YAY! Re: Atrivo/Intercage: NO Upstream depeer

[russm2k8 at yahoo.com (Russell Mitchell)]

Hello Paul,

Sorry I didn't make this clear enough in the previous responses.

The prefixes that are registered to Inhoster belong to Esthost.
I'm not sure how or why you think those?prefixes belong to us.

These prefixes belong DIRECTLY to us:
- 69.50.160.0/19? ? ? ? ? ? ? Withdrawn
- 216.255.176.0/20? ? ? ? ? ? Withdrawn

These?prefixes belong DIRECTLY to nLayer, and were LEASED to us:
- 69.22.162.0/23? ? ? ? ? ? ? Withdrawn
- 69.22.168.0/21? ? ? ? ? ? ? Withdrawn
- 69.22.184.0/22? ? ? ? ? ? ? Withdrawn
- 69.31.64.0/20? ? ? ? ? ? ? Withdrawn
?
The prefixes LEASED to us BY nLayer are being reclaimed at the end of this month 09/30/08, as the lease contract is set to cease at that time.

Hopefully, that is clear enough for you.

Thank you for your time. Have a great day.
---
Russell Mitchell

InterCage, Inc.



----- Original Message ----
From: Paul Ferguson <fergdawgster at gmail.com>
To: Russell Mitchell <russm2k8 at yahoo.com>
Cc: nanog at nanog.org
Sent: Tuesday, September 23, 2008 11:11:39 PM
Subject: Re: YAY! Re: Atrivo/Intercage: NO Upstream depeer

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, Sep 23, 2008 at 10:52 PM, Paul Ferguson <fergdawgster at gmail.com>
wrote:

> On Tue, Sep 23, 2008 at 10:13 PM, Russell Mitchell <russm2k8 at yahoo.com>
> wrote:
>
>> I believe the blocks your referring to are their 85.255 Blocks?
>> Registered to "InHoster". I believe those prefixes are an entity of
>> their's, though I don't know for sure. Perhaps ask them?
>>
>
> Thanks, thats right -- Inhoster. Operating out of Odessa and blacklisted
> virtually everywhere.
>

Sorry, my last post on this issue.

As you may (or may not) know, Inhoster's domain(s) were suspended due to
criminal activity:

http://whois.domaintools.com/inhoster.com

The prefixes you mention, were deliberately being originated by AS27595? up
until the recent kerfluffle and disconnect on Saturday night:

? ? Prefixes added and withdrawn by this origin AS in the past 7 days.

? ? ? ? ? - 64.28.176.0/20? ? ? ? ? ? ? Withdrawn
? ? ? ? ? - 67.210.0.0/21? ? ? ? ? ? ? Withdrawn
? ? ? ? ? - 67.210.8.0/22? ? ? ? ? ? ? Withdrawn
? ? ? ? ? - 67.210.14.0/23? ? ? ? ? ? ? Withdrawn
? ? ? ? ? - 69.22.162.0/23? ? ? ? ? ? ? Withdrawn
? ? ? ? ? - 69.22.168.0/21? ? ? ? ? ? ? Withdrawn
? ? ? ? ? - 69.22.184.0/22? ? ? ? ? ? ? Withdrawn
? ? ? ? ? - 69.31.64.0/20? ? ? ? ? ? ? Withdrawn
? ? ? ? ? - 69.50.160.0/19? ? ? ? ? ? ? Withdrawn
? ? ? ? ? - 85.255.113.0/24? ? ? ? ? ? Withdrawn
? ? ? ? ? - 85.255.114.0/23? ? ? ? ? ? Withdrawn
? ? ? ? ? - 85.255.116.0/22? ? ? ? ? ? Withdrawn
? ? ? ? ? - 85.255.120.0/23? ? ? ? ? ? Withdrawn
? ? ? ? ? - 85.255.122.0/24? ? ? ? ? ? Withdrawn
? ? ? ? ? - 216.255.176.0/20? ? ? ? ? ? Withdrawn
? ? ? ? ? - 216.255.176.0/22? ? ? ? ? ? Withdrawn
? ? ? ? ? - 216.255.180.0/22? ? ? ? ? ? Withdrawn
? ? ? ? ? - 216.255.184.0/22? ? ? ? ? ? Withdrawn
? ? ? ? ? - 216.255.188.0/22? ? ? ? ? ? Withdrawn

And they magically reappeared in Cernel (AS36445) almost immediately:

Prefix? ? ? ? ? ? ? AS Path
? 64.28.187.0/24? ? ? 12654 3257 36445
? 67.210.12.0/23? ? ? 12654 3257 36445
? 85.255.112.0/20? ? ? 12654 3257 36445
? 93.188.161.0/24? ? ? 12654 3257 36445
? 93.188.166.0/24? ? ? 12654 3257 36445


This was not an accident.

So what you are saying is that these prefixes have always belonged to
Inhoster?

Thanks,

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)

wj8DBQFI2doTq1pz9mNUZTMRAupwAKDxEF9kyS/UoTb/Hl2FwEGM1tsj2gCfYF16
qyG0vUAmfxfdQg/vqHFCxbw=
=T+0o
-----END PGP SIGNATURE-----


-- 
"Fergie", a.k.a. Paul Ferguson
Engineering Architecture for the Internet
fergdawgster(at)gmail.com
ferg's tech blog: http://fergdawg.blogspot.com/