Re: BGPmon.net /32 hijack alerts

2013-07-26 Thread Job Snijders
On Jul 26, 2013, at 3:09 PM, Grzegorz Janoszka wrote: > On 26-07-13 14:59, NetSecGuy wrote: >> BGPMon.net has alerted me to /32 hijacks. Does anyone have thoughts on >> what this might be and if it's malicious or misconfiguration? >> My first thought is leaked null routes.Is this even worth

Re: BGPmon.net /32 hijack alerts

2013-07-26 Thread Grzegorz Janoszka
On 26-07-13 14:59, NetSecGuy wrote: > BGPMon.net has alerted me to /32 hijacks. Does anyone have thoughts on > what this might be and if it's malicious or misconfiguration? > My first thought is leaked null routes.Is this even worth alerting on? We had similar cases. In most cases they appear

BGPmon.net /32 hijack alerts

2013-07-26 Thread NetSecGuy
BGPMon.net has alerted me to /32 hijacks. Does anyone have thoughts on what this might be and if it's malicious or misconfiguration? Date OriginAS Prefix Type ASPath 2013.07.24 25459 72.52.11.117/32 A 286 25459 25459 25459 2013.07.24 25459 72.52.11