Re: Prefix-Hijack by AS7514

[Jared Mauch]

On Fri, Jul 17, 2015 at 10:47:38AM +, Wolfgang Tremmel wrote:
> 
> > On 17.07.2015, at 12:03, Mark Tinka  wrote:
> > 
> > Some countries I know do this for their exchange points. But
> > by-and-large, it is not scalable. Same goes for AS_PATH lists for peering.
> 
> it does scale.
> We do this for all our routeservers at all exchange points we operate.
> In Frankfurt we have 745 peers on our routeservers.

Scale has become my favorite term from vendors that sets off
alarm bells.

The problem is usually limited by someones imagination like
"why would you have more than 1 comment/remark", or "what do you mean
a customer has 200k prefixes registered".

it all depends on who/where and what role you play.

We have tried prefix filtering peers before.  It's an
excercise in frustration when it comes to vendors ability to
ingest the large sets and/or changes.  I talked about this
privately and at things like IEPG.

http://iepg.org/2014-03-02-ietf89/ietf89_iepg_jmauch.pdf

The situation and technology haven't substantively changed
in the interim.

- Jared

-- 
Jared Mauch  | pgp key available via finger from ja...@puck.nether.net
clue++;  | http://puck.nether.net/~jared/  My statements are only mine.

AW: Prefix-Hijack by AS7514

[Jürgen Jaritsch]

Wolfgang, it's unfair ... you do not have to deal with hardware routers :).

Install AS_PATH ACL and prefix list on a Cisco router (e.g. with an 
RSP720-3CXL) and you'll run into lots of pain ...


best regards

Jürgen Jaritsch
Head of Network & Infrastructure

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-5-0556-300
Telefax: +43-5-0556-500

E-Mail: j...@anexia.at 
Web: http://www.anexia.at

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
Geschäftsführer: Alexander Windbichler
Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601


-Ursprüngliche Nachricht-
Von: NANOG [mailto:nanog-boun...@nanog.org] Im Auftrag von Wolfgang Tremmel
Gesendet: Freitag, 17. Juli 2015 12:48
An: nanog@nanog.org
Betreff: Re: Prefix-Hijack by AS7514


> On 17.07.2015, at 12:03, Mark Tinka  wrote:
> 
> Some countries I know do this for their exchange points. But
> by-and-large, it is not scalable. Same goes for AS_PATH lists for peering.

it does scale.
We do this for all our routeservers at all exchange points we operate.
In Frankfurt we have 745 peers on our routeservers.

(And: we are not a country but an exchange point operator :-)

best regards
Wolfgang

-- 
Wolfgang Tremmel e-mail: wolfgang.trem...@de-cix.net
DE-CIX Management GmbH  
Lindleystr. 12, 60314 Frankfurt 
Geschaeftsfuehrer Harald A. SummaFax: +49 69 4056 2716
Registergericht AG Koeln, HRB 51135  http://www.de-cix.net
Zentrale: Lichtstr. 43i, 50825 Koeln

Re: Prefix-Hijack by AS7514

[Mark Tinka]

On 17/Jul/15 12:47, Wolfgang Tremmel wrote:
> it does scale.
> We do this for all our routeservers at all exchange points we operate.
> In Frankfurt we have 745 peers on our routeservers.

So you have prefix and AS_PATH lists for each of the members you peer
with that strictly define the prefixes they will announce to your route
server?

>
> (And: we are not a country but an exchange point operator :-)

One learns something new everyday...

Mark.

Re: Prefix-Hijack by AS7514

[Wolfgang Tremmel]

> On 17.07.2015, at 12:03, Mark Tinka  wrote:
> 
> Some countries I know do this for their exchange points. But
> by-and-large, it is not scalable. Same goes for AS_PATH lists for peering.

it does scale.
We do this for all our routeservers at all exchange points we operate.
In Frankfurt we have 745 peers on our routeservers.

(And: we are not a country but an exchange point operator :-)

best regards
Wolfgang

-- 
Wolfgang Tremmel e-mail: wolfgang.trem...@de-cix.net
DE-CIX Management GmbH  
Lindleystr. 12, 60314 Frankfurt 
Geschaeftsfuehrer Harald A. SummaFax: +49 69 4056 2716
Registergericht AG Koeln, HRB 51135  http://www.de-cix.net
Zentrale: Lichtstr. 43i, 50825 Koeln

Re: AW: AW: Prefix-Hijack by AS7514

[Mark Tinka]

On 17/Jul/15 11:46, Matsuzaki Yoshinobu wrote:
> Yes, I agree, and we have done that.  How about peering partners -
> which is our case this time.  Is it feasible to maintain strict
> inbound prefix filters for all peering relationships?

To be honest, not really.

Some countries I know do this for their exchange points. But
by-and-large, it is not scalable. Same goes for AS_PATH lists for peering.

One can be liberal at peering points but have max-prefix as a basic
protection mechanism (which is what we do).

Of course, IRR's are the other way to go.

Mark.

Re: AW: AW: Prefix-Hijack by AS7514

[Matsuzaki Yoshinobu]

Colin Johnston  wrote
> even if customer router crash fault, should have been filtered via
> prefix list blocking to only allow customer network prefixs to be
> anounced onwards ? as per best practice

Yes, I agree, and we have done that.  How about peering partners -
which is our case this time.  Is it feasible to maintain strict
inbound prefix filters for all peering relationships?
-
Matsuzaki Yoshinobu 
 - IIJ/AS2497  INOC-DBA: 2497*629

Re: AW: AW: Prefix-Hijack by AS7514

[Colin Johnston]

even if customer router crash fault, should have been filtered via prefix list 
blocking to only allow customer network prefixs to be anounced onwards ? as per 
best practice

colin
Sent from my iPhone

> On 17 Jul 2015, at 09:55, Matsuzaki Yoshinobu  wrote:
> 
> Colin Johnston  wrote
>> any idea why error happened ?
>> what config needs fixing to mitigate mistake?
>> it was easy to see problem via ripe atlas :)
> 
> I just got brief explanation from a friend in AS7514.
> 
> A router in their network suddenly went out of control, and it seems
> this somehow generated wrong routing information.  They solved the
> issue by disconnecting the router and are now investigating it.
> -
> Matsuzaki Yoshinobu 
> - IIJ/AS2497  INOC-DBA: 2497*629

Re: AW: AW: Prefix-Hijack by AS7514

[Matsuzaki Yoshinobu]

Colin Johnston  wrote
> any idea why error happened ?
> what config needs fixing to mitigate mistake?
> it was easy to see problem via ripe atlas :)

I just got brief explanation from a friend in AS7514.

A router in their network suddenly went out of control, and it seems
this somehow generated wrong routing information.  They solved the
issue by disconnecting the router and are now investigating it.
-
Matsuzaki Yoshinobu 
 - IIJ/AS2497  INOC-DBA: 2497*629

Re: AW: AW: Prefix-Hijack by AS7514

[Colin Johnston]

any idea why error happened ?
what config needs fixing to mitigate mistake?
it was easy to see problem via ripe atlas :)

colin

Sent from my iPhone

> On 17 Jul 2015, at 09:32, Matsuzaki Yoshinobu  wrote:
> 
> Date: Fri, 17 Jul 2015 15:38:13 +0900
> "Paul S."  wrote
>> I let IIJ know too, hopefully they'll filter it soon.
> 
> It seems AS7514 stopped the announcements around 06:54UTC.
> 
> I am not sure how BGPmon guesses AS relationships, but it needs
> improvements as it shows IIJ as an upstream of AS7514 wrongly.
> -
> Matsuzaki Yoshinobu 
> - IIJ/AS2497  INOC-DBA: 2497*629

Re: AW: AW: Prefix-Hijack by AS7514

[Matsuzaki Yoshinobu]

Date: Fri, 17 Jul 2015 15:38:13 +0900
"Paul S."  wrote
> I let IIJ know too, hopefully they'll filter it soon.

It seems AS7514 stopped the announcements around 06:54UTC.

I am not sure how BGPmon guesses AS relationships, but it needs
improvements as it shows IIJ as an upstream of AS7514 wrongly.
-
Matsuzaki Yoshinobu 
 - IIJ/AS2497  INOC-DBA: 2497*629

Re: AW: AW: Prefix-Hijack by AS7514

[Paul S.]

I let IIJ know too, hopefully they'll filter it soon.

On 7/17/2015 午後 03:30, Jürgen Jaritsch wrote:

Hi,

we also sent them an mail, but their MX is not reachable for us :(


best regards

Jürgen Jaritsch
Head of Network & Infrastructure

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-5-0556-300
Telefax: +43-5-0556-500

E-Mail: j...@anexia.at
Web: http://www.anexia.at

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
Geschäftsführer: Alexander Windbichler
Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

-Ursprüngliche Nachricht-
Von: Seiichi Kawamura [mailto:kawamu...@mesh.ad.jp]
Gesendet: Freitag, 17. Juli 2015 08:29
An: Jürgen Jaritsch ; Hugo Slabbert 
Cc: 'nanog@nanog.org' 
Betreff: Re: AW: Prefix-Hijack by AS7514

I contacted 7514. They are aware.

-Seiichi

On 2015/07/17 15:23, Jürgen Jaritsch wrote:

We already informed AS2497 but I have no idea if they we'll cooperate.


Best regards


Jürgen Jaritsch
Head of Network & Infrastructure

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-5-0556-300
Telefax: +43-5-0556-500

E-Mail: j...@anexia.at
Web: http://www.anexia.at

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
Geschäftsführer: Alexander Windbichler
Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

-Ursprüngliche Nachricht-
Von: Hugo Slabbert [mailto:hslabb...@stargate.ca]
Gesendet: Freitag, 17. Juli 2015 08:23
An: Jürgen Jaritsch 
Cc: 'nanog@nanog.org' 
Betreff: Re: Prefix-Hijack by AS7514

Seeing the same; a /19.

BGPMon reports an alert at 2015-07-17 05:29 (UTC) and that it's being
accepted by 2497.

--
Hugo Slabbert
Stargate Connections - AS19171

-Original Message-

Date: Fri, 17 Jul 2015 06:15:36 +
From: Jürgen Jaritsch 
To: "'nanog@nanog.org'" 
Subject: Prefix-Hijack by AS7514

Hi,

does anyone else see some prefix hijacks from AS7514? They started to announce 
some of our /24 


Thanks & best regards

Jürgen Jaritsch
Head of Network & Infrastructure

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-5-0556-300
Telefax: +43-5-0556-500

E-Mail: j...@anexia.at<mailto:j...@anexia.at>
Web: http://www.anexia.at<http://www.anexia.at/>

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
Geschäftsführer: Alexander Windbichler
Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

AW: AW: Prefix-Hijack by AS7514

[Jürgen Jaritsch]

Hi,

all affected prefixes starts with 37... no other prefixes from AS42473 are 
affected.


Best regards

Jürgen Jaritsch
Head of Network & Infrastructure

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-5-0556-300
Telefax: +43-5-0556-500

E-Mail: j...@anexia.at 
Web: http://www.anexia.at

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
Geschäftsführer: Alexander Windbichler
Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

-Ursprüngliche Nachricht-
Von: Hank Nussbacher [mailto:h...@efes.iucc.ac.il] 
Gesendet: Freitag, 17. Juli 2015 08:33
An: Jürgen Jaritsch ; Hugo Slabbert 
Cc: 'nanog@nanog.org' 
Betreff: Re: AW: Prefix-Hijack by AS7514

At 06:23 17/07/2015 +, Jürgen Jaritsch wrote:
>We already informed AS2497 but I have no idea if they we'll cooperate.

All prefixes I see have the first octet as being 2 digits rather than 
3.  That is common among about 30 different alerts I have 
received.  Curious if this is common worldwide.

-Hank


>Best regards
>
>
>Jürgen Jaritsch
>Head of Network & Infrastructure
>
>ANEXIA Internetdienstleistungs GmbH
>
>Telefon: +43-5-0556-300
>Telefax: +43-5-0556-500
>
>E-Mail: j...@anexia.at
>Web: http://www.anexia.at
>
>Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
>Geschäftsführer: Alexander Windbichler
>Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601
>
>-Ursprüngliche Nachricht-
>Von: Hugo Slabbert [mailto:hslabb...@stargate.ca]
>Gesendet: Freitag, 17. Juli 2015 08:23
>An: Jürgen Jaritsch 
>Cc: 'nanog@nanog.org' 
>Betreff: Re: Prefix-Hijack by AS7514
>
>Seeing the same; a /19.
>
>BGPMon reports an alert at 2015-07-17 05:29 (UTC) and that it's being
>accepted by 2497.
>
>--
>Hugo Slabbert
>Stargate Connections - AS19171
>
>-----Original Message-
> >Date: Fri, 17 Jul 2015 06:15:36 +
> >From: Jürgen Jaritsch 
> >To: "'nanog@nanog.org'" 
> >Subject: Prefix-Hijack by AS7514
> >
> >Hi,
> >
> >does anyone else see some prefix hijacks from AS7514? They started to 
> announce some of our /24 
> >
> >
> >Thanks & best regards
> >
> >Jürgen Jaritsch
> >Head of Network & Infrastructure
> >
> >ANEXIA Internetdienstleistungs GmbH
> >
> >Telefon: +43-5-0556-300
> >Telefax: +43-5-0556-500
> >
> >E-Mail: j...@anexia.at<mailto:j...@anexia.at>
> >Web: http://www.anexia.at<http://www.anexia.at/>
> >
> >Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
> >Geschäftsführer: Alexander Windbichler
> >Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT 
> U63216601
> >

Re: AW: Prefix-Hijack by AS7514

[Hank Nussbacher]

At 06:23 17/07/2015 +, Jürgen Jaritsch wrote:

We already informed AS2497 but I have no idea if they we'll cooperate.


All prefixes I see have the first octet as being 2 digits rather than 
3.  That is common among about 30 different alerts I have 
received.  Curious if this is common worldwide.


-Hank



Best regards


Jürgen Jaritsch
Head of Network & Infrastructure

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-5-0556-300
Telefax: +43-5-0556-500

E-Mail: j...@anexia.at
Web: http://www.anexia.at

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
Geschäftsführer: Alexander Windbichler
Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

-Ursprüngliche Nachricht-
Von: Hugo Slabbert [mailto:hslabb...@stargate.ca]
Gesendet: Freitag, 17. Juli 2015 08:23
An: Jürgen Jaritsch 
Cc: 'nanog@nanog.org' 
Betreff: Re: Prefix-Hijack by AS7514

Seeing the same; a /19.

BGPMon reports an alert at 2015-07-17 05:29 (UTC) and that it's being
accepted by 2497.

--
Hugo Slabbert
Stargate Connections - AS19171

-Original Message-
>Date: Fri, 17 Jul 2015 06:15:36 +
>From: Jürgen Jaritsch 
>To: "'nanog@nanog.org'" 
>Subject: Prefix-Hijack by AS7514
>
>Hi,
>
>does anyone else see some prefix hijacks from AS7514? They started to 
announce some of our /24 

>
>
>Thanks & best regards
>
>Jürgen Jaritsch
>Head of Network & Infrastructure
>
>ANEXIA Internetdienstleistungs GmbH
>
>Telefon: +43-5-0556-300
>Telefax: +43-5-0556-500
>
>E-Mail: j...@anexia.at<mailto:j...@anexia.at>
>Web: http://www.anexia.at<http://www.anexia.at/>
>
>Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
>Geschäftsführer: Alexander Windbichler
>Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT 
U63216601

>

AW: AW: Prefix-Hijack by AS7514

[Jürgen Jaritsch]

Hi,

we also sent them an mail, but their MX is not reachable for us :(


best regards

Jürgen Jaritsch
Head of Network & Infrastructure

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-5-0556-300
Telefax: +43-5-0556-500

E-Mail: j...@anexia.at 
Web: http://www.anexia.at

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
Geschäftsführer: Alexander Windbichler
Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

-Ursprüngliche Nachricht-
Von: Seiichi Kawamura [mailto:kawamu...@mesh.ad.jp] 
Gesendet: Freitag, 17. Juli 2015 08:29
An: Jürgen Jaritsch ; Hugo Slabbert 
Cc: 'nanog@nanog.org' 
Betreff: Re: AW: Prefix-Hijack by AS7514

I contacted 7514. They are aware.

-Seiichi

On 2015/07/17 15:23, Jürgen Jaritsch wrote:
> We already informed AS2497 but I have no idea if they we'll cooperate.
> 
> 
> Best regards
> 
> 
> Jürgen Jaritsch
> Head of Network & Infrastructure
> 
> ANEXIA Internetdienstleistungs GmbH
> 
> Telefon: +43-5-0556-300
> Telefax: +43-5-0556-500
> 
> E-Mail: j...@anexia.at 
> Web: http://www.anexia.at
> 
> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
> Geschäftsführer: Alexander Windbichler
> Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601
> 
> -Ursprüngliche Nachricht-
> Von: Hugo Slabbert [mailto:hslabb...@stargate.ca] 
> Gesendet: Freitag, 17. Juli 2015 08:23
> An: Jürgen Jaritsch 
> Cc: 'nanog@nanog.org' 
> Betreff: Re: Prefix-Hijack by AS7514
> 
> Seeing the same; a /19.
> 
> BGPMon reports an alert at 2015-07-17 05:29 (UTC) and that it's being 
> accepted by 2497.
> 
> --
> Hugo Slabbert
> Stargate Connections - AS19171
> 
> -Original Message-
>> Date: Fri, 17 Jul 2015 06:15:36 +
>> From: Jürgen Jaritsch 
>> To: "'nanog@nanog.org'" 
>> Subject: Prefix-Hijack by AS7514
>>
>> Hi,
>>
>> does anyone else see some prefix hijacks from AS7514? They started to 
>> announce some of our /24 
>>
>>
>> Thanks & best regards
>>
>> Jürgen Jaritsch
>> Head of Network & Infrastructure
>>
>> ANEXIA Internetdienstleistungs GmbH
>>
>> Telefon: +43-5-0556-300
>> Telefax: +43-5-0556-500
>>
>> E-Mail: j...@anexia.at<mailto:j...@anexia.at>
>> Web: http://www.anexia.at<http://www.anexia.at/>
>>
>> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
>> Geschäftsführer: Alexander Windbichler
>> Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601
>>
> 

Re: AW: Prefix-Hijack by AS7514

[Seiichi Kawamura]

I contacted 7514. They are aware.

-Seiichi

On 2015/07/17 15:23, Jürgen Jaritsch wrote:
> We already informed AS2497 but I have no idea if they we'll cooperate.
> 
> 
> Best regards
> 
> 
> Jürgen Jaritsch
> Head of Network & Infrastructure
> 
> ANEXIA Internetdienstleistungs GmbH
> 
> Telefon: +43-5-0556-300
> Telefax: +43-5-0556-500
> 
> E-Mail: j...@anexia.at 
> Web: http://www.anexia.at
> 
> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
> Geschäftsführer: Alexander Windbichler
> Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601
> 
> -Ursprüngliche Nachricht-
> Von: Hugo Slabbert [mailto:hslabb...@stargate.ca] 
> Gesendet: Freitag, 17. Juli 2015 08:23
> An: Jürgen Jaritsch 
> Cc: 'nanog@nanog.org' 
> Betreff: Re: Prefix-Hijack by AS7514
> 
> Seeing the same; a /19.
> 
> BGPMon reports an alert at 2015-07-17 05:29 (UTC) and that it's being 
> accepted by 2497.
> 
> --
> Hugo Slabbert
> Stargate Connections - AS19171
> 
> -----Original Message-
>> Date: Fri, 17 Jul 2015 06:15:36 +
>> From: Jürgen Jaritsch 
>> To: "'nanog@nanog.org'" 
>> Subject: Prefix-Hijack by AS7514
>>
>> Hi,
>>
>> does anyone else see some prefix hijacks from AS7514? They started to 
>> announce some of our /24 
>>
>>
>> Thanks & best regards
>>
>> Jürgen Jaritsch
>> Head of Network & Infrastructure
>>
>> ANEXIA Internetdienstleistungs GmbH
>>
>> Telefon: +43-5-0556-300
>> Telefax: +43-5-0556-500
>>
>> E-Mail: j...@anexia.at<mailto:j...@anexia.at>
>> Web: http://www.anexia.at<http://www.anexia.at/>
>>
>> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
>> Geschäftsführer: Alexander Windbichler
>> Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601
>>
> 

Re: Prefix-Hijack by AS7514

[Hank Nussbacher]

At 06:15 17/07/2015 +, Jürgen Jaritsch wrote:

Hi,

does anyone else see some prefix hijacks from AS7514? They started to 
announce some of our /24 


Worldwide.

-Hank




Thanks & best regards

Jürgen Jaritsch
Head of Network & Infrastructure

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-5-0556-300
Telefax: +43-5-0556-500

E-Mail: j...@anexia.at
Web: http://www.anexia.at

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
Geschäftsführer: Alexander Windbichler
Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

AW: Prefix-Hijack by AS7514

[Jürgen Jaritsch]

We already informed AS2497 but I have no idea if they we'll cooperate.


Best regards


Jürgen Jaritsch
Head of Network & Infrastructure

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-5-0556-300
Telefax: +43-5-0556-500

E-Mail: j...@anexia.at 
Web: http://www.anexia.at

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
Geschäftsführer: Alexander Windbichler
Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

-Ursprüngliche Nachricht-
Von: Hugo Slabbert [mailto:hslabb...@stargate.ca] 
Gesendet: Freitag, 17. Juli 2015 08:23
An: Jürgen Jaritsch 
Cc: 'nanog@nanog.org' 
Betreff: Re: Prefix-Hijack by AS7514

Seeing the same; a /19.

BGPMon reports an alert at 2015-07-17 05:29 (UTC) and that it's being 
accepted by 2497.

--
Hugo Slabbert
Stargate Connections - AS19171

-Original Message-
>Date: Fri, 17 Jul 2015 06:15:36 +
>From: Jürgen Jaritsch 
>To: "'nanog@nanog.org'" 
>Subject: Prefix-Hijack by AS7514
>
>Hi,
>
>does anyone else see some prefix hijacks from AS7514? They started to announce 
>some of our /24 
>
>
>Thanks & best regards
>
>Jürgen Jaritsch
>Head of Network & Infrastructure
>
>ANEXIA Internetdienstleistungs GmbH
>
>Telefon: +43-5-0556-300
>Telefax: +43-5-0556-500
>
>E-Mail: j...@anexia.at<mailto:j...@anexia.at>
>Web: http://www.anexia.at<http://www.anexia.at/>
>
>Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
>Geschäftsführer: Alexander Windbichler
>Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601
>

Re: Prefix-Hijack by AS7514

[Hugo Slabbert]

Seeing the same; a /19.

BGPMon reports an alert at 2015-07-17 05:29 (UTC) and that it's being 
accepted by 2497.


--
Hugo Slabbert
Stargate Connections - AS19171

-Original Message-

Date: Fri, 17 Jul 2015 06:15:36 +
From: Jürgen Jaritsch 
To: "'nanog@nanog.org'" 
Subject: Prefix-Hijack by AS7514

Hi,

does anyone else see some prefix hijacks from AS7514? They started to announce 
some of our /24 


Thanks & best regards

Jürgen Jaritsch
Head of Network & Infrastructure

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-5-0556-300
Telefax: +43-5-0556-500

E-Mail: j...@anexia.at<mailto:j...@anexia.at>
Web: http://www.anexia.at<http://www.anexia.at/>

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
Geschäftsführer: Alexander Windbichler
Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

Prefix-Hijack by AS7514

[Jürgen Jaritsch]

Hi,

does anyone else see some prefix hijacks from AS7514? They started to announce 
some of our /24 


Thanks & best regards

Jürgen Jaritsch
Head of Network & Infrastructure

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-5-0556-300
Telefax: +43-5-0556-500

E-Mail: j...@anexia.at
Web: http://www.anexia.at

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
Geschäftsführer: Alexander Windbichler
Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601