[122502] in North American Network Operators' Group
AS16387 leaking routes
daemon@ATHENA.MIT.EDU (Ernest Andrew McCracken (emccrckn))
Mon Feb 15 17:31:21 2010
From: "Ernest Andrew McCracken (emccrckn)" <emccrckn@memphis.edu>
To: "nanog@nanog.org" <nanog@nanog.org>
Date: Mon, 15 Feb 2010 16:32:17 -0600
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Has anyone seen the strange activity from AS16387? Did they leak their ent=
ire table? Our route collectors are showing AS16387 originating large numb=
ers of prefixes. It looks like we caught the tail end of this activity as =
they are now announcing updates with massive amounts of prepending.
Here's an example. We have several pages worth of this.
20100215|15:17:58|1266268678678|164.128.32.11|3303|ORIGIN_CHANGE|95.79.192/=
19|34533|16387
20100215|15:18:58|1266268738707|164.128.32.11|3303|BGPMON_PATH|3303,3303,33=
03,3303,3303,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,64=
53,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,64=
53,6453,6453,6453,6453,6453,6453,6453,6 453,6453,6453,6453,6453,6453,6453,6=
453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6=
453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6=
453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6=
453, 6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,=
6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,=
6453,6453 ,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453=
,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453=
,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453=
,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453=
,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453=
,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453=
,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453,6453=
,6453,6453,6453,6453,6453,6453,6453,6453,6453,8744,8744,8744,8744,8744,8744=
,8744,8744,8744,8744,8744,8744,8744,8744,8744,8744,8744,8744,8744,8744,8744=
,8744,8744,8744,8744,8744,8744,8744,8744,8744,8744,8744,8744,8744,8744,8744=
,8744,8744,8744,8744,8744,8744,8744,8744,8744,8744,8744,8744,8744,8744,8744=
,8744,8744,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,3453=
3,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,3=
4533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,3453=
3,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,3=
4533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,3453=
3,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,3=
4533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,3453=
3,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,3=
4533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,3453=
3,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,3=
4533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,3453=
3,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,3=
4533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,3453=
3,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,3=
4533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,3453=
3,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,3=
4533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,3453=
3,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,3=
4533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,3453=
3,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,3=
4533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,34533,3453=
3,34533,34533,34533,34533,34533,34533,34533,34533,16387,16387,16387,16387,1=
6387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,1638=
7,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,1=
6387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,1638=
7,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,1=
6387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,1638=
7,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,1=
6387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,1638=
7,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,1=
6387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,1638=
7,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,1=
6387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,1638=
7,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,1=
6387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,1638=
7,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,1=
6387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,1638=
7,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,1=
6387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,1638=
7,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387,16387
Ernest McCracken
Research Assistant
Networking Research Laboratory
http://netlab.cs.memphis.edu
Computer Science Department
University of Memphis
