This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/anti-abuse-wg@ripe.net/
[anti-abuse-wg] 194.87.132.0/22 jumps from AS210654 to AS209654
- Previous message (by thread): [anti-abuse-wg] Fwd: RFC 9228 on Delivered-To Email Header Field
- Next message (by thread): [anti-abuse-wg] Draft Agenda - AA-WG Session @ RIPE 84
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Natale Maria Bianchi
nmb at spamhaus.org
Tue Apr 19 19:16:23 CEST 2022
We have just noticed announcements of 194.87.132.0/24, 194.87.133.0/24, 194.87.134.0/24 and 194.87.135.0/24 coming from AS209654. They seem a bit bizarre since: - AS209654 is assigned to an ISP in Lebanon that does not seem to be using it at this time. - 194.87.132.0/22 is assigned to Des Capital B.V (aka "Serverion") in NL - The same entity is also the assignee of AS210654 (note similarity of the number). - It was indeed AS210654 that was announcing these networks until very recently. https://stat.ripe.net/widget/bgplay#w.resource=194.87.132.0%2F24 shows the recent activity. Just bringing this to the attention of the community, given that this ISP is, let us say, "a bit problematic". Cheers, Natale M Bianchi Spamhaus Project
- Previous message (by thread): [anti-abuse-wg] Fwd: RFC 9228 on Delivered-To Email Header Field
- Next message (by thread): [anti-abuse-wg] Draft Agenda - AA-WG Session @ RIPE 84
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]