[bdNOG] BGP Prefix hijacking

Thu Dec 31 15:01:19 BDT 2015

On Thu, Dec 31, 2015 at 1:31 PM, Md. Mahbubul Alam Reyad 
<mahbubul.reyad at qubee.com.bd> wrote:

> I received the following alert mail from bgpmon where one of our (QUBEE)
> prefix (163.47.76.0/22 ) is announce by an indian ISP.  FYN this IP
> prefix was newly acquired from APNIC and yet to be announce from QUBEE
> (AS45951) network.
--------------------------------

--- kzobair at gmail.com wrote:
From: "Md. Zobair Khan" <kzobair at gmail.com>

You can send an email to that ISP querying about this possible hijack.
Other than that, there is no big primary steps. If the ISP doesn't reply
you back with suitable answers, then you can communicate with their
upstream to filter these routes from that ISP, since it is your prefix.
---------------------------------

You could also email their upstream providers and ask
them to properly filter their customers.  The upstream
providers should allow the ISP to only announce the 
prefixes they're supposed to announce.

scott

>
> _______________________________________________
> nog mailing list
> nog at bdnog.org
> http://mailman.bdnog.org/mailman/listinfo/nog
>
>

_______________________________________________
nog mailing list
nog at bdnog.org
http://mailman.bdnog.org/mailman/listinfo/nog