I see the follwowing ASN transiting a leak concerning 192.208.19.0/24 originated by 4812
209
286
3320
5400
5511
6327
6461
6762
6830
8218
8220
8447
8551
9002
12956
The proper source is 32982 (Department of Energy).
More details to be found here: https://bgpstream.com/event/171779
And here: http://lg.ring.nlnog.net/prefix_detail/lg01/ipv4?q=192.208.19.0
Cheers,
Dominik
China Telecom originating a network that belongs to the agency that
controls all things nuclear in the US... nothing suspicious there.
Dear all,
NTT / AS 2914 deployed explicit filters to block this BGP announcement from AS 4134. I recommend other operators to do the same.
I’d also like to recommend AS 32982 to remove the AS_PATH prepend on the /24 announcement so the counter measure is more effective.
Kind regards,
Job
Thanks for your efforts in filtering and liaising with CN!
This issue has been fixed by ~ 1430 UTC today.