Route leak in Bangladesh

Andree Toonk andree+nanog at toonk.nl
Tue Jun 30 15:46:51 UTC 2015


Some more data from BGPmon.net:
This affected close to 28,000 prefixes from 4,477 unique Autonomous systems.

The hijacks were originated by AS58587 and propagated via AS45796
(15,002 prefixes) and AS6939 (25,841). The AS45796 paths were only seen
via one of our peers, while the AS6939 path had a more significant
visibility.

The event started at 07:37 UTC and lasted for a few minutes.

Cheers
 Andree








.-- My secret spy satellite informs me that at 2015-06-30 3:26 AM
Matsuzaki Yoshinobu wrote:
> A friend in AS58587 confirmed that this was caused by a configuration
> error - it seems like related to redistribution, and they already
> fixed that.
> 
> -----
> Matsuzaki Yoshinobu <maz at iij.ad.jp>
>  - IIJ/AS2497  INOC-DBA: 2497*629
> 
> In message <559252E9.6030703 at Janoszka.pl>
> Date: Tue, 30 Jun 2015 10:27:21 +0200
> Grzegorz Janoszka <Grzegorz at Janoszka.pl> wrote
>> We have just received alert from bgpmon that AS58587 Fiber @
>> Home Limited has hijacked most of our (AS43996) prefixes and
>> Hurricane Electric gladly accepted them.
>>
>> Anybody see their prefixes hijacked as well?
>>
>> -- 
>> Grzegorz Janoszka
> 


More information about the NANOG mailing list