[anti-abuse-wg] Hijacked netblocks - any SOP for these?
Frank Gadegast ripe-anti-spam-wg at powerweb.de
Thu Jul 28 10:12:38 CEST 2011
Suresh Ramasubramanian wrote: > Freshly added to spamhaus - > > SBL114471 18.104.22.168/19 RIPE > 28-Jul 02:24 GMT zombies : hijkacked ip block / spam ip block > > > SBL114472 22.214.171.124/18 RIPE > 28-Jul 02:24 GMT zombies : hijacked IP block / spammer IP block > > > SBL114473 126.96.36.199/16 RIPE > 28-Jul 02:22 GMT zombies : hijacked IP block / spammer IP block > > > SBL114470 188.8.131.52/16 RIPE > 28-Jul 02:21 GMT zombies : hijacked ip block / spammer ip block > Looks like to me, that RIPE NCC should defny compare RIPEs netblocks to several blacklists. This will indicate highjacked or misused netblocks quite easily. Also looks like to me, that we could keep IPv4 much longer, if all those blocks could be reallocated. Kind regards, Frank -- PHADE Software - PowerWeb http://www.powerweb.de Inh. Dipl.-Inform. Frank Gadegast mailto:frank at powerweb.de Schinkelstrasse 17 fon: +49 33200 52920 14558 Nuthetal OT Rehbruecke, Germany fax: +49 33200 52921 ====================================================================== Public PGP Key available for frank at powerweb.de