nanog mailing list archives
Prefix hijack by AS4761 (was Re: BGPMON Alert Questions)
From: Stephen Fulton <sf () lists esoteric ca>
Date: Wed, 02 Apr 2014 15:10:41 -0400
I'm seeing the same hijack of prefixes by multiple networks under my watch, at 18:40 UTC and 19:06 UTC.
-- Stephen On 2014-04-02 2:51 PM, Joseph Jenkins wrote:
So I setup BGPMON for my prefixes and got an alert about someone in Thailand announcing my prefix. Everything looks fine to me and I've checked a bunch of different Looking Glasses and everything announcing correctly. I am assuming I should be contacting the provider about their misconfiguration and announcing my prefixes and get them to fix it. Any other recommendations? Is there a way I can verify what they are announcing just to make sure they are still doing it? Here is the alert for reference: Your prefix: 8.37.93.0/24: Update time: 2014-04-02 18:26 (UTC) Detected by #peers: 2 Detected prefix: 8.37.93.0/24 Announced by: AS4761 (INDOSAT-INP-AP INDOSAT Internet Network Provider,ID) Upstream AS: AS4651 (THAI-GATEWAY The Communications Authority of Thailand(CAT),TH) ASpath: 18356 9931 4651 4761
Current thread:
- RE: BGPMON Alert Questions, (continued)
- RE: BGPMON Alert Questions John York (Apr 03)
- Re: BGPMON Alert Questions Valdis . Kletnieks (Apr 02)
- Re: BGPMON Alert Questions Randy Bush (Apr 02)
- Re: BGPMON Alert Questions Jeff Kell (Apr 02)
- Re: BGPMON Alert Questions Randy Bush (Apr 02)
- Re: BGPMON Alert Questions Valdis . Kletnieks (Apr 03)
- Re: BGPMON Alert Questions Matthew Walster (Apr 03)
- Re: BGPMON Alert Questions Mingwei Zhang (Apr 02)
- Re: Prefix hijack by AS4761 (was Re: BGPMON Alert Questions) joel jaeggli (Apr 02)
- Re: Prefix hijack by AS4761 (was Re: BGPMON Alert Questions) Bob Snyder (Apr 02)
- Re: BGPMON Alert Questions Bryan Tong (Apr 02)
- Re: BGPMON Alert Questions Bryan Tong (Apr 02)
- Re: BGPMON Alert Questions Bret Clark (Apr 02)
- RE: BGPMON Alert Questions Mike Walter (Apr 02)
- Re: BGPMON Alert Questions Zachary McGibbon (Apr 02)