[nsp-sec] Cernel.. (was intercage-atrivo)

[Huopio Kauto]

Something related to Intercage: 

Remember Cernel (AS36445)? As far as I remember, they used to 
be single-homed behind Intercage. Now they get connectivity from
Tiscali. Prefixes they originate at the moment are..

64.28.187.0/24
NetName:    CERNELNETWORK

67.210.12.0/23
NetName:    CERNELNETWORK
NetHandle:  NET-67-210-0-0-1

85.255.112.0/20 (also advertising /24)
netname:        UkrTeleGroup
descr:          UkrTeleGroup Ltd.

93.188.161.0/24
netname:        GEEK-NET
descr:          Geek Rack Networks
(same Sotov from Ukraine registered as contact as UkrTeleGroup)

93.188.166.0/24
netname:        UA-UKRTELEGROUP-20080416
descr:          UkrTeleGroup Ltd.

And then something new even for me. UkrTeleGroup seems to have an AS,
although not in active use: AS44060

--Kauto
CERT-FI


-----Original Message-----
From: nsp-security-bounces at puck.nether.net
[mailto:nsp-security-bounces at puck.nether.net] On Behalf Of Danny
McPherson
Sent: 12. syyskuuta 2008 12:14
To: NSP nsp-security
Cc: White Gerard
Subject: Re: [nsp-sec] intercage/atrivo

----------- nsp-security Confidential --------

Of the 32 prefixes I saw originated by AS 27595 about a
week ago, here's the current status of each as of about an
hour ago.

-danny

---
These four prefixes are no longer available:

58.65.238.0/24 GONE
58.65.239.0/24 GONE
116.50.10.0/24 GONE
116.50.11.0/24 GONE

These prefixes are no longer originated by 27595 - if you're
watching just for that AS then you won't see them:

64.28.176.0/20 now originated by 32335
85.255.116.0/22 now originated by 32335
85.255.120.0/23 now originated by 32335
216.255.176.0/20 now originated by 32335

These are all gone, but still represented in the routing system
with larger aggregates:

69.50.173.0/24 GONE - falls under 69.50.160.0/19
69.50.182.0/23 GONE - falls under 69.50.160.0/19
85.255.116.0/23 GONE - falls under 85.255.116.0/22
85.255.118.0/24 GONE - falls under 85.255.116.0/22
85.255.119.0/24 GONE - falls under 85.255.116.0/22
85.255.120.0/24 GONE - falls under 85.255.120.0/23
85.255.121.0/24 GONE - falls under 85.255.120.0/23
216.255.176.0/22 GONE - falls under 216.255.176.0/21
216.255.180.0/22 GONE - falls under 216.255.176.0/21
216.255.184.0/22 GONE - falls under 216.255.184.0/21
216.255.188.0/22 GONE - falls under 216.255.184.0/21

These all moved to Pacific Internet Exchange transit, still
originated by AS 27595:

85.255.113.0/24 - moved to 32335 transit
85.255.114.0/23 - moved to 32335 transit
85.255.122.0/24 - moved to 32335 transit
67.210.0.0/21 - moved to 32335 transit
67.210.8.0/22  - moved to 32335 transit
67.210.14.0/23 - moved to 32335 transit
69.22.162.0/23 - moved to 32335 transit
69.22.168.0/21 - moved to 32335 transit
69.22.184.0/22 - moved to 32335 transit
69.31.64.0/20  - moved to 32335 transit

These haven't moved from WVFIBER and are still originated
by AS 27595:

69.50.160.0/19 still 19151 transit
216.255.176.0/21 still 19151 transit
216.255.184.0/21 still 19151 transit




_______________________________________________
nsp-security mailing list
nsp-security at puck.nether.net
https://puck.nether.net/mailman/listinfo/nsp-security

Please do not Forward, CC, or BCC this E-mail outside of the
nsp-security
community. Confidentiality is essential for effective Internet security
counter-measures.
_______________________________________________