Re: IP reputation lookup (prefix not single IP)

[Sabri Berisha <sabri () cluecentral net>]

----- On Mar 26, 2021, at 8:20 PM, John Levine johnl () iecc com wrote:

Hi,

> Also keep in mind that "most blocklists" is meaningless. Any moron can
> run a blocklist, any many morons do. The vast majority of blockists
> are used by close to nobody, and only handful are widely enough used
> to matter.

This moron ran a per-country/per-as blocklist in the early 2000s which 
was based on a DFZ BGP feed. I closed it off more than 10 years ago.

I just checked and I'm still receiving ~5 queries per second.

As per my anecdotal evidence, there are some really clueless operators
out there as well. There is, of course, the temptation to just add
a wildcard A record... But nah, I don't like hot places.

The other side-effect is that spammers are still very eager to use my
domain in their from: headers, judging by the amount of undeliverables
I receive (in waves).

Thanks,

Sabri