standard
Routing protocol introduced in the context of non-overlay networking, where per-node pod CIDRs are advertised so the underlay routes pod traffic directly.
No evidence-backed relationships are recorded.
The hijacker forged Hetzner as the origin so origin validation passed, held the prefix from Friday night into Sunday morning, and Softaculous has no logs of any of it because none of the diverted traffic reached its servers.
Perspective Coverage
6 publishersReality
Origin validation checks the last AS in the path, so leaving AS24940 there was enough to look legitimate, and the attacker spent the window getting a certificate in Softaculous's name and serving updates from a clone.
Reality
Cisco's baseline reads plane by plane, but the load-bearing part is the password section, where Type 7 obfuscation is declared reversible with freely available online tools and older releases used it for BGP and TACACS+ keys alike.
Reality
Cloudflare says its RFC 9234 tracking found two large Tier-1 networks removing the Only to Customer attribute from routes they forward, blanking the leak signal for everyone behind them.
Reality
A dev.to walkthrough traces one packet from 10.244.1.5 to 10.244.2.5. The operationally useful part is not the hop count, it is which route table or outer header you get to read.
Reality