Re: US Impact - October 29 2025

[Tim Burke via NANOG <nanog () lists nanog org>]

Looks like a small time WISP that may be trying to implement BGP. 3 /24’s and a /22 — not really much of an “event”… 
nor would it have any impact leading to the Azure situation today.

On Oct 29, 2025, at 3:05 PM, Terry Keeling via NANOG <nanog () lists nanog org> wrote:

Has anyone noticed this BGP event?
BGP Origin Hijack event: 121786 | Cloudflare Radar<https://radar.cloudflare.com/routing/anomalies/hijack-121786>

BGP Origin Hijack: 121786Copy link
Details of the BGP hijack eventShare this...
Hijacker ASN
AS400320 - Valley Center Wireless (US)
Victim ASNs
AS2386 - AT&T Data Communications Services (US)
Prefixes
12.13.233[.]0/24, 12.144.222[.]0/24, 12.221.212[.]0/22, 12.229.22[.]0/24
Messages
192
Earliest message time
10/29/2025, 15:46
Latest message time
10/29/2025, 19:08
Peers observed
17%
Confidence
Low
Tags

 *
IRR Invalid
 *
RPKI Unknown
 *
RPKI Old Origin Unknown
 *
IRR Old Origin Invalid

________________________________
From: John Stuppi (jstuppi) via NANOG <nanog () lists nanog org>
Sent: Wednesday, October 29, 2025 1:39 PM
To: North American Network Operators Group <nanog () lists nanog org>
Cc: John Stuppi (jstuppi) <jstuppi () cisco com>
Subject: Re: US Impact - October 29 2025

I believe it’s related to the Azure outage: 
https://www.bleepingcomputer.com/news/microsoft/microsoft-dns-outage-impacts-azure-and-microsoft-365-services/ 
Microsoft is investigating an ongoing DNS out
[cid:inky-injection-inliner-03755809cc10337ec572b1f12a6beedf]
Caution: External (nanog () lists nanog org<mailto:nanog () lists nanog org>)
Graymail   Details<removed-link>
[cid:inky-injection-inliner-023b0474c934d83d8d52155624827a68]
 Report This Email<removed-link>


I believe it’s related to the Azure outage:



https://www.bleepingcomputer.com/news/microsoft/microsoft-dns-outage-impacts-azure-and-microsoft-365-services/<https://shared.outlook.inky.com/link?domain=www.bleepingcomputer.com&t=h.eJxFkNGKwyAQRX-l-LxqEmts-tRfcXWSlSQanEmFLv33xsJuYR4Oc4d7YH7Znhd2PbEfog2vUpZSxPcCsIU4ubRuO0EWB8gIBeUaXE6YRvoQ9xF52slOwMO6WUfI7WPPwG30_HOmes0R8j04QMm-Tmyu2oAeg6QZYDmEtxDHbCNQSXnGt7ZTVrUX5TWAH86dac04GN1oZaxrvFWyNf0xzeVsRK871Q-mlkMtjzam6bYEJBRvFilPNfX_6d-G6hPa5wttoljs.MEYCIQCueFu8u72fLfe-ltS5swG8RovkNPvHbvev5tHfY455tQIhAO0CG5__iFooyG3yLholtdOE-nk6jBhtfOTua2sdGkFe>



Microsoft is investigating an ongoing DNS outage affecting customers worldwide, preventing them from accessing 
Microsoft Azure and Microsoft 365 services.



According to reports on DownDetector and social networks, this incident began impacting Microsoft's services almost 1 
hour ago and is currently causing server and website connection issues for tens of thousands of users.



Some of those affected are having issues accessing the Intune and Azure portals, as well as the Exchange admin center, 
while others report that Microsoft's Azure Front Door Content Delivery Network (CDN) service is also down.







Thanks,



John







"Life is good when you are happy; but much better when others are happy because of you."







~ Pope Francis











[signature_1786569038]







John Stuppi



Engineering Program Manager – Incident Response



CISSP #25525



CCIE, Security #11154







[signature_773777294]



Security & Trust Organization



Cisco Systems, Inc.



jstuppi () cisco com<mailto:jstuppi () cisco com<mailto:jstuppi () cisco com>>





Mobile: +1 732 319 3886<tel:+17323193886>



Cisco.com<http://www.cisco.com/<https://shared.outlook.inky.com/link?domain=www.cisco.com&t=h.eJw9jksKwyAYhK8SXBcfMfonWeUqoiYVrRY1uCi9e2ughVkM8w3DvNCZA1oHdK_1uRLSWsPaFZ2wTg-CbgPynbpiiiPVWxtcPDYX96yirS1lX67myBVnMzfCWrNMIzDYFxBUcFCaGsUJA_kVnSfAUoxcLtDHbR-PKqZjC67Ugi-PUz46NX_6S2r_yt4fNmQ2ig.MEUCIB9kOGDjHsduICvASU8Q4bWsk2I29FNjkrHrrel8kgaoAiEA0Y037nhIgeEY00LiUj2IMubCWJmvIZvFK69D9ET0PM0>>









[cidimage003.gif@01D977FE.D040DA90]



Think before you print.



This email may contain confidential and privileged material for the sole use of the intended recipient. Any review, 
use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized 
to receive for the recipient), please contact the sender by reply email and delete all copies of this message.







Please click 
here<http://www.cisco.com/c/en/us/about/legal/terms-sale-software-license-agreement/company-registration-information.html<https://shared.outlook.inky.com/link?domain=www.cisco.com&t=h.eJw9UEGOgzAM_ErFeRMDKaT01K-4waQRIaliI7Ra9e8LSLuSDyOPPTOan2otsbpfqpfI-w6wbZt2gV3WLi_ggBKsDPjMq0AkjxGEysKKMZLiPMmGhVQMjhKTQl-IFkoC-_cb07cq5ANLQQk5qZCmXJYT65cssfq6VPNhHnjkADITxZD8Y78rmEi2XGY-g7QGTXMzY0c0DtfWNnYabFd3xqKrRzTQ2H6f-na1uu9a0w_2EKdDPGHK_hH3GKxPrHPxBzv-s38bOapoPr-fulth.MEUCIQCAAv5IQ2yzfhc3zCc987hjJpOGiVOzGtarsDtRRxQFkQIgBqVDrlLKE-oJEtytv87t1wyXsayo_CqmGWpCNFO38Fo>>
 for Company Registration Information.



























From: Victor Kuarsingh via NANOG <nanog () lists nanog org<mailto:nanog () lists nanog org>>

Date: Wednesday, October 29, 2025 at 13:38

To: nanog () lists nanog org<mailto:nanog () lists nanog org> <nanog () lists nanog org<mailto:nanog () lists nanog 
org>>

Cc: Victor Kuarsingh <victor () jvknet com<mailto:victor () jvknet com>>

Subject: US Impact - October 29 2025



All,



Anyone know what caused the large impact in the US at around noon ET today?



regards,



Vector K

_______________________________________________

NANOG mailing list

https://lists.nanog.org/archives/list/nanog () lists nanog 
org/message/SS3LCXZU4D43YYJOX5CUDIQNCA7HKW6B/<https://shared.outlook.inky.com/link?domain=lists.nanog.org&t=h.eJxtj8FuwjAQRH8F-YyySRzHhBNtOLQUtaoQIuFmxUuwkjjI69JD1X9vHakcKqQ9zRvN7HyxD9ez5Yydvb_QEqA35Cmyyo5tNLoWlGvO5oo0AZj01X_PgESqRdjt-LasjvtsnfG63rxVotyvn99fywf59HLIH4HNZ6wLbYY0GfAdYm9suzL25JRF_zm6jqJmHCDliicLrgWiLrJUJvJUSBELLlUTa8UhkfnvxYtMRrlIeV7IEI4h_O6Tgeob_VN82J58_wBjlVHz.MEUCIDYh0ExXYMe1yK4-PFvEMl1h0_Ftak8u46xsNV1qOMlzAiEA6GSXQgwTEmfKNLRvIgnthqKQDMnt5cd9-9FikPH0wto>

_______________________________________________

NANOG mailing list

https://lists.nanog.org/archives/list/nanog () lists nanog 
org/message/2V2N65DY5VJUM3MGDL77MWSC2DP3GXAJ/<https://shared.outlook.inky.com/link?domain=lists.nanog.org&t=h.eJxtj8FqwzAQRH8l6Fy8thR5Y59SagiEuBRC0-YorI0j7MhBq7aH0n9vFGgOobCnecPMzrf4CKOoZ-IY45lrgNFx5MwbP_XZFHowoTu6T-IrgKu-vPeciNn0BHInn0vd7PVu_dqqdtVsENu37ZNsXtTq_XEN4mEmhtTm2LKDOBCNzvdL5w_BeIpfUxg466YTSGVUsVBWE9lqLrHAQ4U61wpNl1ujoMDycvlijlmppSorTOGUwv99MlF7o39KTNuLn18hiFGV.MEQCICRGDTLAmGn9o-vhkwcFBK55PXbP8e6Pbwb3gTNGsrNcAiAomSrNztbRV6AezZ8ZpSc_Sige-deOQrNbb4zn69LDXg>
_______________________________________________
NANOG mailing list
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/NJ34QFKZQG2FRALDK7EL3E4HESJ4AAFG/

_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/HGR7CUM2SYLMSCUUKGNZMA23GISBDZ74/