[GTER] Sequestro de prefixo...

[Eduardo Schoedler]

http://www.bgpmon.net/hijack-by-as4761-indosat-a-quick-report/


2014-04-02 23:28 GMT-03:00 Gustavo Rodrigues Ramos <gustavo at nexthop.com.br>:

> Marcelo,
>
> Esse mesmo alerta também foi comentado em outras listas. O pessoal do
> BGPmon publicou no twitter [1] que detectaram alertas para mais de 400k
> prefixos.
>
> O volume de atualizações de anúncios deste AS [2] desde 18h até 21h UTC
> também indica que "alguém configurou algo errado"...
>
> [1] https://twitter.com/bgpmon/status/451473684440416256
> [2] https://stat.ripe.net/AS4651#tabId=routing
>
> Abraços,
> Gustavo.
>
>
> On Wed, Apr 2, 2014 at 5:21 PM, Marcelo Seabra <marcelo.seabra at ps5.com.br
> >wrote:
>
> > Aparentemente o anunci dos meus prefixos está normal na ripe.net
> > Vou considerar como alarme falso... e ficar de olho claro...
> >
> >      o
> >        *13*RRCs see*102*peers announcing*189.50.95.0/24*originated
> >        byAS28327 <https://stat.ripe.net/AS28327>.expand everything
> >          +
> >            ?RRC00 in*Amsterdam, Netherlands*sees*1*ASN
> >            originating/189.50.95.0/24/.AS28327
> >          +
> >            ?RRC01 in*London, United Kingdom*sees*1*ASN
> >            originating/189.50.95.0/24/.AS28327
> >          +
> >            ?RRC03 in*Amsterdam, Netherlands*sees*1*ASN
> >            originating/189.50.95.0/24/.AS28327
> >          +
> >            ?RRC04 in*Geneva, Switzerland*sees*1*ASN
> >            originating/189.50.95.0/24/.AS28327
> >          +
> >            ?RRC05 in*Vienna, Austria*sees*1*ASN
> >            originating/189.50.95.0/24/.AS28327
> >          +
> >            ?RRC06 in*Tokyo, Japan*sees*1*ASN
> >            originating/189.50.95.0/24/.AS28327
> >          +
> >            ?RRC07 in*Stockholm, Sweden*sees*1*ASN
> >            originating/189.50.95.0/24/.AS28327
> >          +
> >            ?RRC10 in*Milan, Italy*sees*1*ASN
> >            originating/189.50.95.0/24/.AS28327
> >          +
> >            ?RRC11 in*New York City, New York, US*sees*1*ASN
> >            originating/189.50.95.0/24/.AS28327
> >          +
> >            ?RRC12 in*Frankfurt, Germany*sees*1*ASN
> >            originating/189.50.95.0/24/.AS28327
> >          +
> >            ?RRC13 in*Moscow, Russian Federation*sees*1*ASN
> >            originating/189.50.95.0/24/.AS28327
> >          +
> >            ?RRC14 in*Palo Alto, California, US*sees*1*ASN
> >            originating/189.50.95.0/24/.AS28327
> >          +
> >            ?RRC15 in*Sao Paulo, Brazil*sees*1*ASN
> >            originating/189.50.95.0/24/.AS28327
> >
> >
> >
> >
> > --
> > gter list    https://eng.registro.br/mailman/listinfo/gter
> >
> --
> gter list    https://eng.registro.br/mailman/listinfo/gter
>



-- 
Eduardo Schoedler