nanog mailing list archives

Re: hijacking of 128.255.192.0/22


From: Jared Mauch <jared () puck nether net>
Date: Wed, 21 Mar 2018 17:52:57 +0000

Can someone from HE comment on how they are doing their filtering? We often see our routes leaked by them or their 
customers and it’s quite the problem and significantly contributes to the pollution in the routing table. 

Often friends and smaller providers come to me for help and the lack of filtering as well as BGP communities poses 
significant operational issues for networks. 

Jared Mauch

On Mar 20, 2018, at 5:35 PM, Jay Ford <jnford () uiowa net> wrote:

Something apparently in Brazil is hijacking 128.255.192.0/22, part of 128.255.0.0/16 which is held by the University 
of Iowa.  AS 263971 is announcing 128.255.192.0/22 which Hurricane Electric is accepting & propagating.  None of that 
has any authorization.

I can't find any decent contact information for the originating entity, so I have reported it to abuse () he net, but 
it'd be fabulous if some HE folks listening here could whack the hijacking faster than the abuse channels will get to 
it.  Also useful would be some functional contact for AS263971.

Any help will be appreciated.

________________________________________________________________________
Jay Ford, Network Engineering Group, Information Technology Services
University of Iowa, Iowa City, IA 52242
email: jay-ford () uiowa edu, phone: 319-335-5555


Current thread: