Saw it on AusNog too - prompted me to setup external prefix monitoring. Appear to be safe so far JT ________________________________ From: nznog-bounces(a)list.waikato.ac.nz [nznog-bounces(a)list.waikato.ac.nz] on behalf of Tristram Cheer [tristram.cheer(a)ubergroup.co.nz] Sent: Thursday, 3 April 2014 10:45 To: Tony Wicks; nznog(a)list.waikato.ac.nz Subject: Re: [nznog] IP Hijack out of Indosat Thailand Yep, It’s all over AusNog and NANog, Seems to be about 320k of prefix’s affected -- Tristram Cheer Network Architect - Most problems are the result of previous solutions... [cid:imagef91f3c.JPG(a)688fa699.43b7505e] 09 438 5472 Ext 803 |022 412 1985 | PO Box 5083, Whangarei, 0140 tristram.cheer(a)ubergroup.co.nzmailto:tristram.cheer(a)ubergroup.co.nz |www.ubergroup.co.nzhttp://www.uber.co.nz [cid:imageda07de.PNG(a)151a376d.47909fce]http://ubergroup.co.nz/fb [cid:image036f00.PNG(a)379e99a8.469562e0] https://twitter.com/#!/ubergroupltd From: nznog-bounces(a)list.waikato.ac.nz [mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Tony Wicks Sent: Thursday, 3 April 2014 10:40 a.m. To: nznog(a)list.waikato.ac.nz Subject: [nznog] IP Hijack out of Indosat Thailand Is anyone else seeing their IP ranges hijacked out of Thailand ? http://seclists.org/nanog/2014/Apr/49 http://seclists.org/nanog/2014/Apr/55 You received this email because you are subscribed to BGPmon.net. For more details about these updates please visit: https://portal.bgpmon.net/myalerts.php ==================================================================== Possible Prefix Hijack (Code: 10) ==================================================================== Your prefix: 103.9.40.0/22: Prefix Description: FLIP-AS-AP Update time: 2014-04-02 20:29 (UTC) Detected by #peers: 1 Detected prefix: 103.9.40.0/22 Announced by: AS4761 (INDOSAT-INP-AP INDOSAT Internet Network Provider,ID) Upstream AS: AS4651 (THAI-GATEWAY The Communications Authority of Thailand(CAT),TH) ASpath: 18356 38794 4651 4761 ==================================================================== Possible Prefix Hijack (Code: 10) ==================================================================== Your prefix: 103.224.128.0/22: Prefix Description: Flip Update time: 2014-04-02 19:42 (UTC) Detected by #peers: 1 Detected prefix: 103.224.128.0/22 Announced by: AS4761 (INDOSAT-INP-AP INDOSAT Internet Network Provider,ID) Upstream AS: AS4651 (THAI-GATEWAY The Communications Authority of Thailand(CAT),TH) ASpath: 18356 9931 4651 4761
