DNSChanger Prefixes are re-allocated and advertised ...

Barry Greene bgreene at senki.org
Sat Aug 11 05:02:27 UTC 2012

Hi Team,

FYI - Two prefixes from the DNS Changer/Rover Digital take down have been re-allocated. One of the prefixes - - was advertised Friday morning. There is a blog post with some of the details here:

"Beware! DNS Changer’s IP Blocks are re-allocated and advertised!" - http://www.senki.org/archives/930

A general feeling of surprise summarizes several of the behind the scenes security conversation. A general recommendation of "be careful of the traffic going to and from these netblocks" is the best advice at this time. 


More information about the NANOG mailing list