[58221] in North American Network Operators' Group
Re: Re[4]: The in-your-face hijacking example, was: Re: Who is
daemon@ATHENA.MIT.EDU (Simon Lyall)
Sun May 4 04:08:31 2003
Date: Sun, 4 May 2003 20:07:49 +1200 (NZST)
From: Simon Lyall <simon.lyall@ihug.co.nz>
To: Scott Granados <scott@wworks.net>
Cc: <nanog@merit.edu>
In-Reply-To: <005001c3120a$5c419280$6601a8c0@wworks.net>
Errors-To: owner-nanog-outgoing@merit.edu
On Sat, 3 May 2003, Scott Granados wrote:
> You may remove any 138.121.0.0/16 space transiting 26346 I just removed it
> all.
>
> Atrivo is presently only transiting 69.1.78.0/24 via 26346 which is space I
> assigned him from my netblock.
You might want to have a look at 65.77.130.0/24 and AS26458 while you at
it:
http://www.spamhaus.org/sbl/listings.lasso?isp=wworks.net&-nothing=Search
However if we are going to go over every stolen and spammer network one
by one in nanog this is going to take years. People might want to start
going here:
http://www.spamhaus.org/sbl/index.lasso
and checking to see if they have (and how many) entries they have under
"Find Listings under: " for their company. There is a good likelyhood that
listings their are actual spammers (perhaps with stolen netblocks) as SBL
has a pretty low false positive rate.
I notice a few recent posters to here (in other threads) have entries some
of which are the yellow ones indicating known spam gangs.
--
Simon Lyall. | Newsmaster | Work: simon.lyall@ihug.co.nz
Senior Network/System Admin | Postmaster | Home: simon@darkmere.gen.nz
Ihug Ltd, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz
