Belpak / Beltelecom contact to address a BGP hijacking issue?
sarah.nataf at gmail.com
Tue Oct 30 08:21:16 UTC 2012
On Mon, Oct 29, 2012 at 7:03 PM, Anurag Bhatia <me at anuragbhatia.com> wrote:
> Seems like they are not advertising it anymore. AS6697 has transit from
> Level3 and peering/transit from HE. Both of them show path to AS3215 for
> that prefix now.
Yes, seems that the annoucement stopped yesterday, after 5 days:
Origin AS First Seen Last Seen
AS3215 2012-10-28 17:32:51 UTC 2012-10-30 07:00:20 UTC
AS6697 2012-10-24 09:28:20 UTC 2012-10-29 12:18:10 UTC
AS5396 2012-10-24 09:17:58 UTC 2012-10-24 09:17:58 UTC
Anyway, as we couldn't reach anyone from Belpak, not sure how the
issue was solved. So I think we'll let the 184.108.40.206/24 a few days more
(usually only the 220.127.116.11/16 is advertised by AS3215... but the
18.104.22.168/24 prefix is so often subject to hijacking that we might
permanently add this /24 as well).
More information about the NANOG