[nsp-sec] Prefix hijack from AS4761

[Rodney Joffe]

There are number of reports currently on the NANOG list reporting the same issue. Seems quite widespread….

On Apr 2, 2014, at 3:25 PM, Alfredo Sola <alfredo at solucionesdinamicas.net> wrote:

> ----------- nsp-security Confidential --------
> 
> 
> 	Hi,
> 
> 	We have received alerts from BGPMon that AS4761 (INDOSAT) is hijacking some of our prefixes. It looks a bit like a misconfiguration because they are announcing short prefixes (31.24.120.0/21) rather than deaggregate that into /24s.
> 
> 	Have anybody else seen it? Does anybody have a contact (trusted or otherwise) around there?
> 
> 	Thanks!
> 
> -- 
> Alfredo Sola
> http://www.tecnocratica.net/
> 
> 
> 
> 
> 
> 
> 
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
> 
> Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
> community. Confidentiality is essential for effective Internet security counter-measures.
> _______________________________________________