AS16322 PARSONLINE Tehran - IRAN

On four blocks the registrant field holds an abuse role, so the record names a mailbox where the owner should be.

What it's used for

• A national provider's network. Thirty-eight IPv4 prefixes announced from Iran, no IPv6, sixty thousand one hundred and sixty addresses, through seven observed BGP neighbours.

Notable

• The AS handle is the brand, then a city, then a country, so the routing label carries a postal address.
• Two naming families run through the blocks. One uses a country code, a four-letter cut of the brand and a full date, with dates spread over eight years. The other names a second company, either through its initials and a date or through a longer brand with a numeral appended.
• Four blocks of that second family list only an abuse role as registrant. The field that should name the owner names the mailbox that handles complaints about it.
• Three of eighteen queried addresses answered. Each name is the four numbers of the address in order, dots and all, with the provider's domain appended.
• Two of those three are the first and last addresses of their block, the ones conventionally reserved as network and broadcast, and both answer anyway.

Interesting

• Prepending the dotted address to a domain is the laziest possible reverse zone. It is generated once, covers everything, and tells you nothing the address had not already told you.
• Two companies sharing one autonomous system, with one of them recorded only by its abuse contact, is what a merger looks like before anyone updates the paperwork.