Belpak / Beltelecom contact to address a BGP hijacking issue?

Tue Oct 30 08:21:16 UTC 2012

Hi,

On Mon, Oct 29, 2012 at 7:03 PM, Anurag Bhatia <me at anuragbhatia.com> wrote:
> Seems like they are not advertising it anymore. AS6697 has transit from
> Level3 and peering/transit from HE. Both of them show path to AS3215 for
> that prefix now.

Yes, seems that the annoucement stopped yesterday, after 5 days:

Origin AS 	First Seen 	Last Seen
AS3215	2012-10-28 17:32:51 UTC	2012-10-30 07:00:20 UTC
AS6697	2012-10-24 09:28:20 UTC	2012-10-29 12:18:10 UTC
AS5396	2012-10-24 09:17:58 UTC	2012-10-24 09:17:58 UTC

Anyway, as we couldn't reach anyone from Belpak, not sure how the
issue was solved. So I think we'll let the 2.2.2.0/24 a few days more
(usually only the 2.2.0.0/16 is advertised by AS3215... but the
2.2.2.0/24 prefix is so often subject to hijacking that we might
permanently add this /24 as well).
-- 
sarah