nanog mailing list archives

Re: Hijacked Blocks (was: Repeated Blacklisting / IP reputation)


From: John Curran <jcurran () arin net>
Date: Mon, 14 Sep 2009 07:05:52 -0400

On Sep 14, 2009, at 6:49 AM, Rich Kulawiec wrote:
...
For example: Ron Guilmette has recently pointed out that notorious  
spammer
Scott Richter has apparently hijacked *another* /16 block --  
150.230.0.0/16.
I've dropped that block into various local blacklists, and in some  
cases,
various local firewalls.  The entry is essentially permanent, because
there's no reason for me to make it otherwise.  Perhaps one day ARIN
will yank it back, along with all his other blocks, and blacklist him
for life; but (a) I doubt it and (b) I'm not willing to wait.  The  
best
course of action for me is to just consider it scorched earth and  
move on.

To the extent that you're aware of a fraudulently transferred address  
block, please report it to <https://www.arin.net/resources/fraud/>.

Thanks!
/John

John Curran
President and CEO
ARIN


Current thread: