BGP Incident:
Summary:Multiple Banking Addresses Hijacked
Start:2013-07-24 00:00:00

NedZone Internet BV in the Netherlands (AS25459) announced routes to financial institutions (369 prefixes). Supposedly a mistake, according to a followon comment: AS286 provides IP Transit to AS25459. What happened is that both AS286 and AS25459 did not have proper filtering in place. AS286 leaked AS25459's blackhole routes to it's peers, and a handful accepted those more specifics. This lasted a few minutes before they realized what was going on and a fix was put into place.

Affected ASes
ASHow Affected
25459Originated multiple small BGP routes (< /24 in size)
"BGP multiple banking addresses hijacked" reported by SANS
Affected AS 'Route Views' Connection Map

(note: not all connections may be shown for big graphs)