Hijacked Blocks (was: Repeated Blacklisting / IP reputation)
John Curran
jcurran at arin.net
Mon Sep 14 11:05:52 UTC 2009
On Sep 14, 2009, at 6:49 AM, Rich Kulawiec wrote:
> ...
> For example: Ron Guilmette has recently pointed out that notorious
> spammer
> Scott Richter has apparently hijacked *another* /16 block --
> 150.230.0.0/16.
> I've dropped that block into various local blacklists, and in some
> cases,
> various local firewalls. The entry is essentially permanent, because
> there's no reason for me to make it otherwise. Perhaps one day ARIN
> will yank it back, along with all his other blocks, and blacklist him
> for life; but (a) I doubt it and (b) I'm not willing to wait. The
> best
> course of action for me is to just consider it scorched earth and
> move on.
To the extent that you're aware of a fraudulently transferred address
block, please report it to <https://www.arin.net/resources/fraud/>.
Thanks!
/John
John Curran
President and CEO
ARIN
More information about the NANOG
mailing list