<div dir="ltr">Hi Tarun<div><br></div><div><br></div><div><br></div><div>Yeap, it seems true. The best way to get this fixed would be via AS<span style="font-family:arial,sans-serif;font-size:13px">43239 itself and if they don't help (or if they intentionally doing it) then via their further upstreams. </span></div>
<div><span style="font-family:arial,sans-serif;font-size:13px"><br></span></div><div><span style="font-family:arial,sans-serif;font-size:13px"><br></span></div><div><font face="arial, sans-serif">AS43239 contact details are <a href="http://bgp.he.net/AS43239#_whois">here</a> while their upstreams are here. You can find their list of upstreams <a href="http://bgp.he.net/AS43239#_graph4">here</a>. </font><br>
</div><div><font face="arial, sans-serif"><br></font></div><div><span style="font-family:arial,sans-serif">You can always contact large upstream in the chain who is transiting</span><span style="font-family:arial,sans-serif"> the prefixes. If they stop, the impact will get pretty much local. </span><br>
</div><div><font face="arial, sans-serif"><br></font></div><div><font face="arial, sans-serif"><br></font></div><div><font face="arial, sans-serif">Also, FYI I don't see that prefix visible in India from that AS43239 pretty much because most of networks are anyways filtering it. There's only one (and valid) route object for the prefix:</font></div>
<div><font face="arial, sans-serif"><br></font></div><div><font face="courier new, monospace" size="1">Anurags-MacBook-Pro:~ anurag$ whois -h <a href="http://whois.radb.net">whois.radb.net</a> 103.20.212.0</font></div><div>
<font face="courier new, monospace" size="1">route: <a href="http://103.20.212.0/24">103.20.212.0/24</a></font></div><div><font face="courier new, monospace" size="1">descr: E2E Networks Cloud Routes</font></div>
<div><font face="courier new, monospace" size="1">origin: AS132420</font></div><div><font face="courier new, monospace" size="1">country: IN</font></div><div><font face="courier new, monospace" size="1">notify: <a href="mailto:provisioning@e2enetworks.com">provisioning@e2enetworks.com</a></font></div>
<div><font face="courier new, monospace" size="1">mnt-lower: MAINT-E2E-NETWORKS-IN</font></div><div><font face="courier new, monospace" size="1">mnt-routes: MAINT-E2E-NETWORKS-IN</font></div><div><font face="courier new, monospace" size="1">mnt-by: MAINT-E2E-NETWORKS-IN</font></div>
<div><font face="courier new, monospace" size="1">changed: <a href="mailto:provisioning@e2enetworks.com">provisioning@e2enetworks.com</a> 20130603</font></div><div><font face="courier new, monospace" size="1">source: APNIC</font></div>
<div><font face="courier new, monospace" size="1">Anurags-MacBook-Pro:~ anurag$</font></div><div><font face="arial, sans-serif"><br></font></div><div><font face="arial, sans-serif"><br></font></div><div><font face="arial, sans-serif">Good luck in getting it fixed!</font></div>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Aug 28, 2014 at 10:24 PM, Tarun Dua <span dir="ltr"><<a href="mailto:lists@tarundua.net" target="_blank">lists@tarundua.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">AS Number 43239<br>
AS Name SPETSENERGO-AS SpetsEnergo Ltd.<br>
<br>
Has started hijacking our IPv4 prefix, while this prefix was NOT in<br>
production, it worries us that it was this easy for someone to hijack<br>
it.<br>
<br>
<a href="http://bgp.he.net/AS43239#_prefixes" target="_blank">http://bgp.he.net/AS43239#_prefixes</a><br>
<br>
<a href="http://103.20.212.0/22" target="_blank">103.20.212.0/22</a> <- This belongs to us.<br>
<br>
<a href="http://103.238.232.0/22" target="_blank">103.238.232.0/22</a> KNS Techno Integrators Pvt. Ltd.<br>
<a href="http://193.43.33.0/24" target="_blank">193.43.33.0/24</a> hydrocontrol S.C.R.L.<br>
<a href="http://193.56.146.0/24" target="_blank">193.56.146.0/24</a> TRAPIL - Societe des Transports Petroliers par Pipeline<br>
<br>
Where do we complain to get this fixed.<br>
<br>
-Tarun<br>
AS132420<br>
_______________________________________________<br>
sanog mailing list<br>
<a href="mailto:sanog@sanog.org">sanog@sanog.org</a><br>
<a href="https://lists.sanog.org/mailman/listinfo/sanog" target="_blank">https://lists.sanog.org/mailman/listinfo/sanog</a><br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr"><div><font face="arial, helvetica, sans-serif"><br></font></div><div><br></div><font face="arial, helvetica, sans-serif">Anurag Bhatia<br></font><div>
</div><div><font face="arial, helvetica, sans-serif"><a href="http://anuragbhatia.com" target="_blank">anuragbhatia.com</a></font><div><br></div></div><div><font face="arial, helvetica, sans-serif"><a href="http://in.linkedin.com/in/anuragbhatia21" target="_blank">Linkedin</a> | <a href="https://twitter.com/anurag_bhatia" target="_blank">Twitter</a><br>
Skype: <a>anuragbhatia.com</a></font></div><div><font face="arial, helvetica, sans-serif"><a><br></a></font></div><div>PGP Key Fingerprint: 3115 677D 2E94 B696 651B 870C C06D D524 245E 58E2</div></div>
</div>