interesting that they're having so much success with false RIPE/ARIN entries. Proper geolocation (as in with visiblity of most T1s) would trivially identify the origin of traffic.