That would be my guess. We have had some issues with this in the past with operators from China and Russia.
On Fri, Jan 11, 2013 at 7:51 AM, Jon Lewis <jle...@lewis.org> wrote: > Sounds like someone in Russia is having some fun with as-path prepending > and prefix hijacking. > > > On Fri, 11 Jan 2013, Kenneth McRae wrote: > > Jeff, >> >> We are not announcing the prefix in question nor do we peer with AS42861. >> >> >> -- >> Best Regards, >> >> >> >> Kenneth McRae >> *Director, Network Operations* >> kenneth.mc...@dreamhost.com >> Ph: 818-447-2589 >> www.dreamhost.com >> >> >> >> >> On Fri, Jan 11, 2013 at 7:23 AM, Jeff Kell <jeff-k...@utc.edu> wrote: >> >> Not sure how widespread their "leakage" may be, but Dreamhost just >>> hijacked one of my prefixes... >>> >>> ==============================**==============================** >>>> ======== >>>> Possible Prefix Hijack (Code: 10) >>>> ==============================**==============================** >>>> ======== >>>> Your prefix: 150.182.192.0/18: >>>> Update time: 2013-01-11 14:14 (UTC) >>>> Detected by #peers: 11 >>>> Detected prefix: 150.182.208.0/20 >>>> Announced by: AS26347 (DREAMHOST-AS - New Dream Network, LLC) >>>> Upstream AS: AS42861 (PRIME-LINE-AS JSC "Prime-Line") >>>> ASpath: 8331 42861 42861 42861 26347 >>>> >>> >>> Anyone have a contact there? ASinfo gives net...@dreamhost.com where I >>> have submitted a report, but so far no joy... >>> >>> Jeff >>> >>> >>> >>> >>> >> >> -- >> Best Regards, >> >> >> >> Kenneth McRae >> *Sr. Network Engineer* >> kenneth.mc...@dreamhost.com >> Ph: 323-375-3814 >> www.dreamhost.com >> >> > ------------------------------**------------------------------**---------- > Jon Lewis, MCP :) | I route > Senior Network Engineer | therefore you are > Atlantic Net | > _________ > http://www.lewis.org/~jlewis/**pgp<http://www.lewis.org/~jlewis/pgp>for PGP > public key_________ > -- Best Regards, Kenneth McRae *Director, Network Operations* kenneth.mc...@dreamhost.com Ph: 818-447-2589 www.dreamhost.com
