[159465] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Dreamhost hijacking my prefix...

daemon@ATHENA.MIT.EDU (Kenneth McRae)
Fri Jan 11 10:58:21 2013

In-Reply-To: <Pine.LNX.4.61.1301111050540.26706@soloth.lewis.org>
Date: Fri, 11 Jan 2013 07:56:46 -0800
From: Kenneth McRae <kenneth.mcrae@dreamhost.com>
To: Jon Lewis <jlewis@lewis.org>
Cc: nanog <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

That would be my guess.  We have had some issues with this in the past with
operators from China and Russia.

On Fri, Jan 11, 2013 at 7:51 AM, Jon Lewis <jlewis@lewis.org> wrote:

> Sounds like someone in Russia is having some fun with as-path prepending
> and prefix hijacking.
>
>
> On Fri, 11 Jan 2013, Kenneth McRae wrote:
>
>  Jeff,
>>
>> We are not announcing the prefix in question nor do we peer with AS42861.
>>
>>
>> --
>> Best Regards,
>>
>>
>>
>> Kenneth McRae
>> *Director, Network Operations*
>> kenneth.mcrae@dreamhost.com
>> Ph: 818-447-2589
>> www.dreamhost.com
>>
>>
>>
>>
>> On Fri, Jan 11, 2013 at 7:23 AM, Jeff Kell <jeff-kell@utc.edu> wrote:
>>
>>  Not sure how widespread their "leakage" may be, but Dreamhost just
>>> hijacked one of my prefixes...
>>>
>>>  ==============================**==============================**
>>>> ========
>>>> Possible Prefix Hijack (Code: 10)
>>>> ==============================**==============================**
>>>> ========
>>>> Your prefix:          150.182.192.0/18:
>>>> Update time:          2013-01-11 14:14 (UTC)
>>>> Detected by #peers:   11
>>>> Detected prefix:      150.182.208.0/20
>>>> Announced by:         AS26347 (DREAMHOST-AS - New Dream Network, LLC)
>>>> Upstream AS:          AS42861 (PRIME-LINE-AS JSC "Prime-Line")
>>>> ASpath:               8331 42861 42861 42861 26347
>>>>
>>>
>>> Anyone have a contact there?  ASinfo gives netops@dreamhost.com where I
>>> have submitted a report, but so far no joy...
>>>
>>> Jeff
>>>
>>>
>>>
>>>
>>>
>>
>> --
>> Best Regards,
>>
>>
>>
>> Kenneth McRae
>> *Sr. Network Engineer*
>> kenneth.mcrae@dreamhost.com
>> Ph: 323-375-3814
>> www.dreamhost.com
>>
>>
> ------------------------------**------------------------------**----------
>  Jon Lewis, MCP :)           |  I route
>  Senior Network Engineer     |  therefore you are
>  Atlantic Net                |
> _________ http://www.lewis.org/~jlewis/**pgp<http://www.lewis.org/~jlewis/pgp>for PGP public key_________
>



-- 
Best Regards,



Kenneth McRae
*Director, Network Operations*
kenneth.mcrae@dreamhost.com
Ph: 818-447-2589
www.dreamhost.com

home help back first fref pref prev next nref lref last post