Fuga de rutas BGP de CANTV (AS8048) con causa probablemente accidental

Qué respalda esta fuente

• Cloudflare Radar event 462460 screenshot records eight prefixes leaked by CANTV AS8048 and an origin count of two
• AS8048 learned routes from Sparkle AS6762 and exported them to GlobeNet AS52320
• Cloudflare prose attributes the discussed routes to Dayco Telecom AS21980; its relationship to the screenshot's two origins is unresolved
• Cloudflare prose describes announcements approximately 15:30–17:45 UTC on 2 January, while the screenshot lists a latest message on 3 January at 23:59; this is not a confirmed total duration
• repeated AS8048 prepending made the leaked path less attractive
• Cloudflare observed eleven similar AS8048 leaks since December
• insufficient BGP policy or route convergence was considered more likely than a targeted interception

Límites de la evidencia

Authoritative independent technical analysis of public routing telemetry, but Cloudflare explicitly cannot determine intent definitively and does not establish which path carried end-user traffic or a customer-wide outage. The prose and event screenshot differ in apparent origin count and observation window; their aggregation relationship is unresolved. Neither a complete duration nor one origin for all screenshot prefixes is established.

Relación con el caso

Strongest contemporaneous technical source; provides topology, event timing, route observations, diagrams and cautious causal assessment.

Qué respalda esta fuente

• reports Cloudflare's identification of a route leak involving CANTV, Sparkle and GlobeNet
• reports that excessive path prepending made the route less attractive
• accurately conveys Cloudflare's configuration-error explanation and rejection of a substantiated attack link

Límites de la evidencia

Credible specialist reporting, but derivative of Helton and Cloudflare and supplies no independent telemetry.

Relación con el caso

Corroborates public reporting chronology and accurately summarizes the later technical rebuttal.

Qué respalda esta fuente

• provides general technical context on route leaks, hairpin paths and valley-free policy
• identifies the Venezuelan event as the prompt for its general BGP-security discussion

Límites de la evidencia

The article expressly says it will not analyze the specific incident further; it is background, not independent incident verification.

Relación con el caso

Useful generic BGP-security context only; does not independently confirm the event details or cause.

Qué respalda esta fuente

• summarizes the eight-prefix CANTV/Sparkle/GlobeNet route leak
• reports Cloudflare's path-prepending and repeated-leak findings
• reports Cloudflare's probable misconfiguration explanation

Límites de la evidencia

Derivative reporting based on Cloudflare and Helton. The “smoking gun” framing is editorial and stronger than Cloudflare’s expressly probabilistic conclusion.

Relación con el caso

Corroborates publication and the broad technical account but adds no independent measurements.

Qué respalda esta fuente

• publishes raw RIPE BGP records for eight prefixes involving AS21980, AS6762, AS8048 and AS52320
• identifies Dayco Telecom ownership and reverse-DNS observations
• records the author's hypothesis that the anomaly might relate to intelligence gathering

Límites de la evidencia

Useful first publication of raw routing observations, but self-published and its geopolitical/intelligence-gathering hypothesis is speculative and not corroborated.

Relación con el caso

Primary provenance for the initial public interpretation and raw route records; not proof of intent, interception or affected services.

Qué respalda esta fuente

• independently revisits Cloudflare event 462460 and prefix 200.74.226.0/24
• Kentik telemetry shows two brief reachability/visibility drops on 2 January
• describes the leak as ephemeral during recovery from a temporary withdrawal
• reports the prior route returned within roughly a minute and cautions that ephemeral leaks often create little or no operational impact

Límites de la evidencia

Later independent technical analysis of one affected prefix, not a measurement of every prefix or every end-user path. It does not establish traffic interception or a nationwide service outage.

Relación con el caso

Strong independent technical follow-up that narrows timing and observed reachability effects and tempers the original impact speculation.