You do not have permission to edit this page, for the following reasons:

This IP address has been blocked from editing Wikipedia.
This does not affect your ability to read Wikipedia pages.
Most people who see this message have done nothing wrong. Some kinds of blocks restrict editing from specific service providers or telecom companies in response to recent abuse or vandalism, and can sometimes affect other users who are unrelated to that abuse. Review the information below for assistance if you do not believe that you have done anything wrong.

The IP address or range 54.163.0.0/16 has been blocked (disabled) by ‪Blablubbs‬ for the following reason(s):

The IP address that you are currently using has been blocked because it is believed to be a web host provider or colocation provider. To prevent abuse, web hosts and colocation providers may be blocked from editing Wikipedia.
You will not be able to edit Wikipedia using a web host or colocation provider because it hides your IP address, much like a proxy or VPN.
We recommend that you attempt to use another connection to edit. For example, if you use a proxy or VPN to connect to the internet, turn it off when editing Wikipedia. If you edit using a mobile connection, try using a Wi-Fi connection, and vice versa. If you are using a corporate internet connection, switch to a different Wi-Fi network. If you have a Wikipedia account, please log in.
If you do not have any other way to edit Wikipedia, you will need to request an IP block exemption.

How to appeal if you are confident that your connection does not use a colocation provider's IP address:
If you are confident that you are not using a web host, you may appeal this block by adding the following text on your talk page: ((unblock|reason=Caught by a colocation web host block but this host or IP is not a web host. My IP address is _______. Place any further information here. ~~~~)). You must fill in the blank with your IP address for this block to be investigated. Your IP address can be determined here. Alternatively, if you wish to keep your IP address private you can use the unblock ticket request system. There are several reasons you might be editing using the IP address of a web host or colocation provider (such as if you are using VPN software or a business network); please use this method of appeal only if you think your IP address is in fact not a web host or colocation provider.

Administrators: The IP block exemption user right should only be applied to allow users to edit using web host in exceptional circumstances, and requests should usually be directed to the functionaries team via email. If you intend to give the IPBE user right, a CheckUser needs to take a look at the account. This can be requested most easily at SPI Quick Checkuser Requests. Unblocking an IP or IP range with this template is highly discouraged without at least contacting the blocking administrator.

This block will expire on 17:28, 10 March 2024.

Even when blocked, you will usually still be able to edit your user talk page, as well as email administrators and other editors.

For information on how to proceed, please read the FAQ for blocked users and the guideline on block appeals. The guide to appealing blocks may also be helpful.

Other useful links: Blocking policy · Help:I have been blocked
Your IP address is in a range that has been blocked on all Wikimedia Foundation wikis. The block was made by ‪Jon Kolbert‬. The reason given is Open proxy/Webhost: See the help page if you are affected .
- Start of block: 18:27, 12 November 2023
- Expiry of block: 18:27, 12 November 2028
Your current IP address is 54.163.179.242. The blocked range is 54.163.0.0/16. Please include all above details in any queries you make. If you believe you were blocked by mistake, you can find additional information and instructions in the No open proxies global policy. Otherwise, to discuss the block please post a request for review on Meta-Wiki. You could also send an email to the stewards VRT queue at stewards@wikimedia.org including all above details.

You can view and copy the source of this page:

((Short description|Cyberattack on a power grid in Kyiv, Ukraine))
((More citations needed|date=November 2023))

A [[cyberattack]] happened in the Ukrainian capital [[Kyiv]] just before midnight on 17 December 2016, and lasted for just over an hour.<ref name=bbc-ukraine-power-cut-was-cyberattack>((Cite news |title=Ukraine power cut 'was cyber-attack' |url=https://www.bbc.com/news/technology-38573074 |date=2017-01-11 |access-date=2022-07-07 |publisher=[[BBC News]]))</ref> The national electricity transmission operator [[Ukrenergo]] said that the attack had cut one fifth of the city's power consumption at that time of night.<ref name=bbc-ukraine-power-cut-was-cyberattack/>

==Attack==
The attack affected the [[electrical substation]] at Pivnichna, outside the capital.<ref name=bbc-ukraine-power-cut-was-cyberattack/> It happened a year after a [[2015 Ukraine power grid hack|previous attack on Ukraine's power grid]].<ref name=bbc-ukraine-power-cut-was-cyberattack/>

Dragos Security concluded that the attack was not merely to cause short-term disruption but to cause long-lasting damage that could last weeks or months.<ref name=wired-new-clues>((Cite news |title=New Clues Show How Russia’s Grid Hackers Aimed for Physical Destruction |url=https://www.wired.com/story/russia-ukraine-cyberattack-power-grid-blackout-destruction/ |last=Greenberg |first=Andy |author-link=Andy Greenberg |date=2019-09-12 |access-date=2022-07-07 |work=[[Wired (magazine)|Wired]] |archive-url=https://web.archive.org/web/20190913040042/https://www.wired.com/story/russia-ukraine-cyberattack-power-grid-blackout-destruction/|url-status=live|archive-date=2019-09-13))</ref> The attackers had tried to cause physical damage to the station when the operators turned the grid back on.<ref name=wired-new-clues/> The attack used [[Industroyer]] malware and has the ability to attack hardware including SIPROTEC protective relays.<ref name=wired-new-clues/> These protective relays open [[circuit breaker]]s if they detect dangerous conditions.<ref name=wired-new-clues/> A security flaw meant that a single [[Network packet|packet]] could put the relays in a state where it would be useless unless manually [[reboot]]ed.<ref name=wired-new-clues/> Siemens released a software patch in 2015 to fix the issue, but many relays weren't updated with it.<ref name=wired-new-clues/> Evidence from logs obtained by Dragos Security showed the attackers initially opened every circuit breaker in the transmission station, causing a power cut.<ref name=wired-new-clues/> Then an hour later they ran [[Wiper (malware)|wiper malware]] to disable the station's computer, making it impossible to monitor the station.<ref name=wired-new-clues/> Finally, the attackers tried to disable four of the stations SIPROTEC protective relays, which could not be detected by operators.<ref name=wired-new-clues/> Dragos concluded that the attackers intended the operators to re-engergise the station equipment, which could have injured engineers and damaged equipment.<ref name=wired-new-clues/> The data packets intended for the protective relays were sent to the wrong IP address.<ref name=wired-new-clues/> The operators may also have brought the station back online faster than attackers expected.<ref name=wired-new-clues/>

==See also==
*[[2015 Ukraine power grid hack|Ukraine power grid hack]]

==References==
((reflist))

[[Category:Cyberattacks on energy sector]]
[[Category:2016 crimes in Ukraine]]
[[Category:December 2016 crimes in Europe]]
[[Category:Kyiv in the Russo-Ukrainian War|Cyberattack, 2016]]
[[Category:Power outages]]
[[Category:Russian–Ukrainian cyberwarfare]]
[[Category:December 2016 events in Ukraine]]

Pages transcluded onto the current version of this page (help):

2016 Kyiv cyberattack (edit)
Template:Ambox (view source) (template editor protected)
Template:Cite news (view source) (protected)
Template:Find sources mainspace (view source) (template editor protected)
Template:Main other (view source) (protected)
Template:More citations needed (view source) (template editor protected)
Template:Pagetype (view source) (protected)
Template:Reflist (view source) (protected)
Template:Reflist/styles.css (view source) (protected)
Template:SDcat (view source) (template editor protected)
Template:Short description (view source) (protected)
Template:Short description/lowercasecheck (view source) (protected)
Module:Arguments (view source) (protected)
Module:Category handler (view source) (protected)
Module:Category handler/blacklist (view source) (protected)
Module:Category handler/config (view source) (protected)
Module:Category handler/data (view source) (protected)
Module:Category handler/shared (view source) (protected)
Module:Check for unknown parameters (view source) (protected)
Module:Citation/CS1 (view source) (protected)
Module:Citation/CS1/COinS (view source) (protected)
Module:Citation/CS1/Configuration (view source) (protected)
Module:Citation/CS1/Date validation (view source) (protected)
Module:Citation/CS1/Identifiers (view source) (protected)
Module:Citation/CS1/Utilities (view source) (protected)
Module:Citation/CS1/Whitelist (view source) (protected)
Module:Citation/CS1/styles.css (view source) (protected)
Module:Disambiguation/templates (view source) (protected)
Module:Find sources (view source) (template editor protected)
Module:Find sources/config (view source) (template editor protected)
Module:Find sources/links (view source) (template editor protected)
Module:Find sources/templates/Find sources mainspace (view source) (template editor protected)
Module:Message box (view source) (protected)
Module:Message box/ambox.css (view source) (protected)
Module:Message box/configuration (view source) (protected)
Module:Namespace detect/config (view source) (protected)
Module:Namespace detect/data (view source) (protected)
Module:Pagetype (view source) (protected)
Module:Pagetype/config (view source) (protected)
Module:Pagetype/disambiguation (view source) (template editor protected)
Module:Pagetype/setindex (view source) (template editor protected)
Module:Pagetype/softredirect (view source) (template editor protected)
Module:SDcat (view source) (template editor protected)
Module:String (view source) (protected)
Module:Unsubst (view source) (protected)
Module:Wikitext Parsing (view source) (template editor protected)
Module:Yesno (view source) (protected)

Return to 2016 Kyiv cyberattack.

Retrieved from "https://en.wikipedia.org/wiki/2016_Kyiv_cyberattack"