someone is using my AS number

What is the procedure to have another party to cease and desist in using my AS number?

Thx

Send abuse complaint to the upstreams

Contact the offending upstreams.

Filip

yeah I did they are some MSP in India. No help.

Contact the offending upstreams.

Filip

I would contact upstreams of the upstream then. This is quite a serious offence and they should help you.

Regards,
Filip

Maybe try contacting the RIR?

details help here, and perhaps folk who peer with the upstreams can
just reject routes with your as in them... if, you know, we knew what
that was :slight_smile:

Can you share more details? Perhaps we can put the human social network to good use.

Other than that this is annoying - are right now operationally impacted?

Kind regards,

Job

...and then name & shame publicly. AS-path forgery "for TE" was
never a good idea. Sharing the affected prefix[es]/path[s] would
be good.

Yes, but which of these is more effective?

SCNR

Grüße, Carsten

With some upstreams, I wonder if getting Outlook for iOS might not be just as effective as contacting them…

What is your ASN?

Here is what I got from BGPMon- MY AS is 15053

Detected new prefix: 134.37.2.0/23
Update time: 2019-06-11 17:58 (UTC)
Detected by #peers: 70
Announced by: AS15053 (ROLL-GLOBAL-LLC - Roll Global LLC, US)
Upstream AS: AS15001 (ITCONVERGENCE-COM - IT Convergence Inc., US)

ASpath: 394256 174 702 25213 25213 25213 15001 15053

I tried contacting the upstream provider and they were no help :
Contact - IT Convergence

[

Contact - IT Convergence

Contact us today to learn more about how your business can benefit by partnering with IT Convergence.

](https://www.itconvergence.com/contact/)

Can you share more details? Perhaps we can put the human social network to good use.

Other than that this is annoying - are right now operationally impacted?

Kind regards,

Job

Our records show this happened yesterday and lasted before 2019-06-11
20:24:00, for 2.5 hours total. Maybe that was just by accident.

I'm sort of confused why you're speaking of some ISPs in India. The
incident was more or less local to Finland, wasn't it?

Indeed, I do not see this in the our current version of the
Default-Free Zone, so there may not be a problem for us to solve at
this moment.

I think your reaching out to NANOG or other operator forums is the
correct action. Someone is bound to know someone who knows someone who
can help.

Kind regards,

Job

I talked to the upstream provider on AS 1500. I called the telephone number on the abuse record on ARIN and it went to a MSP in India.

Seems the issue was on AS25213 side. They don’t provide transit to AS15001 at all.

Regards,
Filip

Unfortunately RPKI is not useful in this case.

Question: What else could be done to prevent this?

Alejandro,

Proper filtering from the upstream providers.

.as

Does it work better on XE or XR versions?

/ducks :wink: