Fw: new message
Hey! New message, please read <http://aparaturamedicala.net/joy.php?j> John Schneider
Fw: new message
Hey! New message, please read <http://lilouconnect.com/supposed.php?hgp9> John Schneider
Fw: new message
Hey! New message, please read <http://profi2w.com.br/who.php?75v4i> John Schneider
Sprint Outage - Chicago
Sprint appears to be having major network issues in the Chicago area. Confirmed by sprint as CRS down in Chicago affecting multiple customers nationwide.
Re: Hijacked Network Ranges
If you both announce a /24, the BGP route selection process should begin to return some of the traffic to these prefixes back to your AS. Also, if you begin to advertise your prefixes as /24s and as a result, they try to advertise /25s, I would venture a guess that their /25s would get blocked entirely, effectively returning traffic to those prefixes to you. that would be best-case scenario until you can get someone at AS36111 to listen to you. Best of Luck to you Upstream requirements. Additionally, I don't believe it would do us any good. If they're announcing /24 now, why would they not announce a /25.
Re: Hijacked Network Ranges
Another interesting thing that I noticed, is that AS33611 is not advertising any prefixes other than yours. Either they do not have any of their own (unlikely) or they are advertising their own legitimate prefixes from another AS however I doubt that is the case. It sounds like you were able to verify that this is indeed a malicious attack. If that is truly the case, I would certainly be in contact with your lawyers as this is certainly causing you financial loss and since it is easily verifiable, you would have a solid case i would think. I am no attorney but it seems like a no-brainer to me. So, it does look like you are finally announcing your prefixes as a /24 and that most traffic is again coming to your AS. that probably helped quite a bit right? Regards, John
