IPv4 and IPv6 hijacking by AS 6

• Subject: IPv4 and IPv6 hijacking by AS 6
• From: job at instituut.net (Job Snijders)
• Date: Thu, 12 Apr 2018 19:01:44 +0000
• In-reply-to: <CA[email protected]>
• References: <CA[email protected]> <15[email protected]> <CA[email protected]>

On Thu, 12 Apr 2018 at 11:52, Matt Harris <matt at netfire.net> wrote:

> On Thu, Apr 12, 2018 at 12:05 PM, <lists at as23738.net> wrote:
>
> > Have you tried their IRR entries? Bull appears to redirect to Atos now
> > (site-wise).
> >
> > notify:     ed.gienko at atos.net
> > notify:     charlie.molnar at atos.net
> > changed:    christophe.fraule at atos.net 20180117  #18:47:40Z
> >
>
> I'm now in touch with Christophe; it looks as though perhaps there's a
> separate, rogue AS 6 running around with a different set of peers/transits,
> as he was able to confirm that none of his gear is advertising these
> prefixes.



That is what I feared as well. It appears the single digit ASNs often fall
victim of other peopleâ??s misconfigurations or malicious activities. Hard to
separate the impersonator from the real autonomous system.

Job

• Follow-Ups:
  • IPv4 and IPv6 hijacking by AS 6
    • From: me at anuragbhatia.com (Anurag Bhatia)

• References:
  • IPv4 and IPv6 hijacking by AS 6
    • From: matt at netfire.net (Matt Harris)
  • IPv4 and IPv6 hijacking by AS 6
    • From: lists at as23738.net (lists at as23738.net)
  • IPv4 and IPv6 hijacking by AS 6
    • From: matt at netfire.net (Matt Harris)

• Prev by Date: IPv4 and IPv6 hijacking by AS 6
• Next by Date: IPv4 and IPv6 hijacking by AS 6
• Previous by thread: IPv4 and IPv6 hijacking by AS 6
• Next by thread: IPv4 and IPv6 hijacking by AS 6
• Index(es):
  • Date
  • Thread