BGP hijack from 23724 -> 4134 China?

Bruce Morgan Bruce.Morgan at aarnet.edu.au
Sun Apr 11 21:36:23 CDT 2010


Hi Bob,

AARNet does have a fairly strong policy on prefix-filtering.

We also peer with route-views servers so that Cyclops and other projects can
actually get this type of information. Best not to shoot the messenger as
the message can be useful ;-)

Regards

Bruce

> From: peering-admin at aarnet.edu.au [mailto:peering-admin at aarnet.edu.au]
> On Behalf Of Bob Poortinga
> Sent: Friday, 9 April 2010 11:13 PM
> To: nanog at nanog.org
> Cc: peering at aarnet.edu.au; Bruce Morgan
> Subject: Re: BGP hijack from 23724 -> 4134 China?
> 
> Jay Hennigan <jay at west.net> writes:
>  
>> We just got Cyclops alerts showing several of our prefixes sourced
> from
>> AS23474 propagating through AS4134.  Anyone else?
> 
> For the record, yes.  Two of our blocks were announced via 7575 4134
> 23724
> yesterday.  First seen by Cyclops at 2010-04-08 15:57:13 UTC and lasted
> about 20 minutes.
> 
> Does AS7575, Australian Academic and Reasearch Network, do any
> filtering?
> 
> -- 
> Bob Poortinga  K9SQL        <http://www.linkedin.com/in/bobpoortinga>
> Technology Service Corp.    <http://www.tsc.com>
> Bloomington, Indiana  US

-- 
street address:  AARNet, POD 3, 20 Dick Perry Ave, Kensington, WA 6151,
Australia 
m. 0408 882 390     t. +61 8 9289 2212      e. bruce.morgan at aarnet.edu.au
w. www.aarnet.edu.au

important 
This email and any files transmitted with it are confidential, and the
rights of confidentiality in such information are not waived or lost by its
mistaken delivery to you.  Any dissemination, copying, use or disclosure of
the email and/or such files without the permission of AARNet, or the sender,
is strictly prohibited.  If you have received this email in error, please
contact the sender immediately and delete all copies of this transmission.







More information about the NANOG mailing list