That would be my guess. We have had some issues with this in the past with operators from China and Russia. On Fri, Jan 11, 2013 at 7:51 AM, Jon Lewis <jlewis@lewis.org> wrote:
Sounds like someone in Russia is having some fun with as-path prepending and prefix hijacking.
On Fri, 11 Jan 2013, Kenneth McRae wrote:
Jeff,
We are not announcing the prefix in question nor do we peer with AS42861.
-- Best Regards,
Kenneth McRae *Director, Network Operations* kenneth.mcrae@dreamhost.com Ph: 818-447-2589 www.dreamhost.com
On Fri, Jan 11, 2013 at 7:23 AM, Jeff Kell <jeff-kell@utc.edu> wrote:
Not sure how widespread their "leakage" may be, but Dreamhost just
hijacked one of my prefixes...
==============================**==============================**
======== Possible Prefix Hijack (Code: 10) ==============================**==============================** ======== Your prefix: 150.182.192.0/18: Update time: 2013-01-11 14:14 (UTC) Detected by #peers: 11 Detected prefix: 150.182.208.0/20 Announced by: AS26347 (DREAMHOST-AS - New Dream Network, LLC) Upstream AS: AS42861 (PRIME-LINE-AS JSC "Prime-Line") ASpath: 8331 42861 42861 42861 26347
Anyone have a contact there? ASinfo gives netops@dreamhost.com where I have submitted a report, but so far no joy...
Jeff
-- Best Regards,
Kenneth McRae *Sr. Network Engineer* kenneth.mcrae@dreamhost.com Ph: 323-375-3814 www.dreamhost.com
------------------------------**------------------------------**---------- Jon Lewis, MCP :) | I route Senior Network Engineer | therefore you are Atlantic Net | _________ http://www.lewis.org/~jlewis/**pgp<http://www.lewis.org/~jlewis/pgp>for PGP public key_________
-- Best Regards, Kenneth McRae *Director, Network Operations* kenneth.mcrae@dreamhost.com Ph: 818-447-2589 www.dreamhost.com