hijacking of 128.255.192.0/22

Wed Mar 21 17:52:57 UTC 2018

Can someone from HE comment on how they are doing their filtering? We often see our routes leaked by them or their customers and it’s quite the problem and significantly contributes to the pollution in the routing table. 

Often friends and smaller providers come to me for help and the lack of filtering as well as BGP communities poses significant operational issues for networks. 

Jared Mauch

> On Mar 20, 2018, at 5:35 PM, Jay Ford <jnford at uiowa.net> wrote:
> 
> Something apparently in Brazil is hijacking 128.255.192.0/22, part of 128.255.0.0/16 which is held by the University of Iowa.  AS 263971 is announcing 128.255.192.0/22 which Hurricane Electric is accepting & propagating.  None of that has any authorization.
> 
> I can't find any decent contact information for the originating entity, so I have reported it to abuse at he.net, but it'd be fabulous if some HE folks listening here could whack the hijacking faster than the abuse channels will get to it.  Also useful would be some functional contact for AS263971.
> 
> Any help will be appreciated.
> 
> ________________________________________________________________________
> Jay Ford, Network Engineering Group, Information Technology Services
> University of Iowa, Iowa City, IA 52242
> email: jay-ford at uiowa.edu, phone: 319-335-5555