Re: BGP hujack by AS25478?

2021-11-08 Thread Aftab Siddiqui
Noction - could be but there were not many specifics in around 3200 routes they originated, there were few /12, /13, /14 mistake probably. 121.128.0.0/12 39120 65478 25478 121.128.0.0/12 61568 65478 25478 121.144.0.0/13 61568 65478 25478 141.48.0.0/13 61568 65478 25478 203.40.0.0/13 39120 65478 2

BGP hujack by AS25478?

2021-11-08 Thread Hank Nussbacher
Based on my own observation as well as via bgpstream there was a massive BGP hijack attempt last night by IHOME-AS iHome LLC, RU (AS 25478). Lasted about 10 minutes.  Noction?  Finger faddle? Malicious? Thanks, Hank

Spoofer Report for NANOG for Oct 2021

2021-11-08 Thread CAIDA Spoofer Project
In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address.