<!doctypehtml><html lang=en><meta charset=utf-8><title>
   Blog | BGPmon
  </title><link href=/wp-content/themes/WP%20alyeska/style.css rel=stylesheet><link href=/wp-content/themes/WP%20alyeska/layout/css/skin/glass-blue.css rel=stylesheet><link href=/wp-content/themes/WP%20alyeska/layout/css/shape/stretch-light.css rel=stylesheet><link href=/wp-content/themes/WP%20alyeska/layout/css/style/light.css rel=stylesheet><link href=http://fonts.googleapis.com/css?family=Yanone+Kaffeesatz rel=stylesheet><style>body { font-family: "Lucida Sans", "Lucida Grande", "Lucida Sans Unicode", sans-serif; font-size: 14px; }
        h1, h2, h3, h4, h5, h6 { font-family: 'Yanone Kaffeesatz'; }</style><style></style><link href=//s.w.org rel=dns-prefetch><link title="BGPmon » Feed"href=/feed/ rel=alternate type=application/rss+xml><link title="BGPmon » Comments Feed"href=/comments/feed/ rel=alternate type=application/rss+xml><link title="BGPmon » Blog Comments Feed"href=/blog/feed/ rel=alternate type=application/rss+xml><link href=/wp-content/plugins/google-captcha/css/gglcptch.css?ver=1.26 id=gglcptch-css media=all rel=stylesheet><script src=/wp-includes/js/jquery/jquery.js?ver=1.12.4></script><script src=/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1></script><link href=/wp-json/ rel=https://api.w.org/><link href=/xmlrpc.php?rsd rel=EditURI title=RSD type=application/rsd+xml><link href=/blog/ rel=canonical><link href=/?p=12 rel=shortlink><link href=/wp-json/oembed/1.0/embed?url=https%3A%2F%2F%2Fblog%2F rel=alternate type=application/json+oembed><link href=/wp-json/oembed/1.0/embed?url=https%3A%2F%2F%2Fblog%2F&format=xml rel=alternate type=text/xml+oembed><link href=/wp-content/plugins/daves-wordpress-live-search/css/daves-wordpress-live-search_default_gray.css?ver=4.9.9 id=daves-wordpress-live-search-css media=all rel=stylesheet><link href=/xmlrpc.php rel=pingback><script src=/wp-content/themes/WP%20alyeska/layout/js/tools.js></script><script src=/wp-content/themes/WP%20alyeska/layout/js/easing.js></script><script src=/wp-content/themes/WP%20alyeska/layout/plugins/prettyphoto/js/jquery.prettyPhoto.js></script><script src=/wp-content/themes/WP%20alyeska/layout/js/swfobject.js></script><script src=/wp-content/themes/WP%20alyeska/layout/js/cycle.js></script><script src=/wp-content/themes/WP%20alyeska/layout/js/nivo.js></script><script src=/wp-content/themes/WP%20alyeska/layout/js/accordion.js></script><script src=/wp-content/themes/WP%20alyeska/layout/js/superfish.js></script><script src=/wp-content/themes/WP%20alyeska/layout/js/validate.js></script><script src=/wp-content/themes/WP%20alyeska/layout/js/custom.js></script><meta content=http://bgpmon.net/wp-content/themes/WP%20alyeska name=template_url><body><div id=wrapper><div id=header-wrapper><div id=header><div class=cs-header-banner><a class=cs-left-banner href=http://cisco.com title=BGPmon> <img alt=Cisco src=/wp-content/left-banner.svg> </a><a class=cs-right-banner href=http://crosswork.cisco.com title=BGPmon> <img alt="BGPmon is now part of Crosswork Cloud"src=/wp-content/right-banner.svg> </a></div></div></div><div id=main-wrapper><div id=main-top></div><div id=main-menu><div class=classic-blue id=menu-inner><div class=menu-left></div><div class=menu-middle><div class=menu-middle-inner><ul class=menu id=menu-mainmenu><li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-605"id=menu-item-605><a href=http://www.bgpmon.net/> Home </a><li class="menu-item menu-item-type-post_type menu-item-object-page current-menu-item page_item page-item-12 current_page_item menu-item-645"id=menu-item-645><a href=/blog/> Blog </a><li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-644"id=menu-item-644><a href=/about/> About Us </a> <ul class=sub-menu><li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-651"id=menu-item-651><a href=/about/contact-us/> Contact Us </a></ul><li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-646"id=menu-item-646><a href=/services/> Products and Services </a> <ul class=sub-menu><li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-655"id=menu-item-655><a href=/services/route-monitoring/> Route Monitoring </a><li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-821"id=menu-item-821><a href=/bgpmon-web-services-api/> BGPMon API </a></ul><li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-606"id=menu-item-606><a href=https://portal.bgpmon.net/> Client portal </a></ul></div></div><div class=menu-right></div></div></div><div id=main><div id=main-inner><div id=content><h1>Blog</h1><div class=page-content></div><div class=entry><div class=top></div><h2><a title="Popular Destinations rerouted to Russia"href=/popular-destinations-rerouted-to-russia/> Popular Destinations rerouted to Russia </a></h2><span class=meta> Posted by Andree Toonk - December 12, 2017 - <a rel="category tag"href=/category/hijack/> Hijack </a> </span><div class=comment><a class=comments-link href=/popular-destinations-rerouted-to-russia/#comments-wrap> 0 </a></div><p>Early this morning (UTC) our systems detected a suspicious event where many prefixes for high profile destinations were being announced by an unused Russian Autonomous System. Starting at 04:43 (UTC) 80 prefixes normally announced by organizations such Google, Apple, Facebook, Microsoft, Twitch, NTT Communications and Riot Games were now detected in the global BGP routing […]</p><a title="Popular Destinations rerouted to Russia"class=button href=/popular-destinations-rerouted-to-russia/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="Today’s BGP leak in Brazil"href=/todays-bgp-leak-in-brazil/> Today’s BGP leak in Brazil </a></h2><span class=meta> Posted by Andree Toonk - October 21, 2017 - <a rel="category tag"href=/category/newsonly/> News and Updates </a> </span><div class=comment><a class=comments-link href=/todays-bgp-leak-in-brazil/#comments-wrap> 0 </a></div><p>Earlier today several people noticed network reachability problems for networks such as Twitter, Google and others. The root cause turned out to be another BGP mishap. Some Google services seem to have been hijacked for roughly 15 minutes. Seen anything? @atoonk @bgpmon @bgpstreamMTR: https://t.co/RyCoE7zMld pic.twitter.com/DCT2JpKgsc— Fusl Neko Shy Dash (@OhNoItsFusl) October 21, 2017 Between 11:09 […]</p><a title="Today’s BGP leak in Brazil"class=button href=/todays-bgp-leak-in-brazil/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="BGP leak causing Internet outages in Japan and beyond."href=/bgp-leak-causing-internet-outages-in-japan-and-beyond/> BGP leak causing Internet outages in Japan and beyond. </a></h2><span class=meta> Posted by Andree Toonk - August 26, 2017 - <a rel="category tag"href=/category/bgp-instability/> BGP instability </a> </span><div class=comment><a class=comments-link href=/bgp-leak-causing-internet-outages-in-japan-and-beyond/#comments-wrap> 0 </a></div><p>Yesterday some Internet users would have seen issues with their Internet connectivity, experiencing slowness or parts of the Internet as unreachable. This incident hit users in Japan particularly hard and it caused the Internal Affairs and Communications Ministry of Japan to start an investigation into what caused the large-scale internet disruption that slowed or blocked […]</p><a title="BGP leak causing Internet outages in Japan and beyond."class=button href=/bgp-leak-causing-internet-outages-in-japan-and-beyond/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="BGPstream and The Curious Case of AS12389"href=/bgpstream-and-the-curious-case-of-as12389/> BGPstream and The Curious Case of AS12389 </a></h2><span class=meta> Posted by Andree Toonk - April 27, 2017 - <a rel="category tag"href=/category/hijack/> Hijack </a> </span><div class=comment><a class=comments-link href=/bgpstream-and-the-curious-case-of-as12389/#comments-wrap> 0 </a></div><p>The world of BGP routing is a fascinating place with lots of interesting BGP events happening every day. It can be challenging to keep track of it all and so two years ago we started theÂ BGPstream websiteÂ where we keep track of large scale outages and BGP hijacks. We list the events, basic info and visualize […]</p><a title="BGPstream and The Curious Case of AS12389"class=button href=/bgpstream-and-the-curious-case-of-as12389/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="Large hijack affects reachability of high traffic destinations"href=/large-hijack-affects-reachability-of-high-traffic-destinations/> Large hijack affects reachability of high traffic destinations </a></h2><span class=meta> Posted by Andree Toonk - April 22, 2016 - <a rel="category tag"href=/category/hijack/> Hijack </a> </span><div class=comment><a class=comments-link href=/large-hijack-affects-reachability-of-high-traffic-destinations/#comments-wrap> 10 </a></div><p>April 23, Update: NOC Team at innofield posted an explanation of the Incident in the comments section below. Starting today at 17:09 UTC our systems detected a large scale routing incident affecting hundreds of Autonomous systems. Many BGPmon users have received an email informing them of this change. Our initial investigation shows that the scope […]</p><a title="Large hijack affects reachability of high traffic destinations"class=button href=/large-hijack-affects-reachability-of-high-traffic-destinations/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="Country wide outage in Azerbaijan"href=/country-wide-outage-in-azerbaijan/> Country wide outage in Azerbaijan </a></h2><span class=meta> Posted by Andree Toonk - November 16, 2015 - <a rel="category tag"href=/category/bgp-instability/> BGP instability </a> </span><div class=comment><a class=comments-link href=/country-wide-outage-in-azerbaijan/#comments-wrap> 2 </a></div><p>It doesnât happen often that a country with hundreds of prefixes is affected by a massive outage, however earlier today this unfortunately happened to Azerbaijan. Starting at 12:04 UTC approximately 94% of the prefixes out of Azerbaijan became unreachable. Â  The event was reported on @bgpstream and details plus a replay can be found here: […]</p><a title="Country wide outage in Azerbaijan"class=button href=/country-wide-outage-in-azerbaijan/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="Large scale BGP hijack out of India"href=/large-scale-bgp-hijack-out-of-india/> Large scale BGP hijack out of India </a></h2><span class=meta> Posted by Andree Toonk - November 6, 2015 - <a rel="category tag"href=/category/hijack/> Hijack </a> </span><div class=comment><a class=comments-link href=/large-scale-bgp-hijack-out-of-india/#comments-wrap> 1 </a></div><p>BGP hijacks happen every day, some of them affect more networks than others and every now and then thereâs a major incident that affects thousands of networks. Our monitoring systems keep an eye out for our users and if you would like to have a general idea of whatâs going on in the world of […]</p><a title="Large scale BGP hijack out of India"class=button href=/large-scale-bgp-hijack-out-of-india/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="How Hacking Team Helped Italian Special Operations Group with BGP Routing Hijack"href=/how-hacking-team-helped-italian-special-operations-group-with-bgp-routing-hijack/> How Hacking Team Helped Italian Special Operations Group with BGP Routing Hijack </a></h2><span class=meta> Posted by Andree Toonk - July 12, 2015 - <a rel="category tag"href=/category/hijack/> Hijack </a> </span><div class=comment><a class=comments-link href=/how-hacking-team-helped-italian-special-operations-group-with-bgp-routing-hijack/#comments-wrap> 0 </a></div><p>By Andree Toonk and Dhia Mahjoub As part of the Hacking Team fall out and all the details published on Wikileaks, it became public knowledge that Hacking Team helped one of their customers Special Operations Group (ROS), regain access to Remote Access Tool (RAT) clients. As first reported here: http://blog.bofh.it/id_456 ROS recommended using BGP hijacking […]</p><a title="How Hacking Team Helped Italian Special Operations Group with BGP Routing Hijack"class=button href=/how-hacking-team-helped-italian-special-operations-group-with-bgp-routing-hijack/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="Massive route leak causes Internet slowdown"href=/massive-route-leak-cause-internet-slowdown/> Massive route leak causes Internet slowdown </a></h2><span class=meta> Posted by Andree Toonk - June 12, 2015 - <a rel="category tag"href=/category/bgp-instability/> BGP instability </a> </span><div class=comment><a class=comments-link href=/massive-route-leak-cause-internet-slowdown/#comments-wrap> 0 </a></div><p>Earlier today a massive route leak initiated by Telekom Malaysia (AS4788) caused significant network problems for the global routing system.Â Primarily affected was Level3 (AS3549 – formerly known as Global Crossing) and their customers. Below are some of the details as we know them now. Starting at 08:43 UTC today June 12th, Â AS4788 Telekom Malaysia started […]</p><a title="Massive route leak causes Internet slowdown"class=button href=/massive-route-leak-cause-internet-slowdown/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="BGP Optimizer Causes Thousands Of Fake Routes"href=/bgp-optimizer-causes-thousands-of-fake-routes/> BGP Optimizer Causes Thousands Of Fake Routes </a></h2><span class=meta> Posted by Andree Toonk - March 27, 2015 - <a rel="category tag"href=/category/hijack/> Hijack </a> </span><div class=comment><a class=comments-link href=/bgp-optimizer-causes-thousands-of-fake-routes/#comments-wrap> 0 </a></div><p>Earlier today many BGPmon users received one or more alerts informing them that their autonomous system (AS) started to announce a more-specific prefix. BGPmon classified many of these alerts as possible BGP man-in-the-middle (MITM) attacks. Here is an example alert: ==================================================================== Possible BGP MITM attack (Code: 21) ==================================================================== Your prefix: 23.20.0.0/15: Prefix Description: acxiom-online.com — […]</p><a title="BGP Optimizer Causes Thousands Of Fake Routes"class=button href=/bgp-optimizer-causes-thousands-of-fake-routes/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="BGPMon Joins OpenDNS"href=/bgpmon-joins-opendns/> BGPMon Joins OpenDNS </a></h2><span class=meta> Posted by Andree Toonk - March 12, 2015 - <a rel="category tag"href=/category/bgpmonnet/> BGPmon.net </a> , <a rel="category tag"href=/category/newsonly/> News and Updates </a> </span><div class=comment><a class=comments-link href=/bgpmon-joins-opendns/#comments-wrap> 0 </a></div><p>Dear BGPmon.net user, I’m excited to announce that BGPmon has been acquired by OpenDNS. OpenDNS is a leading cloud-delivered network security company known for engineering predictive intelligence technology that stops malicious activity before it can threaten a network. Over the last few years BGPmon has grown from a community service into a successful business that […]</p><a title="BGPMon Joins OpenDNS"class=button href=/bgpmon-joins-opendns/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="What caused the Google service interruption?"href=/what-caused-the-google-service-interruption/> What caused the Google service interruption? </a></h2><span class=meta> Posted by Andree Toonk - March 12, 2015 - <a rel="category tag"href=/category/bgp-instability/> BGP instability </a> </span><div class=comment><a class=comments-link href=/what-caused-the-google-service-interruption/#comments-wrap> 0 </a></div><p>This morning people on twitter reported that they were unable to reach Google services. Businessinsider followed up with a story in which they mentioned that the Google service interruption primarily involved European and Indian users. In this blog weâll take a quick look at what exactly happened by looking at our BGP data. The first […]</p><a title="What caused the Google service interruption?"class=button href=/what-caused-the-google-service-interruption/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="BGP routing incidents in 2014, malicious or not?"href=/bgp-routing-incidents-in-2014-malicious-or-not/> BGP routing incidents in 2014, malicious or not? </a></h2><span class=meta> Posted by Andree Toonk - February 17, 2015 - <a rel="category tag"href=/category/bgpmonnet/> BGPmon.net </a> , <a rel="category tag"href=/category/hijack/> Hijack </a> </span><div class=comment><a class=comments-link href=/bgp-routing-incidents-in-2014-malicious-or-not/#comments-wrap> 0 </a></div><p>Over the last year we have seen and written about numerous BGP routing incidents that looked out of the ordinary, straight-up suspicious or were just configuration mistakes. In this blog post we will highlight a few of them and look at the impact and cause of each of the observed incidents and try to determine […]</p><a title="BGP routing incidents in 2014, malicious or not?"class=button href=/bgp-routing-incidents-in-2014-malicious-or-not/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="BGP hijack incident by Syrian Telecommunications Establishment"href=/bgp-hijack-incident-by-syrian-telecommunications-establishment/> BGP hijack incident by Syrian Telecommunications Establishment </a></h2><span class=meta> Posted by Andree Toonk - December 9, 2014 - <a rel="category tag"href=/category/hijack/> Hijack </a> </span><div class=comment><a class=comments-link href=/bgp-hijack-incident-by-syrian-telecommunications-establishment/#comments-wrap> 2 </a></div><p>The Syrian national Telecommunications Establishment (STE) has been in the news numerous times over the last fewÂ years, mostly because of the long lasting large scale Internet outages in Syria. This morning however we observed a new incident involving the two Autonomous systems for STE (AS29386 and AS29256). Starting at 08:33 UTC we detected Â that hundredsÂ of […]</p><a title="BGP hijack incident by Syrian Telecommunications Establishment"class=button href=/bgp-hijack-incident-by-syrian-telecommunications-establishment/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="Using BGP data to find Spammers"href=/using-bgp-data-to-find-spammers/> Using BGP data to find Spammers </a></h2><span class=meta> Posted by Andree Toonk - September 3, 2014 - <a rel="category tag"href=/category/hijack/> Hijack </a> </span><div class=comment><a class=comments-link href=/using-bgp-data-to-find-spammers/#comments-wrap> 4 </a></div><p>Itâs long been assumed that Spammers use a technique called IP squatting to get around IP reputation lists and to make it harder to find the real source of the spammers. In this blog weâll take a closer look at Spam operations and their techniques. IP Squatting Weâve all read the reports about IPv4 running […]</p><a title="Using BGP data to find Spammers"class=button href=/using-bgp-data-to-find-spammers/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="What caused todayâs Internet hiccup"href=/what-caused-todays-internet-hiccup/> What caused todayâs Internet hiccup </a></h2><span class=meta> Posted by Andree Toonk - August 13, 2014 - <a rel="category tag"href=/category/bgp-instability/> BGP instability </a> </span><div class=comment><a class=comments-link href=/what-caused-todays-internet-hiccup/#comments-wrap> 0 </a></div><p>Like others, you may have noticed some instability and general sluggishness on the Internet today.Â  In this post weâll take a closer look at what happened, including some of the BGP details! At around 8am UTC Internet users on different mailing lists, forums and twitter, reported slow connectivity and intermediate outages.Â  Examples can be found […]</p><a title="What caused todayâs Internet hiccup"class=button href=/what-caused-todays-internet-hiccup/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="The Canadian Bitcoin Hijack"href=/the-canadian-bitcoin-hijack/> The Canadian Bitcoin Hijack </a></h2><span class=meta> Posted by Andree Toonk - August 12, 2014 - <a rel="category tag"href=/category/hijack/> Hijack </a> </span><div class=comment><a class=comments-link href=/the-canadian-bitcoin-hijack/#comments-wrap> 0 </a></div><p>A few days ago researchers atÂ Dell SecureWorks published the details of an attacker repeatedly hijacking BGP prefixes for numerous large providers such as Amazon, OVH, Digital Ocean, LeaseWeb, Alibaba and more. The goal of the operation was to intercept data between Bitcoin miners and Bitcoin mining pools. They estimated that $83,000 was made with this […]</p><a title="The Canadian Bitcoin Hijack"class=button href=/the-canadian-bitcoin-hijack/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="Hijack event today by Indosat"href=/hijack-event-today-by-indosat/> Hijack event today by Indosat </a></h2><span class=meta> Posted by Andree Toonk - April 3, 2014 - <a rel="category tag"href=/category/hijack/> Hijack </a> , <a rel="category tag"href=/category/newsonly/> News and Updates </a> </span><div class=comment><a class=comments-link href=/hijack-event-today-by-indosat/#comments-wrap> 1 </a></div><p>Today we observed a large-scale ‘hijack’ event that affected many of the prefixes on the Internet. This blog post is to provide you with some additional information. What happened? Indosat, AS4761, one of Indonesia’s largest telecommunication networks normally originates about 300 prefixes. Starting at 18:26 UTC (April 2, 2014) AS4761 began to originate 417,038 new […]</p><a title="Hijack event today by Indosat"class=button href=/hijack-event-today-by-indosat/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="Turkey Hijacking IP addresses for popular Global DNS providers"href=/turkey-hijacking-ip-addresses-for-popular-global-dns-providers/> Turkey Hijacking IP addresses for popular Global DNS providers </a></h2><span class=meta> Posted by Andree Toonk - March 29, 2014 - <a rel="category tag"href=/category/hijack/> Hijack </a> , <a rel="category tag"href=/category/newsonly/> News and Updates </a> </span><div class=comment><a class=comments-link href=/turkey-hijacking-ip-addresses-for-popular-global-dns-providers/#comments-wrap> 26 </a></div><p>At BGPmon we see numerous BGP hijacks every single day, some are interesting because of the size and scale of the hijack or as weâve seen today because of the targeted hijacked prefixes.Â  It all started last weekend when the Turkish president ordered the censorship of twitter.com. This started with a block of twitter by […]</p><a title="Turkey Hijacking IP addresses for popular Global DNS providers"class=button href=/turkey-hijacking-ip-addresses-for-popular-global-dns-providers/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="Looking at the spamhaus DDOS from a BGP perspective"href=/looking-at-the-spamhouse-ddos-from-a-bgp-perspective/> Looking at the spamhaus DDOS from a BGP perspective </a></h2><span class=meta> Posted by Andree Toonk - March 30, 2013 - <a rel="category tag"href=/category/bgp-instability/> BGP instability </a> , <a rel="category tag"href=/category/hijack/> Hijack </a> </span><div class=comment><a class=comments-link href=/looking-at-the-spamhouse-ddos-from-a-bgp-perspective/#comments-wrap> 3 </a></div><p>Itâs been a busy week for network engineers world wide, rerouting around broken optical links and of course the 300Gb/s DDOS attack towards Spamhaus and Cloudflare. This DDOS has been classified as the largest DDOS attack ever recorded and has been written about quite a bit in mainstream media. Thereâs been a bit of discussion […]</p><a title="Looking at the spamhaus DDOS from a BGP perspective"class=button href=/looking-at-the-spamhouse-ddos-from-a-bgp-perspective/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="Accidentally stealing the Internet"href=/accidentally-stealing-the-internet/> Accidentally stealing the Internet </a></h2><span class=meta> Posted by Andree Toonk - January 8, 2013 - <a rel="category tag"href=/category/hijack/> Hijack </a> , <a rel="category tag"href=/category/newsonly/> News and Updates </a> </span><div class=comment><a class=comments-link href=/accidentally-stealing-the-internet/#comments-wrap> 7 </a></div><p>Just a few days ago we learned Â about an incident involving a mis-issued SSL certificate that was used in a Man in the Middle attack to intercept Gmail data. In this blog post weâll talk about how Man in the Middle (MITM) attacks work and weâll look at recent BGP MITM event that caused traffic […]</p><a title="Accidentally stealing the Internet"class=button href=/accidentally-stealing-the-internet/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="Syria shuts down the Internet"href=/syria-shuts-down-the-internet/> Syria shuts down the Internet </a></h2><span class=meta> Posted by Andree Toonk - November 29, 2012 - <a rel="category tag"href=/category/bgp-instability/> BGP instability </a> </span><div class=comment><a class=comments-link href=/syria-shuts-down-the-internet/#comments-wrap> 9 </a></div><p>As of 10:27 UTC this morning the majority of the Internet in Syria is no longer connected to the rest of the world and can be considered as offline.Â Syria has only one major provider, AS29256 The Syrian Telecommunications Establishment. This provider is government owned and originates 56 out of 62 Syrian prefixes. This morning between […]</p><a title="Syria shuts down the Internet"class=button href=/syria-shuts-down-the-internet/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="New version of BGPmon.net"href=/new-version-of-bgpmon-net/> New version of BGPmon.net </a></h2><span class=meta> Posted by Andree Toonk - October 3, 2012 - <a rel="category tag"href=/category/bgpmonnet/> BGPmon.net </a> , <a rel="category tag"href=/category/newsonly/> News and Updates </a> </span><div class=comment><a class=comments-link href=/new-version-of-bgpmon-net/#comments-wrap> 0 </a></div><p>As many of you are aware, BGPmon.net has been offered as a free service since becoming publically available in 2008. From its inception the service has been funded largely by myself. Now, due to ever-increasing popularity, it has become unsustainable to run the service on personal funds and my available time. I have reached a […]</p><a title="New version of BGPmon.net"class=button href=/new-version-of-bgpmon-net/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="A BGP leak made in Canada"href=/a-bgp-leak-made-in-canada/> A BGP leak made in Canada </a></h2><span class=meta> Posted by Andree Toonk - August 8, 2012 - Uncategorized </span><div class=comment><a class=comments-link href=/a-bgp-leak-made-in-canada/#comments-wrap> 2 </a></div><p>A BGP leak made in Canada Today many network operators saw their BGP session flap, RTTâs increase and CPU usage on routers spike.Â  While looking at our BGP data we determined the root cause to be a large BGP leak in Canada that quickly affected networks worldwide. Dery Telecom Based on our analysis it seems […]</p><a title="A BGP leak made in Canada"class=button href=/a-bgp-leak-made-in-canada/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=entry><div class=top></div><h2><a title="Internet outage in Lebanon continues into second day"href=/internet-outage-in-lebanon-continues-for-days/> Internet outage in Lebanon continues into second day </a></h2><span class=meta> Posted by Andree Toonk - July 6, 2012 - <a rel="category tag"href=/category/bgp-instability/> BGP instability </a> </span><div class=comment><a class=comments-link href=/internet-outage-in-lebanon-continues-for-days/#comments-wrap> 0 </a></div><p>Itâs not often we see large-scale outages such as the one that currently affect Internet users in Lebanon where Internet access has been severely damaged for over 36 hours now. The problems started on July 4th, 16:16 (UTC), which is 19:16 Lebanese time. The cause of the outage according to the Telecoms Ministry in Lebanon […]</p><a title="Internet outage in Lebanon continues into second day"class=button href=/internet-outage-in-lebanon-continues-for-days/> <span class=left> <span class=right> <span class=middle> Read More </span> </span>  </span>  </a><div class=bottom></div></div><div class=clear></div><div class=nav-entries><div class="nav-prev fl"></div><div class="nav-next fr"><a href=/blog/page/2/> Older Entries » </a></div><div class=clear></div></div></div><div id=sidebar><div id=sidebar-top></div><div class=widget><h2>Latest Tweets</h2><div class=textwidget><a class=twitter-timeline data-dnt=true data-widget-id=288610173017264128 href=https://twitter.com/bgpmon> Tweets by @bgpmon </a><script>!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0];if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src="//platform.twitter.com/widgets.js";fjs.parentNode.insertBefore(js,fjs);}}(document,"script","twitter-wjs");</script></div></div><div id=sidebar-bottom></div></div><script>var _gaq = _gaq || [];
  _gaq.push(['_setAccount', 'UA-37605391-1']);
  _gaq.push(['_trackPageview']);

  (function() {
    var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
    ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
    var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
  })();</script><div class=clear></div><div id=footer-top></div><div id=footer><div id=footer-inner><div class=column></div><div class=clear></div></div></div><div id=footer-bottom></div><div id=copyright><div class=alignleft><p>Copyright © 2019 BGPmon Network Solutions Inc. All rights reserved.</div><div class=alignright></div><div class=clear></div></div></div></div><div id=main-bottom></div></div></div><script src=/wp-includes/js/underscore.min.js?ver=1.8.3></script><script>/* <![CDATA[ */
var DavesWordPressLiveSearchConfig = {"resultsDirection":"down","showThumbs":"false","showExcerpt":"true","showMoreResultsLink":"true","minCharsToSearch":"1","xOffset":"0","yOffset":"0","blogURL":"https:\/\/bgpmon.net","ajaxURL":"https:\/\/bgpmon.net\/wp-admin\/admin-ajax.php","viewMoreText":"View more results","outdatedJQuery":"Dave's WordPress Live Search requires jQuery 1.2.6 or higher. WordPress ships with current jQuery versions. But if you are seeing this message, it's likely that another plugin is including an earlier version.","resultTemplate":"<ul id=\"dwls_search_results\" class=\"search_results dwls_search_results\">\n<input type=\"hidden\" name=\"query\" value=\"<%- resultsSearchTerm %>\" \/>\n<% _.each(searchResults, function(searchResult, index, list) { %>\n        <%\n        \/\/ Thumbnails\n        if(DavesWordPressLiveSearchConfig.showThumbs == \"true\" && searchResult.attachment_thumbnail) {\n                liClass = \"post_with_thumb\";\n        }\n        else {\n                liClass = \"\";\n        }\n        %>\n        <li class=\"daves-wordpress-live-search_result <%- liClass %> '\">\n        <% if(DavesWordPressLiveSearchConfig.showThumbs == \"true\" && searchResult.attachment_thumbnail) { %>\n                <img src=\"<%= searchResult.attachment_thumbnail %>\" class=\"post_thumb\" \/>\n        <% } %>\n\n        <a href=\"<%= searchResult.permalink %>\" class=\"daves-wordpress-live-search_title\"><%= searchResult.post_title %><\/a>\n\n        <% if(searchResult.post_price !== undefined) { %>\n                <p class=\"price\"><%- searchResult.post_price %><\/p>\n        <% } %>\n\n        <% if(DavesWordPressLiveSearchConfig.showExcerpt == \"true\" && searchResult.post_excerpt) { %>\n                <p class=\"excerpt clearfix\"><%= searchResult.post_excerpt %><\/p>\n        <% } %>\n\n        <% if(e.displayPostMeta) { %>\n                <p class=\"meta clearfix daves-wordpress-live-search_author\" id=\"daves-wordpress-live-search_author\">Posted by <%- searchResult.post_author_nicename %><\/p><p id=\"daves-wordpress-live-search_date\" class=\"meta clearfix daves-wordpress-live-search_date\"><%- searchResult.post_date %><\/p>\n        <% } %>\n        <div class=\"clearfix\"><\/div><\/li>\n<% }); %>\n\n<% if(searchResults[0].show_more !== undefined && searchResults[0].show_more && DavesWordPressLiveSearchConfig.showMoreResultsLink == \"true\") { %>\n        <div class=\"clearfix search_footer\"><a href=\"<%= DavesWordPressLiveSearchConfig.blogURL %>\/?s=<%-  resultsSearchTerm %>\"><%- DavesWordPressLiveSearchConfig.viewMoreText %><\/a><\/div>\n<% } %>\n\n<\/ul>"};
/* ]]> */</script><script src=/wp-content/plugins/daves-wordpress-live-search/js/daves-wordpress-live-search.min.js?ver=4.9.9></script><script src=/wp-content/plugins/daves-wordpress-live-search/js/excanvas.compiled.js?ver=4.9.9></script><script src=/wp-content/plugins/daves-wordpress-live-search/js/spinners.min.js?ver=4.9.9></script>