BGP Incident:
| Summary: | Multiple Banking Addresses Hijacked |
|---|---|
| Start: | 2013-07-24 00:00:00 |
| End: | Unknown |
| Details: | NedZone Internet BV in the Netherlands (AS25459) announced routes to financial institutions (369 prefixes). Supposedly a mistake, according to a followon comment: AS286 provides IP Transit to AS25459. What happened is that both AS286 and AS25459 did not have proper filtering in place. AS286 leaked AS25459's blackhole routes to it's peers, and a handful accepted those more specifics. This lasted a few minutes before they realized what was going on and a fix was put into place. |
Affected ASes
| AS | How Affected |
|---|---|
| 25459 | Originated multiple small BGP routes (< /24 in size) |
References
| Summary | Link |
|---|---|
| "BGP multiple banking addresses hijacked" reported by SANS | https://isc.sans.edu/forums/diary/BGP+multiple+banking+addresses+hijacked/16249/1 |
Affected AS 'Route Views' Connection Map
(note: not all connections may be shown for big graphs)