[161250] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Dreamhost/AS26347 unauthorized bgp announcement

daemon@ATHENA.MIT.EDU (Matsuzaki Yoshinobu)
Wed Mar 6 04:00:14 2013

Date: Wed, 06 Mar 2013 17:59:54 +0900 (JST)
To: nanog@nanog.org
From: Matsuzaki Yoshinobu <maz@iij.ad.jp>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

According to RIPE RIS, AS26347 announced a bunch of prefixes again.
 - http://www.ris.ripe.net/dashboard/26347

First suspicious announcement was started 2013-03-06 07:52:40 UTC, and
last seen 2013-03-06 08:33:56 UTC.  195 prefixes total.

It seems these unauthorized announcements have the same profile as
before - AS26347 shrinks the prefix lenght of their received prefix
somehow upto /20, and re-originates the prefix with origin AS26347.

Any known bugs?

Regards,
-----
Matsuzaki Yoshinobu <maz@iij.ad.jp>
 - IIJ/AS2497  INOC-DBA: 2497*629


home help back first fref pref prev next nref lref last post