[159463] in North American Network Operators' Group
Re: Dreamhost hijacking my prefix...
daemon@ATHENA.MIT.EDU (Jon Lewis)
Fri Jan 11 10:52:07 2013
Date: Fri, 11 Jan 2013 10:51:40 -0500 (EST)
From: Jon Lewis <jlewis@lewis.org>
To: Kenneth McRae <kenneth.mcrae@dreamhost.com>
In-Reply-To: <CALBytub=4uD48TEPZr5s5Qo0L3v13jnoft1=3N4NUoEpMAi2rw@mail.gmail.com>
Cc: nanog <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Sounds like someone in Russia is having some fun with as-path prepending
and prefix hijacking.
On Fri, 11 Jan 2013, Kenneth McRae wrote:
> Jeff,
>
> We are not announcing the prefix in question nor do we peer with AS42861.
>
>
> --
> Best Regards,
>
>
>
> Kenneth McRae
> *Director, Network Operations*
> kenneth.mcrae@dreamhost.com
> Ph: 818-447-2589
> www.dreamhost.com
>
>
>
> On Fri, Jan 11, 2013 at 7:23 AM, Jeff Kell <jeff-kell@utc.edu> wrote:
>
>> Not sure how widespread their "leakage" may be, but Dreamhost just
>> hijacked one of my prefixes...
>>
>>> ====================================================================
>>> Possible Prefix Hijack (Code: 10)
>>> ====================================================================
>>> Your prefix: 150.182.192.0/18:
>>> Update time: 2013-01-11 14:14 (UTC)
>>> Detected by #peers: 11
>>> Detected prefix: 150.182.208.0/20
>>> Announced by: AS26347 (DREAMHOST-AS - New Dream Network, LLC)
>>> Upstream AS: AS42861 (PRIME-LINE-AS JSC "Prime-Line")
>>> ASpath: 8331 42861 42861 42861 26347
>>
>> Anyone have a contact there? ASinfo gives netops@dreamhost.com where I
>> have submitted a report, but so far no joy...
>>
>> Jeff
>>
>>
>>
>>
>
>
> --
> Best Regards,
>
>
>
> Kenneth McRae
> *Sr. Network Engineer*
> kenneth.mcrae@dreamhost.com
> Ph: 323-375-3814
> www.dreamhost.com
>
----------------------------------------------------------------------
Jon Lewis, MCP :) | I route
Senior Network Engineer | therefore you are
Atlantic Net |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
