nanog mailing list archives
Re: Prefix hijack by INDOSAT AS4795 / AS4761
From: Pierre Emeriaud <petrus.lt () gmail com>
Date: Thu, 26 Mar 2015 15:46:51 +0100
Hi, 2015-03-26 15:08 GMT+01:00 Randy <amps () djlab com>:
On Thursday March 26th 2015 at 12:18 UTC (and on-going) we are seeing more specifics on one of our prefixes. Anyone else seeing similar or is it just us? 198.98.180.0/23 4795 4795 4761 9304 40633 18978 4436 29889 198.98.182.0/23 4795 4795 4761 9304 40633 18978 4436 29889
We (as3215) are seeing almost the same path with 40633 18978 3257 3215, for some quite a lot of prefixes. Some alerts from bgpmon: 193.251.32.0/20 271 6939 40633 18978 3257 3215 193.251.32.0/20 271 6939 40633 18978 3257 3215 We are not directly connected to 3257. Looks like 18978 deaggregated to /20 and reannounced to 40633 (LAIX). Rgds, pierre
Current thread:
- Re: Prefix hijack by INDOSAT AS4795 / AS4761, (continued)
- Re: Prefix hijack by INDOSAT AS4795 / AS4761 Chuck Anderson (Mar 26)
- Re: Prefix hijack by INDOSAT AS4795 / AS4761 Paul S. (Mar 26)
- Re: Prefix hijack by INDOSAT AS4795 / AS4761 Andree Toonk (Mar 26)
- RE: Prefix hijack by INDOSAT AS4795 / AS4761 Peter Rocca (Mar 26)
- RE: More specifics from AS18978 [was: Prefix hijack by INDOSAT AS4795 / AS4761] Randy (Mar 26)
- RE: More specifics from AS18978 [was: Prefix hijack by INDOSAT AS4795 / AS4761] Nick Rose (Mar 26)
- RE: More specifics from AS18978 [was: Prefix hijack by INDOSAT AS4795 / AS4761] Nick Rose (Mar 26)
- Re: More specifics from AS18978 [was: Prefix hijack by INDOSAT AS4795 / AS4761] ML (Mar 26)
- Re: More specifics from AS18978 Job Snijders (Mar 27)
- Re: More specifics from AS18978 Mark Tinka (Mar 27)