[anti-abuse-wg] Hijacked netblocks - any SOP for these?

Those are not all hijacked.  They're also assigned PI / PA netblocks
sourced directly from the RIR

RIPE has to bear the cross of Romania which alone is responsible for a
substantial chunk of those too many to list - including several  /15s

There's also the rest of eastern europe and russia with smaller
assigned PI and PA netblocks controlled by botmasters and such.

In any case, too many to list.  Never mind the "ISP" there - spamhaus
used the same script they use to generate per ISP reports of SBL
listings.

On Mon, Aug 8, 2011 at 11:57 PM, Karl-Josef Ziegler <kjz at gmx.net> wrote:
>
> RIPE: has far too many records to list. This ISP has an extremely
> serious spam problem.
>
> http://www.spamhaus.org/sbl/listings.lasso?isp=arin
>
> Hmmm... 'extremely serious spam problem'? Only RIPE 'has far too many
> records to list.'
>
> What's this?



-- 
Suresh Ramasubramanian (ops.lists at gmail.com)