[109199] in North American Network Operators' Group
Re: Fwd: RE: Potential Prefix Hijack
daemon@ATHENA.MIT.EDU (Hank Nussbacher)
Tue Nov 11 01:31:08 2008
Date: Tue, 11 Nov 2008 08:30:54 +0200 (IST)
From: Hank Nussbacher <hank@efes.iucc.ac.il>
To: Scott Weeks <surfer@mauigateway.com>
In-Reply-To: <20081110212934.87D123A4@resin14.mta.everyone.net>
Cc: nanog@merit.edu
Errors-To: nanog-bounces@nanog.org
On Mon, 10 Nov 2008, Scott Weeks wrote:
>
>
>
> Using bgplay.routeviews.org/bgplay for my prefixes (also hijacked) it looks like the damage is only to ASs downstream of either (or both) ASN 3130 and/or ASN 2914.
>
> Given the large number of respondents to the thread, it looks like a possible case of no filtering by upstreams and full table announcements/withdrawals over a period of about 40 minutes beginning 23:22 11/10/2008 GMT. There was also a problem at 17:09:30 2008 GMT for our prefixes.
AS378 and AS1680 suffered as well.
-Hank
