[170606] in North American Network Operators' Group
RE: BGPMON Alert Questions
daemon@ATHENA.MIT.EDU (Kate Gerry)
Wed Apr 2 15:07:52 2014
From: Kate Gerry <kate@quadranet.com>
To: Joseph Jenkins <joe@breathe-underwater.com>, "nanog@nanog.org"
<nanog@nanog.org>
Date: Wed, 2 Apr 2014 11:59:39 -0700
In-Reply-To: <CACUUO4Gc6itVxCQJsEiT_FXAbvm_vSRoQy7o7S1fy_GcrY291Q@mail.gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
I just got the same thing.
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Possible Prefix Hijack (Code: 10)
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Your prefix: 173.44.32.0/19:=20
Prefix Description: AS8100=20
Update time: 2014-04-02 18:40 (UTC)
Detected by #peers: 1
Detected prefix: 173.44.32.0/19=20
Announced by: AS4761 (INDOSAT-INP-AP INDOSAT Internet Network Provi=
der,ID)
Upstream AS: AS4651 (THAI-GATEWAY The Communications Authority of =
Thailand(CAT),TH)
ASpath: 18356 38794 4651 4761=20
Alert details: https://portal.bgpmon.net/alerts.php?details&alert_id=
=3D41639483
Mark as false alert: https://portal.bgpmon.net/fp.php?aid=3D41639483
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Possible Prefix Hijack (Code: 10)
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Your prefix: 173.205.80.0/20:=20
Prefix Description: AS8100=20
Update time: 2014-04-02 18:40 (UTC)
Detected by #peers: 1
Detected prefix: 173.205.80.0/20=20
Announced by: AS4761 (INDOSAT-INP-AP INDOSAT Internet Network Provi=
der,ID)
Upstream AS: AS4651 (THAI-GATEWAY The Communications Authority of =
Thailand(CAT),TH)
ASpath: 18356 38794 4651 4761=20
Alert details: https://portal.bgpmon.net/alerts.php?details&alert_id=
=3D41639484
Mark as false alert: https://portal.bgpmon.net/fp.php?aid=3D41639484
--
Kate Gerry
Network Manager
kate@quadranet.com
1-888-5-QUADRA Ext 206=A0|=A0www.QuadraNet.com
Dedicated Servers, Colocation, Cloud Services and more.
Datacenters in Los Angeles, Dallas and Miami.
Follow us on: =A0
-----Original Message-----
From: Joseph Jenkins [mailto:joe@breathe-underwater.com]=20
Sent: Wednesday, April 2, 2014 11:52 AM
To: nanog@nanog.org
Subject: BGPMON Alert Questions
So I setup BGPMON for my prefixes and got an alert about someone in Thailan=
d announcing my prefix. Everything looks fine to me and I've checked a bun=
ch of different Looking Glasses and everything announcing correctly.
I am assuming I should be contacting the provider about their misconfigurat=
ion and announcing my prefixes and get them to fix it. Any other recommend=
ations?
Is there a way I can verify what they are announcing just to make sure they=
are still doing it?
Here is the alert for reference:
Your prefix: 8.37.93.0/24:
Update time: 2014-04-02 18:26 (UTC)
Detected by #peers: 2
Detected prefix: 8.37.93.0/24
Announced by: AS4761 (INDOSAT-INP-AP INDOSAT Internet Network
Provider,ID)
Upstream AS: AS4651 (THAI-GATEWAY The Communications Authority of
Thailand(CAT),TH)
ASpath: 18356 9931 4651 4761
