search

sidallocation / sidallocation.org

https://sidallocation.org
9 stars 4 forks source link

SID collision #20

Open LouAlbano opened 1 year ago

LouAlbano commented 1 year ago

It appears there's a collision here:

5000000-5000213 Etnetera a.s. Etnetera aggressive IP blacklist 5000000-5000033 MalSilo MalSilo

travisbgreen commented 1 year ago

I don't think we have any point of contact at those organizations. I see malsilo [at] tuta .io in release notes, will shoot them an email.

travisbgreen commented 1 year ago

Also, last update @ malsilo was "timestamp": "2022-12-01 11:56:36 (UTC)", might not be active anymore.

jasonish commented 1 year ago

I have a contact via the Suricata rule index. Will contact in August when I'm back from holiday.

travisbgreen commented 1 year ago

I was able to get in touch with raw_data via email, and they are planning on deploying an updated feed at the end of September at which point they will use the 51* range. I'll submit a pull request reflecting this shortly.

On Mon, Jul 17, 2023 at 4:37 PM Jason Ish @.***> wrote:

I have a contact via the Suricata rule index. Will contact in August when I'm back from holiday.

— Reply to this email directly, view it on GitHub https://github.com/sidallocation/sidallocation.org/issues/20#issuecomment-1638982292, or unsubscribe https://github.com/notifications/unsubscribe-auth/AALCHHIP3Q2EDJMM2JNYSADXQW5CTANCNFSM6AAAAAAZXKMASU . You are receiving this because you commented.Message ID: @.***>

-- (406) 284-1911 travisgreen.net calendly.com/travisgreen

zoomequipd commented 11 months ago

@travisbgreen - any chance we can get an update from raw_data?