One of the most common reasons we see this is from ‘redist connected’ without any sanity check or prefix filter.
> On Mar 30, 2020, at 5:49 PM, Jeremy Lumby <[log in to unmask]> wrote:
>
> Abhi,
>
> It is not as much a question about filtering prefixes, it is more a question of why your network would originate 206.108.255.0/24
>
> Jeremy Lumby
> Minnesota VoIP
> 9217 17th Ave S #216
> Bloomington, MN 55425
> M: 612-355-7740
> D: 612-392-6814
> F: 952-873-7425
> [log in to unmask]
>
>
>
> From: MICE Discuss [mailto:[log in to unmask] ] On Behalf Of Abhi Devireddy
> Sent: Monday, March 30, 2020 5:29 PM
> To: [log in to unmask]
> Subject: Re: [MICE-DISCUSS] BGP alerts about AS 53740 (OPTBIT)
>
> Frank,
> That's really interesting. I'm sending QRator an unfiltered BGP feed and that might be triggering the error(?).
> I'll try to filter my feed to QRator to deny the MICE prefix and see if that fixes it.
>
> Open to suggestions as well.
> Abhi
> From: MICE Discuss <[log in to unmask] > on behalf of Frank Bulk <[log in to unmask] >
> Sent: Monday, March 30, 2020 5:11 PM
> To: [log in to unmask] <[log in to unmask] >
> Subject: [MICE-DISCUSS] BGP alerts about AS 53740 (OPTBIT)
>
> Curious if anyone can make sense of this alert from QRator. Are they suggesting OPTBIT is advertising MICE’s /24?
>
> I’ve seen this come and go since Sunday night at 10:09 pm Central.
>
> Frank
>
> From: Radar by Qrator <[log in to unmask] >
> Sent: Monday, March 30, 2020 2:49 AM
>
> Subject: [BGP ALERT] [HIGH] Created Hijacks
>
> Time: 30.03.2020 07:42:00 UTC
> Created Hijacks
> New IPv4 incidents:
> Target Prefix
> Target ASN
> Affected prefix
> Affected ASN
> Severity
> Propagation
> 206.108.255.0/24
> 18883 (FIBERNET-NETWORK-OPERATIONS-CENTER)
> 206.108.255.0/24
> 53740 (OPTBIT)
> High
> 1
> AS Names involved in the incident:
> AS18883 (FIBERNET-NETWORK-OPERATIONS-CENTER), AS53740 (OPTBIT)
> Active IPv4 incident count: 16
> Radar by Qrator
>
> To unsubscribe from the MICE-DISCUSS list, click the following link:
> http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1
>
> To unsubscribe from the MICE-DISCUSS list, click the following link:
> http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1
> To unsubscribe from the MICE-DISCUSS list, click the following link:
> http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1
