an IP hijacking attempt

Tue Mar 16 18:00:12 UTC 2021

Hi Brian

On Thu, Mar 11, 2021 at 1:51 PM Brian Turnbow via NANOG <nanog at nanog.org>
wrote:

> Hi Daniel,
>
>
> >
> > Tracing it back to the originator of the route is of course a good first
> step.
>
> Yes, we have done that and the results were not good.

The company that created the LOA is registered in the Seychelles and they
> have IPs that were/are being revoked by Afrinic
> remarks:        * * * * * * * * * * * * * * * * * * * * * * * * *
> remarks:        *                                               *
> remarks:        *      This IP prefix will be reclaimed and     *
> remarks:        *      returned to the free pool by AFRINIC     *
> remarks:        *             on the 5th March 2021.            *
> remarks:        *                                               *
> remarks:        *     For more information, please contact      *
> remarks:        *       AFRINIC at hostmaster at afrinic.net       *
> remarks:        *                                               *
> remarks:        * * * * * * * * * * * * * * * * * * * * * * * * *
>
>
 Would you care to share the said prefix?

Cheers,
Noah
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20210316/f9ae0eed/attachment.html>