BGP hujack by AS25478?

Aftab Siddiqui aftab.siddiqui at gmail.com
Tue Nov 9 07:50:53 UTC 2021


Noction - could be but there were not many specifics in around 3200 routes
they originated, there were few /12, /13, /14

mistake probably.

121.128.0.0/12 39120 65478 25478
121.128.0.0/12 61568 65478 25478
121.144.0.0/13 61568 65478 25478
141.48.0.0/13 61568 65478 25478
203.40.0.0/13 39120 65478 25478
203.40.0.0/13 61568 65478 25478

Regards,

Aftab A. Siddiqui


On Tue, 9 Nov 2021 at 18:03, Hank Nussbacher <hank at interall.co.il> wrote:

> Based on my own observation as well as via bgpstream there was a massive
> BGP hijack attempt last night by IHOME-AS iHome LLC, RU (AS 25478).
>
> Lasted about 10 minutes.  Noction?  Finger faddle? Malicious?
>
>
> Thanks,
>
> Hank
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20211109/c1a69aab/attachment.html>


More information about the NANOG mailing list