[193333] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

OmanTel hijacking of IP space

daemon@ATHENA.MIT.EDU (Jared Mauch)
Wed Jan 11 12:46:41 2017

X-Original-To: nanog@nanog.org
From: Jared Mauch <jared@puck.nether.net>
Date: Wed, 11 Jan 2017 10:50:49 -0500
To: NANOG list <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org

There is an ongoing pattern of OmanTel hijacking IP space and =
advertising it to many of their peers (but not transits).

here=E2=80=99s the most recent announcement.  This could be mitigated in =
a few days, such as filtering your peers on a prefix basis, or at =
minimum rejecting the private ASN space, eg: 64512-65535, as well as the =
4 byte variant range: 4200000000-4294967294

Please take a moment and update your AS_PATH filters to minimize the =
pollution you accept or propagate.

- Jared

(more details - =
http://dyn.com/blog/iran-leaks-censorship-via-bgp-hijacks/ )

route-views>sh ip bgp 206.125.164.0/24 long
BGP table version is 38506351, local router ID is 128.223.51.103
Status codes: s suppressed, d damped, h history, * valid, > best, i - =
internal,=20
              r RIB-failure, S Stale, m multipath, b backup-path, f =
RT-Filter,=20
              x best-external, a additional-path, c RIB-compressed,=20
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *   206.125.164.0    193.0.0.56                             0 3333 8529 =
12880 12880 12880 12880 12880 12880 12880 12880 12880 12880 12880 65050 =
i
 *                    123.108.254.218                        0 9902 =
24218 8529 12880 12880 12880 12880 12880 12880 12880 12880 12880 12880 =
12880 i
 *                    195.208.112.161                        0 3277 3267 =
8529 12880 12880 12880 12880 12880 12880 12880 12880 12880 12880 12880 =
65050 i
 *                    194.85.40.15                           0 3267 8529 =
12880 12880 12880 12880 12880 12880 12880 12880 12880 12880 12880 65050 =
i
 *                    212.66.96.126                          0 20912 =
1267 8529 12880 12880 12880 12880 12880 12880 12880 12880 12880 12880 =
12880 65050 i
 *                    95.85.0.2                              0 200130 =
8529 12880 12880 12880 12880 12880 12880 12880 12880 12880 12880 12880 =
65050 i
 *                    5.101.110.2                            0 202018 =
8529 12880 12880 12880 12880 12880 12880 12880 12880 12880 12880 12880 =
65050 i
 *>                   103.247.3.45                           0 58511 =
8529 12880 12880 12880 12880 12880 12880 12880 12880 12880 12880 12880 =
65050 i
 *                    80.241.176.31                          0 20771 =
47872 8529 12880 12880 12880 12880 12880 12880 12880 12880 12880 12880 =
12880 65050 i



home help back first fref pref prev next nref lref last post