{"id":112725,"date":"2024-01-06T15:10:27","date_gmt":"2024-01-06T13:10:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/komprometacziya-uchyotnoj-zapisi-privela-k-sboyu-bgp-marshrutizaczii-orange-espagne"},"modified":"2024-01-06T15:10:27","modified_gmt":"2024-01-06T13:10:28","slug":"komprometacziya-uchyotnoj-zapisi-privela-k-sboyu-bgp-marshrutizaczii-orange-espagne","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/komprometacziya-uchyotnoj-zapisi-privela-k-sboyu-bgp-marshrutizaczii-orange-espagne","title":{"rendered":"Komprimacija ra\u010duna dovela je do BGP usmjeravanja prekida Orange Espagne","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Komprimacija administratorskog ra\u010duna dovela je do gotovo \u010detverosatnog zastoja u radu drugog najve\u0107eg \u0161panskog telekomunikacijskog operatera Orange Espagne, koji opslu\u017euje 11 milijuna korisnika. Za pristup su\u010delju registrara RIPE NCC u Orange Espagne kori\u0161tena je predvidljiva lozinka \u201eripeadmin\u201c i nije bila uklju\u010dena dvostruka autentifikacija. <\/p>\n

Lozinka za RIPE presretnuta je tijekom kompromitacije sustava jednog od zaposlenika zlonamjernim softverom i od rujna se nalazila u prodaji na crnom tr\u017ei\u0161tu baza kompromitiranih lozinki. Va\u017eno je napomenuti da osim ra\u010duna Orange Espagne, u navedenim bazama postoje i tisu\u0107e drugih ra\u010duna za pristup access.ripe.net, koje bi potencijalno moglo koristiti za sli\u010dne napade. <\/p>\n

Incident je ostao neprimije\u0107en do 2. sije\u010dnja, kada je neki vandal u\u0161ao u web-su\u010dno su\u010delje RIPE NCC i napravio promjene u konfiguracijama BGP i RPKI (Resource Public Key Infrastructure), nakon \u010dega je tijekom gotovo \u010detiri sata do\u0161lo do prekida usmjeravanja otprilike polovice prometa teleoperatera. Akcije napada\u010da dovele su do toga da je tehnologija RPKI, koja bi trebala za\u0161tititi BGP a\u043d\u043e\u043dse od la\u017eiranja, kori\u0161tena za blokiranje legitimnih a\u043d\u043e\u043d\u0441\u0430. <\/p>\n

Napada\u010d je stvorio nekoliko novih zapisa RPKI ROA (Route Origin Authorization), me\u0111u kojima su se na\u0161li zapisi koji povezuju velike blokove adresa Orange Espagne s tu\u0111im autonomnim sustavom, \u0161to je dovelo do blokiranja ispravnih BGP a\u043d\u043e\u043dsa s autonomnog sustava ovog operatera na routerima mnogih glavnih operatera. Kao rezultat, broj BGP ruta povezanih s Orange Espagne smanjen je s 9200 na 7400, a promet je pao gotovo dvostruko.

\"Komprimacija<\/center> <\/p>\n

RPKI (Resource Public Key Infrastructure) se koristi za autorizaciju BGP a\u043d\u043e\u043dsa i omogu\u0107ava odre\u0111ivanje dolazi li BGP a\u043d\u043e\u043ds od vlasnika mre\u017ee ili ne. Pri kori\u0161tenju RPKI za autonomne sustave i IP adresa<\/a> stvara se lanac povjerenja od IANA do regionalnih registrara (RIRs), a zatim do pru\u017eatelja (LIR) i krajnjih korisnika, koji omogu\u0107ava tre\u0107im stranama da se uvjere da je operacija s resursom izvr\u0161ena od strane njegovog vlasnika. Bez kori\u0161tenja autorizacije, svaki operater mo\u017ee a\u043d\u043e\u043dsirati podmre\u017eu s la\u017enim informacijama o duljini rute i inicirati prijenos dijela prometa od drugih sustava koji ne koriste filtriranje a\u043d\u043e\u043dsa.
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043f\u043e\u0447\u0442\u0438 \u0447\u0435\u0442\u044b\u0440\u0451\u0445\u0447\u0430\u0441\u043e\u0432\u043e\u043c\u0443 \u0441\u0431\u043e\u044e \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e \u0432\u0435\u043b\u0438\u0447\u0438\u043d\u0435 \u0438\u0441\u043f\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0432\u044f\u0437\u0438 Orange Espagne, \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e 11 \u043c\u043b\u043d \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u043e\u0432. \u0414\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 RIPE NCC \u0432 Orange Espagne \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0441\u044f \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c «ripeadmin» \u0438 \u043d\u0435 \u0431\u044b\u043b\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f. \u041f\u0430\u0440\u043e\u043b\u044c \u043a RIPE \u0431\u044b\u043b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d \u0432 \u0445\u043e\u0434\u0435 \u043f\u043e\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":112726,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112725","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Komprimacija ra\u010duna dovela je do prekida BGP rutiranja Orange Espagne | ProHoster","description":"Komprimacija administratorskog ra\u010duna dovela je do gotovo \u010detverosatne pauze u radu drugog najve\u0107eg \u0161panskog operatera Orange Espagne, koji opslu\u017euje 11 milijuna pretplatnika.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/komprometacziya-uchyotnoj-zapisi-privela-k-sboyu-bgp-marshrutizaczii-orange-espagne","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u0441\u0431\u043e\u044e BGP-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 Orange Espagne | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043f\u043e\u0447\u0442\u0438 \u0447\u0435\u0442\u044b\u0440\u0451\u0445\u0447\u0430\u0441\u043e\u0432\u043e\u043c\u0443 \u0441\u0431\u043e\u044e \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e \u0432\u0435\u043b\u0438\u0447\u0438\u043d\u0435 \u0438\u0441\u043f\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0432\u044f\u0437\u0438 Orange Espagne, \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e 11 \u043c\u043b\u043d \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/komprometacziya-uchyotnoj-zapisi-privela-k-sboyu-bgp-marshrutizaczii-orange-espagne","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-06T13:10:28+00:00","article:modified_time":"2024-01-06T13:10:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"112725","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-08 20:40:12","updated":"2026-02-08 20:40:12","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/112725","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=112725"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/112725\/revisions"}],"predecessor-version":[{"id":158009,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/112725\/revisions\/158009"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media\/112726"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=112725"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=112725"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=112725"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}