Spamhaus flags any IP announced by our ASN as a criminal network

Tom Beecher beecher at beecher.cc
Mon Mar 20 15:17:52 UTC 2023


>
> Well, those prefixes are not for their VPS hosting service (which cause a
> lot of complaint). Just like there are many IP addresses under the
> telecommunication company, the entire ASN cannot be "blocked" just because
> there is a complaint on one IP address
>

I can drop all prefixes from any ASN at any time and for any reason. Maybe
I don't like the color scheme of their logo, or how the CEO spells their
first name.  That may or may not be a smart business decision for me, but I
could do it.

For most of the internet , it DOES make good business sense to restrict
access to ASNs that are known to harbor bad actors , either directly, or by
providing connectivity. It sounds like your organization has made a
business choice that the revenue from such customers is more important than
shutting them off, and learning about the consequences of that decision.

It sounds like an unfortunate situation for you who may just trying to do
your job, but that's the reality it seems you are facing right now.

On Mon, Mar 20, 2023 at 10:58 AM Brandon Zhi <Brandon at huize.asia> wrote:

> Well, those prefixes are not for their VPS hosting service (which cause a
> lot of complaint). Just like there are many IP addresses under the
> telecommunication company, the entire ASN cannot be "blocked" just because
> there is a complaint on one IP address
>
> On 2023年3月20日周一 下午10:50 Mike Hammett <nanog at ics-il.net> wrote:
>
>> If someone tries to break into my house over and over, I won't act any
>> different if they show up wearing different clothes.
>>
>>
>>
>> -----
>> Mike Hammett
>> Intelligent Computing Solutions <http://www.ics-il.com/>
>> <https://www.facebook.com/ICSIL>
>> <https://plus.google.com/+IntelligentComputingSolutionsDeKalb>
>> <https://www.linkedin.com/company/intelligent-computing-solutions>
>> <https://twitter.com/ICSIL>
>> Midwest Internet Exchange <http://www.midwest-ix.com/>
>> <https://www.facebook.com/mdwestix>
>> <https://www.linkedin.com/company/midwest-internet-exchange>
>> <https://twitter.com/mdwestix>
>> The Brothers WISP <http://www.thebrotherswisp.com/>
>> <https://www.facebook.com/thebrotherswisp>
>> <https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg>
>> ------------------------------
>> *From: *"Brandon Zhi" <Brandon at huize.asia>
>> *To: *"Christopher Morrow" <morrowc.lists at gmail.com>
>> *Cc: *nanog at nanog.org
>> *Sent: *Monday, March 20, 2023 9:43:19 AM
>> *Subject: *Re: Spamhaus flags any IP announced by our ASN as a criminal
>> network
>>
>> Yes, for those prefixes are used to hosting service have been listed for
>> a long time. However, for those new prefixes that we rented...... We just
>> announced it.. even though it's unreachable... They just listed to this
>> list.
>>
>> On 2023年3月20日周一 下午10:34 Christopher Morrow <morrowc.lists at gmail.com>
>> wrote:
>>
>>> On Mon, Mar 20, 2023 at 9:51 AM Brandon Zhi <Brandon at huize.asia> wrote:
>>>
>>> > I don't think any ISP would reject an IP that is on the Spamhaus list.
>>>
>>> you, clearly, have been living under several rocks for a very long time.
>>>
>>
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20230320/262b4a8f/attachment.html>


More information about the NANOG mailing list