<div dir="ltr">Thanks Alan for posting this into the sgops mailing list. Really like to see more of such post reaching out to the SG network operator community!<div><br></div><div>Regards,</div><div>Cheeyong</div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sun, Mar 25, 2018 at 12:54 PM, Alan Woo Shian Loong <span dir="ltr"><<a href="mailto:alan@ne.com.sg" target="_blank">alan@ne.com.sg</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi,<div><br></div><div>Starhub have fixed the issue.</div><div><br></div><div>traceroute to 13.228.161.243 (13.228.161.243), 30 hops max, 60 byte packets<br></div><div><div> 1. 203.116.178.1 0.0% 11 0.2 0.2 0.2 0.3 0.1</div><div> 2. 203.117.190.73 0.0% 11 1.8 1.9 1.8 2.0 0.1</div><div> 3. 203.118.15.241 0.0% 11 1.8 1.9 1.6 3.3 0.5</div><div> 4. 203.118.2.30 0.0% 11 1.7 1.8 1.6 2.8 0.3</div><div> 5. <a href="http://an-atl-loc11.starhub.net.sg" target="_blank">an-atl-loc11.starhub.net.sg</a> 0.0% 11 2.2 2.0 1.9 2.2 0.1</div><div> 6. <a href="http://xe-1-0-0.br001.sgp02.ntt.com.sg" target="_blank">xe-1-0-0.br001.sgp02.ntt.com.<wbr>sg</a> 0.0% 11 18.8 3.5 1.7 18.8 5.1</div><div> 7. <a href="http://xe-0-5-0-21.r00.sngpsi02.sg.bb.gin.ntt.net" target="_blank">xe-0-5-0-21.r00.sngpsi02.sg.<wbr>bb.gin.ntt.net</a> 0.0% 11 2.2 2.6 2.1 3.7 0.5</div><div> 8. <a href="http://ae-0.r21.sngpsi05.sg.bb.gin.ntt.net" target="_blank">ae-0.r21.sngpsi05.sg.bb.gin.<wbr>ntt.net</a> 0.0% 11 2.3 2.5 2.3 4.4 0.6</div><div> 9. <a href="http://ae-3.r21.sngpsi07.sg.bb.gin.ntt.net" target="_blank">ae-3.r21.sngpsi07.sg.bb.gin.<wbr>ntt.net</a> 0.0% 11 2.1 2.4 2.1 4.4 0.7</div><div>10. <a href="http://ae-2.r01.sngpsi07.sg.bb.gin.ntt.net" target="_blank">ae-2.r01.sngpsi07.sg.bb.gin.<wbr>ntt.net</a> 0.0% 11 2.4 2.9 2.4 5.0 0.9</div><div>11. <a href="http://ae-1.a01.sngpsi07.sg.bb.gin.ntt.net" target="_blank">ae-1.a01.sngpsi07.sg.bb.gin.<wbr>ntt.net</a> 0.0% 10 2.7 3.4 2.4 8.1 1.8</div><div>12. <a href="http://ae-1.amazon.sngpsi07.sg.bb.gin.ntt.net" target="_blank">ae-1.amazon.sngpsi07.sg.bb.<wbr>gin.ntt.net</a> 0.0% 10 2.4 3.2 2.4 8.1 1.8</div><div>13. ???</div><div>14. ???</div><div>15. ???</div><div>16. ???</div><div>17. 52.93.11.38 0.0% 10 3.3 4.4 3.1 14.7 3.6</div><div>18. 52.93.8.95 0.0% 10 3.4 3.7 3.4 5.0 0.5</div><div>19. 203.83.223.31 0.0% 10 3.9 3.7 3.4 5.4 0.6</div><div>20. ???</div></div><div><br></div><div class="gmail_extra"><div><div class="m_2593772710671200209gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div>Alan Woo</div><div><br></div><div>NewMedia Express Pte Ltd</div><div><div>Mobile: <a href="tel:+65%209857%204266" value="+6598574266" target="_blank">+65 98574266</a></div></div><div>Office: <a href="tel:+65%206636%208873" value="+6566368873" target="_blank">+65 66368873</a></div></div></div></div></div></div></div></div>
<br><div class="gmail_quote">On Sun, Mar 25, 2018 at 12:18 PM, Alan Woo Shian Loong <span dir="ltr"><<a href="mailto:alan@ne.com.sg" target="_blank">alan@ne.com.sg</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi,<div><br></div><div>The following 2 /24 is use by AWS load balancer, and leak from AS206776 via Starhub, application connect to the following maybe subject to MITM attack.</div><div><br></div><div><a href="http://13.228.161.0/24" target="_blank">13.228.161.0/24</a></div><div><a href="http://13.250.135.0/24" target="_blank">13.250.135.0/24</a></div><div><br></div><div>Affected party shall be provider / network using Starhub</div><div><br></div><div>Traceroute from Starhub</div><div><div>traceroute to 13.228.161.243 (13.228.161.243), 30 hops max, 60 byte packets</div><div> 1 203.116.178.1 (203.116.178.1) 0.198 ms 0.171 ms 0.137 ms</div><div> 2 203.117.190.73 (203.117.190.73) 3.758 ms 3.731 ms 3.738 ms</div><div> 3 203.118.15.237 (203.118.15.237) 1.566 ms 203.118.15.241 (203.118.15.241) 3.600 ms 203.118.15.237 (203.118.15.237) 3.608 ms</div><div> 4 203.118.2.26 (203.118.2.26) 3.591 ms 3.618 ms 203.118.2.30 (203.118.2.30) 3.568 ms</div><div> 5 <a href="http://anutli13.starhub.net.sg" target="_blank">anutli13.starhub.net.sg</a> (203.118.12.42) 3.681 ms <a href="http://anutli13.starhub.net.sg" target="_blank">anutli13.starhub.net.sg</a> (203.118.12.46) 3.563 ms 3.500 ms</div><div> 6 <a href="http://histate.telepoint-sofia.nl-ix.net" target="_blank">histate.telepoint-sofia.nl-ix<wbr>.net</a> (193.239.118.20) 205.024 ms 205.113 ms 207.147 ms</div><div> 7 * * *</div><div> 8 * * *</div><div> 9 * * *</div><div>10 * * *</div><div><div class="m_2593772710671200209m_2651344450885322538gmail_signature"><div dir="ltr"><div dir="ltr"><div dir="ltr"><br></div><div dir="ltr">#show ip bgp 13.228.161.243<br></div><div dir="ltr"><div dir="ltr">BGP routing table entry for <a href="http://13.228.161.0/24" target="_blank">13.228.161.0/24</a>, version 190199360</div><div dir="ltr">Paths: (1 available, best #1, table default)</div><div dir="ltr"> 4657 206776 38895<br></div><div><br></div><div><br></div><div>Alan Woo</div><div><br></div><div>NewMedia Express Pte Ltd</div><div><div>Mobile: <a href="tel:+65%209857%204266" value="+6598574266" target="_blank">+65 98574266</a></div></div><div>Office: <a href="tel:+65%206636%208873" value="+6566368873" target="_blank">+65 66368873</a></div></div></div></div></div></div>
</div></div>
</blockquote></div><br></div></div>
<br>______________________________<wbr>_________________<br>
Sgops mailing list<br>
<a href="mailto:Sgops@list.sgnog.net">Sgops@list.sgnog.net</a><br>
<a href="http://list.sgnog.net/listinfo/sgops" rel="noreferrer" target="_blank">http://list.sgnog.net/<wbr>listinfo/sgops</a><br>
<br></blockquote></div><br></div>