[117455] in North American Network Operators' Group
Re: Hijacked Blocks (was: Repeated Blacklisting / IP reputation)
daemon@ATHENA.MIT.EDU (John Curran)
Mon Sep 14 07:07:17 2009
From: John Curran <jcurran@arin.net>
To: Rich Kulawiec <rsk@gsp.org>
Date: Mon, 14 Sep 2009 07:05:52 -0400
In-Reply-To: <20090914104948.GA28451@gsp.org>
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Sep 14, 2009, at 6:49 AM, Rich Kulawiec wrote:
> ...
> For example: Ron Guilmette has recently pointed out that notorious =20
> spammer
> Scott Richter has apparently hijacked *another* /16 block -- =20
> 150.230.0.0/16.
> I've dropped that block into various local blacklists, and in some =20
> cases,
> various local firewalls. The entry is essentially permanent, because
> there's no reason for me to make it otherwise. Perhaps one day ARIN
> will yank it back, along with all his other blocks, and blacklist him
> for life; but (a) I doubt it and (b) I'm not willing to wait. The =20
> best
> course of action for me is to just consider it scorched earth and =20
> move on.
To the extent that you're aware of a fraudulently transferred address =20
block, please report it to <https://www.arin.net/resources/fraud/>.
Thanks!
/John
John Curran
President and CEO
ARIN
