[AusNOG] BGPMon/Thailand AS4761 Hijacking

[Tim March]

Not suggesting AS4761's actions are malicious, but there was a pretty
cool presentation on BGP security at Def a few years back that's worth
a look...

	Slides:
https://www.defcon.org/images/defcon-16/dc16-presentations/defcon-16-pilosov-kapela.pdf

	Video: https://www.youtube.com/watch?v=S0BM6aB90n8


T.

On 3/04/14 8:00 AM, Paul Gear wrote:
> They just started doing it only minutes ago for our prefixes.
> 
> On 04/03/2014 05:34 AM, Bill Walker wrote:
>> I see the same for all our prefixs:
>>
>> Announced by:         AS4761 (INDOSAT-INP-AP INDOSAT Internet Network
>> Provider,ID)
>>
>>
>> On 2014-04-03 08:13, Octavio Alvarez wrote:
>>> On 02/04/14 12:07, Tristram Cheer wrote:
>>> Hi All,
>>>
>>> Is anyone else getting alerts that AS4761 is hijacking IP ranges? I’ve
>>> just got alerting from BGPMon that all of our ASN’s announced prefix’s
>>> are being announced by AS4761. So far it’s only showing up at a peer in
>>> Thailand.
>>>
>>> Some people at the NANOG list have been reporting the same issue.
> 
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog

-- 
PGP/GNUPG Public Key: http://d3vnu11.com/pub.key