nanog mailing list archives
Re: AS3266: BitCanal hijack factory, courtesy of many connectivity providers
From: Job Snijders <job () instituut net>
Date: Tue, 26 Jun 2018 21:52:57 +0000
On Tue, Jun 26, 2018 at 09:57:14PM +0200, Radu-Adrian Feurdean wrote:
On Tue, Jun 26, 2018, at 20:23, Job Snijders wrote:I'm very happy FranceIX apply filters - however Bitcanal is known to submit fabricated/falsified IRR information to databases like RADB and RIPE. I've reported this multiple times over the years to IRR database operators. In conclusion in the case of Bitcanal, most of your filtering is useless (and so is mine). Participants like Bitcanal dillute the value of your route servers and the IXP as a whole.I can confirm that this mornig (~09h30 CEST, when I read the first message in the thread) there were no BitCanal announces received from FranceIX Paris RS.
What about now? Still squeaky clean? What about now? What about tomorrow? You only need to announce hijacked routes for the duration of the spamming campaign (usually just a few hours). The presence of this type of actor poses a risk to all connnected to the IX fabric. Kind regards, Job
Current thread:
- Re: AS3266: BitCanal hijack factory, courtesy of many connectivity providers, (continued)
- Re: AS3266: BitCanal hijack factory, courtesy of many connectivity providers Job Snijders (Jun 26)
- Re: AS3266: BitCanal hijack factory, courtesy of many connectivity providers Simon Muyal (Jun 27)
- Re: AS3266: BitCanal hijack factory, courtesy of many connectivity providers Job Snijders (Jun 26)
- Re: AS3266: BitCanal hijack factory, courtesy of many connectivity providers Mike Hammett (Jun 26)
- Re: AS3266: BitCanal hijack factory, courtesy of many connectivity providers Job Snijders (Jun 26)
- Re: AS3266: BitCanal hijack factory, courtesy of many connectivity providers Mike Hammett (Jun 26)
- Re: AS3266: BitCanal hijack factory, courtesy of many connectivity providers Mark Tinka (Jun 27)
- Re: AS3266: BitCanal hijack factory, courtesy of many connectivity providers Heather Schiller via NANOG (Jun 27)
- Re: AS3266: BitCanal hijack factory, courtesy of many connectivity providers Max Tulyev (Jun 26)
- Re: AS3266: BitCanal hijack factory, courtesy of many connectivity providers Radu-Adrian Feurdean (Jun 26)
- Re: AS3266: BitCanal hijack factory, courtesy of many connectivity providers Job Snijders (Jun 26)
- RE: AS3266: BitCanal hijack factory, courtesy of many connectivity providers McBride, Mack (Jun 28)
- Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3 IXP User One (Jun 26)
- Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3 Thomas King (Jun 26)
- Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3 Hank Nussbacher (Jun 26)
- Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3 Suresh Ramasubramanian (Jun 26)
- Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3 Mark Tinka (Jun 27)
- Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3 Alain Hebert (Jun 27)