[120202] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

RE: Is there anyone from ASPEWS on this list?

daemon@ATHENA.MIT.EDU (Alex Lanstein)
Fri Dec 11 20:26:46 2009

From: Alex Lanstein <ALanstein@FireEye.com>
To: "nanog@nanog.org" <nanog@nanog.org>
Date: Fri, 11 Dec 2009 17:25:33 -0800
In-Reply-To: <1260563720.4148.116.camel@petrie>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

William Pitcock wrote:
>>>Cernal and Atrivo are two different entities, Atrivo used to host
>>>Cernal, but now they have different hosting arrangements.

I now understand the original point you were trying to make about Atrivo.  =
I disagree with your premise that it is actually a different entity than Ce=
rnel, but am not trying to debate that on this list for various reasons. =20

Acting under my (incorrect or correct) assumption that they are in fact the=
 same entity, I made my post to show that "the boys were back". =20

That is, for a decent amount of time, parts of 85.255.112.0/20 were not bei=
ng advertised, and hence the dns hijacking pointing selected http traffic t=
o 67.210.0.0/20 wasn't happening.

My point was that it (fairly) recently started being advertised again, and =
it was the same old song and dance wrt dns/http hijacking/fraud.

Regards,

Alex Lanstein
FireEye, Inc.

________________________________________
From: William Pitcock [nenolod@systeminplace.net]
Sent: Friday, December 11, 2009 3:35 PM
To: Alex Lanstein
Cc: nanog@nanog.org
Subject: RE: Is there anyone from ASPEWS on this list?

On Fri, 2009-12-11 at 09:55 -0800, Alex Lanstein wrote:
> >>>Also, the fact that Atrivo is *dead* and this
> >>>stuff is still listed means that anyone who gets
> >>>those blocks from ARIN next are basically screwed
>
> Why would you say Atrivo is dead?
>
> root@localhost --- {~}  nslookup www.googleadservices.com 85.255.114.83
> Server:         85.255.114.83
> Address:        85.255.114.83#53
>
> Name:   www.googleadservices.com
> Address: 67.210.14.113

That is Cernal, and it is hosted in Russia now.

Cernal and Atrivo are two different entities, Atrivo used to host
Cernal, but now they have different hosting arrangements.

Can people get a clue and understand this very critical difference?

Thanks.

William



--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



home help back first fref pref prev next nref lref last post