nanog mailing list archives

Re: BGP hujack by AS25478?


From: Aftab Siddiqui <aftab.siddiqui () gmail com>
Date: Tue, 9 Nov 2021 18:50:53 +1100

Noction - could be but there were not many specifics in around 3200 routes
they originated, there were few /12, /13, /14

mistake probably.

121.128.0.0/12 39120 65478 25478
121.128.0.0/12 61568 65478 25478
121.144.0.0/13 61568 65478 25478
141.48.0.0/13 61568 65478 25478
203.40.0.0/13 39120 65478 25478
203.40.0.0/13 61568 65478 25478

Regards,

Aftab A. Siddiqui


On Tue, 9 Nov 2021 at 18:03, Hank Nussbacher <hank () interall co il> wrote:

Based on my own observation as well as via bgpstream there was a massive
BGP hijack attempt last night by IHOME-AS iHome LLC, RU (AS 25478).

Lasted about 10 minutes.  Noction?  Finger faddle? Malicious?


Thanks,

Hank



Current thread: