BGP Incident:
Summary:ISPs in Poland hijack ISPs in Brazil
Start:2014-08-06 03:16:00
End:2014-08-28 00:00:00

In another recent hijacking incident, starting at 03:16 UTC on 6 August, two different ISPs in Poland each started hijacking a prefix each from two different ISPs in Brazil. These hijacked routes were only circulated to a small number of other ISPs in Eastern Europe.  The two prefixes, and, were originated by INEA S.A. (AS33868) and INOTEL S.A. (AS44514), respectively. Once originated, they were both routed through the same upstream provider, another INEA S.A. ASN (AS13110) before going to Hurricane Electric (AS6939) and then onto a handful of providers in Eastern Europe. Routes took the following forms.

Affected ASes
ASHow Affected
33868Hijacking ISP
44514Hijacking ISP
52770Victim ISP
28573Victim ISP
Affected AS 'Route Views' Connection Map

(note: not all connections may be shown for big graphs)