Re:Possible BGP hijack of 1.1.1.1
by youdontknowtho on Tuesday May 29, 2018 @04:29PM
(#17182685)
It could also be an ISP leaking a loopback identifier into their routes. A lot of ISP's will give their BGP routers lo0 interfaces named things like 1.1.1.1 and 2.2.2.2. It serves as a label and not as an address.
It's been a while, but I can't count the number of times that I've seen that.
Re:Possible BGP hijack of 1.1.1.1
by jlgaddis on Tuesday May 29, 2018 @11:29PM
(#17184836)
If that were the case, they would have been advertising a /32 (which, hopefully, would have been dropped -- or, the least, not redistributed) instead of a /24.
It's been a while, but I can't count the number of times that I've seen that.