Dreamhost/AS26347 unauthorized bgp announcement

Matsuzaki Yoshinobu maz at iij.ad.jp
Wed Mar 6 08:59:54 UTC 2013


According to RIPE RIS, AS26347 announced a bunch of prefixes again.
 - http://www.ris.ripe.net/dashboard/26347

First suspicious announcement was started 2013-03-06 07:52:40 UTC, and
last seen 2013-03-06 08:33:56 UTC.  195 prefixes total.

It seems these unauthorized announcements have the same profile as
before - AS26347 shrinks the prefix lenght of their received prefix
somehow upto /20, and re-originates the prefix with origin AS26347.

Any known bugs?

Regards,
-----
Matsuzaki Yoshinobu <maz at iij.ad.jp>
 - IIJ/AS2497  INOC-DBA: 2497*629




More information about the NANOG mailing list