View difference between Paste ID: c3rg3298 and VGyQVyWe
SHOW: | | - or go back to the newest paste.
1-
http://bgp.he.net/AS36352
1+
This is a story about an internet provider, who built a low end marketplace under false pretenses.
2
3
Colocrossing, is a Buffalo, New York, company that specializes in colocation and dedicated server rentals.
4
5
The United States Treasury lists the Country of Iran on an embargo list.  United States citizens and corporations are disallowed from conducting business or trade with Iranians.
6
[link: http://www.treasury.gov/resource-center/sanctions/Programs/pages/iran.aspx]
7
8
This is how Colocrossing is engaged in business transactions with multiple Iranian companies.  It involves both direct downstream peering to a company named Herodap Solutions E, which used a California apartment address for various registration details.
9
10
We show the peering this way:
11
12
Go to: http://bgp.he.net/AS36352
13
14
   Click: Peers v4  ---> http://bgp.he.net/AS36352#_peers
15
16
   *** notice #13 ***
17
   13			AS61406
18
19
   Click: AS61406 ---> http://bgp.he.net/AS61406
20
21
   Click: Prefixes v4 ---> http://bgp.he.net/AS61406#_prefixes
22
23
 	Prefix   	        Description   
24
185.2.12.0/23 	Herodap Solutions E 
25
185.2.14.0/23 	Herodap Solutions E
26
27
  Note the Iranian flag.     
28
29
30
[source: http://www.ris.ripe.net/dashboard/AS61406 ]
31
32
Prefix 	Size 	Last seen 	First seen 	Whois	Registry	Peers seeing
33
185.2.14.0/23	23	2013-02-15 22:44:55 UTC	2012-12-03 21:31:02 UTC	 W	RIPE NCC	103
34
185.2.12.0/23	23	2013-02-15 22:44:55 UTC	2012-12-03 21:30:31 UTC	 W	RIPE NCC	103
35
36
[source: http://www.cidr-report.org/cgi-bin/as-report?as=AS61406&view=2.0]
37
aut-num:        AS61406
38
as-name:        HerodapSolutions
39
descr:          Herodap solutions E
40
41
 Information related to 'AS61406'
42
             
43
             aut-num:        AS61406
44
             as-name:        HerodapSolutions
45
             descr:          Herodap solutions E
46
             org:            ORG-HA311-RIPE
47
             import:         from AS36352 accept ANY
48
             import:         from AS57497 accept ANY
49
             export:         to AS36352 announce AS61406
50
             export:         to AS57497 announce AS61406
51
             admin-c:        AH8153-RIPE
52
             tech-c:         AH8153-RIPE
53
             mnt-by:         RIPE-NCC-END-MNT
54
             mnt-by:         AH86906-MNT
55
             source:         RIPE # Filtered
56
             
57
             organisation:   ORG-HA311-RIPE
58
             org-name:       Herodap solutions E
59
             org-type:       OTHER
60
             address:        Stenhammarsvagen 31 802 67
61
             mnt-ref:        FH72714-MNT
62
             mnt-by:         AH86906-MNT
63
             source:         RIPE # Filtered
64
             
65
             person:         Abolfazl Hayati
66
             address:        435 Reflections Cir Apt 11 San Ramon Ca 94583
67
             phone:          +19038904393
68
             nic-hdl:        AH8153-RIPE
69
             mnt-by:         AH86906-MNT
70
             source:         RIPE # Filtered
71
72
73
Now we have following points:
74
AS61406
75
Herodap Solutions E 
76
HerodapSolutions
77
Abolfazl Hayati
78
435 Reflections Cir Apt 11
79
185.2.12.0/23
80
185.2.14.0/23
81
82
83
435 Reflections Cir Apt 11:
84
85
http://www.enom.com/whois/royal-servers-com.html
86
ROYAL-SERVERS.COM
87
88
 Registration Date: 31-Oct-2007 
89
 Expiration Date: 31-Oct-2013 
90
91
 Status:ACTIVE
92
93
94
 Name Servers: 
95
 ns1.royal-servers.com
96
 ns2.royal-servers.com
97
98
99
 Registrant Contact Details:
100
 Royal Server
101
 seyed jafar bagheri 
102
103
104
 435 Reflections Cir ,Apt 11
105
 Sah roman
106
 California,94583
107
 US
108
 Tel. +925.3894455
109
110
111
112
Domain Name: MAJMAELMI.COM
113
114
 Registration Date: 01-Sep-2007 
115
 Expiration Date: 01-Sep-2013  
116
117
 Status:LOCKED
118
         
119
 Name Servers:  
120
    ns1.mymizban.com
121
    ns2.mymizban.com
122
 
123
 Registrant Contact Details:
124
    Sindad
125
    Morteza Soltani        ([email protected])
126
    AmirAbad Shomali, Sindad Corp
127
    Tehran
128
    Tehran,94583
129
    IR
130
    Tel. +21.44008444
131
132
133
Domain Name: MYMIZBAN.COM
134
135
 Registration Date: 02-Jul-2006 
136
 Expiration Date: 02-Jul-2013 
137
138
 Status:ACTIVE
139
140
141
 Name Servers: 
142
 ns1.mymizban.com
143
 ns2.mymizban.com
144
145
146
 Registrant Contact Details:
147
 Sindad
148
 Morteza Soltani 
149
150
151
 AmirAbad Shomali, Sindad Corp
152
 Tehran
153
 Tehran,94583
154
 IR
155
 Tel. +21.44008444
156
157
158
Domain Name: MAHKAAME.COM
159
160
 Registration Date: 19-Nov-2011 
161
 Expiration Date: 19-Nov-2013  
162
163
164
 Name Servers:  
165
    ns1.pcosb.com
166
    ns2.pcosb.com
167
 
168
169
 Registrant Contact Details:
170
    Sindad
171
    Morteza Soltani        ([email protected])
172
    AmirAbad Shomali, Sindad Corp
173
    Tehran
174
    Tehran,94583
175
    IR
176
    Tel. +21.44008444
177
178
179
Domain Name: PCOSB.COM
180
181
 Registration Date: 05-Mar-2011 
182
 Expiration Date: 05-Mar-2014  
183
184
 Status:ACTIVE
185
186
187
 Name Servers:  
188
    ns1.pcosb.com
189
    ns2.pcosb.com
190
 
191
192
 Registrant Contact Details:
193
    pcosb.com
194
    morteza hadizadeh paskiabi        ([email protected])
195
    no77,mansor st,Motahari st
196
    Tehran
197
    ID,17657
198
    IR
199
    Tel. +98.02184318200
200
    Fax. +98.02184318200
201
202
203
Domain Name: FARDA-OIL.COM
204
205
 Registration Date: 14-Dec-2011 
206
 Expiration Date: 14-Dec-2013  
207
208
 Name Servers:  
209
    ns1.sindad.com
210
    ns2.sindad.com
211
 
212
213
 Registrant Contact Details:
214
    Sindad
215
    Morteza Soltani        ([email protected])
216
    AmirAbad Shomali, Sindad Corp
217
    Tehran
218
    Tehran,94583
219
    IR
220
    Tel. +21.44008444
221
222
Domains hosted on as61406
223
Domain	IP Address
224
jahanesanat.ir	185.2.12.13
225
vahidhashemi.com	185.2.12.13
226
bazykon.com	185.2.12.13
227
228
229
Information related to 'jahanesanat.ir'
230
231
domain:		jahanesanat.ir
232
ascii:		jahanesanat.ir
233
remarks:	(Domain Holder) Seyed mohamad ali eslami
234
remarks:	(Domain Holder Address) No.5,8th Alley,Dore shahr St.,Qom, IR3715646565, IR
235
holder-c:	---
236
admin-c:	se55-irnic
237
tech-c:		se55-irnic
238
bill-c:		to52-irnic
239
nserver:	ns1.bazykon.com
240
nserver:	ns2.bazykon.com
241
last-updated:	2012-10-26
242
expire-date:	2015-12-06
243
source:		IRNIC # Filtered
244
245
nic-hdl:	se55-irnic
246
person:		Seyed Mohammad Ali Eslami
247
e-mail:		[email protected]
248
address:	Doreshar, 8 Alley, No. 8, Unit 3,, Qom, Qom, IR
249
phone:		09122524529
250
fax-no:		09122524529
251
252
253
tracepath jahanesanat.ir
254
 6:  nyk-bb1-link.telia.net                               57.671ms asymm  7 
255
 7:  buf-b1-link.telia.net                                37.034ms asymm  8 
256
 8:  giglinx-ic-155660-buf-b1.c.telia.net                 32.716ms 
257
 9:  host.colocrossing.com                                40.298ms 
258
259
260
261
Domain Name: VAHIDHASHEMI.COM
262
263
 Registration Date: 31-Jan-2012 
264
 Expiration Date: 31-Jan-2014  
265
266
 Name Servers:  
267
    ns1.bazykon.com
268
    ns2.bazykon.com
269
 
270
271
 Registrant Contact Details:
272
    Sarreh
273
    Seyed Vahid Hashemi        ([email protected])
274
    Tehran
275
    Tehran
276
    Tehran,560078
277
    IR
278
    Tel. +98.12345678
279
280
281
tracepath VAHIDHASHEMI.COM
282
 6:  nyk-bb1-link.telia.net                               29.005ms asymm  7 
283
 7:  buf-b1-link.telia.net                                37.001ms asymm  8 
284
 8:  giglinx-ic-155660-buf-b1.c.telia.net                 40.294ms 
285
 9:  host.colocrossing.com                                40.289ms 
286
287
288
289
Domain Name: BAZYKON.COM
290
291
 Registration Date: 14-Mar-2010 
292
 Expiration Date: 14-Mar-2013  
293
294
 Name Servers:  
295
    ns1.bazykon.com
296
    ns2.bazykon.com
297
 
298
299
 Registrant Contact Details:
300
    PrivacyProtect.org
301
    Domain Admin        ([email protected])
302
    ID#10760, PO Box 16
303
    Note - Visit PrivacyProtect.org to contact the domain owner/operator
304
    Nobby Beach
305
    Queensland,QLD 4218
306
    AU
307
    Tel. +45.36946676
308
309
310
 tracepath   ns1.bazykon.com
311
 6:  nyk-bb1-link.telia.net                               28.723ms asymm  7 
312
 7:  buf-b1-link.telia.net                                37.049ms asymm  8 
313
 8:  giglinx-ic-155660-buf-b1.c.telia.net                 40.363ms 
314
 9:  host.colocrossing.com                                40.135ms
315
316
tracepath   ns2.bazykon.com
317
 6:  nyk-bb1-link.telia.net                               29.017ms asymm  7 
318
 7:  buf-b1-link.telia.net                                36.914ms asymm  8 
319
 8:  giglinx-ic-155660-buf-b1.c.telia.net                 32.865ms 
320
 9:  host.colocrossing.com                                39.041ms 
321
322
323
324
325
Domain Name: AMELBANA.COM
326
327
 Registration Date: 14-Sep-2011 
328
 Expiration Date: 14-Sep-2013  
329
330
 Name Servers:  
331
    ns1.bazykon.com
332
    ns2.bazykon.com
333
 
334
335
 Registrant Contact Details:
336
    Amelbana
337
    Naser Aydani        ([email protected])
338
    iran - tehran
339
    Tehran
340
    Tehran,560078
341
    IR
342
    Tel. +098.9124342811
343
344
345
nslookup  amelbana.com
346
Server:		127.0.0.1
347
Address:	127.0.0.1#53
348
349
Non-authoritative answer:
350
Name:	amelbana.com
351
Address: 185.2.12.13
352
353
tracepath amelbana.com
354
 6:  nyk-bb1-link.telia.net                               27.774ms asymm  7 
355
 7:  buf-b1-link.telia.net                                36.913ms asymm  8 
356
 8:  giglinx-ic-155660-buf-b1.c.telia.net                 32.865ms 
357
 9:  host.colocrossing.com                                40.278ms 
358
359
360
361
Domain Name: ETTELAATHEKMATVAMAREFAT.COM
362
363
 Registration Date: 25-Apr-2007 
364
 Expiration Date: 25-Apr-2013  
365
366
367
 Name Servers:  
368
    ns1.bazykon.com
369
    ns2.bazykon.com
370
 
371
372
 Registrant Contact Details:
373
    tlgtco
374
    m rab        ([email protected])
375
    uae
376
    dubai
377
    Dubai,560078
378
    AE
379
    Tel. +021.12345678
380
381
 Administrative Contact Details:  
382
    tlgtco
383
    m rab        ([email protected])
384
    uae
385
    dubai
386
    Dubai,560078
387
    AE
388
    Tel. +021.12345678 
389
390
391
nslookup  ettelaathekmatvamarefat.com
392
Non-authoritative answer:
393
Name:	ettelaathekmatvamarefat.com
394
Address: 185.2.12.13
395
396
397
tracepath  ettelaathekmatvamarefat.com
398
 6:  nyk-bb1-link.telia.net                               29.035ms asymm  7 
399
 7:  buf-b1-link.telia.net                                38.302ms asymm  8 
400
 8:  giglinx-ic-155660-buf-b1.c.telia.net                 32.896ms 
401
 9:  host.colocrossing.com                                38.986ms
402
403
404
Domain Name: KETABETTELAAT.COM
405
406
 Registration Date: 17-Dec-2009 
407
 Expiration Date: 17-Dec-2013  
408
409
 Status:ACTIVE
410
 
411
412
 Name Servers:  
413
    ns1.bazykon.com
414
    ns2.bazykon.com
415
 
416
417
 Registrant Contact Details:
418
    tlgtco
419
    m rab        ([email protected])
420
    uae
421
    dubai
422
    Dubai,560078
423
    AE
424
    Tel. +021.12345678
425
426
 Administrative Contact Details:  
427
    tlgtco
428
    m rab        ([email protected])
429
    uae
430
    dubai
431
    Dubai,560078
432
    AE
433
    Tel. +021.12345678 
434
435
 Technical Contact Details:  
436
    tlgtco
437
    m rab        ([email protected])
438
    uae
439
    dubai
440
    Dubai,560078
441
    AE
442
    Tel. +021.12345678 
443
444
445
nslookup ketabettelaat.com
446
Non-authoritative answer:
447
Name:	ketabettelaat.com
448
Address: 185.2.12.13
449
450
451
tracepath ketabettelaat.com
452
 6:  nyk-bb1-link.telia.net                               51.575ms asymm  7 
453
 7:  buf-b1-link.telia.net                                37.009ms asymm  8 
454
 8:  giglinx-ic-155660-buf-b1.c.telia.net                 34.081ms 
455
 9:  host.colocrossing.com                                38.955ms 
456
457
458
459
460
Domain Name:OSTAN.ORG
461
Created On:20-Nov-2007 10:40:56 UTC
462
Last Updated On:08-Nov-2012 18:33:00 UTC
463
Expiration Date:20-Nov-2013 10:40:56 UTC
464
Sponsoring Registrar:PDR Ltd. d/b/a PublicDomainRegistry.com (R27-LROR)
465
Status:OK
466
Registrant ID:DI_11332140
467
Registrant Name:m rab
468
Registrant Organization:tlgtco
469
Registrant Street1:uae
470
Registrant Street2:
471
Registrant Street3:
472
Registrant City:dubai
473
Registrant State/Province:Dubai
474
Registrant Postal Code:560078
475
Registrant Country:AE
476
Registrant Phone:+021.12345678
477
Registrant Phone Ext.:
478
Registrant FAX:
479
Registrant FAX Ext.:
480
Registrant Email:[email protected]
481
Admin ID:DI_11332140
482
483
484
nslookup ostan.org
485
Non-authoritative answer:
486
Name:	ostan.org
487
Address: 185.2.12.13
488
489
tracepath ostan.org
490
 6:  nyk-bb1-link.telia.net                               28.968ms asymm  7 
491
 7:  buf-b1-link.telia.net                                36.917ms asymm  8 
492
 8:  giglinx-ic-155660-buf-b1.c.telia.net                 34.105ms 
493
 9:  host.colocrossing.com                                40.200ms
494
495
496
Domain Name: SARREH.COM
497
498
 Registration Date: 26-Aug-2009 
499
 Expiration Date: 26-Aug-2013  
500
501
 Status:ACTIVE
502
 
503
504
 Name Servers:  
505
    ns1.bazykon.com
506
    ns2.bazykon.com
507
 
508
509
 Registrant Contact Details:
510
    tlgtco
511
    m rab        ([email protected])
512
    uae
513
    dubai
514
    Dubai,560078
515
    AE
516
    Tel. +021.12345678
517
518
nslookup sarreh.com
519
Non-authoritative answer:
520
Name:	sarreh.com
521
Address: 185.2.12.13
522
523
tracepath sarreh.com
524
 6:  nyk-bb1-link.telia.net                               27.761ms asymm  7 
525
 7:  buf-b1-link.telia.net                                38.116ms asymm  8 
526
 8:  giglinx-ic-155660-buf-b1.c.telia.net                 32.873ms 
527
 9:  host.colocrossing.com                                38.964ms 
528
529
530
531
Domain Name: JAHANESANAT.COM
532
533
 Registration Date: 06-Nov-2004 
534
 Expiration Date: 06-Nov-2013  
535
536
 Status:ACTIVE
537
 
538
539
 Name Servers:  
540
    ns1.bazykon.com
541
    ns2.bazykon.com
542
 
543
544
 Registrant Contact Details:
545
    PrivacyProtect.org
546
    Domain Admin        ([email protected])
547
    ID#10760, PO Box 16
548
    Note - Visit PrivacyProtect.org to contact the domain owner/operator
549
    Nobby Beach
550
    Queensland,QLD 4218
551
    AU
552
    Tel. +45.36946676
553
554
555
nslookup jahanesanat.com
556
Non-authoritative answer:
557
Name:	jahanesanat.com
558
Address: 185.2.12.13
559
560
tracepath jahanesanat.com
561
 6:  nyk-bb1-link.telia.net                               61.554ms asymm  7 
562
 7:  buf-b1-link.telia.net                                38.252ms asymm  8 
563
 8:  giglinx-ic-155660-buf-b1.c.telia.net                 40.292ms 
564
565
566
567
Domain Name: NAREIN.COM
568
569
 Registration Date: 22-Feb-2010 
570
 Expiration Date: 22-Feb-2013  
571
572
 Name Servers:  
573
    ns1.bazykon.com
574
    ns2.bazykon.com
575
 
576
577
 Registrant Contact Details:
578
    Sarreh
579
    Seyed Vahid Hashemi        ([email protected])
580
    Tehran
581
    Tehran
582
    Tehran,560078
583
    IR
584
    Tel. +98.12345678
585
586
nslookup  narein.com
587
Non-authoritative answer:
588
Name:	narein.com
589
Address: 185.2.12.13
590
591
tracepath  narein.com
592
17:  buf-b1-link.telia.net                                45.858ms 
593
18:  giglinx-ic-155660-buf-b1.c.telia.net                 44.558ms asymm 17 
594
19:  host.colocrossing.com                                38.262ms asymm 18 
595
596
597
Domain Name: ROMANTACO.COM
598
599
 Registration Date: 01-Aug-2012 
600
 Expiration Date: 01-Aug-2013  
601
602
 Name Servers:  
603
    ns1.bazykon.com
604
    ns2.bazykon.com
605
 
606
607
 Registrant Contact Details:
608
    tlgtco
609
    m rab        ([email protected])
610
    uae
611
    dubai
612
    Dubai,560078
613
    AE
614
    Tel. +021.12345678
615
616
617
nslookup  romantaco.com
618
Non-authoritative answer:
619
Name:	romantaco.com
620
Address: 185.2.12.13
621
622
623
tracepath  romantaco.com
624
17:  buf-b1-link.telia.net                                37.951ms 
625
18:  giglinx-ic-155660-buf-b1.c.telia.net                 49.870ms 
626
19:  host.colocrossing.com                                38.652ms asymm 18 
627
628
629
630
thunderlights.com
631
632
vphost.org?
633
634
635
636
http://www.irnike.com/ --- was hosted in december - 185.2.12.34
637
638
http://spsdevnic.net/
639
640
http://7servers.net/
641
642
Administrator:
643
	 name: SPS Developing Group
644
	 mail: [email protected] tel: +98.1712325140
645
	 fax: +98.1712325140
646
	 org: Poshtibanan Pardazesh Aseman Inc.
647
	 
648
	address: No. 9, 6th Floor, Morvarid Tower, Valiasr St.,
649
	 city: Gorgan
650
	 province: Golestan
651
	 country: IR
652
	 postcode: 4916619394
653
654
Technical Contactor:
655
	 name: SPS Developing Group
656
	 mail: [email protected] tel: +98.1712325140
657
	 fax: +98.1712325140
658
	 org: Poshtibanan Pardazesh Aseman Inc.
659
	 
660
	address: No. 9, 6th Floor, Morvarid Tower, Valiasr St.,
661
	 city: Gorgan
662
	 province: Golestan
663
	 country: IR
664
	 postcode: 4916619394
665
666
667
nslookup  7servers.net
668
Non-authoritative answer:
669
Name:	7servers.net
670
Address: 185.2.12.51
671
672
673
tracepath  7servers.net
674
17:  buf-b1-link.telia.net                                37.995ms 
675
18:  giglinx-ic-155660-buf-b1.c.telia.net                 77.696ms 
676
19:  host.colocrossing.com                                43.791ms asymm 18 
677
678
679
680
681
185.2.12.0/23 (EU )	Faraso Samaneh Pasargad Ltd.
682
185.2.14.0/23 (EU )	Faraso Samaneh Pasargad Ltd.
683
684
685
686
http://www.webhostingtalk.ir/f15/66607/
687
688
689
690
http://blog.dynamoo.com/2012/12/zbot-sites-to-block-51212.html
691
692
Poshtibanan Pardazesh Aseman
693
694
mail.9movie.ir
695
9movie.ir
696
ofoghnews.ir
697
dibisolutions.info
698
bazykon.com
699
froodgolf.com
700
iihsep.com
701
iihsep.ir
702
golestanmet.ir
703
ferdowsifinance.ir
704
irpoultry.net
705
rahpuyan-car.com
706
rahbord.info
707
rahpuyan-kar.com
708
tamebartar.com
709
golbto.com
710
usaip.eu
711
arpj.net
712
GoLbTo.com
713
MirBehBahAni.com
714
vorkan.ir
715
bema.biz
716
aaico.net
717
e-pnu.com
718
aatbiz.com
719
www.Behfarm.com
720
avdco.net 
721
porosha.com
722
iranoilseeds.com
723
Talashgroupco.com
724
Tobnoxel.com
725
ganrrc.org.ir
726
gup.ir
727
emexinvestment.com
728
bushoo.com
729
thunderlights.com