Late last night, I put together the following simple annotated listing of the routes being announced by AS34991.
Beyond the quite apparent fact that this "Bulgarian" network is announcing a bunch of routes for blocks of IPv4 space allocated to various parties within the nation of Columbia (including the National University thereof) the other thing that struck me about this was the apparent relevance of a company called "host-offshore.com". Looking at the web site for that, it provides only a single contact phone number which is unambiguously a -Pakistani- phone number. But of course, that makes perfect sense, because Pakistan is just down the street from Bulgaria (NOT!) It did also strike me as passing strange that this company has apparently elected to not actually put its own web server, name servers, or mail server anywhere within its own duly allocated IPv4 blocks. Things got even a bit more interesting when I tried to actually order a server from this company. Apparently, all of their virtual servers are "sold out". However... and please, somebody check me on this... I guess that all of the browsers on all of the platforms I have ready access to are broken or something, because try as I might, I could never quite succeed at reaching any page on this company's web site where I could order up -any- kind of server, virtual, dedicated, or otherwise. So, you know, this hosting company appears somewhat unique and unusual, at least from where I am sitting, in the sense that it is perhaps the only such "hosting" company that I've ever run across in my travels that doesn't actually have -anything- for sale. Personally, I don't really give a rat's ass if this site is just a cover for some inept criminals, or for Panstani ISI, or for the FSB, or for some of Putin's patriots, or even if it belongs to the NSA. But I cannot help but bemoan the fact that here we are, and it is 2017 already, and yet, whichever bunch of lame-ass jerks are in fact behind this thing, apparently aren't even capable of slapping together a cover web site that is more than just some entirely shallow and not very effective false front. As a researcher and student of such things, I just think that by now, in 2017, we should have a somewhat more skilled class of frauds, rogues, criminals and spies on the Internet. I mean this is just baby stuff, and it only takes a couple of minutes and few clicks to see past such transparent gibberish. So c'mon all ye criminals, rogues and spys! You need to up your game fer cryin' out loud! At least present us with something a bit more challenging than -this- kind of very superflous crap. I mean, have you no self-respect? Geeeessshhh! Regards, rfg ======================================================================= 18.104.22.168/24 -- Bulgaria -- host-offshore.com 22.214.171.124/24 -- Blugaria -- wirelessnetbg.info 126.96.36.199/24 -- Bulgaria -- host-offshore.com 188.8.131.52/24 -- Belize? -- host-offshore.com - formerly routed by Verdina) 184.108.40.206/24 -- Columbia 220.127.116.11/24 -- Columbia 18.104.22.168/24 -- Columbia 22.214.171.124/24 -- Columbia 126.96.36.199/24 -- Columbia, National University of 188.8.131.52/24 -- Columbia, National University of 184.108.40.206/24 -- Columbia, National University of 220.127.116.11/24 -- Columbia, National University of 18.104.22.168/24 -- Columbia, National University of 22.214.171.124/24 -- Columbia 126.96.36.199/24 -- Columbia 188.8.131.52/24 -- Columbia 184.108.40.206/24 -- Columbia 220.127.116.11/24 -- Columbia 18.104.22.168/24 -- Columbia 22.214.171.124/24 -- Columbia 126.96.36.199/24 -- Columbia 188.8.131.52/24 -- Columbia 184.108.40.206/24 -- Columbia 220.127.116.11/24 -- Columbia