In article <k6gayebxpmxff...@highwayman.com>, Richard Clayton <rich...@highwayman.com> wrote: >>Only a few of them are listed on https://www.spamhaus.org/drop/
>So announcing a prefix that is on that list is not a good sign (indeed >far from it) -- but don't expect a "new" hijacker to only choose from >that list or indeed to pick any prefixes from that list at all. Spamhaus have very conservative criteria for their DROP list, so it's not surprising that you wouldn't immediately find all those hijacked blocks on it. On the other hand, they update it frequently and I see they added a bunch of new blocks to it today.
