hijacking of 128.255.192.0/22

Tue Mar 20 19:25:51 UTC 2018

A reason to de-aggregate down to /24s, to make hijacks more
difficult/less effective?

/kc

On Tue, Mar 20, 2018 at 04:20:47PM -0300, Alejandro Acosta said:
  >Hi Jay,
  >
  >?? Please note that there is Lacnog mailing list.., I will forward your
  >message. Not sure if it will work but worth giving it a try.
  >
  >
  >Regards,
  >
  >Alejandro,
  >
  >
  >
  >El 20/3/18 a las 2:35 p. m., Jay Ford escribi??:
  >> Something apparently in Brazil is hijacking 128.255.192.0/22, part of
  >> 128.255.0.0/16 which is held by the University of Iowa.?? AS 263971 is
  >> announcing 128.255.192.0/22 which Hurricane Electric is accepting &
  >> propagating.?? None of that has any authorization.
  >>
  >> I can't find any decent contact information for the originating
  >> entity, so I have reported it to abuse at he.net, but it'd be fabulous if
  >> some HE folks listening here could whack the hijacking faster than the
  >> abuse channels will get to it.?? Also useful would be some functional
  >> contact for AS263971.
  >>
  >> Any help will be appreciated.
  >>
  >> ________________________________________________________________________
  >> Jay Ford, Network Engineering Group, Information Technology Services
  >> University of Iowa, Iowa City, IA 52242
  >> email: jay-ford at uiowa.edu, phone: 319-335-5555
  >

-- 
Ken Chase - math at sizone.org