being exported under this origin AS.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">remarks:</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">remarks: This route object was created because no existing</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">remarks: route object with the same origin was found.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">remarks:</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">remarks: Please contact <a href="mailto:radb@hgcbroadband.com" class="">radb@hgcbroadband.com</a> if you have any</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">remarks: questions regarding this object.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">notify: <a href="mailto:radb@hgcbroadband.com" class="">radb@hgcbroadband.com</a></span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">mnt-by: MAINT-AS9304</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">changed: <a href="mailto:radb@hgcbroadband.com" class="">radb@hgcbroadband.com</a> 20191003</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">source: NTTCOM</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392); min-height: 21px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">mntner: MAINT-AS138145</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">descr: Advanced Information Co., Ltd.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">admin-c: ADVANCED-APNIC</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">tech-c: ADVANCED-APNIC</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">upd-to: <a href="mailto:noc@cloudix.online" class="">noc@cloudix.online</a></span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">mnt-nfy: <a href="mailto:noc@cloudix.online" class="">noc@cloudix.online</a></span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">auth: CRYPT-PW HIDDENCRYPTPW # </span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">notify: <a href="mailto:noc@cloudix.online" class="">noc@cloudix.online</a></span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">mnt-by: MAINT-AS138145</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">changed: <a href="mailto:admin@cloudix.online" class="">admin@cloudix.online</a> 20200511 #03:10:36Z</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">source: RADB</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">0.000u 0.001s 0:00.19 0.0% 0+0k 0+0io 0pf+0w</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">owen (122) ~ % 2020/05/28 16:58:53</span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div><div class="">Looks like there’s additional cruft left in some routing registries that we still haven’t removed. I’ve asked people to get on that.</div><div class=""><br class=""></div><div class="">However, just because it’s in RADB doesn’t mean it’s advertised. Nonetheless, we are actively working to get those errant entries cleaned up. Thank you for bringing them to our attention.</div><div class=""><br class=""></div><blockquote type="cite" class=""><div class=""><div dir="auto" class=""><div dir="auto" style="font-family:sans-serif;font-size:12.8px" class=""><div dir="auto" class=""><a href="https://www.radb.net/query?advanced_query=1&keywords=156.241.3.0/24&-T+option=&ip_option=&-i+option=" style="text-decoration-line:none;color:rgb(66,133,244)" class="">https://www.radb.net/query?advanced_query=1&keywords=156.241.3.0%2F24&-T+option=&ip_option=&-i+option=</a></div><div dir="auto" class=""><br class=""></div><div dir="auto" class="">These objects havent been deleted. </div><div dir="auto" class=""><br class=""></div><div dir="auto" class="">An in-depth check of the routing status of <a href="http://156.241.3.0/24" style="text-decoration-line:none;color:rgb(66,133,244)" class="">156.241.3.0/24</a> shows the followings: </div><div dir="auto" class=""><br class=""></div><div dir="auto" class="">Hurricane Electric BGP tool </div><div dir="auto" class=""><br class=""></div><div dir="auto" class=""><a href="https://bgp.he.net/net/156.241.3.0/24" style="text-decoration-line:none;color:rgb(66,133,244)" class="">https://bgp.he.net/net/156.241.3.0/24</a> </div><div dir="auto" class=""><br class=""></div><div dir="auto" class="">Origin AS Announcement Description AS37353 <a href="http://156.241.3.0/24" style="text-decoration-line:none;color:rgb(66,133,244)" class="">156.241.3.0/24</a> IRR Valid HONGKONG LINK INFINITY TECHNOLOGY LIMITED </div></div></div></div></blockquote><div><br class=""></div>The HE BGP tool doesn’t mean what you think it means.</div><div><br class=""></div><div>It retains routes which have been withdrawn for a very long time after they have been withdrawn, especially if they are not superseded by other announcements.</div><div><br class=""></div><div>OTOH, the HE BGP Looking glass shows:</div><div><img apple-inline="yes" id="3901EA75-DF2F-46A9-BAF8-767FAA10BBE8" src="cid:DC85034A-4C3E-44BC-989D-A5AE6B1100FF@delong.com" class=""><br class=""><blockquote type="cite" class=""><div class=""><div dir="auto" class=""><div dir="auto" style="font-family:sans-serif;font-size:12.8px" class=""><div dir="auto" class=""><br class=""></div><div dir="auto" class=""><br class=""></div><div dir="auto" class="">RIPESTAT </div><div dir="auto" class=""><br class=""></div><div dir="auto" class=""><a href="https://stat.ripe.net/widget/looking-glass#w.resource=156.241.3.0/24" style="text-decoration-line:none;color:rgb(66,133,244)" class="">https://stat.ripe.net/widget/looking-glass#w.resource=156.241.3.0%2F24</a></div><div dir="auto" class=""><br class=""></div><div dir="auto" class="">AS37353 is seen as the origin by 1 peer.</div><div dir="auto" class=""><br class=""></div><div dir="auto" class="">103.200.115.1 ►103.200.115.1 is announcing route AS64271 AS9304 AS4809 AS4809 AS4809 AS134190 AS37353. </div></div></div></div></blockquote><div><br class=""></div>Well… That’s historic data. If you view it in BGPLAY, you will see that the last transaction for this prefix was on May 7 (Mark’s initial on-list complaint came May 8).</div><div><br class=""><blockquote type="cite" class=""><div class=""><div dir="auto" class=""><div dir="auto" style="font-family:sans-serif;font-size:12.8px" class=""><div dir="auto" class="">Even with the limited view, the prefix is still being originated and routed and the route objects still exist. </div></div></div></div></blockquote><div><br class=""></div>No, you are looking at data from May 7. Current data as above (HE looking glass).</div><div><br class=""></div><div>From Route-views and several other route servers (I have redacted the transcript to leave out banner text and other irrelevant data. All routing queries are included full prompt to prompt without editing):</div><div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">route-views>show ip bgp 156.241.3.0/24 </span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">% Network not in table</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">route-views></span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">owen (122) ~ % telnet <a href="http://route-views.oregon-ix.net" class="">route-views.oregon-ix.net</a> 2020/05/28 16:58:53</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Trying 128.223.51.103...</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Connected to <a href="http://route-views.oregon-ix.net" class="">route-views.oregon-ix.net</a>.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Escape character is '^]'.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392); min-height: 21px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class="">User Access Verification</div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392); min-height: 21px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Username: Kerberos: No default realm defined for Kerberos!</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">rviews</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">route-views>show ip bgp 156.241.3.0/24 </span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">% Network not in table</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">route-views>q</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Connection closed by foreign host.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">0.007u 0.014s 1:49.98 0.0% 0+0k 0+0io 21pf+0w</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Exit 1</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">owen (123) ~ % telnet <a href="http://route-views.optus.net.au" class="">route-views.optus.net.au</a> 2020/05/28 17:26:50</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Trying 203.202.125.6...</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Connected to <a href="http://route-views.optus.net.au" class="">route-views.optus.net.au</a>.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Escape character is '^]'.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392); min-height: 21px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><a href="http://route-views.optus.net.au" class="">route-views.optus.net.au</a>>Kerberos: No default realm defined for Kerberos!</div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">show ip bgp 156.241.3.0/24 </span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">% Network not in table</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><a href="http://route-views.optus.net.au" class="">route-views.optus.net.au</a>>q</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Connection closed by foreign host.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">0.007u 0.005s 0:21.89 0.0% 0+0k 0+0io 0pf+0w</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Exit 1</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">owen (127) ~ % telnet <a href="http://route-views.ab.bb.telus.com" class="">route-views.ab.bb.telus.com</a> 2020/05/28 17:28:00</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Trying 154.11.98.18...</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Connected to <a href="http://route-views.ab.bb.telus.com" class="">route-views.ab.bb.telus.com</a>.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Escape character is '^]'.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">c</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">route-views.ab>Kerberos:<span class="Apple-tab-span" style="white-space:pre"> </span>No default realm defined for Kerberos!</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">show ip bgp 156.241.3.0/24 </span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">% Network not in table</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">route-views.ab>q</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Connection closed by foreign host.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">0.006u 0.005s 0:05.23 0.0% 0+0k 0+0io 0pf+0w</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Exit 1</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class="">owen (131) ~ % telnet <a href="http://route-server.tinet.net" class="">route-server.tinet.net</a> 2020/05/28 17:28:45</div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Trying 213.200.64.94...</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Connected to <a href="http://route-server.tinet.net" class="">route-server.tinet.net</a>.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Escape character is '^]'.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class="">login: public</div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class="">Password:</div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Last login: Thu May 28 18:44:36 from <a href="http://vinci.rdsnet.ro" class="">vinci.rdsnet.ro</a></span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392); min-height: 21px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">--- JUNOS 15.1F6-S5.6 Kernel 64-bit JNPR-10.3-20161130.340898_build</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392); min-height: 21px;" class=""><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392); min-height: 21px;" class="">{master}<span style="font-variant-ligatures: no-common-ligatures" class=""></span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><a href="mailto:public@route-server.as3257.net" class="">public@route-server.as3257.net</a>-re0> show route 156.241.3.0/24 all extensive </span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392); min-height: 21px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">{master}</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><a href="mailto:public@route-server.as3257.net" class="">public@route-server.as3257.net</a>-re0> </span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><a href="mailto:public@route-server.as3257.net" class="">public@route-server.as3257.net</a>-re0> quit </div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392); min-height: 21px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Connection closed by foreign host.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">0.007u 0.009s 0:40.46 0.0% 0+0k 0+0io 0pf+0w</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Exit 1</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">owen (132) ~ % telnet <a href="http://route-server.eu.gblx.net" class="">route-server.eu.gblx.net</a> 2020/05/28 17:29:35</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Trying 2001:450:2001:1000::670:1708:1187...</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Connected to <a href="http://loop0.route-server.ams2.gblx.net" class="">loop0.route-server.ams2.gblx.net</a>.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Escape character is '^]'.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">route-server.ams2>Kerberos: No default realm defined for Kerberos!</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">show ip bgp 156.241.3.0/24 </span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">% Network not in table</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">route-server.ams2>q</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Connection closed by foreign host.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">0.006u 0.005s 0:05.51 0.0% 0+0k 0+0io 0pf+0w</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Exit 1</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class="">owen (134) ~ % telnet <a href="http://route-server.opentransit.net" class="">route-server.opentransit.net</a> 2020/05/28 17:30:09</div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Trying 204.59.3.38...</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Connected to <a href="http://route-server.opentransit.net" class="">route-server.opentransit.net</a>.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Escape character is '^]'.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class="">User Access Verification</div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392); min-height: 21px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Username: Kerberos: No default realm defined for Kerberos!</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class="">rviews</div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Password: </span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">OAKRS1#show ip bgp 156.241.3.0/24 </span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">% Network not in table</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class="">OAKRS1#exit</div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Connection closed by foreign host.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">0.007u 0.008s 0:29.00 0.0% 0+0k 0+0io 0pf+0w</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Exit 1</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class="">owen (141) ~ % telnet <a href="http://route-server.host.net" class="">route-server.host.net</a> 2020/05/28 17:32:15</div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Trying 2001:5b8:fffe::10...</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">telnet: connect to address 2001:5b8:fffe::10: Connection refused</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Trying 75.119.191.74...</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Connected to <a href="http://route-server.host.net" class="">route-server.host.net</a>.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Escape character is '^]'.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">User Access Verification</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392); min-height: 21px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Password: </span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">route-server> show ip bgp 156.241.3.0/24 </span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">% Network not in table</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">route-server> q</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Connection closed by foreign host.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">0.006u 0.006s 0:06.21 0.0% 0+0k 0+0io 0pf+0w</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Exit 1</span></div><div style="margin: 0px; font-stretch: normal; font-size: 16px; line-height: normal; font-family: Monaco; color: rgb(1, 232, 0); background-color: rgba(0, 1, 3, 0.980392);" class=""><br class=""></div></span></div></div><div><br class=""></div><div>As you can see, from many different internet perspectives, the prefix simply isn’t in the table.</div><div><br class=""></div><div>So, Arnaud, your data is flawed and your conclusions are in error. The prefix has not been announced since May 7. I don’t know how much you’ve tried to remove obsolete or erroneous entries from RADB and its ilk generated by others, but I can assure you that it is much like the game of whack-a-mole. We appreciate your calling these entries to our attention and we will pursue them, but there has been no further incidence of use of AS37353 by our customers and the actual problem was, in fact, corrected prior to Mark’s initial post.</div><div><br class=""></div><div>Nothing you have posted indicates otherwise and your claims could be considered defamatory.</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>Im not sure about the law where you are, but here, defamation requires 4 elements:</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>1.<span class="Apple-tab-span" style="white-space:pre"> </span>A false statement purporting to be fact. Your claims above that the hijack was an action by Larus (false) and that it was malicious (false) and that it continues (false) qualify here.</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>2.<span class="Apple-tab-span" style="white-space:pre"> </span>Publication or communication of that statement to a third person. By posting this on multiple lists, you have more than met this test.</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>3.<span class="Apple-tab-span" style="white-space:pre"> </span>Fault amounting to at least negligence. This one is a bit more of a grey area, but your failure to investigate realtime sources instead of relying on sources known to use historical data is, IMHO, negligent.</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>4.<span class="Apple-tab-span" style="white-space:pre"> </span>Damages or some harm caused to the person or entity. If nothing else, the collective time wasted on this continued discussion of a minor mistake represents significant harm to the community as a whole.</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>Were your statements not so blatantly and easily disproven, or should they be believed by anyone, then there is also the question of harm to the good name of Larus as a company.</div><div><br class=""></div><div>Owen</div><div><br class=""></div><div><blockquote type="cite" class=""><div class=""><div dir="auto" class=""><div dir="auto" style="font-family:sans-serif;font-size:12.8px" class=""><div dir="auto" class=""><br class=""></div><div dir="auto" class="">Regards </div><div dir="auto" class=""><br class=""></div><div dir="auto" class="">--</div><div dir="auto" class="">Arnaud </div></div></div><br class=""><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Le sam. 9 mai 2020 à 09:44, Lu Heng <<a href="mailto:h.lu@anytimechinese.com" class="">h.lu@anytimechinese.com</a>> a écrit :<br class=""></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr" class=""><div class=""><div class=""><div class="">To whom it may concern,<div class=""><br class=""></div><div class="">On May 8, Mark Think posted a claim to multiple lists that Cloud Innovation was abusing an ASN (37353) that didn’t belong to them (Cloud Innovation) but rather belonged to Seacom through their acquisition of MacroLAN.</div><div class=""><br class=""></div><div class="">While we regret this unfortunate incident, Mark’s claims that it was criminal or bad netizenship on the part of Cloud Innovation is without foundation and utterly incorrect.</div><div class=""><br class=""></div><div class=""><div style="font-family:Lato;font-size:14px" class="">As shown below in the attached document from Paul Wollner(Ex-CTO of Macrolan who created IRR routes to allow Macrolan to announce Cloud Innovation's prefix); letter from Link Infinity International Ltd. (Link Infinity), A customer of Cloud Innovation; and attached LOA from LARUS authorizing IPDC Solutions to announce the prefix with origin AS134190. And a Letter from IPDC. This was an innocent mistake committed by third parties and had nothing to do with any action by Cloud Innovation or LARUS.</div></div></div></div><div class=""><div class=""><div style="font-family:Lato;font-size:14px" class=""><br class=""></div><div style="font-family:Lato;font-size:14px" class="">Here’s what happened:<br class=""></div><div style="font-family:Lato;font-size:14px" class=""><br class=""></div></div><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px" class=""><div class=""><div style="font-family:Lato;font-size:14px" class="">Cloud Innovation delegated a /24 to Link Infinity, an ISP in December 2019.</div></div></blockquote></div><div class=""><br class=""></div><div class=""><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px" class=""><div class="">Link Infinity further delegated that same /24 to IPDC and asked Cloud innovation to issue an LOA, which we did. The LOA specifically required IPDC to use its own ASN to announce the space (AS134190).</div><div style="font-family:Lato;font-size:14px" class=""><br class=""></div></blockquote><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px" class=""><div class=""><div style="font-family:Lato;font-size:14px" class="">IPDC subsequently authorized one of its customers to use the said prefix.</div></div></blockquote><div class=""><div style="font-family:Lato;font-size:14px" class=""><br class=""></div></div><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px" class=""><div class=""><div style="font-family:Lato;font-size:14px" class="">For reasons still unknown to Cloud Innovation, IPDC and their customer set up a BGP session wherein their customer used AS37353 as the origin to advertise prefix <a href="http://156.241.3.0/24" target="_blank" rel="noreferrer" class="">156.241.3.0/24</a>.</div></div></blockquote><div class=""><div style="font-family:Lato;font-size:14px" class=""><br class=""></div></div><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px" class=""><div class=""><div style="font-family:Lato;font-size:14px" class="">Upon discovering the announcement, rather than contact Cloud Innovation, Mark contacted IPDC who provided him with an incomplete explanation blaming their customer and Mark, not realizing that Cloud Innovation was not the customer in question posted far and wide about the event. It is unclear to us why he chose to do this rather than contact us to try and resolve the issue.</div></div></blockquote><div class=""><div style="font-family:Lato;font-size:14px" class=""><br class=""></div><div style="font-family:Lato;font-size:14px" class="">A contributing factor to the erroneous BGP configuration by IPDC's customer may have been data contained in some outdated IRR route objects for <a href="http://156.241.0.0/16" target="_blank" rel="noreferrer" class="">156.241.0.0/16</a> which have subsequently been deleted.</div><div style="font-family:Lato;font-size:14px" class=""><br class=""></div><div style="font-family:Lato;font-size:14px" class="">As soon as we became aware of the problem (via Mark’s email), we began to investigate the situation. As soon as it was clear that this was the result of third-party actions, we reached out to Mark privately to let him know what we knew and that we were still investigating. We delayed making a public statement in order to try and ascertain all of the facts of the situation. We prefer not to make public statements based on incomplete information.</div><div style="font-family:Lato;font-size:14px" class=""><br class=""></div><div style="font-family:Lato;font-size:14px" class="">We apologize to the community for our small part in this unfortunate incident and assure you that we work very hard to remain good netizens and will address any concerns promptly when they come to our attention.</div><div style="font-family:Lato;font-size:14px" class=""><br class=""></div><div style="font-family:Lato;font-size:14px" class=""><br class=""></div><div style="font-family:Lato;font-size:14px" class="">Sincerely,<br class=""></div><div style="font-family:Lato;font-size:14px" class=""><br class=""></div><div style="font-family:Lato;font-size:14px" class="">Lu Heng<br class=""></div><div style="font-family:Lato;font-size:14px" class="">CEO<br class=""></div><div style="font-family:Lato;font-size:14px" class="">Cloud Innovations<br class=""></div></div><div class=""><br class=""></div></div></div>Attached:<div class=""><span style="white-space:pre-wrap" class=""> </span>1.<span style="white-space:pre-wrap" class=""> </span>Letter from Paul Wollner</div><div class=""><span style="white-space:pre-wrap" class=""> </span>2.<span style="white-space:pre-wrap" class=""> </span>Letter from Link Infinity</div><div class=""><span style="white-space:pre-wrap" class=""> </span>3.<span style="white-space:pre-wrap" class=""> </span>LOA Issued to IPDC Solutions for announcing <a href="http://156.241.3.0/24" target="_blank" rel="noreferrer" class="">156.241.3.0/24</a> from AS134190</div><div class=""> 4. Letter from IPDC</div><div class=""><br class=""></div><div class="">FYI: LARUS is proving IP management service for Cloud Innovation, while LARUS is also providing IP management service to other third parties in all regions, for full disclosure, LARUS and Cloud Innovation are headed by same CEO.</div><div class=""><br class=""></div><div class="">Content of those letters have been posted here for your convince:</div><div class=""><br class=""></div><div class=""><div class=""><b class="">IPDC:</b></div><div class=""><b class=""><br class=""></b></div><font color="#888888" class=""><div class=""><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class="">FOR IMMEDIATE RELEASE [Perusal of Cloud Innovation Ltd]</div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class="">IPDC Solutions Pte Ltd (IPDC) is a customer of Cloud Innovation Ltd and over the course of our corporate relationship we were given the authority to use address block <a href="http://156.241.3.0/24" target="_blank" rel="noreferrer" class="">156.241.3.0/24</a> since 9th December 2019. </div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class="">On 12th December 2019, we have delegated that address block to our client. Following which our client further instructed us to announce the prefix with AS37353. In good will after minimal verification through WHOIS’ IP Prefix we have proceeded to execute our client’s request. </div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class="">On 7th May 2020 IPDC was then contacted by SEACOM, the legitimate holder of record for that ASN and have since learned that the customer’s use of that ASN was erroneous and not permitted by SEACOM and immediate action has been taken to rectify this situation. </div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class="">IPDC would like to apologize for our lack of attention in conducting thorough verification and wish to highlight that the involvement of Cloud Innovation Ltd in the entire process was providing the addresses to us and that we truly apologize as we understand that this incident may have indirectly implicated Cloud Innovation Ltd. </div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class="">IPDC however, does not wish to disclose our client information and our client information shall remain confidential under present circumstances. Once again, we apologize for our shortcomings. <br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><b class="">Link Infinity:</b></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class="">To whom it may concern,<br class=""><br class="">We at HK Infinity International Ltd are a customer of Cloud Innovation and in the course received rights to use <a href="http://156.241.3.0/24" target="_blank" rel="noreferrer" class="">156.241.3.0/24</a> from them. Beginning December, 2019, we delegated the right to announce this prefix to IPDC Solutions Pte Ltd. (IPDC). We asked Cloud Innovation to provide an LOA authorizing them to announce the space which was subsequently received. IPDC subsequently and without our knowledge delegated this space to one of their customers and allowed them to originate it from AS37353.<br class=""><br class="">This announcement was not authorized by us, nor is it permitted by the LOA provided by Cloud Innovation.<br class=""><br class="">Unfortunately, we were not aware of the situation until after it had already been resolved.<br class=""><br class="">It was never our intent to violate the LOA or to allow the prefix to be announced from a hijacked ASN. We do not condone this and apologize sincerely to the community for what has happened here.<br class=""><br class="">Sincere Apologies,<br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><b class="">Paul Wollner:</b></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class="">8 May 2020<br class=""><br class="">TO WHOM IT MAY CONCERN <br class=""><br class="">In the light of the recent email on NAPAfrica mailing list, I would just like to clear the air. </div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><br class="">The IP route objects were created by myself for Cloud Innovation when they signed up as a client of Macrolan ( now SEACOM) as they didn't have their own AS.<br class=""><br class="">At the time I was working for Macrolan (now SEACOM). I left the employment of SEACOM in October 2019.<br class=""><br class="">It appears that when Cloud Innovation's contract with SEACOM came to an end, the route objects were never cleaned up.<br class=""><br class="">This occurred after I left SEACOM's employment. Since leaving, I have no access to these objects.<br class=""><br class="">Regards<br class=""><br class="">Paul Wollner<br class="">082-786-9776</div></div></font></div></div><div dir="ltr" class=""><div class=""><div class=""><div class="">To whom it may concern,<div class=""><br class=""></div><div class="">On May 8, Mark Think posted a claim to multiple lists that Cloud Innovation was abusing an ASN (37353) that didn’t belong to them (Cloud Innovation) but rather belonged to Seacom through their acquisition of MacroLAN.</div><div class=""><br class=""></div><div class="">While we regret this unfortunate incident, Mark’s claims that it was criminal or bad netizenship on the part of Cloud Innovation is without foundation and utterly incorrect.</div><div class=""><br class=""></div><div class=""><div style="font-family:Lato;font-size:14px" class="">As shown below in the attached document from Paul Wollner(Ex-CTO of Macrolan who created IRR routes to allow Macrolan to announce Cloud Innovation's prefix); letter from Link Infinity International Ltd. (Link Infinity), A customer of Cloud Innovation; and attached LOA from LARUS authorizing IPDC Solutions to announce the prefix with origin AS134190. And a Letter from IPDC. This was an innocent mistake committed by third parties and had nothing to do with any action by Cloud Innovation or LARUS.</div></div></div></div><div class=""><div class=""><div style="font-family:Lato;font-size:14px" class=""><br class=""></div><div style="font-family:Lato;font-size:14px" class="">Here’s what happened:<br class=""></div><div style="font-family:Lato;font-size:14px" class=""><br class=""></div></div><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px" class=""><div class=""><div style="font-family:Lato;font-size:14px" class="">Cloud Innovation delegated a /24 to Link Infinity, an ISP in December 2019.</div></div></blockquote></div><div class=""><br class=""></div><div class=""><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px" class=""><div class="">Link Infinity further delegated that same /24 to IPDC and asked Cloud innovation to issue an LOA, which we did. The LOA specifically required IPDC to use its own ASN to announce the space (AS134190).</div><div style="font-family:Lato;font-size:14px" class=""><br class=""></div></blockquote><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px" class=""><div class=""><div style="font-family:Lato;font-size:14px" class="">IPDC subsequently authorized one of its customers to use the said prefix.</div></div></blockquote><div class=""><div style="font-family:Lato;font-size:14px" class=""><br class=""></div></div><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px" class=""><div class=""><div style="font-family:Lato;font-size:14px" class="">For reasons still unknown to Cloud Innovation, IPDC and their customer set up a BGP session wherein their customer used AS37353 as the origin to advertise prefix <a href="http://156.241.3.0/24" target="_blank" rel="noreferrer" class="">156.241.3.0/24</a>.</div></div></blockquote><div class=""><div style="font-family:Lato;font-size:14px" class=""><br class=""></div></div><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px" class=""><div class=""><div style="font-family:Lato;font-size:14px" class="">Upon discovering the announcement, rather than contact Cloud Innovation, Mark contacted IPDC who provided him with an incomplete explanation blaming their customer and Mark, not realizing that Cloud Innovation was not the customer in question posted far and wide about the event. It is unclear to us why he chose to do this rather than contact us to try and resolve the issue.</div></div></blockquote><div class=""><div style="font-family:Lato;font-size:14px" class=""><br class=""></div><div style="font-family:Lato;font-size:14px" class="">A contributing factor to the erroneous BGP configuration by IPDC's customer may have been data contained in some outdated IRR route objects for <a href="http://156.241.0.0/16" target="_blank" rel="noreferrer" class="">156.241.0.0/16</a> which have subsequently been deleted.</div><div style="font-family:Lato;font-size:14px" class=""><br class=""></div><div style="font-family:Lato;font-size:14px" class="">As soon as we became aware of the problem (via Mark’s email), we began to investigate the situation. As soon as it was clear that this was the result of third-party actions, we reached out to Mark privately to let him know what we knew and that we were still investigating. We delayed making a public statement in order to try and ascertain all of the facts of the situation. We prefer not to make public statements based on incomplete information.</div><div style="font-family:Lato;font-size:14px" class=""><br class=""></div><div style="font-family:Lato;font-size:14px" class="">We apologize to the community for our small part in this unfortunate incident and assure you that we work very hard to remain good netizens and will address any concerns promptly when they come to our attention.</div><div style="font-family:Lato;font-size:14px" class=""><br class=""></div><div style="font-family:Lato;font-size:14px" class=""><br class=""></div><div style="font-family:Lato;font-size:14px" class="">Sincerely,<br class=""></div><div style="font-family:Lato;font-size:14px" class=""><br class=""></div><div style="font-family:Lato;font-size:14px" class="">Lu Heng<br class=""></div><div style="font-family:Lato;font-size:14px" class="">CEO<br class=""></div><div style="font-family:Lato;font-size:14px" class="">Cloud Innovations<br class=""></div></div><div class=""><br class=""></div></div></div>Attached:<div class=""><span style="white-space:pre-wrap" class=""> </span>1.<span style="white-space:pre-wrap" class=""> </span>Letter from Paul Wollner</div><div class=""><span style="white-space:pre-wrap" class=""> </span>2.<span style="white-space:pre-wrap" class=""> </span>Letter from Link Infinity</div><div class=""><span style="white-space:pre-wrap" class=""> </span>3.<span style="white-space:pre-wrap" class=""> </span>LOA Issued to IPDC Solutions for announcing <a href="http://156.241.3.0/24" target="_blank" rel="noreferrer" class="">156.241.3.0/24</a> from AS134190</div><div class=""> 4. Letter from IPDC</div><div class=""><br class=""></div><div class="">FYI: LARUS is proving IP management service for Cloud Innovation, while LARUS is also providing IP management service to other third parties in all regions, for full disclosure, LARUS and Cloud Innovation are headed by same CEO.</div><div class=""><br class=""></div><div class="">Content of those letters have been posted here for your convince:</div><div class=""><br class=""></div><div class=""><div class=""><b class="">IPDC:</b></div><div class=""><b class=""><br class=""></b></div><font color="#888888" class=""><div class=""><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class="">FOR IMMEDIATE RELEASE [Perusal of Cloud Innovation Ltd]</div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class="">IPDC Solutions Pte Ltd (IPDC) is a customer of Cloud Innovation Ltd and over the course of our corporate relationship we were given the authority to use address block <a href="http://156.241.3.0/24" target="_blank" rel="noreferrer" class="">156.241.3.0/24</a> since 9th December 2019. </div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class="">On 12th December 2019, we have delegated that address block to our client. Following which our client further instructed us to announce the prefix with AS37353. In good will after minimal verification through WHOIS’ IP Prefix we have proceeded to execute our client’s request. </div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class="">On 7th May 2020 IPDC was then contacted by SEACOM, the legitimate holder of record for that ASN and have since learned that the customer’s use of that ASN was erroneous and not permitted by SEACOM and immediate action has been taken to rectify this situation. </div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class="">IPDC would like to apologize for our lack of attention in conducting thorough verification and wish to highlight that the involvement of Cloud Innovation Ltd in the entire process was providing the addresses to us and that we truly apologize as we understand that this incident may have indirectly implicated Cloud Innovation Ltd. </div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class="">IPDC however, does not wish to disclose our client information and our client information shall remain confidential under present circumstances. Once again, we apologize for our shortcomings. <br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><b class="">Link Infinity:</b></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class="">To whom it may concern,<br class=""><br class="">We at HK Infinity International Ltd are a customer of Cloud Innovation and in the course received rights to use <a href="http://156.241.3.0/24" target="_blank" rel="noreferrer" class="">156.241.3.0/24</a> from them. Beginning December, 2019, we delegated the right to announce this prefix to IPDC Solutions Pte Ltd. (IPDC). We asked Cloud Innovation to provide an LOA authorizing them to announce the space which was subsequently received. IPDC subsequently and without our knowledge delegated this space to one of their customers and allowed them to originate it from AS37353.<br class=""><br class="">This announcement was not authorized by us, nor is it permitted by the LOA provided by Cloud Innovation.<br class=""><br class="">Unfortunately, we were not aware of the situation until after it had already been resolved.<br class=""><br class="">It was never our intent to violate the LOA or to allow the prefix to be announced from a hijacked ASN. We do not condone this and apologize sincerely to the community for what has happened here.<br class=""><br class="">Sincere Apologies,<br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><b class="">Paul Wollner:</b></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class="">8 May 2020<br class=""><br class="">TO WHOM IT MAY CONCERN <br class=""><br class="">In the light of the recent email on NAPAfrica mailing list, I would just like to clear the air. </div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: normal; font-family: Times;" class=""><br class="">The IP route objects were created by myself for Cloud Innovation when they signed up as a client of Macrolan ( now SEACOM) as they didn't have their own AS.<br class=""><br class="">At the time I was working for Macrolan (now SEACOM). I left the employment of SEACOM in October 2019.<br class=""><br class="">It appears that when Cloud Innovation's contract with SEACOM came to an end, the route objects were never cleaned up.<br class=""><br class="">This occurred after I left SEACOM's employment. Since leaving, I have no access to these objects.<br class=""><br class="">Regards<br class=""><br class="">Paul Wollner<br class="">082-786-9776</div></div></font></div></div><br class=""><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, 8 May 2020 at 22:08, Mark Tinka <<a href="mailto:mark.tinka@seacom.mu" target="_blank" rel="noreferrer" class="">mark.tinka@seacom.mu</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div class="">
<font face="Tahoma" class="">Hi all.<br class="">
<br class="">
I'm not one to b**ch & moan in public, but per subject, I
could not let this one slide.<br class="">
<br class="">
And if you get this from multiple mailing lists, apologies for
that - I'm just trying to make sure that this reaches as wide an
audience as possible, on the continent.<br class="">
<br class="">
SEACOM (AS37100) acquired MacroLan (AS37353) a couple of years
ago. MacroLan is now part of the SEACOM family, and while we are
in the process of integrating that network into AS37100, some
existing services continue to be delivered on AS37353 until that
exercise is completed.<br class="">
<br class="">
One of the customers that AS37353 was providing services to was
Cloud Innovation, in Cape Town. From a routing perspective,
because Cloud Innovation had no AS number for this service, all of
their IP address space was being originated by AS37353, on their
behalf.<br class="">
<br class="">
In December of 2019, AS37353 ceased providing services to Cloud
Innovation. That is 6 months ago.<br class="">
<br class="">
In recent days, it came to SEACOM's attention that some of Cloud
Innovation's IP address space was being originated by AS37353 -
specifically, <a href="http://156.241.3.0/24" target="_blank" rel="noreferrer" class="">156.241.3.0/24</a> - even though we were sure that they
were no longer a customer of AS37353 since December of 2019. At
first, we thought this was a cached entry in a number of popular
looking glasses, but then every looking glass had the same entry,
which made this an unlikely bug.<br class="">
<br class="">
As of yesterday afternoon, see below what Telia's looking glass
was saying about this prefix:<br class="">
<br class="">
*****<br class="">
<br class="">
Path #1: Received by speaker 0<br class="">
4809 134190 37353<br class="">
2.255.249.42 (metric 2134) from 2.255.253.101 (80.91.242.40)<br class="">
Origin incomplete, localpref 200, valid, internal, best,
group-best, import-candidate<br class="">
Communities:<br class="">
<br class="">
1299:431<br class="">
(RPKI state Unknown)<br class="">
<br class="">
1299:1000 1299:30000 1299:30600 23456:20413 45352:4500 45352:9204<br class="">
<br class="">
*****<br class="">
<br class="">
But when I run a traceroute from my house to that prefix, it
clearly was not ending up in Cape Town, where AS37353's main
operation resides:<br class="">
<br class="">
*****<br class="">
<br class="">
MacBook-Pro-7:~ tinka$ traceroute -I 156.241.3.1<br class="">
traceroute to 156.241.3.1 (156.241.3.1), 64 hops max, 72 byte
packets<br class="">
1 172.16.0.254 (172.16.0.254) 14.824 ms 11.522 ms 3.525 ms<br class="">
2 <a href="http://xe-1-3-0-1064.er-01-jnb.za.seacomnet.com/" target="_blank" rel="noreferrer" class="">xe-1-3-0-1064.er-01-jnb.za.seacomnet.com</a> (105.22.37.13) 5.620
ms 9.714 ms 9.887 ms<br class="">
3 <a href="http://ce-0-2-0-0.cr-02-jnb.za.seacomnet.com/" target="_blank" rel="noreferrer" class="">ce-0-2-0-0.cr-02-jnb.za.seacomnet.com</a> (105.16.28.2) 175.232
ms 172.699 ms 175.896 ms<br class="">
4 <a href="http://xe-0-0-0-8.cr-02-cpt.za.seacomnet.com/" target="_blank" rel="noreferrer" class="">xe-0-0-0-8.cr-02-cpt.za.seacomnet.com</a> (105.16.9.182) 164.496
ms 163.578 ms 163.546 ms<br class="">
5 105.16.14.153 (105.16.14.153) 169.812 ms 171.272 ms 177.115
ms<br class="">
6 <a href="http://xe-0-0-0-0.br-02-lhr.uk.seacomnet.com/" target="_blank" rel="noreferrer" class="">xe-0-0-0-0.br-02-lhr.uk.seacomnet.com</a> (105.16.34.253) 168.911
ms 172.958 ms 165.165 ms<br class="">
7 82.112.115.169 (82.112.115.169) 172.700 ms 176.482 ms
174.375 ms<br class="">
8 <a href="http://ae-17.r05.londen12.uk.bb.gin.ntt.net/" target="_blank" rel="noreferrer" class="">ae-17.r05.londen12.uk.bb.gin.ntt.net</a> (129.250.2.147) 672.099
ms 613.617 ms 615.109 ms<br class="">
9 <a href="http://ae-2.r24.londen12.uk.bb.gin.ntt.net/" target="_blank" rel="noreferrer" class="">ae-2.r24.londen12.uk.bb.gin.ntt.net</a> (129.250.4.244) 181.952
ms 183.087 ms 187.302 ms<br class="">
10 <a href="http://ae-16.r20.frnkge13.de.bb.gin.ntt.net/" target="_blank" rel="noreferrer" class="">ae-16.r20.frnkge13.de.bb.gin.ntt.net</a> (129.250.3.13) 190.511
ms 185.579 ms 187.058 ms<br class="">
11 <a href="http://ae-3.r20.sngpsi07.sg.bb.gin.ntt.net/" target="_blank" rel="noreferrer" class="">ae-3.r20.sngpsi07.sg.bb.gin.ntt.net</a> (129.250.4.17) 520.882
ms 613.982 ms 615.275 ms<br class="">
12 <a href="http://ae-9.r24.tkokhk01.hk.bb.gin.ntt.net/" target="_blank" rel="noreferrer" class="">ae-9.r24.tkokhk01.hk.bb.gin.ntt.net</a> (129.250.7.67) 612.301
ms 586.886 ms 436.711 ms<br class="">
13 <a href="http://ae-1.r03.tkokhk01.hk.bb.gin.ntt.net/" target="_blank" rel="noreferrer" class="">ae-1.r03.tkokhk01.hk.bb.gin.ntt.net</a> (129.250.6.98) 614.470
ms 613.416 ms 614.281 ms<br class="">
14 <a href="http://ce-0-3-0-3.r03.tkokhk01.hk.ce.gin.ntt.net/" target="_blank" rel="noreferrer" class="">ce-0-3-0-3.r03.tkokhk01.hk.ce.gin.ntt.net</a> (203.131.241.126)
614.128 ms 613.661 ms 615.416 ms<br class="">
15 * * *<br class="">
16 * * *<br class="">
17 156.241.3.1 (156.241.3.1) 494.400 ms 410.180 ms *<br class="">
MacBook-Pro-7:~ tinka$<br class="">
<br class="">
*****<br class="">
<br class="">
So we, then, realized that this was a fraudulent use of MacroLan's
AS37353, to which we had given no express permission.<br class="">
<br class="">
As luck would have it, due to my days living and working in
Malaysia, I know the good folk that operate AS134190 (IPDC
Solutions), who was the upstream providing transit for this
prefix. So I rang them up yesterday afternoon, told them what was
happening, and within the hour, they got that eBGP session
shutdown. I am most grateful to them for their quick response and
immediate understanding of what was going on. Even with all the
technology we have today, it, many times, comes down to having
good friends in good places.<br class="">
<br class="">
Anyway, it turns out the ISP that had acquired this prefix from
Cloud Innovation is based in Manila, Philippines. When IPDC
delivered their transit service to them in Manila, that ISP
informed them that they should use AS37353 for the eBGP session.
Yes, one could argue that IPDC should have done their checks to
ensure that the AS number being provided by their customer belongs
to them, but to be honest, I'm not too bothered about that
compared to Cloud Innovation's thinking that it was okay to use
another network's AS number in order to deliver their services to
their customers.<br class="">
<br class="">
IPDC confirm that this service was activated for the Manila ISP in
December of 2019, right around the time Cloud Innovation's service
with SEACOM, in Cape Town, ended.<br class="">
<br class="">
As it currently stands, the ISP in Manila is now off the Internet,
with some 12 paying customers currently without service. Their
excuse - they do not have an AS number of their own.<br class="">
<br class="">
IPDC tried to find out why the ISP in Manila thought that it was
okay to use another network's AS number for their service, and as
it turns out, the network engineer at the Manila ISP that set this
up has since left the company. All the ones currently there do not
have any history about all of this.<br class="">
<br class="">
Currently, <a href="http://156.241.3.0/24" target="_blank" rel="noreferrer" class="">156.241.3.0/24</a> is not in the global BGP table:<br class="">
<br class="">
*****<br class="">
<br class="">
<a href="http://lg-01-ams.nl/" target="_blank" rel="noreferrer" class="">lg-01-ams.nl</a>>sh ip bgp <a href="http://156.241.3.0/24" target="_blank" rel="noreferrer" class="">156.241.3.0/24</a><br class="">
% Network not in table<br class="">
<a href="http://lg-01-ams.nl/" target="_blank" rel="noreferrer" class="">lg-01-ams.nl</a>><br class="">
<br class="">
<a href="http://lg-01-nbo.ke/" target="_blank" rel="noreferrer" class="">lg-01-nbo.ke</a>>sh ip bgp <a href="http://156.241.3.0/24" target="_blank" rel="noreferrer" class="">156.241.3.0/24</a><br class="">
% Network not in table<br class="">
<a href="http://lg-01-nbo.ke/" target="_blank" rel="noreferrer" class="">lg-01-nbo.ke</a>><br class="">
<br class="">
<a href="http://lg-01-cpt.za/" target="_blank" rel="noreferrer" class="">lg-01-cpt.za</a>>sh ip bgp <a href="http://156.241.3.0/24" target="_blank" rel="noreferrer" class="">156.241.3.0/24</a><br class="">
% Network not in table<br class="">
<a href="http://lg-01-cpt.za/" target="_blank" rel="noreferrer" class="">lg-01-cpt.za</a>><br class="">
<br class="">
*****<br class="">
<br class="">
That Cloud Innovation thought it was okay for them to use
MacroLan's AS number to originate their own prefixes into the
global BGP is as morally reprehensible as it is technologically
distasteful.<br class="">
<br class="">
SEACOM have been working very closely with AFRINIC to delete
previous route objects from their IRR that certify a relationship
between Cloud Innovation's parent /16 aggregates that cover this
prefix, and AS37353, but this is one of those objects that cannot
be removed via the MyAFRINIC portal, and requires manual
intervention from AFRINIC.<br class="">
<br class="">
I have not, personally, spoken to the proprietors of Cloud
Innovation and/or Outside Heaven, as I don't see how anything
could explain this with any degree of justification.<br class="">
<br class="">
For now, I will find some beer to wipe the foul taste from my
mouth, while we (SEACOM) consider what to do about this.<br class="">
<br class="">
And yes, for those who are wondering, RPKI's ROV would not have
prevented this, in its current form. This is AS hijacking, and
ROV, today, tries to solve the prefix-hijacking problem, first.<br class="">
<br class="">
Thank you for your attention.<br class="">
<br class="">
Mark.<br class="">
</font>
</div>
_______________________________________________<br class="">
Community-Discuss mailing list<br class="">
<a href="mailto:Community-Discuss@afrinic.net" target="_blank" rel="noreferrer" class="">Community-Discuss@afrinic.net</a><br class="">
<a href="https://lists.afrinic.net/mailman/listinfo/community-discuss" rel="noreferrer noreferrer" target="_blank" class="">https://lists.afrinic.net/mailman/listinfo/community-discuss</a><br class="">
</blockquote></div><br clear="all" class=""><div class=""><br class=""></div>-- <br class=""><div dir="ltr" class=""><div dir="ltr" class=""><div class="">--<br class="">Kind regards.<br class="">Lu<br class=""><br class=""></div></div></div>
_______________________________________________<br class="">
Community-Discuss mailing list<br class="">
<a href="mailto:Community-Discuss@afrinic.net" target="_blank" rel="noreferrer" class="">Community-Discuss@afrinic.net</a><br class="">
<a href="https://lists.afrinic.net/mailman/listinfo/community-discuss" rel="noreferrer noreferrer" target="_blank" class="">https://lists.afrinic.net/mailman/listinfo/community-discuss</a><br class="">
</blockquote></div>
_______________________________________________<br class="">Community-Discuss mailing list<br class=""><a href="mailto:Community-Discuss@afrinic.net" class="">Community-Discuss@afrinic.net</a><br class="">https://lists.afrinic.net/mailman/listinfo/community-discuss<br class=""></div></blockquote></div><br class=""></div></body></html>