This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/anti-abuse-wg@ripe.net/
[anti-abuse-wg] 196.52.0.0/14 revoked, cleanup efforts needed
- Previous message (by thread): [anti-abuse-wg] DDoS-Guard, a dodgy Russian firm that also hosts the official site for the terrorist group Hamas
- Next message (by thread): [anti-abuse-wg] 196.52.0.0/14 revoked, cleanup efforts needed
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Ostap Efremov
kkind690 at gmail.com
Wed Jan 20 02:00:49 CET 2021
Hi, 196.52.0.0/14 was recently revoked. Before it was revoked, the whois for this /14 was: > inetnum: 196.52.0.0 - 196.55.255.255 > netname: LogicWeb-Inc > descr: LogicWeb Inc. > descr: 3003 Woodbridge Ave > descr: Edison, NJ 08837 > country: ZA > remarks: ============REMARK==================== > remarks: The custodianship of this IP prefix is presently > remarks: in dispute. A police investigation is on-going > remarks: and AFRINIC reserves the right to > remarks: reclaim this IP prefix at anytime. > remarks: ============REMARK=================== > However, now, this /14 has been revoked by AFRINIC. Do a whois on it and you will see, it's unallocated. I believe this /14 was under control from our big friend from Israel, but I don't remember. This does not matter however. But, sadly there are about 367 ip ranges being announced from this /14 https://pastebin.com/raw/MHaW3nPe >From about 71 unique ASN's This is a BOGON, unallocated space. I would appreciate if any network that is on that list and on this mailing list, would stop announcing parts of this hijacked /14. I reached out to RADB to remove all the radb entries concerning this /14, however after 72 hours they still haven't. > This is not an ignored ticket, we have escalated internally with our RADb > admins and they are looking into it. I will let them know that you are > looking for a update and we will provide it as soon as possible. How is it possible that they can't just delete all entries? It is UNALLOCATED SPACE, it shouldn't be routed, it shouldn't have radb. https://www.radb.net/query?advanced_query=1&keywords=-M+196.52.0.0%2F14&-T+option=&ip_option=&-i+option=&db=RADB I have also tried to post about this massive source of BOGONS on the nanog mailing list, however, they rejected my posts. Most likely because it possibly concerns "that one guy from Israel", however the nanog moderators refused to comment while continuing to reject my posts. Their self-censorship is very destructive and harmful. I hope that if this list is moderated, I will not have any trouble posting about this issue. Greetings, Ostap. -------------- next part -------------- An HTML attachment was scrubbed... URL: </ripe/mail/archives/anti-abuse-wg/attachments/20210120/ddcfeddb/attachment.html>
- Previous message (by thread): [anti-abuse-wg] DDoS-Guard, a dodgy Russian firm that also hosts the official site for the terrorist group Hamas
- Next message (by thread): [anti-abuse-wg] 196.52.0.0/14 revoked, cleanup efforts needed
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]