[SANOG] Undeliverable: survey on BGP prefix hijacking

postmaster at cisco.com postmaster at cisco.com
Tue May 9 08:12:50 UTC 2017


Delivery has failed to these recipients or groups:

shtsuchi at exch.cisco.com<mailto:shtsuchi at exch.cisco.com>
The email address you entered couldn't be found. Please check the recipient's email address and try to resend the message. If the problem continues, please contact your helpdesk.








Diagnostic information for administrators:

Generating server: XCH-RCD-012.cisco.com

shtsuchi at exch.cisco.com
Remote Server returned '550 5.1.1 RESOLVER.ADR.RecipNotFound; not found'

Original message headers:

Received: from xch-rcd-013.cisco.com (173.37.102.23) by XCH-RCD-012.cisco.com
 (173.37.102.22) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Tue, 9 May
 2017 03:12:50 -0500
Received: from alln-iport-4.cisco.com (173.37.142.91) by mail.cisco.com
 (173.37.102.23) with Microsoft SMTP Server (TLS) id 15.0.1210.3 via Frontend
 Transport; Tue, 9 May 2017 03:12:50 -0500
Received: from alln-core-2.cisco.com ([173.36.13.135])
  by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 09 May 2017 08:12:50 +0000
Received: from alln-inbound-m.cisco.com (alln-inbound-m.cisco.com [173.37.147.243])
        by alln-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id v498CnCI003756
        (version=TLSv1/SSLv3 cipher=DHE-RSA-SEED-SHA bits=128 verify=OK)
        for <shtsuchi at cisco.com>; Tue, 9 May 2017 08:12:50 GMT
Authentication-Results: alln-inbound-m.cisco.com; dkim=none (message not signed) header.i=none; spf=None smtp.mailfrom=sanog-bounces+shtsuchi=cisco.com at sanog.org; spf=None smtp.helo=postmaster at lists.isc.org
Received-SPF: None (alln-inbound-m.cisco.com: no sender
  authenticity information available from domain of
  sanog-bounces+shtsuchi=cisco.com at sanog.org)
  identity=mailfrom; client-ip=149.20.1.60;
  receiver=alln-inbound-m.cisco.com;
  envelope-from="sanog-bounces+shtsuchi=cisco.com at sanog.org";
  x-sender="sanog-bounces+shtsuchi=cisco.com at sanog.org";
  x-conformance=spf_only
Received-SPF: None (alln-inbound-m.cisco.com: no sender
  authenticity information available from domain of
  postmaster at lists.isc.org) identity=helo;
  client-ip=149.20.1.60; receiver=alln-inbound-m.cisco.com;
  envelope-from="sanog-bounces+shtsuchi=cisco.com at sanog.org";
  x-sender="postmaster at lists.isc.org"; x-conformance=spf_only
X-from-outside-Cisco: 149.20.1.60
IronPort-PHdr: =?us-ascii?q?9a23=3A5J2B6RxFeMZYh67XCy+O+j09IxM/srCxBDY+r6Qd?=
 =?us-ascii?q?0uoQK/ad9pjvdHbS+e9qxAeQG96Kt7Qc06L/iOPJYSQ4+5GPsXQPItRndiQuro?=
 =?us-ascii?q?EopTEmG9OPEkbhLfTnPGQQFcVGU0J5rTngaRAGUMnxaEfPrXKs8DUcBgvwNRZv?=
 =?us-ascii?q?JuTyB4Xek9m72/q89pDXbAhEniaxba9vJxiqsAvdsdUbj5F/Iagr0BvJpXVIe+?=
 =?us-ascii?q?VSxWx2IF+Yggjx6MSt8pN96ipco/0u+dJOXqX8ZKQ4UKdXDC86PGAv5c3krgfM?=
 =?us-ascii?q?QA2S7XYBSGoWkx5IAw/Y7BHmW5r6ryX3uvZh1CScIMb5Sq06WSm576dzVhDnlD?=
 =?us-ascii?q?sHOTA+8GHSkMNwjaRbqw+lqxFwx4PYZYeYP+d8cKzAZ9MXXXRPXshRWSJCDI2z?=
 =?us-ascii?q?YYQAAOgcM+ZArYTzpVQDoQawCAWwC+3g1iFHhmTt0K0m0eksCx3K0BAuEt4Qtn?=
 =?us-ascii?q?nfsdX7NL0VUeCw1KTG1y/Mb+1S2Tf684jDbw0vru+WXbJ1acre10guFwLejl6N?=
 =?us-ascii?q?roHlJC2a1v4Is2iD8eVhVOOvi3U8pgFwvjev3d0giofOhoIP1lDE9T91wIkvJd?=
 =?us-ascii?q?ChTkNwfNCqEJxVty6ANot2RNsvQ3pytyY8zb0GtoS3fC8QyJQo3xLQd+aIc4mV?=
 =?us-ascii?q?7R35TuqRJi14hH19dLKwgBay9kegyuniWcWuzFlKqS9FnsHNtnALzBzT8smHSu?=
 =?us-ascii?q?Fj8Uu7xzmAyh3T5vtLIUAujabbJZkhwqQslpoTq0jDETX2lF3qjK+XcEUl+vWo?=
 =?us-ascii?q?6/7jYrn8upCcMIp0hwfjOaotgsyyGfk0PwcKUmSB5+iwyKfv8VDjTLhLkvE6ir?=
 =?us-ascii?q?TVvZ7eKMgBoqO1HhVZ34I95xqlEjur39IVlmQdIl1fYhKIlY3pNknOIP/mCfe/?=
 =?us-ascii?q?hEyhkDNqx/DdIr3hGY/BLnnYkLj9Z7p97FRcyAUrwdBe4ZJbFK0BLeruVkL+sN?=
 =?us-ascii?q?HUFAE1PxCuz+r6Etlw158SVXqKAqCDMaPStVGI5vgoI+mJfIIVoyzyK/4i5/7h?=
 =?us-ascii?q?lHM2glgdfbSv3ZQLdn+4BfNqI16ZYXrwmdcBDHsFvgo/TOHylFKCUCVTaGq1X6?=
 =?us-ascii?q?4m+j47D4emAJzYRo+3hryB2yi7EodRZmBcBVCACW3oeJmcW/cQdCKSJddskicE?=
 =?us-ascii?q?Vbi9UI8hyA2htA/7y7d8MuXU+zYYuo7k1NRv++LTkhQypnRJCd+A2TSNU31shT?=
 =?us-ascii?q?FPADs3x7xk51d0zFCMl69ijLtdHN1X4vpPFQAiKZ/byfc9ENn0XQ2SQ9GSVVzz?=
 =?us-ascii?q?R9ynBS02HMk4xdgBJlxwAsivlQzrxCOsBLBTkKaEU4cp+KDR1GSkOsBm1nzd37?=
 =?us-ascii?q?MghVR1fswaLmSggaFX7AHVAIGPlF+WxIiwcqFJ5CfT8GCYhVGDpkRAXRxxSu2R?=
 =?us-ascii?q?Rn0FY1Pbv9XizkLJVPmgDq47Mk1O05jReeNxdtT1gAAeF7/YM9PEbjftymo=3D?=
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0EYAADTeBFZhzwBFJVbGQEBAQEBAQEBA?=
 =?us-ascii?q?QEBBwEBAQEBFAEBAQEBAQEBAQEBBwEBAQEBhAyBDI4Bc5BDlhOBMAUXGxwtC4F?=
 =?us-ascii?q?viHI/GAEBAQEBAQEBAQEBAhABAQEKCwkIKC+CMwQCAwEdBAQsGicFAQEBAQEBA?=
 =?us-ascii?q?QEBIgEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQkCExIJAQsVHAM?=
 =?us-ascii?q?DAQEBFSIMChgGDgMBAgYBAUAICAMBIwEvEwYCAQEBD4oNBQm0VIp4AQEBAQYBA?=
 =?us-ascii?q?QEBAQEBASCIPSsLiBSFHQWRI4xghxyGJYdcVYRmg0OGZwKIbIJlhWODK4EFPk9?=
 =?us-ascii?q?8gjEKhDtzAQsBhwGBZwEBAQ?=
X-IPAS-Result: =?us-ascii?q?A0EYAADTeBFZhzwBFJVbGQEBAQEBAQEBAQEBBwEBAQEBFAE?=
 =?us-ascii?q?BAQEBAQEBAQEBBwEBAQEBhAyBDI4Bc5BDlhOBMAUXGxwtC4FviHI/GAEBAQEBA?=
 =?us-ascii?q?QEBAQEBAhABAQEKCwkIKC+CMwQCAwEdBAQsGicFAQEBAQEBAQEBIgEBAQEBAQE?=
 =?us-ascii?q?BAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQkCExIJAQsVHAMDAQEBFSIMChgGD?=
 =?us-ascii?q?gMBAgYBAUAICAMBIwEvEwYCAQEBD4oNBQm0VIp4AQEBAQYBAQEBAQEBASCIPSs?=
 =?us-ascii?q?LiBSFHQWRI4xghxyGJYdcVYRmg0OGZwKIbIJlhWODK4EFPk98gjEKhDtzAQsBh?=
 =?us-ascii?q?wGBZwEBAQ?=
X-IronPort-AV: E=Sophos;i="5.38,313,1491264000";
   d="scan'208";a="292888359"
X-IronPort-Outbreak-Status: No, level 0, Unknown - Unknown
Received: from lists.isc.org ([149.20.1.60])
  by alln-inbound-m.cisco.com with ESMTP; 09 May 2017 08:12:48 +0000
Received: from lists.isc.org (localhost [127.0.0.1])
        by lists.isc.org (Postfix) with ESMTP id 8DA5567ED9D;
        Tue,  9 May 2017 08:12:46 +0000 (UTC)
X-Original-To: sanog at lists.isc.org
Delivered-To: sanog at lists.isc.org
Received: from mx.ams1.isc.org (mx.ams1.isc.org [199.6.1.65])
 by lists.isc.org (Postfix) with ESMTP id CB8E067ED9D
 for <sanog at lists.isc.org>; Tue,  9 May 2017 08:12:42 +0000 (UTC)
Received: from mailgate-4.ics.forth.gr (mailgate-4.ics.forth.gr [139.91.1.7])
 by mx.ams1.isc.org (Postfix) with ESMTP id CAE3924AE08
 for <sanog at sanog.org>; Tue,  9 May 2017 08:12:36 +0000 (UTC)
Received: from av1.ics.forth.gr (av3in.ics.forth.gr. [139.91.1.77])
 by mailgate-4.ics.forth.gr (8.14.5/ICS-FORTH/V10-1.9-GATE-OUT) with ESMTP id
 v498Cbl1099614
 for <sanog at sanog.org>; Tue, 9 May 2017 11:12:39 +0300 (EEST)
X-AuditID: 8b5b9d4d-947ff700000027fb-05-591179f1f142
Received: from enigma.ics.forth.gr (enigma.ics.forth.gr [139.91.1.35])
 by av1.ics.forth.gr (SMTP Outbound / FORTH / ICS) with SMTP id
 B0.F9.10235.1F971195; Tue,  9 May 2017 11:12:36 +0300 (EEST)
Received: from [139.91.92.14] (pavlos-ics.ics.forth.gr [139.91.92.14])
 (authenticated bits=0)
 by enigma.ics.forth.gr (8.15.1//ICS-FORTH/V10.5.0C-EXTNULL-SSL-SASL) with
 ESMTPSA id v498CXhN007392
 (version=TLSv1.2 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO)
 for <sanog at sanog.org>; Tue, 9 May 2017 11:12:33 +0300
X-ICS-AUTH-INFO: Authenticated user: sermpezis at ics.forth.gr
To: <sanog at sanog.org>
References: <bfa955a4-7df7-54a1-ea36-6b817d24c234 at ics.forth.gr>
From: Pavlos Sermpezis <sermpezis at ics.forth.gr>
Message-ID: <7b5a3eb8-ee4b-1100-ae1e-db5cc6c06234 at ics.forth.gr>
Date: Tue, 9 May 2017 11:12:33 +0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
 Thunderbird/45.3.0
MIME-Version: 1.0
In-Reply-To: <bfa955a4-7df7-54a1-ea36-6b817d24c234 at ics.forth.gr>
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprFLMWRmVeSWpSXmKPExsXSHc2orPulUjDSYG4Dl0Xnje9MDoweH650
 swUwRnHZpKTmZJalFunbJXBlfHl7kq3gM0/Fv7ZD7A2MR7m6GDk5JARMJP7eaGTuYuTiEBI4
 wijx9PhMVghnH5PE/JvbGCGq7CSe3PrFAmILC6hLtK4/ABYXERCWePWjCywuJGAvseF2JzOI
 zSagL/Fz4yowmxcofnPmJlYQm0VARWLLoqlg9aICERK3HnawQNQISpyc+QTM5hRwkGhYf5sN
 xGYWMJOYt/khM4QtL7H97RzmCYz8s5C0zEJSNgtJ2QJG5lWMAollxnqZycV6aflFJRl66UWb
 GMEhNtd3B+O5BfaHGAU4GJV4eDXyBCKFWBPLiitzDzFKcDArifBqcwlGCvGmJFZWpRblxxeV
 5qQWH2KU5mBREuc9/CI8SEggPbEkNTs1tSC1CCbLxMEp1cA4x606f+vnJdX6u9YmiZ1n+rpu
 07RPPefeq5tmu7+9v7Hh/tW5il4n30w5wXtcPtdaYEfBs9L7S5PdOVYoH4xe+Ko9I++6W8t0
 6UImXy8Va4V/3S2T7j49bfVfvrVMhU3kVGnfPrWe9V2MuZs/O88NczwvUPk4/s/12WoybizL
 Nr9zN1kxY2agEktxRqKhFnNRcSIArPb8FS0CAAA=
X-Spam-Status: No, score=-4.2 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED,
 RP_MATCHES_RCVD autolearn=ham autolearn_force=no version=3.4.1
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on mx.ams1.isc.org
Subject: [SANOG] survey on BGP prefix hijacking
X-BeenThere: sanog at sanog.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: SANOG General Discussion List <sanog.sanog.org>
List-Unsubscribe: <https://lists.sanog.org/mailman/options/sanog>,
 <mailto:sanog-request at sanog.org?subject=unsubscribe>
List-Archive: <https://lists.sanog.org/pipermail/sanog/>
List-Post: <mailto:sanog at sanog.org>
List-Help: <mailto:sanog-request at sanog.org?subject=help>
List-Subscribe: <https://lists.sanog.org/mailman/listinfo/sanog>,
 <mailto:sanog-request at sanog.org?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; format=flowed
Errors-To: sanog-bounces at sanog.org
Sender: sanog <sanog-bounces at sanog.org>
Return-Path: sanog-bounces+shtsuchi=cisco.com at sanog.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.sanog.org/pipermail/sanog/attachments/20170509/f5c8e87f/attachment-0001.html>
-------------- next part --------------
An embedded message was scrubbed...
From: Pavlos Sermpezis <sermpezis at ics.forth.gr>
Subject: [SANOG] survey on BGP prefix hijacking
Date: Tue, 9 May 2017 11:12:33 +0300
Size: 10288
URL: <https://lists.sanog.org/pipermail/sanog/attachments/20170509/f5c8e87f/attachment-0001.mht>


More information about the sanog mailing list