[prev in list] [next in list] [prev in thread] [next in thread] 

List:       nanog
Subject:    Re: Belpak / Beltelecom contact to address a BGP hijacking issue?
From:       Sarah Nataf <sarah.nataf () gmail ! com>
Date:       2012-10-30 8:21:16
Message-ID: CAPnF7e7Lim6mD3gRCO_mTwmmOd1cYpCZLniCX2TqysHMj5oMrg () mail ! gmail ! com
[Download RAW message or body]

Hi,

On Mon, Oct 29, 2012 at 7:03 PM, Anurag Bhatia <me@anuragbhatia.com> wrote:
> Seems like they are not advertising it anymore. AS6697 has transit from
> Level3 and peering/transit from HE. Both of them show path to AS3215 for
> that prefix now.

Yes, seems that the annoucement stopped yesterday, after 5 days:

Origin AS 	First Seen 	Last Seen
AS3215	2012-10-28 17:32:51 UTC	2012-10-30 07:00:20 UTC
AS6697	2012-10-24 09:28:20 UTC	2012-10-29 12:18:10 UTC
AS5396	2012-10-24 09:17:58 UTC	2012-10-24 09:17:58 UTC

Anyway, as we couldn't reach anyone from Belpak, not sure how the
issue was solved. So I think we'll let the 2.2.2.0/24 a few days more
(usually only the 2.2.0.0/16 is advertised by AS3215... but the
2.2.2.0/24 prefix is so often subject to hijacking that we might
permanently add this /24 as well).
-- 
sarah


[prev in list] [next in list] [prev in thread] [next in thread]