AS3266: BitCanal hijack factory, courtesy of many connectivity providers

Tue Jun 26 18:27:49 UTC 2018

Any solution to that? Yell at the IRRs more? 

----- 
Mike Hammett 
Intelligent Computing Solutions 
http://www.ics-il.com 

Midwest-IX 
http://www.midwest-ix.com 

----- Original Message -----

From: "Job Snijders" <job at instituut.net> 
To: "Simon Muyal" <smuyal at franceix.net> 
Cc: nanog at nanog.org 
Sent: Tuesday, June 26, 2018 1:23:55 PM 
Subject: Re: AS3266: BitCanal hijack factory, courtesy of many connectivity providers 

Dear Simon, 

On Tue, Jun 26, 2018 at 12:13:26PM -0600, Simon Muyal wrote: 
> On the France-IX route servers, we are applying filters based on IRR 
> DBs. I double checked the list https://pastebin.com/raw/Jw1my9Bb and 
> these prefixes should be filtered if bitcanal starts announcing them. 
> Currently, bitcanal/AS197426 is not announcing any prefix on our route 
> servers: 
> 
> https://lg.franceix.net/irr_found_for/RS1+RS2/ipv4?q=197426 
> https://lg.franceix.net/irr_notfound_for/RS1+RS2/ipv4?q=197426 

I'm very happy FranceIX apply filters - however Bitcanal is known to 
submit fabricated/falsified IRR information to databases like RADB and 
RIPE. I've reported this multiple times over the years to IRR database 
operators. 

In conclusion in the case of Bitcanal, most of your filtering is useless 
(and so is mine). Participants like Bitcanal dillute the value of your 
route servers and the IXP as a whole. 

Kind regards, 

Job 