RIPE Labs: Pollution in 1/8
‘1.0.0.0/8 (1/8) was reserved by IANA since 1981. Since then is has been used unofficially as example addresses, default configuration parameters or pseudo-private address space.
The most prominent unauthorised use of 1/8 is…a decentralised peer-to-peer network that allows users to anonymously share content.
…almost 60% of the UDP packets [detected by RIPE] are sent towards the IP address 1.1.1.1 on port 15206…Some sources list the port as being used by a trojan called “KiLo”, however information about it seem sparse.’


