This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/anti-abuse-wg@ripe.net/
[anti-abuse-wg] AS12679 -- 206.195.224.0/19
- Previous message (by thread): [anti-abuse-wg] Abuse mailbox validation?
- Next message (by thread): [anti-abuse-wg] [routing-wg] AS12679 -- 206.195.224.0/19
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Ronald F. Guilmette
rfg at tristatelogic.com
Mon Jan 27 06:00:33 CET 2020
Thrift Drug, Inc. of Pennsylvania was bought out in October, 1996 by the Rite Aid pharmacy chain (US): https://www.riteaid.com/corporate/news/-/pressreleases/news-room/1996/rite-aid-to-acquire-thrifty-payless-inc- https://en.wikipedia.org/wiki/Thrift_Drug https://opencorporates.com/companies/us_pa/2002644 Unfortunately, the parent company, Rite Aid, never got the memo to tell that that Thrify Drug, Inc owned the legacy IPv4 block 206.195.224.0/19. The results were predictable. This /19 has been repeatedly squatted on in recent years, as shown by RIPEstat: https://stat.ripe.net/widget/routing-history#w.resource=206.195.224.1 2016-08-15 AS42861 RU Foton Telecom, CJSC Network Operation Centre 2017-12-08 AS65075 -- {{reserved ASN}} 2018-03-26 AS28191 BR Jupiter Telecomunicacoes e Informatica Ltda 2019-08-24 AS20473 US Choopa, LLC 2019-10-11 AS12679 RU Iceberg Telecom Ltd. The 206.195.224.0/19 block is currently being squatted on by AS12679, Iceburg Telecom (Moscow). It appears that this ASN is also and likewise squatting on a great number of other blocks as well: https://bgp.he.net/AS12679#_prefixes AS12679 (Iceburg) appears to be a "leaf" ASN, connected to the public Internet only via AS25227 (Avantel, Close Joint Stock Company, Moscow) which it turn appears to be getting more than 3/4ths of its own IPv4 connectivity from AS9002 (RETN): https://bgp.he.net/AS25227 Suggest filtering all route announcements from both AS12679 -and- also AS25227 until they each decide if they would like to be part of the civilized internet. ====================================================================== [Source: whois://whois.arin.net 2020-01-27 04:18:39 UTC] NetRange: 206.195.224.0 - 206.195.255.255 CIDR: 206.195.224.0/19 NetName: THRIFT-NET-1 NetHandle: NET-206-195-224-0-1 Parent: NET206 (NET-206-0-0-0-0) NetType: Direct Assignment OriginAS: AS12679 Organization: Thrift Drug, Inc. (THRIFT) RegDate: 1995-08-03 Updated: 2019-09-24 Ref: https://rdap.arin.net/registry/ip/206.195.224.0 OrgName: Thrift Drug, Inc. OrgId: THRIFT Address: 100 Delta Drive City: Pittsburgh StateProv: PA PostalCode: 15238 Country: US RegDate: 1994-03-15 Updated: 2019-08-14 Ref: https://rdap.arin.net/registry/entity/THRIFT OrgAbuseHandle: WEBBK16-ARIN OrgAbuseName: Webb, Kristi OrgAbusePhone: +1-885-923-1290 OrgAbuseEmail: kwebb at thriftdrug.org OrgAbuseRef: https://rdap.arin.net/registry/entity/WEBBK16-ARIN OrgTechHandle: WEBBK16-ARIN OrgTechName: Webb, Kristi OrgTechPhone: +1-885-923-1290 OrgTechEmail: kwebb at thriftdrug.org OrgTechRef: https://rdap.arin.net/registry/entity/WEBBK16-ARIN
- Previous message (by thread): [anti-abuse-wg] Abuse mailbox validation?
- Next message (by thread): [anti-abuse-wg] [routing-wg] AS12679 -- 206.195.224.0/19
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]