Re: Dreamhost hijacking my prefix...

[Jon Lewis <jlewis () lewis org>]

Sounds like someone in Russia is having some fun with as-path prepending 
and prefix hijacking.

On Fri, 11 Jan 2013, Kenneth McRae wrote:

> Jeff,
>
> We are not announcing the prefix in question nor do we peer with AS42861.
>
>
> --
> Best Regards,
>
>
>
> Kenneth McRae
> *Director, Network Operations*
> kenneth.mcrae () dreamhost com
> Ph: 818-447-2589
> www.dreamhost.com
>
>
>
> On Fri, Jan 11, 2013 at 7:23 AM, Jeff Kell <jeff-kell () utc edu> wrote:
>
> > Not sure how widespread their "leakage" may be, but Dreamhost just
> > hijacked one of my prefixes...
> >
> > > ====================================================================
> > > Possible Prefix Hijack (Code: 10)
> > > ====================================================================
> > > Your prefix:          150.182.192.0/18:
> > > Update time:          2013-01-11 14:14 (UTC)
> > > Detected by #peers:   11
> > > Detected prefix:      150.182.208.0/20
> > > Announced by:         AS26347 (DREAMHOST-AS - New Dream Network, LLC)
> > > Upstream AS:          AS42861 (PRIME-LINE-AS JSC "Prime-Line")
> > > ASpath:               8331 42861 42861 42861 26347
> >
> > Anyone have a contact there?  ASinfo gives netops () dreamhost com where I
> > have submitted a report, but so far no joy...
> >
> > Jeff
>
>
> --
> Best Regards,
>
>
>
> Kenneth McRae
> *Sr. Network Engineer*
> kenneth.mcrae () dreamhost com
> Ph: 323-375-3814
> www.dreamhost.com

----------------------------------------------------------------------
 Jon Lewis, MCP :)           |  I route
 Senior Network Engineer     |  therefore you are
 Atlantic Net                |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________