On 2021-01-21 8:20 a.m., Gregory Heytings via mailop wrote:
One concrete example: AS16276 has 3583744 IPs. Out of these, 2327 sent
a spam in the last 7 days according to uceprotect. That might seem like
a high number, but it's only 0.05% of the address space of that AS.
Because of this all IPs of AS16276 are blacklisted.
Before we start on this thread.. (UCEPROTECT's criteria for blocking
OVH) we should confirm that we want this discussion on this mailing
list, it might get noisy ;)
The last 7 days is what they show, that is only NEW traffic reported I
am sure, and does say what the 30 day and year history really is.
OVH might be the 'perfect example' though if we want to continue this
thread..
And note, we should talk maybe percentage of 'active' IP(s) and not the
theoretical size of the ASN..
And should things be discussed like:
* Quality of the Abuse Department
* Time to Takedown abuse
* Obviousness of Abuse
* Size of allocated ranges to customers and abuse
158.69.162.68 x105 ip68.ip-158-69-162.net
158.69.162.69 x149 ip69.ip-158-69-162.net
158.69.162.70 x207 ip70.ip-158-69-162.net
158.69.162.71 x111 ip71.ip-158-69-162.net
158.69.238.136 x54 ip136.ip-158-69-238.net
158.69.238.137 x53 ip137.ip-158-69-238.net
158.69.238.138 x111 ip138.ip-158-69-238.net
158.69.238.139 x68 ip139.ip-158-69-238.net
158.69.238.140 x125 ip140.ip-158-69-238.net
158.69.238.141 x77 ip141.ip-158-69-238.net
158.69.238.142 x129 ip142.ip-158-69-238.net
51.222.131.216 x88 ip216.ip-51-222-131.net
51.222.131.217 x78 ip217.ip-51-222-131.net
51.222.131.218 x73 ip218.ip-51-222-131.net
51.222.131.219 x81 ip219.ip-51-222-131.net
51.222.131.220 x98 ip220.ip-51-222-131.net
51.222.131.221 x82 ip221.ip-51-222-131.net
51.222.131.222 x76 ip222.ip-51-222-131.net
51.222.131.223 x72 ip223.ip-51-222-131.net
And remember, it isn't just spammers that we worry about. Think of
things like AUTH attacks etc.
--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada
This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
