Hello Paul, Sorry I didn't make this clear enough in the previous responses. The prefixes that are registered to Inhoster belong to Esthost. I'm not sure how or why you think those prefixes belong to us. These prefixes belong DIRECTLY to us: - 69.50.160.0/19              Withdrawn - 216.255.176.0/20            Withdrawn These prefixes belong DIRECTLY to nLayer, and were LEASED to us: - 69.22.162.0/23              Withdrawn - 69.22.168.0/21              Withdrawn - 69.22.184.0/22              Withdrawn - 69.31.64.0/20              Withdrawn   The prefixes LEASED to us BY nLayer are being reclaimed at the end of this month 09/30/08, as the lease contract is set to cease at that time. Hopefully, that is clear enough for you. Thank you for your time. Have a great day. --- Russell Mitchell InterCage, Inc. ----- Original Message ---- From: Paul Ferguson <fergdawgster@gmail.com> To: Russell Mitchell <russm2k8@yahoo.com> Cc: nanog@nanog.org Sent: Tuesday, September 23, 2008 11:11:39 PM Subject: Re: YAY! Re: Atrivo/Intercage: NO Upstream depeer -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tue, Sep 23, 2008 at 10:52 PM, Paul Ferguson <fergdawgster@gmail.com> wrote:

On Tue, Sep 23, 2008 at 10:13 PM, Russell Mitchell <russm2k8@yahoo.com> wrote:

...

I believe the blocks your referring to are their 85.255 Blocks? Registered to "InHoster". I believe those prefixes are an entity of their's, though I don't know for sure. Perhaps ask them?

Thanks, thats right -- Inhoster. Operating out of Odessa and blacklisted virtually everywhere.

Sorry, my last post on this issue. As you may (or may not) know, Inhoster's domain(s) were suspended due to criminal activity: http://whois.domaintools.com/inhoster.com The prefixes you mention, were deliberately being originated by AS27595  up until the recent kerfluffle and disconnect on Saturday night:     Prefixes added and withdrawn by this origin AS in the past 7 days.           - 64.28.176.0/20              Withdrawn           - 67.210.0.0/21              Withdrawn           - 67.210.8.0/22              Withdrawn           - 67.210.14.0/23              Withdrawn           - 69.22.162.0/23              Withdrawn           - 69.22.168.0/21              Withdrawn           - 69.22.184.0/22              Withdrawn           - 69.31.64.0/20              Withdrawn           - 69.50.160.0/19              Withdrawn           - 85.255.113.0/24            Withdrawn           - 85.255.114.0/23            Withdrawn           - 85.255.116.0/22            Withdrawn           - 85.255.120.0/23            Withdrawn           - 85.255.122.0/24            Withdrawn           - 216.255.176.0/20            Withdrawn           - 216.255.176.0/22            Withdrawn           - 216.255.180.0/22            Withdrawn           - 216.255.184.0/22            Withdrawn           - 216.255.188.0/22            Withdrawn And they magically reappeared in Cernel (AS36445) almost immediately: Prefix              AS Path   64.28.187.0/24      12654 3257 36445   67.210.12.0/23      12654 3257 36445   85.255.112.0/20      12654 3257 36445   93.188.161.0/24      12654 3257 36445   93.188.166.0/24      12654 3257 36445 This was not an accident. So what you are saying is that these prefixes have always belonged to Inhoster? Thanks, - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFI2doTq1pz9mNUZTMRAupwAKDxEF9kyS/UoTb/Hl2FwEGM1tsj2gCfYF16 qyG0vUAmfxfdQg/vqHFCxbw= =T+0o -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's tech blog: http://fergdawg.blogspot.com/