[rpd] Humble feature request for quarantined/cleaned up IP addresses

[Loganaden Velvindron]

Hi Ben,

Thank you for your email.

I agree with you but it's not only about putting into blocklists. It's also
about removing quarantine IPs from blocklists.

Having a page on afrinic website where this information can be obtained
easily and quickly and machine readable makes the job of cyberthreat
intelligence companies - which often work closely with law enforcement
agencies - much easier and much more accurate.


I also mentioned law enforcement agencies and you didn't respond on this
item. Is there a reason for this ?



On Sat, 26 Sept 2026, 12:23 Ben Roberts - AfriNIC, <ben.roberts at afrinic.net>
wrote:

> Logan,
> It might be wrong to assume that all quarantined and returned space is
> contaminated. I’m sure that cyber threat blacklist companies have their own
> methods of determining address space with threats. I might be wrong to just
> ask to block all returned space (thus rendering it potentially useless to a
> future user who has been allocated the space).
>
>
> Is there a particular problem that you are trying to solve ?
>
> Kind regards
> Ben
> Sent from my iPhone
>
> > On 26 Sep 2026, at 10:21, Loganaden Velvindron <loganaden at gmail.com>
> wrote:
> >
> > Hi All,
> >
> > Recently, I was investigating a cyber security incident involving IP
> addresses.
> >
> > A recurring challenge is that even after these IP ranges are returned
> > to AFRINIC for quarantine and cleanup, there is no quick, centralized
> > way for cybersecurity threat intelligence providers or law enforcement
> > agencies to track this status change. I fully appreciate that the
> > AFRINIC team already handles a significant workload.
> >
> > I would therefore kindly request AFRINIC members  to discuss whether
> > putting a dedicated page would be a good idea ? The web page would be
> > for quarantined and cleaned up IP ranges so that Cybersecurity Threat
> > Intelligence Providers and Law enforcement agencies can easily parse
> > those to update their blocklists. CSV format is acceptable but json
> > format would be nice to have especially with the rise of automation.
> >
> > Kind regards,
> > Loganaden Velvindron
> > (Speaking in my own capacity)
> >
> > _______________________________________________
> > RPD mailing list
> > RPD at afrinic.net
> > https://lists.afrinic.net/mailman/listinfo/rpd
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.afrinic.net/pipermail/rpd/attachments/20260926/6835e74d/attachment.html>