Login
Login

Extra alert information for the "New IRR route record for AS" alert


This alert type is generated when a route or route6 entry in any IRR database is created that allows your asn to originate a new prefix.

The idea of this alert is to give you a head start on when someone may be creating malicious route or route6 database entries to allow them to originate prefixes on your network falsely (typically with the goal to evade firewalls or other security apparatus)

This alert does not necessarily mean that something bad is happening, but if you are unaware of why the new database entry has been generated then you should likely investigate to ensure that there is nothing suspicious about the new entry.


← All knowledge base articles