Has anyone noticed this BGP event? BGP Origin Hijack event: 121786 | Cloudflare Radar<https://radar.cloudflare.com/routing/anomalies/hijack-121786>
BGP Origin Hijack: 121786Copy link Details of the BGP hijack eventShare this... Hijacker ASN AS400320 - Valley Center Wireless (US) Victim ASNs AS2386 - AT&T Data Communications Services (US) Prefixes 12.13.233[.]0/24, 12.144.222[.]0/24, 12.221.212[.]0/22, 12.229.22[.]0/24 Messages 192 Earliest message time 10/29/2025, 15:46 Latest message time 10/29/2025, 19:08 Peers observed 17% Confidence Low Tags * IRR Invalid * RPKI Unknown * RPKI Old Origin Unknown * IRR Old Origin Invalid ________________________________ From: John Stuppi (jstuppi) via NANOG <[email protected]> Sent: Wednesday, October 29, 2025 1:39 PM To: North American Network Operators Group <[email protected]> Cc: John Stuppi (jstuppi) <[email protected]> Subject: Re: US Impact - October 29 2025 I believe it’s related to the Azure outage: https://www.bleepingcomputer.com/news/microsoft/microsoft-dns-outage-impacts-azure-and-microsoft-365-services/ Microsoft is investigating an ongoing DNS out [cid:inky-injection-inliner-03755809cc10337ec572b1f12a6beedf] Caution: External ([email protected]<mailto:[email protected]>) Graymail Details<removed-link> [cid:inky-injection-inliner-023b0474c934d83d8d52155624827a68] Report This Email<removed-link> I believe it’s related to the Azure outage: https://www.bleepingcomputer.com/news/microsoft/microsoft-dns-outage-impacts-azure-and-microsoft-365-services/<https://shared.outlook.inky.com/link?domain=www.bleepingcomputer.com&t=h.eJxFkNGKwyAQRX-l-LxqEmts-tRfcXWSlSQanEmFLv33xsJuYR4Oc4d7YH7Znhd2PbEfog2vUpZSxPcCsIU4ubRuO0EWB8gIBeUaXE6YRvoQ9xF52slOwMO6WUfI7WPPwG30_HOmes0R8j04QMm-Tmyu2oAeg6QZYDmEtxDHbCNQSXnGt7ZTVrUX5TWAH86dac04GN1oZaxrvFWyNf0xzeVsRK871Q-mlkMtjzam6bYEJBRvFilPNfX_6d-G6hPa5wttoljs.MEYCIQCueFu8u72fLfe-ltS5swG8RovkNPvHbvev5tHfY455tQIhAO0CG5__iFooyG3yLholtdOE-nk6jBhtfOTua2sdGkFe> Microsoft is investigating an ongoing DNS outage affecting customers worldwide, preventing them from accessing Microsoft Azure and Microsoft 365 services. According to reports on DownDetector and social networks, this incident began impacting Microsoft's services almost 1 hour ago and is currently causing server and website connection issues for tens of thousands of users. Some of those affected are having issues accessing the Intune and Azure portals, as well as the Exchange admin center, while others report that Microsoft's Azure Front Door Content Delivery Network (CDN) service is also down. Thanks, John "Life is good when you are happy; but much better when others are happy because of you." ~ Pope Francis [signature_1786569038] John Stuppi Engineering Program Manager – Incident Response CISSP #25525 CCIE, Security #11154 [signature_773777294] Security & Trust Organization Cisco Systems, Inc. [email protected]<mailto:[email protected]<mailto:[email protected]>> Mobile: +1 732 319 3886<tel:+17323193886> Cisco.com<http://www.cisco.com/<https://shared.outlook.inky.com/link?domain=www.cisco.com&t=h.eJw9jksKwyAYhK8SXBcfMfonWeUqoiYVrRY1uCi9e2ughVkM8w3DvNCZA1oHdK_1uRLSWsPaFZ2wTg-CbgPynbpiiiPVWxtcPDYX96yirS1lX67myBVnMzfCWrNMIzDYFxBUcFCaGsUJA_kVnSfAUoxcLtDHbR-PKqZjC67Ugi-PUz46NX_6S2r_yt4fNmQ2ig.MEUCIB9kOGDjHsduICvASU8Q4bWsk2I29FNjkrHrrel8kgaoAiEA0Y037nhIgeEY00LiUj2IMubCWJmvIZvFK69D9ET0PM0>> [[email protected]] Think before you print. This email may contain confidential and privileged material for the sole use of the intended recipient. Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient), please contact the sender by reply email and delete all copies of this message. Please click here<http://www.cisco.com/c/en/us/about/legal/terms-sale-software-license-agreement/company-registration-information.html<https://shared.outlook.inky.com/link?domain=www.cisco.com&t=h.eJw9UEGOgzAM_ErFeRMDKaT01K-4waQRIaliI7Ra9e8LSLuSDyOPPTOan2otsbpfqpfI-w6wbZt2gV3WLi_ggBKsDPjMq0AkjxGEysKKMZLiPMmGhVQMjhKTQl-IFkoC-_cb07cq5ANLQQk5qZCmXJYT65cssfq6VPNhHnjkADITxZD8Y78rmEi2XGY-g7QGTXMzY0c0DtfWNnYabFd3xqKrRzTQ2H6f-na1uu9a0w_2EKdDPGHK_hH3GKxPrHPxBzv-s38bOapoPr-fulth.MEUCIQCAAv5IQ2yzfhc3zCc987hjJpOGiVOzGtarsDtRRxQFkQIgBqVDrlLKE-oJEtytv87t1wyXsayo_CqmGWpCNFO38Fo>> for Company Registration Information. From: Victor Kuarsingh via NANOG <[email protected]<mailto:[email protected]>> Date: Wednesday, October 29, 2025 at 13:38 To: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> Cc: Victor Kuarsingh <[email protected]<mailto:[email protected]>> Subject: US Impact - October 29 2025 All, Anyone know what caused the large impact in the US at around noon ET today? regards, Vector K _______________________________________________ NANOG mailing list https://lists.nanog.org/archives/list/[email protected]/message/SS3LCXZU4D43YYJOX5CUDIQNCA7HKW6B/<https://shared.outlook.inky.com/link?domain=lists.nanog.org&t=h.eJxtj8FuwjAQRH8F-YyySRzHhBNtOLQUtaoQIuFmxUuwkjjI69JD1X9vHakcKqQ9zRvN7HyxD9ez5Yydvb_QEqA35Cmyyo5tNLoWlGvO5oo0AZj01X_PgESqRdjt-LasjvtsnfG63rxVotyvn99fywf59HLIH4HNZ6wLbYY0GfAdYm9suzL25JRF_zm6jqJmHCDliicLrgWiLrJUJvJUSBELLlUTa8UhkfnvxYtMRrlIeV7IEI4h_O6Tgeob_VN82J58_wBjlVHz.MEUCIDYh0ExXYMe1yK4-PFvEMl1h0_Ftak8u46xsNV1qOMlzAiEA6GSXQgwTEmfKNLRvIgnthqKQDMnt5cd9-9FikPH0wto> _______________________________________________ NANOG mailing list https://lists.nanog.org/archives/list/[email protected]/message/2V2N65DY5VJUM3MGDL77MWSC2DP3GXAJ/<https://shared.outlook.inky.com/link?domain=lists.nanog.org&t=h.eJxtj8FqwzAQRH8l6Fy8thR5Y59SagiEuBRC0-YorI0j7MhBq7aH0n9vFGgOobCnecPMzrf4CKOoZ-IY45lrgNFx5MwbP_XZFHowoTu6T-IrgKu-vPeciNn0BHInn0vd7PVu_dqqdtVsENu37ZNsXtTq_XEN4mEmhtTm2LKDOBCNzvdL5w_BeIpfUxg466YTSGVUsVBWE9lqLrHAQ4U61wpNl1ujoMDycvlijlmppSorTOGUwv99MlF7o39KTNuLn18hiFGV.MEQCICRGDTLAmGn9o-vhkwcFBK55PXbP8e6Pbwb3gTNGsrNcAiAomSrNztbRV6AezZ8ZpSc_Sige-deOQrNbb4zn69LDXg> _______________________________________________ NANOG mailing list https://lists.nanog.org/archives/list/[email protected]/message/NJ34QFKZQG2FRALDK7EL3E4HESJ4AAFG/
