Since today is a day ending in "Y" it's route hijack day? (Excelcom - as24203 please call)

Christopher Morrow morrowc.lists at gmail.com
Mon Jan 28 21:25:14 UTC 2019


Howdy!
ExcelCom, you are being difficult to reach today AND you are originating
prefixes which are not yours to originate:

* 176.119.0.0/24         me                           24203 I
* 176.119.1.0/24          me                           24203 I
* 176.119.2.0/24          me                           24203 I
* 176.119.3.0/24          me                           24203 I
* 176.119.4.0/24          me                           24203 I
* 176.119.5.0/24          me                           24203 I
* 176.119.6.0/24          me                           24203 I
* 176.119.7.0/24          me                           24203 I
* 176.119.8.0/22          me                           24203 I
* 176.119.12.0/22         me                           24203 I


These prefixes are part of:
inetnum:        176.119.0.0 - 176.119.15.255
netname:        VSERVER-NET
country:        UA
org:            ORG-FGLP1-RIPE
admin-c:        LPG-RIPE
tech-c:         LPG-RIPE
tech-c:         VSRV-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-END-MNT
mnt-by:         VSERVER-MNT
mnt-routes:     VSERVER-MNT
mnt-domains:    VSERVER-MNT
created:        2012-06-06T09:08:16Z
last-modified:  2017-06-06T13:41:24Z
source:         RIPE # Filtered
sponsoring-org: ORG-ML410-RIPE

Looking at IRR data for AS24203:
$ ./bgpq3 AS24203 | grep 176
$ ./bgpq3 AS24203 | grep 140
ip prefix-list NN permit 140.213.0.0/16

but the proper owner does have this content in their IRR data:
$ ./bgpq3 AS58271 | grep 176
ip prefix-list NN permit 176.119.0.0/20
ip prefix-list NN permit 176.119.0.0/21
ip prefix-list NN permit 176.119.0.0/22
ip prefix-list NN permit 176.119.0.0/24
ip prefix-list NN permit 176.119.1.0/24
ip prefix-list NN permit 176.119.2.0/24
ip prefix-list NN permit 176.119.3.0/24
ip prefix-list NN permit 176.119.4.0/24
ip prefix-list NN permit 176.119.5.0/24
ip prefix-list NN permit 176.119.6.0/24
ip prefix-list NN permit 176.119.7.0/24
ip prefix-list NN permit 176.119.8.0/22
ip prefix-list NN permit 176.119.12.0/22

Could you please stop breaking someone's internet? :)

-chris
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20190128/c8ef2727/attachment.html>


More information about the NANOG mailing list