[117320] in North American Network Operators' Group
Re: Repeated Blacklisting / IP reputation
daemon@ATHENA.MIT.EDU (Paul Ferguson)
Wed Sep 9 22:38:16 2009
In-Reply-To: <60B0F2124D07B942988329B5B7CA393D010FA10708@mail2.FireEye.com>
Date: Wed, 9 Sep 2009 19:37:01 -0700
From: Paul Ferguson <fergdawgster@gmail.com>
To: Alex Lanstein <ALanstein@fireeye.com>
Cc: John Curran <jcurran@arin.net>, nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Wed, Sep 9, 2009 at 7:18 PM, Alex Lanstein <ALanstein@fireeye.com>
wrote:
> Along the same lines, I noticed that the worst Actor in recent memory
> (McColo - AS26780) stopped paying their bills to ARIN and their addresses
> have been returned to the pool.
>
> It's my opinion that a very select number of CIDR blocks (another example
> being the ones belonging to Cernel/InternetPath/Atrivo/etc, if it were
> ever fully extinguished) are, and forever will be, completely toxic and
> unusable to any legitimate enterprise. Arguments could be made that
> industry blacklists can and should be more flexible, but from the
> considerably more innocuous case in this thread, that is apparently not
> the modus operandi
>
With regards to Cernel/Internet Path/UkrTelGrp, it needs to be
"extinguished" first. :-)
- - ferg
-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.5.3 (Build 5003)
wj8DBQFKqGZIq1pz9mNUZTMRAnE3AKCL76mNabIzAf5FCWRfqci3YW5QKACgtLNJ
AXSIGuT1tIe0R+tm+VL/Flc=
=NYQS
-----END PGP SIGNATURE-----
--
"Fergie", a.k.a. Paul Ferguson
Engineering Architecture for the Internet
fergdawgster(at)gmail.com
ferg's tech blog: http://fergdawg.blogspot.com/
