Leaked routes earlier
Wilson Chu
wilson.chu at zoom.us
Wed Jul 26 20:57:20 UTC 2017
It was AS12389 who leaked for few minutes.
>From my view, AS7922, 16059, 4134, 6805, 13649, 29562, 31334, 9116 were all
affected.
For example 50.18.174.0/18 from AWS AS16509, right before:
[image: Inline image 1]
Duration:
[image: Inline image 2]
After:
[image: Inline image 3]
--Wilson
On Tue, Jul 25, 2017 at 3:44 PM, Wilson Chu <wilson.chu at zoom.us> wrote:
> For about two minutes from Tue Jul 25 21:09:42 2017 GMT to 21:11:30 2017,
> routes to AWS were routed to stream-internet.net and got blackholed.
>
> for example, route to 50.18.x.x at the time:
>
> <snip>
> 5. sd-cr01-te3-4.161.nyc.stream 0.0% 3 350.9 249.9 173.9 350.9
> 91.2
> 6. anc-cr03-xe-5-0-1.149.ff.str 33.3% 3 174.7 195.8 174.7 216.8
> 29.8
> 7. radio-cr01-ae4.135.hel.strea 33.3% 3 213.4 213.6 213.4 213.7
> 0.2
> 8. mmon-cr01-be3.78.spb.stream- 66.7% 3 204.6 204.6 204.6 204.6
> 0.0
> 9. a433-cr01-be1.78.msk.stream- 33.3% 3 214.4 212.9 211.5 214.4
> 2.1
> 10. m9-cr05-ae9.77.msk.stream-in 66.7% 3 213.6 213.6 213.6 213.6
> 0.0
> 11. m9-cr03-ae1.199.msk.stream-i 33.3% 3 197.5 206.4 197.5 215.3
> 12.6
> 12. s-bb3-link.telia.net 66.7% 3 206.8 206.8 206.8 206.8
> 0.0
> 13. kbn-bb3-link.telia.net 66.7% 3 214.9 214.9 214.9 214.9
> 0.0
> 14. 54.240.242.130 66.7% 3 614.2 614.2 614.2 614.2
> 0.0
> 15. 54.240.242.147 66.7% 3 204.4 204.4 204.4 204.4
> 0.0
> 16. m9-cr05-ae3.77.msk.stream-in 66.7% 3 262.0 262.0 262.0 262.0
> 0.0
> 17. 54.240.242.132 66.7% 3 606.2 606.2 606.2 606.2
> 0.0
> 18. 54.240.242.147 33.3% 3 205.5 203.6 201.6 205.5
> 2.7
> 19. 205.251.229.158 66.7% 3 200.8 200.8 200.8 200.8
> 0.0
> 20. ??? 100.0 3 0.0 0.0 0.0 0.0
> 0.0
> 21. ??? 100.0 2 0.0 0.0 0.0 0.0
> 0.0
> 22. ??? 100.0 2 0.0 0.0 0.0 0.0
> 0.0
> 23. ??? 100.0 2 0.0 0.0 0.0 0.0
> 0.0
>
> Anyone saw the same issue?
>
> Thanks,
>
> --Wilson
>
More information about the NANOG
mailing list