[116256] in North American Network Operators' Group
Re: Anomalies with AS13214 ?
daemon@ATHENA.MIT.EDU (sjk)
Tue Jul 28 10:54:21 2009
Date: Tue, 28 Jul 2009 09:53:23 -0500
From: sjk <sjk@sleepycatz.com>
To: nanog@nanog.org
In-Reply-To: <647fc4230907280350m47603268y392b460240d0d473@mail.gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Russell Heilling wrote:
> 2009/5/11 Ricardo Oliveira <rveloso@cs.ucla.edu>:
>> Hi all,
>>
>> First, thanks for using Cyclops, and thanks for all the Cyclops users that
>> drop me a message about this.
>>
>> It seems some router in AS13214 decided to originate all the prefixes and
>> send them to AS48285 in the Caymans, all the ASPATHs are 48285 13214.
>> The first announcement was on 2009-05-11 11:03:11 UTC and last on 2009-05-11
>> 12:16:32 UTC, there were 266,289 prefixes leaked (they were withdrawn
>> afterwards)
>
> It looks like AS13214 are misbehaving again... We have just started
> receiving cyclops alerts indicating that AS13214 is announcing our
> prefixes again:
We are seeing the same thing for two of our prefixes:
Offending attribute: 66.251.224.0/19-13214
Offending attribute: 66.146.192.0/19-48285
Pretty annoying
--steve
