Atrivo/Intercage

[rsk at gsp.org (Rich Kulawiec)]

On Wed, Sep 24, 2008 at 07:12:31PM -0500, William Pitcock wrote:
> That said, they should have dropped Esthost before it got that big, but
> they didn't.

Didn't you notice that the quoted material was from *three years ago*?

And this problem didn't begin three years ago, either.  For example:


> From furioun at spin.it Fri Dec  5 09:53:14 EST 2003
> Article: 1141964 of news.admin.net-abuse.email
> From: furio ercolessi <furioea at spin.it>
> Newsgroups: news.admin.net-abuse.email
> Subject: AS27595 (Atrivo) here no more
> Date: 5 Dec 2003 09:29:30 GMT
> Organization: Spin Internetworking
> Message-ID: <bqpj5q$6ra$1 at half.spin.it>
> Reply-To: furioun at spin.it
> NNTP-Posting-Host: photon.spin.it
> 
> After several months of spam support including routing of hijacked IP 
> blocks, without apparent traces of non-abuse related IP traffic, our 
> backbone is now stopping the exchange of IP packets with AS27595, 
> currently announcing the following blocks:
> 
>    Network		DNSBL	    Upstreams
> ---------------		-----	------------------
> 65.124.21.0/24			4474
> 66.250.145.0/24		S2489	22934
> 67.130.99.0/24			4474
> 69.1.78.0/24		S2783	4474, 22934
> 69.31.64.0/20		S2453	4474
> 69.31.76.0/22		S2453	4474, 30371
> 69.50.160.0/20		S2489	4474, 22934, 30371
> 69.50.176.0/20		S2489	4474, 22934, 30371
> 
> AS4474   Global Village Communication, Inc.
> AS22934  E Broadband Now Inc.
> AS30371  nLayer Communications, Inc.
> 
> We are currently considering an extension of this measure to the
> three entities above, which also seem to appear repeatedly in connection 
> with network abuses and with very little, if any, legitimate traffic
> with our customers.
> 
> furio ercolessi
> Spin.it 

---Rsk