Re: [anti-abuse-wg] Yet another BGP hijacking towards AS16509

Amazon was only announcing 44.224.0.0/11 at first. https://bgp.tools/prefix/44.235.216.0/24 On Tue, Aug 23, 2022 at 4:03 AM Ronald F. Guilmette wrote: > In message < > cao3camot9gc_evd-cczg06a-o_majmltxlhbxfnaudomyqo...@mail.gmail.com>, > Siyuan Miao wrote: > > >Hjacking didn't last too long.

Re: [anti-abuse-wg] Yet another BGP hijacking towards AS16509

In message , Siyuan Miao wrote: >Hjacking didn't last too long. AWS started announcing a more specific >announcement to prevent hijacking around 3 hours later. Kudos to Amazon's >security team :-) Sorry. I'm missing something here. If the hijack was of 44.235.216.0/24, then how did AWS

Re: [anti-abuse-wg] Yet another BGP hijacking towards AS16509

Just noticed another thing: ➜ ~ whois -h whois.ripe.net -- "--list-versions AS1299" | tail -n10 2862 2022-07-11T14:44:49Z ADD/UPD 2863 2022-07-27T11:17:25Z ADD/UPD 2864 2022-08-02T08:43:02Z ADD/UPD 2865 2022-08-10T12:11:29Z ADD/UPD *2866 2022-08-17T10:47:43Z ADD/UPD2867

[anti-abuse-wg] Yet another BGP hijacking towards AS16509

Hi folks, Recently I read a post regarding the recent incident of Celer Network and noticed a very interesting and successful BGP hijacking towards AS16509. The attacker AS209243 added AS16509 to their AS-SET and a more specific route object for the /24 where the victim's website is in ALTDB:

Re: [anti-abuse-wg] Autoresponders

On 2022-08-22 at 11:40 +0200, Alan Levin wrote: > On Mon, 22 Aug 2022 at 07:50, someone <…@ripe.net> wrote: > > I’m out of office till 22 August. Any RIPE Labs related queries can > > be sent to l...@ripe.net and one of my colleagues > > will get back to > >

[anti-abuse-wg] Apologies for spam

Hello all, My apologies to everyone who received my out of office response this morning. Just wanted to note that the relevant messages have now been removed from the archives. Again, sorry for the spam! Best regards, Alun Davies RIPE NCC -- To unsubscribe from this mailing list, get a

[anti-abuse-wg] Call For Agenda Items - RIPE 85

Colleagues, We hope you're all having a good summer! As you have hopefully seen, registration has now opened for RIPE 85 in Belgrade - https://ripe85.ripe.net/ The meeting, running from the 24th - 28th October, will be hybrid and we're hoping to continue to evolve and make it as useful as

Re: [anti-abuse-wg] So many idiots. So little time.

On Mon, 22 Aug 2022 at 07:50, Alun Davies wrote: > I’m out of office till 22 August. Any RIPE Labs related queries can be > sent to l...@ripe.net and one of my colleagues will get back to you. > irony - three unsolicited messages on the same subject - appropriate too > Jeroen, > > ist's hard