YAY! Re: Atrivo/Intercage: NO Upstream depeer

[fergdawgster at gmail.com (Paul Ferguson)]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, Sep 23, 2008 at 10:52 PM, Paul Ferguson <fergdawgster at gmail.com>
wrote:

> On Tue, Sep 23, 2008 at 10:13 PM, Russell Mitchell <russm2k8 at yahoo.com>
> wrote:
>
>> I believe the blocks your referring to are their 85.255 Blocks?
>> Registered to "InHoster". I believe those prefixes are an entity of
>> their's, though I don't know for sure. Perhaps ask them?
>>
>
> Thanks, thats right -- Inhoster. Operating out of Odessa and blacklisted
> virtually everywhere.
>

Sorry, my last post on this issue.

As you may (or may not) know, Inhoster's domain(s) were suspended due to
criminal activity:

http://whois.domaintools.com/inhoster.com

The prefixes you mention, were deliberately being originated by AS27595  up
until the recent kerfluffle and disconnect on Saturday night:

     Prefixes added and withdrawn by this origin AS in the past 7 days.

          - 64.28.176.0/20              Withdrawn
          - 67.210.0.0/21               Withdrawn
          - 67.210.8.0/22               Withdrawn
          - 67.210.14.0/23              Withdrawn
          - 69.22.162.0/23              Withdrawn
          - 69.22.168.0/21              Withdrawn
          - 69.22.184.0/22              Withdrawn
          - 69.31.64.0/20               Withdrawn
          - 69.50.160.0/19              Withdrawn
          - 85.255.113.0/24             Withdrawn
          - 85.255.114.0/23             Withdrawn
          - 85.255.116.0/22             Withdrawn
          - 85.255.120.0/23             Withdrawn
          - 85.255.122.0/24             Withdrawn
          - 216.255.176.0/20            Withdrawn
          - 216.255.176.0/22            Withdrawn
          - 216.255.180.0/22            Withdrawn
          - 216.255.184.0/22            Withdrawn
          - 216.255.188.0/22            Withdrawn

And they magically reappeared in Cernel (AS36445) almost immediately:

Prefix               AS Path
  64.28.187.0/24       12654 3257 36445
  67.210.12.0/23       12654 3257 36445
  85.255.112.0/20      12654 3257 36445
  93.188.161.0/24      12654 3257 36445
  93.188.166.0/24      12654 3257 36445


This was not an accident.

So what you are saying is that these prefixes have always belonged to
Inhoster?

Thanks,

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)

wj8DBQFI2doTq1pz9mNUZTMRAupwAKDxEF9kyS/UoTb/Hl2FwEGM1tsj2gCfYF16
qyG0vUAmfxfdQg/vqHFCxbw=
=T+0o
-----END PGP SIGNATURE-----


-- 
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawgster(at)gmail.com
 ferg's tech blog: http://fergdawg.blogspot.com/