Tuesday, 25 September 2012
Evil network: 220.127.116.11/26
So far, I've seen blackhole samples from 18.104.22.168, 22.214.171.124 and 126.96.36.199 which is enough to convince me that the whole /26 is bad an should be blocked.
Singlehop have reallocated the IP range to a customer:
network:Street-Address:via Nardi, 8 Prato
It's quite possible that Mr Coco doesn't know that the IP range is being abused in this way, but blocking access to it would be prudent.
Added: You can also add 188.8.131.52 to the list of malicious sites.