<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><div>On Nov 9, 2010, at 2:13 PM, Owen DeLong wrote:</div><blockquote type="cite"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><div>On Nov 9, 2010, at 7:57 AM, Eliot Lear wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">
<div bgcolor="#ffffff" text="#000000">
Leo,<br>
<br>
Thank you for your explanation. It seems as though you would like to
start with low hanging fruit where "abandoned" would mean:<br>
<ol>
<li>the address space is not routed; and <br>
</li>
<li>one of the following circumstances applies:</li>
<ol type="a">
<li>administrative (or technical?) contact disavows use of the
space</li>
<li>no contacts can be found either by email, by phone, or by
post.</li></ol></ol></div></blockquote>2(b) is problematic IMHO. Just because we can't locate the contacts does not mean that</div><div>the organization is defunct or has stopped utilizing the resources.</div></div></blockquote><br></div><div>Some other attributes also to consider (I'm not advocating either way, but just </div><div>providing some additional insight that may be of use):</div><div><br></div><div> 1) Was the address space ever routed, and/or how long ago?</div><div><br></div><div> We don't have absolute data on this but do have some reference</div><div> sources that appear fairly accurate.</div><div><br></div><div> 2) Are there valid (i.e. reachable & responding to SOA queries) in-addr DNS </div><div> nameservers for the address space?</div><div><br></div><div> Again, while not perfect due to use of split horizon, it can be a valid sign</div><div> of life...</div><div><br></div><div>We look into some of these data points when researching hijacking/fraud</div><div>cases.</div><div><br></div><div>FYI,</div><div>/John</div><div><br></div></body></html>