May 2013 - anti-abuse-wg - mailman.ripe.net

2013-01 Discussion Period extended until 26 June 2013 (Openness about Policy Violations)
by Emilio Madaio 26 Jun '13

26 Jun '13

Dear Colleagues, The text of the policy proposal 2013-01, "Openness about Policy Violations", has been revised based on the community feedback received on the mailing list. We have published the new version (version 2.0) today. As a result a new Discussion Phase is set for the proposal. The main changes in the new version are: -rewording of the second part of the Abstract -rewording of the section 1.0 -new section 2.0 and consequent renumbering of the other sections -rewording of the "Arguments opposing the proposal" in the Rationale You can find the full proposal at: https://www.ripe.net/ripe/policies/proposals/2013-01 We encourage you to review this policy proposal and send your comments to <anti-abuse-wg(a)ripe.net>. Regards, Emilio Madaio Policy Development Officer RIPE NCC

4 4

Max-Planck-Institute Stuttgart - inetnum: 134.105.0.0 - 134.105.255.255
by Reza Farzan 11 May '13

11 May '13

Hello All, Just received a Spam from (sebastien.ronteau@pbcards.dp.ua@134.105.185.144) and as I found out this IP belongs to Max-Planck-Institute Stuttgart. The only contact listed for this IP range listed in the Whois listing is netz(a)mpis.mpg.de which happens to be an invalid address: netz(a)mpis.mpg.de SMTP error from remote mail server after RCPT TO:<netz(a)mpis.mpg.de>: host mail.is.mpg.de [134.105.242.5]: 550 address netz(a)mpis.mpg.de is unknown or disabled Does anyone here has or knows a better network contact for Max-Planck-Institute Stuttgart? This case reminds me of my previous inquiry about a Network without contact, even an important institution such as Max-Planck-Institute Stuttgart. I certainly appreciate your assistance in this matter. Thank you, Reza Farzan rezaf(a)mindspring.com

5 4

Citizen Lab Report on FinFisher
by Aftab Siddiqui 02 May '13

02 May '13

Dear All, As this may land slightly-off the charter of this group so off-list replies are welcome. I just want to know the credibility of the report by Citizen-Lab on FinFisher C&C servers. Some of the C&C servers are hosted in RIPE region. While checking the flow records of 2 weeks, I've seen some good number of connection to prefixes mentioned in this report out of my ISP. https://citizenlab.org/storage/finfisher/final/fortheireyesonly.pdf Regards, Aftab A. Siddiqui

1 0