Hello Paul,
Those are their IP Blocks. We were simply routing them, as they were our client.
They've owned these blocks for quite a while. They seem to have moved that after a day of being down.
I haven't been monitoring their blocks, and made the decision Sunday Night that they were no longer going to be allowed on our network.
I believe the blocks your referring to are their 85.255 Blocks? Registered to "InHoster". I believe those prefixes are an entity of their's, though I don't know for sure. Perhaps ask them?
Cernel is their own ASN. It's not associated with our company.
Thank you for your time. Have a great day.
Thanks, thats right -- Inhoster. Operating out of Odessa and blacklisted
virtually everywhere.
Cheers,
- - ferg
Sorry, my last post on this issue.
As you may (or may not) know, Inhoster's domain(s) were suspended due to
criminal activity:
http://whois.domaintools.com/inhoster.com
The prefixes you mention, were deliberately being originated by AS27595 up
until the recent kerfluffle and disconnect on Saturday night:
Prefixes added and withdrawn by this origin AS in the past 7 days.
- 64.28.176.0/20 Withdrawn
- 67.210.0.0/21 Withdrawn
- 67.210.8.0/22 Withdrawn
- 67.210.14.0/23 Withdrawn
- 69.22.162.0/23 Withdrawn
- 69.22.168.0/21 Withdrawn
- 69.22.184.0/22 Withdrawn
- 69.31.64.0/20 Withdrawn
- 69.50.160.0/19 Withdrawn
- 85.255.113.0/24 Withdrawn
- 85.255.114.0/23 Withdrawn
- 85.255.116.0/22 Withdrawn
- 85.255.120.0/23 Withdrawn
- 85.255.122.0/24 Withdrawn
- 216.255.176.0/20 Withdrawn
- 216.255.176.0/22 Withdrawn
- 216.255.180.0/22 Withdrawn
- 216.255.184.0/22 Withdrawn
- 216.255.188.0/22 Withdrawn
And they magically reappeared in Cernel (AS36445) almost immediately:
Prefix AS Path
64.28.187.0/24 12654 3257 36445
67.210.12.0/23 12654 3257 36445
85.255.112.0/20 12654 3257 36445
93.188.161.0/24 12654 3257 36445
93.188.166.0/24 12654 3257 36445
This was not an accident.
So what you are saying is that these prefixes have always belonged to
Inhoster?
Thanks,
- - ferg
You're not very good at this are you? For future reference, when
you're trying to pretend like you've cleaned up your act and someone
asks you why your second largest cyber criminal customer is no longer
on your network, you say "we kicked them off for abuse too", not "they
left us after a day of being down due to outages caused by our hosting
of an even bigger criminal".
Drive Slow,
Paul Wall
Paul Wall wrote:
You're not very good at this are you? For future reference, when
you're trying to pretend like you've cleaned up your act and someone
asks you why your second largest cyber criminal customer is no longer
on your network, you say "we kicked them off for abuse too", not "they
left us after a day of being down due to outages caused by our hosting
of an even bigger criminal".
Or demonstrate that, unlike the left side of our political spectrum, you can learn the instruction of the Law of Holes.
You _can_ do that, right? Right??
Oh. I see. You are on the freelunch side too, aren't you?