We are getting multiple alerts for a mix of our and customers prefixes. Could someone from HE tell if they started filtering yet ?
Erik Bais Verstuurd vanaf mijn iPad Op 2 apr. 2014 om 21:21 heeft Felix Aronsson <fe...@mrfriday.com> het volgende geschreven: > Seeing the same here for a /21. This seems to have happened before with > AS4761? See http://www.bgpmon.net/hijack-by-as4761-indosat-a-quick-report/from > january 2011. > > > On Wed, Apr 2, 2014 at 8:51 PM, Joseph Jenkins > <j...@breathe-underwater.com>wrote: > >> So I setup BGPMON for my prefixes and got an alert about someone in >> Thailand announcing my prefix. Everything looks fine to me and I've >> checked a bunch of different Looking Glasses and everything announcing >> correctly. >> >> I am assuming I should be contacting the provider about their >> misconfiguration and announcing my prefixes and get them to fix it. Any >> other recommendations? >> >> Is there a way I can verify what they are announcing just to make sure they >> are still doing it? >> >> Here is the alert for reference: >> >> Your prefix: 8.37.93.0/24: >> >> Update time: 2014-04-02 18:26 (UTC) >> >> Detected by #peers: 2 >> >> Detected prefix: 8.37.93.0/24 >> >> Announced by: AS4761 (INDOSAT-INP-AP INDOSAT Internet Network >> Provider,ID) >> >> Upstream AS: AS4651 (THAI-GATEWAY The Communications Authority of >> Thailand(CAT),TH) >> >> ASpath: 18356 9931 4651 4761 >>
