[anti-abuse-wg] 194.87.132.0/22 jumps from AS210654 to AS209654
- Previous message (by thread): [anti-abuse-wg] Fwd: RFC 9228 on Delivered-To Email Header Field
- Next message (by thread): [anti-abuse-wg] Draft Agenda - AA-WG Session @ RIPE 84
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Natale Maria Bianchi
nmb at spamhaus.org
Tue Apr 19 19:16:23 CEST 2022
We have just noticed announcements of 194.87.132.0/24, 194.87.133.0/24, 194.87.134.0/24 and 194.87.135.0/24 coming from AS209654. They seem a bit bizarre since: - AS209654 is assigned to an ISP in Lebanon that does not seem to be using it at this time. - 194.87.132.0/22 is assigned to Des Capital B.V (aka "Serverion") in NL - The same entity is also the assignee of AS210654 (note similarity of the number). - It was indeed AS210654 that was announcing these networks until very recently. https://stat.ripe.net/widget/bgplay#w.resource=194.87.132.0%2F24 shows the recent activity. Just bringing this to the attention of the community, given that this ISP is, let us say, "a bit problematic". Cheers, Natale M Bianchi Spamhaus Project
- Previous message (by thread): [anti-abuse-wg] Fwd: RFC 9228 on Delivered-To Email Header Field
- Next message (by thread): [anti-abuse-wg] Draft Agenda - AA-WG Session @ RIPE 84
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]