Yulia Tymoshenko website hacked

The official website of Yulia Tymoshenko was hacked. The deface traces were quickly eliminated, but Google no longer remembers everything , there is a cache screen . The attack occurred about an hour ago. UPD Information appeared: “It was not a site that was hacked, but a routing table of one of the Internet providers. The fact of malicious violation of the rules for the use of IP address space and BGP routing by the owners of the autonomous system AS50398. aut-num: AS50398 as-name: KARUA-AS descr: Karavan Ltd. org: ORG-KL64-RIPE import: from AS8287 accept ANY export: to AS8287 announce AS-KARAVAN import: from AS6695 accept ANY


















export: to AS6695 announce AS-KARAVAN
import: from AS5577 accept ANY
export: to AS5577 announce AS-KARAVAN
admin-c: PL4929-RIPE
tech-c: RM9560-RIPE
mnt-by: RIPE-NCC-END-MNT
mnt-by : KARAVAN-MNT
mnt-routes: KARAVAN-MNT
changed: lopez@ispkaravan.net 20100123
source: RIPE

organization: ORG-KL64-RIPE
org-name: Karavan Ltd.
org-type: OTHER
descr: Karavan Ltd.
address: Calle Santa Cruz
address: Santo Dominigo
phone: +1.8092402195
e-mail: manuele@ispkaravan.net
admin-c: PL4929-RIPE
tech-c: RM9560-RIPE
mnt-ref: KARAVAN-MNT
mnt-by: KARAVAN-MNT
changed: lopez@ispkaravan.net 20091214
source: RIPE

person: Pedro Lopez
address: Calle Santa Cruz
address: Santo Dominigo
e-mail: lopez@ispkaravan.net
phone: +1.8092402195
nic-hdl: PL4929-RIPE
mnt-by: KARAVAN- MNT
changed: lopez@ispkaravan.net 20091214
source: RIPE

person: Ricardo Manuele
address: Calle Santa Cruz
address: Santo Dominigo
email: manuele@ispkaravan.net
phone: +1.8092402195
nic-hdl: RM9560-RIPE
mnt-by: KARAVAN -MNT
changed: lopez@ispkaravan.net 20091214
source: RIPE

He deliberately announced an address block that did not belong to him from under his own autonomous system. His ISP is AS5577, contrary to its routing policy described in RIPE:

aut-num: AS5577
as-name: ROOT
descr: root eSolutions
...
import: from AS50398 accept AS-KARAVAN
...

as-set: AS-KARAVAN
descr: ITSP Karavan AS- SET
members: AS50398
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
only AS50398, 6849 is missing
org: ORG-KL64-RIPE
admin-c: PL4929-RIPE
tech-c: RM9560-RIPE
mnt-by: KARAVAN-MNT
source: RIPE # Filtered

Accepted this route and distributed it further on the Internet.

Accordingly, you need to ask questions to ISP Caravan representatives and their upstream:

organization: ORG-re8-RIPE
org-name: root eSolutions
org-type: LIR
address: root SA
Andy BIERLAIR
35, rue John F. Kennedy
7327 Steinsel
Luxembourg
phone: +35220500
fax-no: +35220500500
admin-c: AB99-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: ROOT-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered

person: Andy BIERLAIR
address: root SA
address: 35, rue John F. Kennedy
address: 7327 Steinsel
address: Luxembourg
phone: +352 20.500
fax-no: +352 20.500.500
nic-hdl: AB99-RIPE
mnt-by: ROOT-MNT
remarks: