Tuesday, 25 September 2012
Evil network: 126.96.36.199/26
So far, I've seen blackhole samples from 188.8.131.52, 184.108.40.206 and 220.127.116.11 which is enough to convince me that the whole /26 is bad an should be blocked.
Singlehop have reallocated the IP range to a customer:
network:Street-Address:via Nardi, 8 Prato
It's quite possible that Mr Coco doesn't know that the IP range is being abused in this way, but blocking access to it would be prudent.
Added: You can also add 18.104.22.168 to the list of malicious sites.