DNSChanger Prefixes are re-allocated and advertised ...
bgreene at senki.org
Sat Aug 11 00:02:27 CDT 2012
FYI - Two prefixes from the DNS Changer/Rover Digital take down have been re-allocated. One of the prefixes - 220.127.116.11/20 - was advertised Friday morning. There is a blog post with some of the details here:
"Beware! DNS Changer’s IP Blocks are re-allocated and advertised!" - http://www.senki.org/archives/930
A general feeling of surprise summarizes several of the behind the scenes security conversation. A general recommendation of "be careful of the traffic going to and from these netblocks" is the best advice at this time.
More information about the NANOG