Remove Advertising Remove Protocol Remove UDP port
article thumbnail

AWS Route 53 BGP Hijack: What Kentik Saw

Kentik

In simple terms, Border Gateway Protocol (BGP) is the protocol that routes traffic on the Internet. During a BGP route hijack, an attacker advertises IP prefixes from an ASN that is not the normal originator. Here we have the DNS clients sending their DNS queries to the hijacked blocks advertised by AS10297.