[174195] in North American Network Operators' Group
Re: Prefix hijacking, how to prevent and fix currently
daemon@ATHENA.MIT.EDU (Mark Andrews)
Thu Aug 28 23:34:30 2014
X-Original-To: nanog@nanog.org
To: Tarun Dua <lists@tarundua.net>
From: Mark Andrews <marka@isc.org>
In-reply-to: Your message of "Thu, 28 Aug 2014 22:25:25 +0530."
<CAAjbWEr_o+yQY1T72JMvJ_Nw2Eu2L7=TzZ0dc33mhodo5JB=yw@mail.gmail.com>
Date: Fri, 29 Aug 2014 13:28:38 +1000
Cc: nanog@nanog.org
Errors-To: nanog-bounces@nanog.org
See "whois -r AS43239".
The long term solution is to deploy RPKI and only use
transits which use RPKI. No RPKI support => no business.
Additionally make RPKI a peering requirement.
Mark
In message <CAAjbWEr_o+yQY1T72JMvJ_Nw2Eu2L7=TzZ0dc33mhodo5JB=yw@mail.gmail.com>
, Tarun Dua writes:
> AS Number 43239
> AS Name SPETSENERGO-AS SpetsEnergo Ltd.
>
> Has started hijacking our IPv4 prefix, while this prefix was NOT in
> production, it worries us that it was this easy for someone to hijack
> it.
>
> http://bgp.he.net/AS43239#_prefixes
>
> 103.20.212.0/22 <- This belongs to us.
>
> 103.238.232.0/22 KNS Techno Integrators Pvt. Ltd.
> 193.43.33.0/24 hydrocontrol S.C.R.L.
> 193.56.146.0/24 TRAPIL - Societe des Transports Petroliers par Pipeline
>
> Where do we complain to get this fixed.
>
> -Tarun
> AS132420
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka@isc.org
