[anti-abuse-wg] Mysteries of the Internet: AS65000

Hi Ronald, All,

On Sun, 14 Apr 2019, Ronald F. Guilmette wrote:

(...)
> It would appear that the mysterious AS65000 has been sort of shadowing
> the movements of AS56630 for some time now... over six months, I guess,
> at least since 2018-08-17, according to the RIPE data on that last route
> shown above.  Eveywhere AS56630 goes, AS65000 goes also.  When one moves,
> the other does also, and on the same day.  Quite a romance going on between
> those two!

If anyone cares to look into AS-PATHs...

https://stat.ripe.net/data/bgp-state/data.json?resource=91.244.204.0/22&timestamp=2019-04-09T08:00

In this particular query AS65000 only shows up once (plus on a community 
entry), with AS-PATH "6881 3216 56630 56630 65000".


(...)
> P.S.  I'm not entirely sure that I understand why a Lithuanian ASN (AS56630)
> would be called upon to provide routing for an alleged telecom company located
> in Tbilisi, Georgia (i.e. GE-RAILWAYTELECOM-20120605).

It's only 2500km (~1600 miles) between Tiblissi and Vilnius... :-))


Cheers,
Carlos