[anti-abuse-wg] Hijacked netblocks - any SOP for these?
Frank Gadegast ripe-anti-spam-wg at powerweb.de
Thu Jul 28 10:48:29 CEST 2011
Michele Neylon :: Blacknight wrote: > > On 28 Jul 2011, at 09:12, Frank Gadegast wrote: > >> >> Looks like to me, that RIPE NCC should defny compare RIPEs netblocks >> to several blacklists. This will indicate highjacked or misused >> netblocks quite easily. > > > That's out of scope for RIPE Not at all out of scope. You are right saying, that a listing does not proof anything, but its a good indication (like I sayd above). RIPE NCC could ask the member, whats going on with that netblock, if they see a listing. I guess a lot of members do not even realize, that their old netblocks are routed somewhere else. RIPE NCC has to check the use of assigned netblocks anyway (if I understand some rules right). It cannot be that assigned netblocks are used by non-members or members the netblock wasnt assigned to ... Kind regards, Frank > > Just because a netblock is blacklisted by a list doesn't actually mean much and as a RIPE member I would be very annoyed if they started getting into this kind of thing > > > Mr Michele Neylon > Blacknight Solutions > Hosting& Colocation, Brand Protection > ICANN Accredited Registrar > http://www.blacknight.com/ > http://blog.blacknight.com/ > http://blacknight.mobi/ > http://mneylon.tel > Intl. +353 (0) 59 9183072 > US: 213-233-1612 > UK: 0844 484 9361 > Locall: 1850 929 929 > Twitter: http://twitter.com/mneylon > ------------------------------- > Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty > Road,Graiguecullen,Carlow,Ireland Company No.: 370845 > > > > -- Mit freundlichen Gruessen, -- PHADE Software - PowerWeb http://www.powerweb.de Inh. Dipl.-Inform. Frank Gadegast mailto:frank at powerweb.de Schinkelstrasse 17 fon: +49 33200 52920 14558 Nuthetal OT Rehbruecke, Germany fax: +49 33200 52921 ====================================================================== Public PGP Key available for frank at powerweb.de