Yulia Tymoshenko website hacked

    The official website of Yulia Tymoshenko was hacked. The deface traces were quickly eliminated, but Google no longer remembers everything , there is a cache screen . The attack occurred about an hour ago. UPD Information appeared: “It was not a site that was hacked, but a routing table of one of the Internet providers. The fact of malicious violation of the rules for the use of IP address space and BGP routing by the owners of the autonomous system AS50398. aut-num: AS50398 as-name: KARUA-AS descr: Karavan Ltd. org: ORG-KL64-RIPE import: from AS8287 accept ANY export: to AS8287 announce AS-KARAVAN import: from AS6695 accept ANY


















    export: to AS6695 announce AS-KARAVAN
    import: from AS5577 accept ANY
    export: to AS5577 announce AS-KARAVAN
    admin-c: PL4929-RIPE
    tech-c: RM9560-RIPE
    mnt-by: RIPE-NCC-END-MNT
    mnt-by : KARAVAN-MNT
    mnt-routes: KARAVAN-MNT
    changed: lopez@ispkaravan.net 20100123
    source: RIPE

    organization: ORG-KL64-RIPE
    org-name: Karavan Ltd.
    org-type: OTHER
    descr: Karavan Ltd.
    address: Calle Santa Cruz
    address: Santo Dominigo
    phone: +1.8092402195
    e-mail: manuele@ispkaravan.net
    admin-c: PL4929-RIPE
    tech-c: RM9560-RIPE
    mnt-ref: KARAVAN-MNT
    mnt-by: KARAVAN-MNT
    changed: lopez@ispkaravan.net 20091214
    source: RIPE

    person: Pedro Lopez
    address: Calle Santa Cruz
    address: Santo Dominigo
    e-mail: lopez@ispkaravan.net
    phone: +1.8092402195
    nic-hdl: PL4929-RIPE
    mnt-by: KARAVAN- MNT
    changed: lopez@ispkaravan.net 20091214
    source: RIPE

    person: Ricardo Manuele
    address: Calle Santa Cruz
    address: Santo Dominigo
    email: manuele@ispkaravan.net
    phone: +1.8092402195
    nic-hdl: RM9560-RIPE
    mnt-by: KARAVAN -MNT
    changed: lopez@ispkaravan.net 20091214
    source: RIPE

    He deliberately announced an address block that did not belong to him from under his own autonomous system. His ISP is AS5577, contrary to its routing policy described in RIPE:

    aut-num: AS5577
    as-name: ROOT
    descr: root eSolutions
    ...
    import: from AS50398 accept AS-KARAVAN
    ...

    as-set: AS-KARAVAN
    descr: ITSP Karavan AS- SET
    members: AS50398
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    only AS50398, 6849 is missing
    org: ORG-KL64-RIPE
    admin-c: PL4929-RIPE
    tech-c: RM9560-RIPE
    mnt-by: KARAVAN-MNT
    source: RIPE # Filtered

    Accepted this route and distributed it further on the Internet.

    Accordingly, you need to ask questions to ISP Caravan representatives and their upstream:

    organization: ORG-re8-RIPE
    org-name: root eSolutions
    org-type: LIR
    address: root SA
    Andy BIERLAIR
    35, rue John F. Kennedy
    7327 Steinsel
    Luxembourg
    phone: +35220500
    fax-no: +35220500500
    admin-c: AB99-RIPE
    mnt-ref: RIPE-NCC-HM-MNT
    mnt-ref: ROOT-MNT
    mnt-by: RIPE-NCC-HM-MNT
    source: RIPE # Filtered

    person: Andy BIERLAIR
    address: root SA
    address: 35, rue John F. Kennedy
    address: 7327 Steinsel
    address: Luxembourg
    phone: +352 20.500
    fax-no: +352 20.500.500
    nic-hdl: AB99-RIPE
    mnt-by: ROOT-MNT
    remarks:

    Also popular now: