Zum Inhalt
HALOWERK

Netzwerk

hijack suspicion

Collects the observable signs of a route hijack for one prefix and reports which of them are present, with the measurement behind each. Four signs carry different weight. RPKI invalidity is the only hard one: a ROA exists and does not authorise this announcement. An origin AS that appears in the current state but nowhere in the history window is the classic sign, and the response gives the historical origins so the change can be dated.

POST https://netz.halowerk.com/v1/hijack-suspicion

Eingaben

Felder des veröffentlichten Eingabeschemas
FeldTypPflichtBeschreibung
prefixstringJa
expected_asnstringNeinThe AS you expect to announce this prefix. Supplying it turns a general check into a targeted one.
history_daysintegerNein
Vollständiges Eingabeschema anzeigen
{
  "type": "object",
  "required": [
    "prefix"
  ],
  "additionalProperties": false,
  "properties": {
    "prefix": {
      "type": "string",
      "minLength": 4,
      "maxLength": 60
    },
    "expected_asn": {
      "type": "string",
      "maxLength": 15,
      "description": "The AS you expect to announce this prefix. Supplying it turns a general check into a targeted one."
    },
    "history_days": {
      "type": "integer",
      "minimum": 1,
      "maximum": 180,
      "default": 30
    }
  }
}

Originalschema öffnen

Veröffentlichtes Eingabebeispiel

{
  "prefix": "8.8.8.0/24",
  "expected_asn": "AS15169",
  "history_days": 30
}

Ergebnis & Dokumentation

Maschinenlesbare Dokumentation dieses Hubs

Quelle dieser Seite: der veröffentlichte HALOWERK-Katalog. Stand: 2026-11-01, 15:19 UTC.

Weitere Endpunkte dieses Hubs

Alle Endpunkte dieses Hubs →