# China hijacking internet traffic

**URL:** <https://forums.speedlife.net/t/china-hijacking-internet-traffic/206135>\
**Category:** NYSpeed Off Topic\
**Created:** [November 17, 2010, 5:57am UTC](https://forums.speedlife.net/t/china-hijacking-internet-traffic/206135 "2010-11-17T05:57:38Z")\
**Posts on this page:** 19\
**Page:** 1

<div class="post-metadata">

**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\
**Post date:** [November 17, 2010, 5:57am UTC](https://forums.speedlife.net/t/china-hijacking-internet-traffic/206135/1 "2010-11-17T05:57:38Z")

</div>

> **[China Denies Hijacking U.S. Web Traffic](http://www.foxnews.com/tech/2010/11/17/china-denies-hijacking-web-traffic.html)**
>
> China Telecom denied on Wednesday that it had hijacked U.S. Internet traffic in April, after a U.S. congressional advisory group said the company had sent incorrect routing information.

Lots of news hype going on with this…

Sorta interesting however this could have easily been prevented.

Technical details [http://bgpmon.net/blog/?p=282](http://bgpmon.net/blog/?p=282)

These things happen and its easy to fat finger and make a mistake and the situation is made worse by bad configuration on their upstream providers.

---

<div class="post-metadata">

**Author:** ![Onyx\_Z32](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/onyx_z32/32/7581_2.png) [@Onyx\_Z32](https://forums.speedlife.net/u/Onyx_Z32)\
**Post date:** [November 17, 2010, 7:18am UTC](https://forums.speedlife.net/t/china-hijacking-internet-traffic/206135/2 "2010-11-17T07:18:46Z")

</div>

Damn. I haven’t heard anything about this.

---

<div class="post-metadata">

**Author:** ![Blue\_Eyed\_Devil](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/blue_eyed_devil/32/7292_2.png) [@Blue\_Eyed\_Devil](https://forums.speedlife.net/u/Blue_Eyed_Devil)\
**Post date:** [November 17, 2010, 7:23am UTC](https://forums.speedlife.net/t/china-hijacking-internet-traffic/206135/3 "2010-11-17T07:23:17Z")

</div>

Didn’t this happen back in April? Edit: Oh yeah.

I see China now has the “biggest/best” computer in the World. Nice.

---

<div class="post-metadata">

**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\
**Post date:** [November 17, 2010, 7:45am UTC](https://forums.speedlife.net/t/china-hijacking-internet-traffic/206135/4 "2010-11-17T07:45:08Z")

</div>

Congress has some report coming out today about this or something.

---

<div class="post-metadata">

**Author:** ![boxxa](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/boxxa/32/5045_2.png) [@boxxa](https://forums.speedlife.net/u/boxxa)\
**Post date:** [November 17, 2010, 8:22am UTC](https://forums.speedlife.net/t/china-hijacking-internet-traffic/206135/5 "2010-11-17T08:22:32Z")

</div>

Its really funny how many people talk about this in the media who obviously have 0 understanding of what exactly happened.

---

<div class="post-metadata">

**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\
**Post date:** [November 17, 2010, 8:26am UTC](https://forums.speedlife.net/t/china-hijacking-internet-traffic/206135/6 "2010-11-17T08:26:50Z")

</div>

Hey we didn’t filter routes coming in over BGP from this peer AS…

I understand why you can’t route filter on huge transit links but they were only sending 50 prefixes which isn’t a lot.

---

<div class="post-metadata">

**Author:** ![Mankthetank19](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/mankthetank19/32/5295_2.png) [@Mankthetank19](https://forums.speedlife.net/u/Mankthetank19)\
**Post date:** [November 17, 2010, 8:42pm UTC](https://forums.speedlife.net/t/china-hijacking-internet-traffic/206135/7 "2010-11-17T20:42:06Z")

</div>

China has been doing this for a while. China is a different breed and they hate on all the large companies (Google, Yahoo, Aol (lol), etc.)

China wants their people to use their own products and companies rather than US/UK companies for services. They attack the above companies ^^^ in hope of bring them down among their company so they can use their own China products. I am pretty sure many companies use honeypots to try and fool China 😉

I can go on an on about this but it is no use - most of it is due to the ISP’s.

---

<div class="post-metadata">

**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\
**Post date:** [November 18, 2010, 3:10am UTC](https://forums.speedlife.net/t/china-hijacking-internet-traffic/206135/8 "2010-11-18T03:10:24Z")

</div>

This kind of thing happens all the time someone in India did this when they tried to block youtube.

---

<div class="post-metadata">

**Author:** ![ProgRocker](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/progrocker/32/5434_2.png) [@ProgRocker](https://forums.speedlife.net/u/ProgRocker)\
**Post date:** [November 18, 2010, 4:10am UTC](https://forums.speedlife.net/t/china-hijacking-internet-traffic/206135/9 "2010-11-18T04:10:17Z")

</div>

Wasn’t the redirecting of traffic due to a botched DNS setting or something. IIRC it was blocking youtube for government sites.

---

<div class="post-metadata">

**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\
**Post date:** [November 18, 2010, 5:30am UTC](https://forums.speedlife.net/t/china-hijacking-internet-traffic/206135/10 "2010-11-18T05:30:06Z")

</div>

Nah in India they tried to reroute youtube IPs for their local network but pushed those changes into BGP and screwed it up for a lot of people

edit my bad it was Pakistan

[http://asert.arbornetworks.com/2008/02/internet-routing-insecuritypakistan-nukes-youtube/](http://asert.arbornetworks.com/2008/02/internet-routing-insecuritypakistan-nukes-youtube/)

---

<div class="post-metadata">

**Author:** ![Mankthetank19](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/mankthetank19/32/5295_2.png) [@Mankthetank19](https://forums.speedlife.net/u/Mankthetank19)\
**Post date:** [November 18, 2010, 6:02am UTC](https://forums.speedlife.net/t/china-hijacking-internet-traffic/206135/11 "2010-11-18T06:02:14Z")

</div>

China of course denies all allegations - [http://www.bloomberg.com/news/2010-11-18/china-telecom-denies-hijack-of-web-traffic-after-u-s-government-report.html?cmpid=yhoo](http://www.bloomberg.com/news/2010-11-18/china-telecom-denies-hijack-of-web-traffic-after-u-s-government-report.html?cmpid=yhoo)

---

<div class="post-metadata">

**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\
**Post date:** [November 18, 2010, 6:14am UTC](https://forums.speedlife.net/t/china-hijacking-internet-traffic/206135/12 "2010-11-18T06:14:51Z")

</div>

The thing is this isn’t hard to do and its not discrete

I don’t really think there was an malicious intent

---

<div class="post-metadata">

**Author:** ![Blue\_Eyed\_Devil](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/blue_eyed_devil/32/7292_2.png) [@Blue\_Eyed\_Devil](https://forums.speedlife.net/u/Blue_Eyed_Devil)\
**Post date:** [November 18, 2010, 6:17am UTC](https://forums.speedlife.net/t/china-hijacking-internet-traffic/206135/13 "2010-11-18T06:17:46Z")

</div>

Chinese… traffic… what? [http://www.youtube.com/watch\_popup?v=QESfEd180rQ](http://www.youtube.com/watch_popup?v=QESfEd180rQ)  
Asians CAN’T drive. lol (But they can buy GM stock)

---

<div class="post-metadata">

**Author:** ![Geehee](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/geehee/32/7238_2.png) [@Geehee](https://forums.speedlife.net/u/Geehee)\
**Post date:** [November 18, 2010, 6:35am UTC](https://forums.speedlife.net/t/china-hijacking-internet-traffic/206135/14 "2010-11-18T06:35:06Z")

</div>

someone break it down for me in laymans terms wtf happened.

---

<div class="post-metadata">

**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\
**Post date:** [November 18, 2010, 6:39am UTC](https://forums.speedlife.net/t/china-hijacking-internet-traffic/206135/15 "2010-11-18T06:39:34Z")

</div>

ISPs advertise all the blocks of IPs that they own to other ISPs and it all gets exchanged around the internet so everyone can get to everyone…

China advertised a bunch of IP space that they didn’t own and if other ISPs had the best path back to those IPs via CHina the traffic went that way.

Normally your upstream ISPs have filters and only allow you to advertise out IPs that they verified you own in this case no filter was in place.

If your an ISP and your network is complex a n00b network engineer could accidentally advertise someone elses space.

---

<div class="post-metadata">

**Author:** ![boxxa](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/boxxa/32/5045_2.png) [@boxxa](https://forums.speedlife.net/u/boxxa)\
**Post date:** [November 18, 2010, 6:41am UTC](https://forums.speedlife.net/t/china-hijacking-internet-traffic/206135/16 "2010-11-18T06:41:19Z")

</div>

> [@Geehee](#):
>
> someone break it down for me in laymans terms wtf happened.

If you were driving from the US to London (forget about the ocean) on a road, China changed some street signs and caused a bunch of people trying to drive through their country infastructure on the way from point a to point b without them knowing.

---

<div class="post-metadata">

**Author:** ![ProgRocker](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/progrocker/32/5434_2.png) [@ProgRocker](https://forums.speedlife.net/u/ProgRocker)\
**Post date:** [November 18, 2010, 6:41am UTC](https://forums.speedlife.net/t/china-hijacking-internet-traffic/206135/17 "2010-11-18T06:41:49Z")

</div>

> [@LZ](#):
>
> ISPs advertise all the blocks of IPs that they own to other ISPs and it all gets exchanged around the internet so everyone can get to everyone…
> 
> China advertised a bunch of IP space that they didn’t own and if other ISPs had the best path back to those IPs via CHina the traffic went that way.
> 
> Normally your upstream ISPs have filters and only allow you to advertise out IPs that they verified you own in this case no filter was in place.

Basically traffic went through the Great Firewall of China adopting their policies?

Da VaChina’s got dem 1337 h4x0rs

---

<div class="post-metadata">

**Author:** ![Blue\_Eyed\_Devil](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/blue_eyed_devil/32/7292_2.png) [@Blue\_Eyed\_Devil](https://forums.speedlife.net/u/Blue_Eyed_Devil)\
**Post date:** [November 18, 2010, 6:42am UTC](https://forums.speedlife.net/t/china-hijacking-internet-traffic/206135/18 "2010-11-18T06:42:05Z")

</div>

^^Way batter than LZ explaination. lol

---

<div class="post-metadata">

**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\
**Post date:** [November 18, 2010, 6:42am UTC](https://forums.speedlife.net/t/china-hijacking-internet-traffic/206135/19 "2010-11-18T06:42:45Z")

</div>

lol
