BGP hijack on Google from a Nigerian ISP

Google BGP hijack: A tiny Nigerian internet service provider captured the traffic meant for Google's data centers. The incident, called the BGP hijack, occurred yesterday 12 November, between 13: 12 and 14: 35, Pacific Time, according to Google.

The incident was first identified and reported by BGPmon, an online service that monitors traffic routes through the largest Internet ISPs.BGP hijack

According to BGPmon, the incident was caused by a young Nigerian woman An ISP named MainOne Cable Company (AS37282), which announced to nearby ISPs that it hosted IP addresses that normally corresponded to Google's network of data centers.

BGPmon reports that a Nigerian ISP said it was "accidentally" hosting 212 Google prefixes in five different waves, for a total of 74 minutes.

The routing announcement leaked to other internet service providers, inviting more and more providers to send to Google traffic on the MainOne network instead of the regular BGP routes.

According to experts from ThousandEyes:

"We noticed that this leak was mainly driven by transit providers and did not affect consumers' ISPs." said Ameet Naik, director of ThousandEyes.

“All traffic hit great , shutting down China Telecom router, ”Naik added.

So whichever traffic it came to the Nigerian company, it was later abandoned, which did not allow users to connect to Google networks.

The incident has naturally caused great concern online, especially for cyber security and networking experts.

BGP hijacks are considered extremely dangerous as they allow unauthorized networks to monitor, analyze, and record sensitive information that could later be decrypted.

We can't know if the "bad" traffic redirection through the Nigerian company was intentional or accidental, but the problem still lies with BGP itself, a protocol developed in the 1980s that lacks security features and is still to date for the interconnection of ISP networks.

_____________________________

iGuRu.gr The Best Technology Site in Greecefgns

every publication, directly to your inbox

Join the 2.087 registrants.

Written by giorgos

George still wonders what he's doing here ...

Leave a reply

Your email address is not published. Required fields are mentioned with *

Your message will not be published if:
1. Contains insulting, defamatory, racist, offensive or inappropriate comments.
2. Causes harm to minors.
3. It interferes with the privacy and individual and social rights of other users.
4. Advertises products or services or websites.
5. Contains personal information (address, phone, etc.).