RU evidently hijacked UA netblock

Scott Weeks surfer at
Sat Mar 5 02:03:35 UTC 2022

--- george.herbert at wrote:

Beware of further such activity…


I have a ticket open with my vendor, but I see strange NLRI buffer overflow syslog messages about Khazkstan's AS21299 (TNSPLUS) announcements.  It looks like a 'too many' AS prepends, but it is only 250 prepends.  Could be a mistake or intentional. 

I get those from no other ASNs and I am sure some AS sent 250 AS path prepends before.  Anyone else see stuff from them?


More information about the NANOG mailing list