Orange : Propagating Bogus Saudi Telecom Announcement

Mon Aug 24 19:23:25 UTC 2020

Nice find Tom…


> On Aug 24, 2020, at 3:11 PM, Tom Beecher <beecher at beecher.cc> wrote:
> 
> Saudi Telecom ( AS 39386 ) is currently announcing Equinix NY9's IX prefix, and Orange is gladly sharing that for the world to see. 
> 
> Zayo : You might want to not be using that either when you're directly connected to that exchange. :)
> 
> Router: New York, NY
> Command: show route protocol bgp table inet.0 198.32.118.0/24 <http://198.32.118.0/24> terse exact
> 
> 
> inet.0: 833301 destinations, 5821043 routes (833250 active, 16 holddown, 88 hidden)
> + = Active Route, - = Last Active, * = Both
> A V Destination        P Prf   Metric 1   Metric 2  Next hop        AS path
> * ? 198.32.118.0/24 <http://198.32.118.0/24>    B 170        100 4294967294                  5511 39386 39386 39386 39386 I
>   unverified                                       >64.125.29.222
>                                                     64.125.29.220
>   ?                    B 170        100 4294967294                  5511 39386 39386 39386 39386 I
>   unverified                                       >64.125.29.222
>                                                     64.125.29.220
>   ?                    B 170        100 4294967294                  5511 39386 39386 39386 39386 I
>   unverified                                       >64.125.29.220
>                                                     64.125.29.222
>   ?                    B 170        100 4294967294                  5511 39386 39386 39386 39386 I
>   unverified                                       >64.125.29.220
>                                                     64.125.29.222
>   ?                    B 170        100 4294967294                  5511 39386 39386 39386 39386 I
>   unverified                                       >64.125.29.220
>                                                     64.125.29.222
> {master}

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20200824/be8b9730/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 1544 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20200824/be8b9730/attachment.bin>