North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Atrivo/Intercage

  • From: Rich Kulawiec
  • Date: Wed Sep 24 22:07:55 2008

On Wed, Sep 24, 2008 at 07:12:31PM -0500, William Pitcock wrote:
> That said, they should have dropped Esthost before it got that big, but
> they didn't.

Didn't you notice that the quoted material was from *three years ago*?

And this problem didn't begin three years ago, either.  For example:


> From [email protected] Fri Dec  5 09:53:14 EST 2003
> Article: 1141964 of news.admin.net-abuse.email
> From: furio ercolessi <[email protected]>
> Newsgroups: news.admin.net-abuse.email
> Subject: AS27595 (Atrivo) here no more
> Date: 5 Dec 2003 09:29:30 GMT
> Organization: Spin Internetworking
> Message-ID: <[email protected]>
> Reply-To: [email protected]
> NNTP-Posting-Host: photon.spin.it
> 
> After several months of spam support including routing of hijacked IP 
> blocks, without apparent traces of non-abuse related IP traffic, our 
> backbone is now stopping the exchange of IP packets with AS27595, 
> currently announcing the following blocks:
> 
>    Network		DNSBL	    Upstreams
> ---------------		-----	------------------
> 65.124.21.0/24			4474
> 66.250.145.0/24		S2489	22934
> 67.130.99.0/24			4474
> 69.1.78.0/24		S2783	4474, 22934
> 69.31.64.0/20		S2453	4474
> 69.31.76.0/22		S2453	4474, 30371
> 69.50.160.0/20		S2489	4474, 22934, 30371
> 69.50.176.0/20		S2489	4474, 22934, 30371
> 
> AS4474   Global Village Communication, Inc.
> AS22934  E Broadband Now Inc.
> AS30371  nLayer Communications, Inc.
> 
> We are currently considering an extension of this measure to the
> three entities above, which also seem to appear repeatedly in connection 
> with network abuses and with very little, if any, legitimate traffic
> with our customers.
> 
> furio ercolessi
> Spin.it 

---Rsk