[124985] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: China prefix hijack

daemon@ATHENA.MIT.EDU (Chris McDonald)
Thu Apr 8 12:42:25 2010

In-Reply-To: <4BBE0566.6080208@Janoszka.pl>
Date: Thu, 8 Apr 2010 12:39:57 -0400
From: Chris McDonald <copraphage@gmail.com>
To: Grzegorz Janoszka <Grzegorz@janoszka.pl>
Cc: nanog list <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

i think so yeah

AS 23724 is now announcing 63.218.188.0/22 which is historically announced
by ASes: 3491.
Time: Thu Apr  8 16:55:02 2010 GMT
Observed path: 812 174 4134 23724 23724


On Thu, Apr 8, 2010 at 12:33 PM, Grzegorz Janoszka <Grzegorz@janoszka.pl>wrote:

>
> Just half an hour ago China Telecom hijacked one of our prefixes:
>
> Your prefix:          X.Y.Z.0/19:
> Prefix Description:   NETNAME
> Update time:          2010-04-08 15:58 (UTC)
> Detected by #peers:   1
> Detected prefix:      X.Y.Z.0/19
> Announced by:         AS23724 (CHINANET-IDC-BJ-AP IDC, China
> Telecommunications Corporation)
> Upstream AS:          AS4134 (CHINANET-BACKBONE No.31,Jin-rong Street)
> ASpath:               39792 4134 23724 23724
>
> Luckily it had to be limited as only one BGPmon peer saw it. Anyone else
> noticed it?
>
> --
> Grzegorz Janoszka
>
>

home help back first fref pref prev next nref lref last post