iiinova — where your digital self keeps evolving

Replies

Doug Madory @eldomador.bsky.social · 15/07/2025

Just to clear up some misinfo, a BGP hijack was not the cause of Cloudflare DNS going down today. At 21:51 UTC, Cloudflare (AS13335) withdrew both 1.1.1.0/24 and 1.0.0.0/24 for an unknown reason. I suspect AS4755 was always announcing 1.1.1.0/24, when CF went away, it leaked a bit (%2).

42410

vi @gl4cier.bsky.social · 15/07/2025

GRIP has an event listing AS65430 alongside AS4755 - might be a typo of AS6453, was this an attempt at making the path longer or sinkholing? grip.inetintel.cc.gatech.edu/events/moas/... Can't see data on RIPEstat for AS4755 announcing anything in the /8 covering this prefix in past 4 weeks but /1

210

vi @gl4cier.bsky.social · 15/07/2025

I'm willing to bet I've overlooked something - maybe it was too low visibility to be recorded before the route withdrawal by AS13335?

000

Doug Madory @eldomador.bsky.social · 15/07/2025

1.1.1.0/24 is used internally in a lot of places. There are local hijacks happening all the time for that range. Since there is a ROA (and the fact that 13335 originates it) the hijacks don't go very far. The main problem was AS13335 withdrawing 1.1.1.0/24 and 1.0.0.0/24.

110