Hijacked Network Ranges

Wed Feb 1 01:33:35 UTC 2012

Another interesting thing that I noticed, is that AS33611 is not
advertising any prefixes other than yours.  Either they do not have any of
their own (unlikely)
or they are advertising their own legitimate prefixes from another AS
however I doubt that is the case.  It sounds like you were able to verify
that this is indeed
a malicious attack. If that is truly the case, I would certainly be in
contact with your lawyers as this is certainly causing you financial loss
and since it is easily
verifiable, you would have a solid case i would think.  I am no attorney
but it seems like a no-brainer to me.

So, it does look like you are finally announcing your prefixes as a /24 and
that most traffic is again coming to your AS.  that probably helped quite a
bit right?

Regards,

John