nanog mailing list archives

Re: ASN "Hijacked"


From: Christopher Morrow via NANOG <nanog () lists nanog org>
Date: Fri, 11 Sep 2026 11:27:18 -0400

oopsie, I realize I wasn't super clear below... see below.

On Fri, Sep 11, 2026 at 10:53 AM Christopher Morrow
<morrowc.lists () gmail com> wrote:

The u-del folk (as2?) have some fun stories about this sort of problem :(
I think they've even done at least 1 nanog talk about this?

There's also a long history of 'bad actors' using ASN at IX's (amsix
and u-new-mexico I recall for

I don't think there was anything AMSIX could have actually done here.
Why? becuse the actor showed AMSIX RS the  'correct' asn...
the peerings in question were not via the RS though:(

I believe this was also seen at several other IX's :( it's one of the reasons
focus was brought on filtering and RPKI by us at the time.

My larger point is really that:
  "This happens, because people are people... and your best path is to
escalate up the
   peering fabric with logs and evidence of the behavior."
_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/CIUM6DJJIJRI332MXFD2I3YYNG4VBXAZ/

Current thread: