I see the follwowing ASN transiting a leak concerning 220.127.116.11/24 originated by 4812
The proper source is 32982 (Department of Energy).
More details to be found here: https://bgpstream.com/event/171779
And here: http://lg.ring.nlnog.net/prefix_detail/lg01/ipv4?q=18.104.22.168
China Telecom originating a network that belongs to the agency that
controls all things nuclear in the US... nothing suspicious there.
NTT / AS 2914 deployed explicit filters to block this BGP announcement from AS 4134. I recommend other operators to do the same.
I’d also like to recommend AS 32982 to remove the AS_PATH prepend on the /24 announcement so the counter measure is more effective.
Thanks for your efforts in filtering and liaising with CN!
This issue has been fixed by ~ 1430 UTC today.