[138327] in North American Network Operators' Group
Re: Ranges announced by Level3 without permitions.
daemon@ATHENA.MIT.EDU (Suresh Ramasubramanian)
Thu Mar 3 09:58:09 2011
In-Reply-To: <Pine.OSX.4.64.1103030937170.314@cevin>
Date: Thu, 3 Mar 2011 20:26:58 +0530
From: Suresh Ramasubramanian <ops.lists@gmail.com>
To: Brandon Ross <bross@pobox.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Thu, Mar 3, 2011 at 8:09 PM, Brandon Ross <bross@pobox.com> wrote:
>> IPs are announced by Level3... I respect this company but looks like
>> Level3 is scammed and currently announce without necessary permissions.
>
> Again, do you believe these networks are hijacked? =C2=A0If they are in
Hmm - so who should announce it? And who owns the netblock?
The whois etc lookups below could put this either in the US or in
Eastern Europe / Russia or in Italy.
$ whois -h whois.radb.net 79.110.224.0/20
route: 79.110.224.0/20
descr: Avangard
origin: AS50245
mnt-by: SERVEREL-MNT
changed: noc@serverel.com 20110210
source: RIPE
remarks: ****************************
remarks: * THIS OBJECT IS NOT VALID
remarks: * Please note that all data that is generally regarded
as personal
remarks: * data has been removed from this object.
remarks: * http://www.ripe.net/whois
remarks: ****************************
Has a US address in the whois - which a little googling shows is a maildrop=
.
http://www.beavertonvalleytimes.com/news/story.php?story_id=3D1186687006636=
17700
person: Serverel NOC
address: 14525 SW Millikan Way # 33735 Beaverton, OR 97005-2343
phone: +1(877)246 78 63
abuse-mailbox: abuse@serverel.com
serverel.com
Name-- Iurii Salmanov
EMail-: (domains@serverel.com)
serverel.net
name: Andrew Neal
mail: domains@serverel.com tel: +1.8772467863
org: Serverel Corporation
Then ripe whois says the netblock is either owned by someone in the
ukraine or in italy
inetnum: 79.110.224.0 - 79.110.239.255
netname: Avangard
descr: PE "Avangard"
country: UA
person: Karol Wojtula <- named for the late pope john paul
II, I see ..?
address: Bari , Italy , Piazzale Cristoforo Colombo, 1, 70122
<- google that address and its the ferry port in Bari, Italy.
phone: +39 080 327 8841
And AS50425 - which'd announce it if that RADB object was actually
valid - is in russia, not the czech republic
organisation: ORG-JS33-RIPE
org-name: Closed JSC "TV Services"
org-type: OTHER
address: 43, Bolshoy Tishinskiy per., Moscow, Russia, 123557
mnt-ref: TV-SERVICE-MNT
mnt-by: TV-SERVICE-MNT
source: RIPE # Filtered
person: Dolgopolov Alexey
address: Russia
address: Moscow
address: 43, Bolshoy Tishinskiy per
phone: +7 495 9334592
nic-hdl: DA489-RIPE
source: RIPE # Filtered
So - the whois for these is quite confusing - not very easy for any
one entity to establish ownership?
--=20
Suresh Ramasubramanian (ops.lists@gmail.com)
