A First Look at Suspicious IRR Records
The Internet Routing Registry (IRR) is a set of distributed databases used by networks to register routing policy information and to validate messages received in the Border Gateway…
BGP Route Leak at Angola Cables Slows Connectivity for Many Australians
On Thursday, 25 May, we saw another BGP route leak, this time causing significant delays in connectivity from Australia to sites in the US including Amazon’s AWS services and Akamai’s…
For 12 Hours, Was Part of Apple Engineering’s Network Hijacked by Russia’s Rostelecom?
For a little over 12 hours on 26-27 July, a network operated by Russia’s Rostelecom started announcing routes for part of Apple’s network. The effect was that Internet users in…
Configuration Issue Penalizing Single-Digit ASNs
Today, we explore an ongoing issue where it looks like an ASN is hijacking address space, but it is actually a router misconfiguration issue that unfairly penalizes certain ASNs. First,…
Lesson Learned: Twitter Shored Up Its Routing Security
With so many eyes on networks and traffic flows around Ukraine and Russia, any misleading announcement is quickly investigated. That’s what happened yesterday, when AS8342 (RTComm) started announcing 104.244.42.0/24, a…
Did Ukraine suffer a BGP hijack and how can networks protect themselves?
On 15 February 2022, several high-level Ukrainian services including the Ministry of Defence and two large national banks were targeted with DDoS (Distributed Denial of Service) attacks. Financial services were…
BGP Security in 2021
The Border Gateway Protocol (BGP) is central to how networks direct traffic across the Internet, and it provides the flexibility and scalability to accommodate Internet growth. However, like so many…
KlaySwap – Another BGP Hijack Targeting Crypto Wallets
It’s happened again. On 3 February, cryptocurrency platform KLAYswap had a security incident that allowed hackers to steal 2.2 billion (KRW), or about USD 1.9 million worth of digital (crypto…
A Major BGP Hijack by AS55410-Vodafone Idea Ltd
Received a Saturday morning ping on Twitter from Doug Madory, Director of Internet Analysis at Kentik, highlighting a major Border Gateway Protocol (BGP) hijack event overnight. My weekend is sorted,…