April 2014 - anti-abuse-wg - mailman.ripe.net

Spam from your network
by Bob Pena 25 Apr '14

25 Apr '14

Hello, We are receiving extreme amounts of spam from your network and it seems the person allocated to the IP block [37.45.100.211] is spoofing our domain to send phishing and spam. Please proceed to stop this operation ASAP. We have also notified INTERPOL and the local authorities. I have included one a sample message source code below. /===================================================================================================== Received: from omneweb.com (unknown [37.45.100.211]) (Authenticated sender: phil.omneweb) by newcore.omneweb.com (Postfix) with ESMTP id 18B8AD8755 for <%2b919447797006(a)gtalk2voip.com>; Thu, 24 Apr 2014 12:44:27 -0400 (EDT) Message-ID: <69A591E8.41A618E1(a)omneweb.com> Date: Thu, 24 Apr 2014 17:44:19 +0100 Reply-To: "FEDEX.com info" <phil(a)omneweb.com> From: "FEDEX info" <phil(a)omneweb.com> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-GB; rv:1.9.1.10) Gecko/20100512 Lightning/1.0b1 Thunderbird/3.0.5 MIME-Version: 1.0 To: <%2b919447797006(a)gtalk2voip.com> Subject: Some important info is lacking Content-Type: multipart/mixed; boundary="------------606378484837325444818240" //=====================================================================================================/ Thank you. -- *Bob * Support Or Something - OmneWeb, Inc. <http://www.omneweb.com> phone: 646-590-3665 <callto:646-590-3665> e-mail: bob(a)omneweb.com <mailto:bob@omneweb.com> skype: omneweb <callto:omneweb>

2 1

Spam from Your Network
by Bob Pena 24 Apr '14

24 Apr '14

Hello, We are receiving extreme amounts of spam from your network and it seems the person allocated to the IP block [31.132.106.0/24] is spoofing our domain to send phishing and spam. Please proceed to stop this operation ASAP. We have also notified INTERPOL and the local authorities. I have included one a sample message source code below. /===================================================================================================== Received: from omneweb.com (net03113210669.pskovline.ru [31.132.106.69]) (Authenticated sender: phil.omneweb) by newcore.omneweb.com (Postfix) with ESMTP id 9686CD86DC; Thu, 24 Apr 2014 12:29:36 -0400 (EDT) Message-ID: <3D31CCC3.176CD1DD(a)omneweb.com> Date: Thu, 24 Apr 2014 17:29:19 +0100 From: "FedEx.com info" <phil(a)omneweb.com> User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.16) Gecko/20080724 Thunderbird/2.0.0.16 MIME-Version: 1.0 To: <cjones(a)netizen.com.ar>, <cj(a)talisman.ae> Subject: Some important info is lacking Content-Type: multipart/mixed; boundary="------------815718485832152550533836" ======================================================================================================/ Thank you, -- *Bob * Support Or Something - OmneWeb, Inc. <http://www.omneweb.com> phone: 646-590-3665 <callto:646-590-3665> e-mail: bob(a)omneweb.com <mailto:bob@omneweb.com> skype: omneweb <callto:omneweb>

1 0

Further Updated Agenda for RIPE68 AA-WG Meeting
by Brian Nisbet 23 Apr '14

23 Apr '14

Morning, With likely the last update to the agenda (but who knows...) for the meeting in Warsaw. A very full agenda, as you can see, lots to discuss! A. Administrative Matters * Welcome * Scribe, Jabber, Stenography * Microphone Etiquette * Approve Minutes from RIPE 67 * Finalise agenda B. Update * B1. Recent List Discussion * B2. AA-WG Charter C. Policies D. Interactions * D1. Working Groups * D2. Proof of Identity Discussions - RIPE Policy 2007-01 * D3. RIPE NCC Gov/LEA Interactions Update E. Presentation * E1. Anti-Abuse, the view from the messaging world” - MAAWG * E2. Impact of abuse-c - Bengt Gördén * E3. "Abuse-c: Next Steps" - Denis Walker, Christian Teuschel * E4. "Introduction to Contact Databases for Abuse Handling" - Aaron Kaplan X. A.O.B. Z. Agenda for RIPE 69

1 0

Updated Agenda for RIPE 68 AA-WG Meeting
by Brian Nisbet 09 Apr '14

09 Apr '14

Colleagues, A slight update for our agenda for RIPE68. There has recently been some discussion on the Address Policy mailing list about acceptable forms of ID that the RIPE NCC require in regards to those holding resources under an agreement with a sponsoring LIR. Over RIPE68 discussion on this matter will take place in the AP Working Group and in the NCC Services Working Group, but we wanted to make sure the AA community was involved, so we've carved out a little time in the agenda. The discussion thread on this starts here: http://www.ripe.net/ripe/mail/archives/address-policy-wg/2014-February/0085… Brian A. Administrative Matters * Welcome * Scribe, Jabber, Stenography * Microphone Etiquette * Approve Minutes from RIPE 67 * Finalise agenda B. Update * B1. Recent List Discussion * B2. AA-WG Charter C. Policies D. Interactions * D1. Working Groups * D2. Proof of Identity Discussions - RIPE Policy 2007-01 * D3. RIPE NCC Gov/LEA Interactions Update E. Presentation * E1. Anti-Abuse, the view from the messaging world” - MAAWG * E2. Impact of abuse-c - Bengt Gördén X. A.O.B. Z. Agenda for RIPE 69

1 0