June 2017 - anti-abuse-wg - mailman.ripe.net

Re: [anti-abuse-wg] The real abuse
by Volker Greimann 07 Jun '17

07 Jun '17

This is leading nowhere. Apparently this person is not interested in constructive dialogue, which I had offered. I will therefore cease to feed the troll and instead filter his messages to trash. This is useless. Am 07.06.2017 um 09:21 schrieb Marilson: > Please pay attention. I'll show you how criminals act and who they are. > *On May 31, 2017 Volker wrote:* > > ...stop accusing each other of criminal activity. If you have > evidence of criminal activities, report them to the appropriate > authorities. > I had already done what he suggested, but with the scammer. His > colleague and countryman, owner of Hetzner.de, is out of reach. I'm in > Brazil and I'm not a millionaire. Volker is a lawyer and he knows > that. Their criticism was impertinent, I knew he had his tail stuck > and I decided to confront him with evidence. > *On Jun 4, 2017 I answered:* > >> ...talk to your colleague Ralf Ramm of your KS team abuse about our > message exchange from 14 to 28-08-2015. It's a small example of how > the bad ISPs act. See the proof of the crime and see the falsehood and > complicity of your team abuse. > Volker took 2 days to respond to my complaint. Perhaps he did research > because his reaction was of a dictator of Banana Republic. > *On Jun 6, 2017 1:37 PM Volker wrote:* > >>> Can we remove this person from the list or at least revoke posting > rights? > >>> Let's not feed the troll any more and return this list to its > original function. > *On Jun 6, 2017 5:04 PM I answered:* > Hey Volker, we're not in the Middle Ages ... I guess. Instead ask to > shut up my mouth you should explain the acts of your KS team abuse, > after all my accusations are false, are not they? Why so much fear? > Volker is a lawyer and he leads the abuse teams of Key-Systems. Team > abuse is advised by a lawyer. The Key-Systems team abuse is oriented > to protect the accused. They lie and try to deceive those who > denounce.They underestimate the intelligence of the complainants and > treat us as if we were morons. I have filed the responses that this > team abuse gave me in August 2015. This is the work of Mr. Volker > Greimann. He takes great pains to defend bad ISPs. > If someone doubts I'll send the evidence. But this group never asked > for evidence. On the contrary, always prevented me from showing. The > reason is obvious. So they decided to shut me up. > For those who do not believe me, I think they'll believe a German > Court, will not they? Volker and Key-Systems are German. > 2013 – 2014 > Complainant: Universal Music e Robin Thicke > Defendant: Key-Systems e seu cliente H33T > Court decision: *If the registrar is informed about a clear violation > of the law, it must examine the specific offer immediately and lock > the domain.* > Fine: 250,000 euros > Now notice the date that team abuse tried to deceive me: August 2015 !!! > Not even a local Court can correct this aberration. The name of this > is greed, lack of ethics, dishonesty, cumplicty and conspiracy. > I must clarify that in most of the Providers I have come to, I have > been treated with decency and efficiency. These others, Hetzner.de, > Contabo.de, Limestonenetworks.com, Ripe.net, Microsoft.com, Enzu.com, > Locaweb.com.br, Buscape-Lomadee.com.br, Uol.com.br, Key-Systems.net, > Techcrea Solutions, Aruba.it, Ovh.ca, Amazonaws.com, > Hostgator-Equinix.com, Alibaba and the Forty Thieves, well, those are > going to be in the trash of history. > Tell me Volker, if I'm the troll what are you, dear? > Marilson -- Bei weiteren Fragen stehen wir Ihnen gerne zur Verfügung. Mit freundlichen Grüßen, Volker A. Greimann - Rechtsabteilung - Key-Systems GmbH Im Oberen Werk 1 66386 St. Ingbert Tel.: +49 (0) 6894 - 9396 901 Fax.: +49 (0) 6894 - 9396 851 Email: vgreimann(a)key-systems.net Web: www.key-systems.net / www.RRPproxy.net www.domaindiscount24.com / www.BrandShelter.com Folgen Sie uns bei Twitter oder werden Sie unser Fan bei Facebook: www.facebook.com/KeySystems www.twitter.com/key_systems Geschäftsführer: Alexander Siffrin Handelsregister Nr.: HR B 18835 - Saarbruecken Umsatzsteuer ID.: DE211006534 Member of the KEYDRIVE GROUP www.keydrive.lu Der Inhalt dieser Nachricht ist vertraulich und nur für den angegebenen Empfänger bestimmt. Jede Form der Kenntnisgabe, Veröffentlichung oder Weitergabe an Dritte durch den Empfänger ist unzulässig. Sollte diese Nachricht nicht für Sie bestimmt sein, so bitten wir Sie, sich mit uns per E-Mail oder telefonisch in Verbindung zu setzen. -------------------------------------------- Should you have any further questions, please do not hesitate to contact us. Best regards, Volker A. Greimann - legal department - Key-Systems GmbH Im Oberen Werk 1 66386 St. Ingbert Tel.: +49 (0) 6894 - 9396 901 Fax.: +49 (0) 6894 - 9396 851 Email: vgreimann(a)key-systems.net Web: www.key-systems.net / www.RRPproxy.net www.domaindiscount24.com / www.BrandShelter.com Follow us on Twitter or join our fan community on Facebook and stay updated: www.facebook.com/KeySystems www.twitter.com/key_systems CEO: Alexander Siffrin Registration No.: HR B 18835 - Saarbruecken V.A.T. ID.: DE211006534 Member of the KEYDRIVE GROUP www.keydrive.lu This e-mail and its attachments is intended only for the person to whom it is addressed. Furthermore it is not permitted to publish any content of this email. You must not use, disclose, copy, print or rely on this e-mail. If an addressing or transmission error has misdirected this e-mail, kindly notify the author by replying to this e-mail or contacting us by telephone.

1 0

Re: [anti-abuse-wg] anti-abuse-wg Digest, Vol 67, Issue 5
by Volker Greimann 06 Jun '17

06 Jun '17

If you have an issue with how any particular ticket was handled, please send me the ticket reference (privately) and I will have a look. This name-calling and posing does nothing. Best, Volker Am 06.06.2017 um 17:04 schrieb Marilson: > On May 31, 2017 Volker wrote: > > stop accusing each other of criminal activity > > If you have evidence of criminal activities, report them to the > > appropriate authorities. > On Jun 4, 2017 I answered: > >> talk to your colleague Ralf Ramm of your KS teamabuse about our > message exchange from 14 to 28-08-2015. It's a small example of how > the bad ISPs act. See the proof of the crime and see the falsehood and > complicity of your teamabuse. > On Jun 6, 2017 1:37 PM Volker wrote: > >>> Can we remove this person from the list or at least > >>> revoke posting rights? > >>> Let's not feed the troll any more and return this list > >>> to its original function. > Hey Volker, we're not in the Middle Ages ... I guess. Instead ask to > shut up my mouth you should explain the acts of your KS team abuse, > after all my accusations are false, are not they? Why so much fear? > Marilson > *From:* anti-abuse-wg-request(a)ripe.net > <mailto:anti-abuse-wg-request@ripe.net> > *Sent:* Tuesday, June 06, 2017 8:37 AM > *To:* anti-abuse-wg(a)ripe.net <mailto:anti-abuse-wg@ripe.net> > *Subject:* anti-abuse-wg Digest, Vol 67, Issue 5 > Send anti-abuse-wg mailing list submissions to > anti-abuse-wg(a)ripe.net > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.ripe.net/mailman/listinfo/anti-abuse-wg > or, via email, send a message with subject or body 'help' to > anti-abuse-wg-request(a)ripe.net > > You can reach the person managing the list at > anti-abuse-wg-owner(a)ripe.net > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of anti-abuse-wg digest..." > > > Today's Topics: > > 1. Re: fake abuse lists (Marilson) > 2. Re: fake abuse lists (Volker Greimann) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sun, 4 Jun 2017 05:08:21 -0300 > From: "Marilson" <marilson.mapa(a)gmail.com> > To: "Esa Laitinen" <esa(a)laitinen.org> > Subject: Re: [anti-abuse-wg] fake abuse lists > Message-ID: <5301B998D85649778CA58552794F2AB4@xPC> > Content-Type: text/plain; charset="utf-8" > > Hi Esa, > > Thank you for your consideration. If there is a people with authority > to give moral lesson is the Finnish. A nation that respects ethnic > diversity and is descended from more than 120 nationalities. One day I > will attend the opera festival in the medieval castle surrounded by > the blue waters of the Saimaa. > > Let me question some of your concepts. > > > you don't call people nazi unless they have been convicted. > Specially not somebody in Germany. Neither do you call them criminal > unless convicted. > > I accessed the Finland newspapers (highly prized press freedom) and > they called that person who allegedly detonated a bomb in Manchester, > a terrorist. Has he been convicted? > Using your words I would say that people should not act like a Nazi, > especially not somebody in Germany. > People are condemned for their acts not because they are criminal or > because of their convictions or ideologies. Thankfully we have the > guarantee of the Law of being what we want, including of being a Nazi. > > > I don't understand what your goal when you use this kind of > language. Are you trying to change something to a positive direction, > or are you just letting pressure out? If former, you're failing. > > Why do you think I'm failing? Everything is running exactly as I > planned. Thanks to you, Andre, Brian, Jeffrey, Volker. My goal is to > expose a ISP owner to their colleagues inside a community that, like > other communities or categories or professions, they act in the > defense of their members, corporatism, in a flagrant false ethics. > When you have to deal with this false ethics and with people who use > crystal balls to form knowledge and prejudge, the strategy is to > provoke such people's reaction. > > Anyway, thanks > Marilson > > From: Esa Laitinen > Sent: Monday, May 29, 2017 9:59 AM > To: Marilson > Subject: Re: [anti-abuse-wg] fake abuse lists > > Hi, Marilson > > the language you use is not what will bring anything forward. You just > ruin whatever respect you had from others. > > you don't call people nazi unless they have been convicted. Specially > not somebody in Germany. Neither do you call them criminal unless > convicted. > > I don't understand what your goal when you use this kind of language. > Are you trying to change something to a positive direction, or are you > just letting pressure out? If former, you're failing. The people you > convince that kind of language are not the ones that can change something. > > In any case, the moderator told to pipe it down. I hope you do. > > yours, > > esa > > On Mon, May 29, 2017 at 2:16 PM Marilson <marilson.mapa(a)gmail.com> wrote: > > On May 28 Andre wrote: > > I am not a criminal and not a criminal company. So, I do > > not have criminal competitors. > > Although this phrase is beyond my capacity for understanding, I > think I should greet you for not fearing unfair competition. > > > Just on a side note, my opinion is that you calling Martin Hetzner a > > Nazi (and a sociopath) is not acceptable behavior. > > > I'll explain to you what is not acceptable behavior: > 1- It is you being customer of a provider owner with a professional > life history worthy of an arrogant sociopath with the attitudes of a > Nazi despot - reread the curriculum I related. > 2- It is you acting like some Afrikaners who defended the principles > of the National Socialist Party - read Nazism - that gave support to > the maintenance of apartheid in your homeland. Heil Hetzner! > 3- It is an ISP owner refusing to suspend a reported customer > numerous times, for 18 months, with evidence of the practice of crime. > 4- It is an ISP owner to allow a victim of his client to spend 18 > months denouncing the same scam, the same scammer. > > > It is hate speech in itself and disrespectful to civil society. > > A hate speech: If I lived in Germany I would have sued this tramp. > >From where I am I can only insult and report him to the world. > Disrespect to civil society are his relationships with sociopath > despots like Putin, are his attacks on freedom of the press, are his > pursuits those who fight spammers and give support for reported criminals. > Disrespect to civil society it is to defend and hire the services of > people who should be arrested. > > Heil Coetzee! > Marilson > > > From: ox > Sent: Sunday, May 28, 2017 2:21 AM > To: Marilson > Cc: anti-abuse-wg(a)ripe.net > Subject: Re: [anti-abuse-wg] fake abuse lists > On Sat, 27 May 2017 21:26:42 -0300 > "Marilson" <marilson.mapa(a)gmail.com> wrote: > > > > If you continue to call your competitors from criminal companies > > someone will call you Pot. :) > > > No, firstly, there is no competition between lists... All lists have > different data and sometimes different priorities and focus. (Did you > see the SORBS lists 30 days, recent, all time - this has time focus - > some lists adds weight for RIR, some lists focus on actual syndicates, > some on actual bot tech, some aggregate bots & syndicates - for > example - on your one IP number you may be hosting 900 domains and > only one of those belong to a crime syndicate sending spear or to a > child pornographer. - if you are on that list - find your criminal - > and get rid of them... > some lists are rolled by hand, dedicated and with zero (or next to > zero) false positives. some lists randomly list ip numbers, etc. > > a list is a list and the quality of a list depends on the > maintenance thereof and > the value it ads to society. This value is sometimes displayed in the > 'score' or numerical weight attached to programs similar to spamassassin > assigned to a list by independent users. > > Secondly, I am not a criminal and not a criminal company. So, I do > not have criminal competitors. > > Lastly, if there is a list that is listing other lists for no reason > and also lists > honeynets (traps) and victims - the advantage for doing that is only to > criminal enterprise. > > Just on a side note, my opinion is that you calling Martin Hetzner a > Nazi (and a sociopath) is not acceptable behavior. > > It is hate speech in itself and disrespectful to civil society. > > Andre > > > > > > > > >

1 0

Marilson
by Reza Farzan 06 Jun '17

06 Jun '17

Hello Everyone, For everyone's sake, please remove and ban "Marilson" from this list, as he has used this forum to attack everyone and write meaningless and inappropriate messages. Thank you, Reza Farzan

7 6

Re: [anti-abuse-wg] Recent List Discussion
by Marilson 06 Jun '17

06 Jun '17

Responding at Co-Chair's request. Tobias Knecht, CEO of Abusix GmbH and Co-Chair of aa-wg-ripe, you are an expert on abuse protection. Please tell me how can I transform my "abuse CP" into a real protection against your protecting customer? Do not need to answer. I'm just establishing a connection between your company that sells anti-abuse to Providers and a group that discusses abuse. Establishing a connection between aa-wg-ripe and a company that has its businesses dependent on Providers. Tell me, Mr. Tobias, considering that there are bad ISPs who abuse the population, that there are bad ISPs who seek protection for illicit activities, that the bad ISPs will be armored by your company against the victims, you do not consider your position uncomfortable and inadequate in this group? This answer, if possible, would like to receive. Brian wrote: > You have made several utterly unfounded accusations about me and other > list members in the mail below. In your opinion! > I don't know who the customers are that > you keep referring to, This clash began when Andre claimed to be Hetzner's client. The name Hetzner and Martin Hetzner was constantly quoted in the exchange of messages. If you have not read these messages why are you accusing me of ad hominem attacks? Dude, you do not even know how to lie. You have a false speech but you are unable to hide your real intentions. > but it isn't productive to anyone to continue to > have these conversations. If it isn't productive to anyone to continue why you insist on sending repeated messages? Do you want to have the final say? Are you a censor or moderator? > but also the list needs to be a useful resource and > discussion place for the community. Wrong. Absolutely wrong. The community you are referring to are RIPE customers. They do not need this group. They have support and protection from companies such as aa-wg co-chair Abusix.com. RIPE, as a company, has social responsibility with society. It is the duty of the company to reduce the negative impacts of its activity in the community. Negative impacts generated not only by those who use their customers for illicit practices as by their bad customers. It is not about philanthropy but about an improvement in dealing with the community and responsible growth. Just as it is the duty of the company to promote the diffusion of human values such as ethics - honesty and integrity. Do you understand this language? So this group could never refuse to discuss the criminal actions of the bad Providers. This group should discuss ways to combat these actions and not invent false reasons to protect their peers. This unethical corporatism is predatory and dehumanized. The action of a bad Provider who practices spam and scam or who protects spammers and scammers is no different from the corrupt police officer who uses his authority to extort money from people. The difference is that the Provider does it on a much larger scale. Rebury Milton Friedman and adopt the "triple bottom line". In short, be decent. > So, if you will not respect other > members of the community then we will take action and remove you > from the list. SIR, YES SIR! You're wanting me to respect companies or people who have not respected me. People who acted, for months, with excess of mockery, excess of arrogance, excess of abuse and were accomplices of criminals. This infamous procedure does not suit me. I do not have cockroach blood in my veins and I do not share your morals. > Please let me know your thoughts and whether you are willing to > engage in discussion without baseless accusations and ad hominem > attacks in the future. Please?? My thoughts?? If you could read my thoughts you would hire private security. Baseless?!? You're a joke. You lie too much. I challenge you to ask me to post, to the list, the baseless accusations. Marilson From: Brian Nisbet Sent: Thursday, June 01, 2017 10:57 AM To: Marilson Cc: tk(a)abusix.com Subject: Re: Recent List Discussion Marilson, I'm writing this to you off-list, but I'm doing so with the presumption that you will reply to the list. That is, of course, your right. You have made several utterly unfounded accusations about me and other list members in the mail below. I don't know who the customers are that you keep referring to, but it isn't productive to anyone to continue to have these conversations. As I have said repeatedly before I do not wish to ban anyone from the AA-WG mailing list, but also the list needs to be a useful resource and discussion place for the community. So, if you will not respect other members of the community then we will take action and remove you from the list. Please let me know your thoughts and whether you are willing to engage in discussion without baseless accusations and ad hominem attacks in the future. Brian Co-Chair, RIPE Anti-Abuse WG Marilson wrote on 31/05/2017 03:12: > Brian, > > Please read this very carefully. There is no place on the World for > people like you and your criminal partners, ISP owner. > This is a list to discuss how to protect network abuse. > > Please consider your contributions to the list very carefully. You are > not acting in the spirit of the Europe community nor are you providing > useful content for good people, for honest people. Neither you nor the > other members of the Pro-Abuse Working Group of R.O.T.T.E.N., ex-RIPE, > with rare exceptions. > > I do not wish to have to take further action, ahhh I want to, and this > email should be taken as a warning that if you continue to act as you > have done until today, that action will be taken. You will have to > explain why you are scandalized by words like bullshit - Nazi - > criminal, but tolerate Nazi and criminal behavior of customer. Oh yeah, > you're not police and customer behavior is not your responsibility, > right? Nor reporting crimes is your responsibility, right? Your > arguments do not hold. In the face of the gravity of the acts, your > arguments are a joke. > > Surely that will not result in short term moderation of your behavior, > but, regrettably, if necessary I will have to look at further steps such > as to show that your anti-abuse is a joke of bad taste. > > Now, prove that you also do not tolerate the contradictory banning me. > :))))) > > Marilson > > *From:* Brian Nisbet <mailto:brian.nisbet@heanet.ie> > *Sent:* Monday, May 29, 2017 10:26 AM > *To:* Marilson <mailto:marilson.mapa@gmail.com> > *Cc:* Tobias Knecht <mailto:tk@abusix.com> > *Subject:* Recent List Discussion > > Marilson, > > As I said on list and I have said before there is no place on the > mailing list for ad hominem attacks, personal insults or accusations > (really of any sort). This is a list to discuss how to deal with network > abuse. It is not here for you to act in the way you have acted today. > > Please consider your contributions to the list very carefully. You are > not acting in the spirit of the RIPE community nor are you providing > useful content for the other members of the Anti-Abuse Working Group. > > I do not wish to have to take further action, but this email should be > taken as a warning that if your posts continue to have the content they > had today, that action will be taken. At the very least that will result > in short term moderation of your posts, but, regrettably, if necessary > we will have to look at further steps such as removal from the list. > > Brian > Co-Chair, RIPE Anti-Abuse WG >

2 1

Re: [anti-abuse-wg] fake abuse lists
by Marilson 06 Jun '17

06 Jun '17

Hi Esa, Thank you for your consideration. If there is a people with authority to give moral lesson is the Finnish. A nation that respects ethnic diversity and is descended from more than 120 nationalities. One day I will attend the opera festival in the medieval castle surrounded by the blue waters of the Saimaa. Let me question some of your concepts. > you don't call people nazi unless they have been convicted. Specially not somebody in Germany. Neither do you call them criminal unless convicted. I accessed the Finland newspapers (highly prized press freedom) and they called that person who allegedly detonated a bomb in Manchester, a terrorist. Has he been convicted? Using your words I would say that people should not act like a Nazi, especially not somebody in Germany. People are condemned for their acts not because they are criminal or because of their convictions or ideologies. Thankfully we have the guarantee of the Law of being what we want, including of being a Nazi. > I don't understand what your goal when you use this kind of language. Are you trying to change something to a positive direction, or are you just letting pressure out? If former, you're failing. Why do you think I'm failing? Everything is running exactly as I planned. Thanks to you, Andre, Brian, Jeffrey, Volker. My goal is to expose a ISP owner to their colleagues inside a community that, like other communities or categories or professions, they act in the defense of their members, corporatism, in a flagrant false ethics. When you have to deal with this false ethics and with people who use crystal balls to form knowledge and prejudge, the strategy is to provoke such people's reaction. Anyway, thanks Marilson From: Esa Laitinen Sent: Monday, May 29, 2017 9:59 AM To: Marilson Subject: Re: [anti-abuse-wg] fake abuse lists Hi, Marilson the language you use is not what will bring anything forward. You just ruin whatever respect you had from others. you don't call people nazi unless they have been convicted. Specially not somebody in Germany. Neither do you call them criminal unless convicted. I don't understand what your goal when you use this kind of language. Are you trying to change something to a positive direction, or are you just letting pressure out? If former, you're failing. The people you convince that kind of language are not the ones that can change something. In any case, the moderator told to pipe it down. I hope you do. yours, esa On Mon, May 29, 2017 at 2:16 PM Marilson <marilson.mapa(a)gmail.com> wrote: On May 28 Andre wrote: > I am not a criminal and not a criminal company. So, I do > not have criminal competitors. Although this phrase is beyond my capacity for understanding, I think I should greet you for not fearing unfair competition. > Just on a side note, my opinion is that you calling Martin Hetzner a > Nazi (and a sociopath) is not acceptable behavior. I'll explain to you what is not acceptable behavior: 1- It is you being customer of a provider owner with a professional life history worthy of an arrogant sociopath with the attitudes of a Nazi despot - reread the curriculum I related. 2- It is you acting like some Afrikaners who defended the principles of the National Socialist Party - read Nazism - that gave support to the maintenance of apartheid in your homeland. Heil Hetzner! 3- It is an ISP owner refusing to suspend a reported customer numerous times, for 18 months, with evidence of the practice of crime. 4- It is an ISP owner to allow a victim of his client to spend 18 months denouncing the same scam, the same scammer. > It is hate speech in itself and disrespectful to civil society. A hate speech: If I lived in Germany I would have sued this tramp. >From where I am I can only insult and report him to the world. Disrespect to civil society are his relationships with sociopath despots like Putin, are his attacks on freedom of the press, are his pursuits those who fight spammers and give support for reported criminals. Disrespect to civil society it is to defend and hire the services of people who should be arrested. Heil Coetzee! Marilson From: ox Sent: Sunday, May 28, 2017 2:21 AM To: Marilson Cc: anti-abuse-wg(a)ripe.net Subject: Re: [anti-abuse-wg] fake abuse lists On Sat, 27 May 2017 21:26:42 -0300 "Marilson" <marilson.mapa(a)gmail.com> wrote: > > If you continue to call your competitors from criminal companies > someone will call you Pot. :) > No, firstly, there is no competition between lists... All lists have different data and sometimes different priorities and focus. (Did you see the SORBS lists 30 days, recent, all time - this has time focus - some lists adds weight for RIR, some lists focus on actual syndicates, some on actual bot tech, some aggregate bots & syndicates - for example - on your one IP number you may be hosting 900 domains and only one of those belong to a crime syndicate sending spear or to a child pornographer. - if you are on that list - find your criminal - and get rid of them... some lists are rolled by hand, dedicated and with zero (or next to zero) false positives. some lists randomly list ip numbers, etc. a list is a list and the quality of a list depends on the maintenance thereof and the value it ads to society. This value is sometimes displayed in the 'score' or numerical weight attached to programs similar to spamassassin assigned to a list by independent users. Secondly, I am not a criminal and not a criminal company. So, I do not have criminal competitors. Lastly, if there is a list that is listing other lists for no reason and also lists honeynets (traps) and victims - the advantage for doing that is only to criminal enterprise. Just on a side note, my opinion is that you calling Martin Hetzner a Nazi (and a sociopath) is not acceptable behavior. It is hate speech in itself and disrespectful to civil society. Andre

2 1

AS34991 -- hijacked
by Ronald F. Guilmette 06 Jun '17

06 Jun '17

Is there any chance that any of you might be persuaded to have a word or two with either or both of the upstreams for AS34991, specifically with respect to the fact that that whole and entire AS has quite obviously been hijacked, and that it is currently being used and abused to announce a total of 20 completely and transparently bogus routes into various bits of IPv4 space that are allocated to various parties within the nation of Columbia, including but not limited to the National University thereof? I have already attempted to make contact with both upstreams in this case with no success and no reply so far, perhaps because I am not a european, or perhaps because I myself am not a network operator, or perhaps because I do not speak (or write) bulgarian. Below is a listing of the currently hijacked routes. Please note that the hijacker in this case quite obviously planned this all, quite carefully, and in advance of the actual hijackings, and he tried (and succeded!) to effectively legitimize all of these bogus route announcement via the simple and easy ruse of also pre-creating a set of matching, and equally bogus route objects within the RIPE data base. (As I learned the last time a case like this came up, the RIPE community, in its infinite wisdom, had made it so easy to create such route objects in the data base, with no authority or authorization whatsoever, that any baboon with a keyboard and a pulse may easily do so.) Of course, as the more observant among you may note, the domain name used for the contact email address for AS34991 has recently been re-registered, presumably after having lapsed. This indicates rather clearly, I think, that it is not merely the IPv4 blocks listed below that have been and are being hijacked, but also the AS34991 ASN itself. covfefe P.S. For the record, yes, some of the hijacked blocks in this case have already been sub-leased out to snowshoe spammers, and are being actively used for snowshoe spamming as we speak. ===================================================================== 152.204.132.0/24 -- Columbia 152.204.133.0/24 -- Columbia 152.231.25.0/24 -- Columbia 152.231.28.0/24 -- Columbia 168.176.187.0/24 -- Columbia, National University of 168.176.192.0/24 -- Columbia, National University of 168.176.194.0/24 -- Columbia, National University of 168.176.218.0/24 -- Columbia, National University of 168.176.219.0/24 -- Columbia, National University of 179.1.71.0/24 -- Columbia 181.57.40.0/24 -- Columbia 186.113.13.0/24 -- Columbia 186.113.15.0/24 -- Columbia 186.147.230.0/24 -- Columbia 190.90.31.0/24 -- Columbia 190.90.88.0/24 -- Columbia 200.1.65.0/24 -- Columbia 200.14.44.0/24 -- Columbia 200.24.3.0/24 -- Columbia 200.24.5.0/24 -- Columbia

1 0

Re: [anti-abuse-wg] Your message to anti-abuse-wg awaits moderator approval
by Marilson 05 Jun '17

05 Jun '17

Since I did not receive notification of the censor's decision ... Implicit target has the RIPE. Objective veiled. Hidden aims not reportable. Until Censor the RIPE has. My goal is crystal clear. It is to make everyone transparent as crystals. Marilson From: anti-abuse-wg-owner(a)ripe.net Sent: Sunday, June 04, 2017 5:08 AM To: marilson.mapa(a)gmail.com Subject: Your message to anti-abuse-wg awaits moderator approval Your mail to 'anti-abuse-wg' with the subject Re: [anti-abuse-wg] fake abuse lists Is being held until the list moderator can review it for approval. The reason it is being held: Message has implicit destination Either the message will get posted to the list, or you will receive notification of the moderator's decision. If you would like to cancel this posting, please visit the following URL: https://lists.ripe.net/mailman/confirm/anti-abuse-wg/2485e1bcdf4336d111b1c9…

1 0

Re: [anti-abuse-wg] anti-abuse-wg Digest, Vol 67, Issue 2
by Marilson 05 Jun '17

05 Jun '17

I am impressed and flattered by how you react to the truth. How this bothers all of you and try to turn this type of problem into a case of using inappropriate words. Again you are reacting, or rather retaliating in the presentation of my texts. Look at the various texts on this page. Those that are not mine are with the paragraphs properly separated. Mine are without separation. A purposeful attitude to harm. It's not my native language and with that presentation it gets worse. That's nice. Decide against yourself by making clear what the position of this RIR and this anti-abuse list is. So children, are you rage? Take a little jump until France. The Pasteur Institute has a vaccine. I'm wrong? Well, post again my message ... Marilson From: anti-abuse-wg-request(a)ripe.net Sent: Sunday, June 04, 2017 7:00 AM To: anti-abuse-wg(a)ripe.net Subject: anti-abuse-wg Digest, Vol 67, Issue 2 Send anti-abuse-wg mailing list submissions to anti-abuse-wg(a)ripe.net To subscribe or unsubscribe via the World Wide Web, visit https://lists.ripe.net/mailman/listinfo/anti-abuse-wg or, via email, send a message with subject or body 'help' to anti-abuse-wg-request(a)ripe.net You can reach the person managing the list at anti-abuse-wg-owner(a)ripe.net When replying, please edit your Subject line so it is more specific than "Re: Contents of anti-abuse-wg digest..." Today's Topics: 1. Re: Recent List Discussion (Marilson) ---------------------------------------------------------------------- Message: 1 Date: Sun, 4 Jun 2017 05:07:22 -0300 From: "Marilson" <marilson.mapa(a)gmail.com> To: <vgreimann(a)key-systems.net> Cc: anti-abuse-wg(a)ripe.net Subject: Re: [anti-abuse-wg] Recent List Discussion Message-ID: <A429A536390344718B8EA173901C67D4@xPC> Content-Type: text/plain; charset="utf-8" Volker wrote: > Can we tone down the rhetoric and stop accusing each other of criminal > activity (which in itself may be libel and therefore a criminal act). Volker, do as the others do, use a crystal ball instead of trying to guess - "maybe" "if" or, talk to your colleague Ralf Ramm of your KS teamabuse about our message exchange from 14 to 28-08-2015. It's a small example of how the bad ISPs act. See the proof of the crime and see the falsehood and complicity of your teamabuse. And stop guessing or someone can call you an accomplice. > If you have evidence of criminal activities, report them to the > appropriate authorities. I did that. I forwarded a dossier to DIG-DEIC - 4th Precinct - Crimes practiced by Electronic Media - 4dp.dig.deic(a)policiacivil.sp.gov.br reporting misrepresentation, swindle and criminal conspiracy. With evidence. Read again! WITH EVIDENCE. The scammer was born and lives in Brazil. But his accomplice, owner of Hetzner.de, was born and lives in Germany. This one is out of reach. Access the authorities of other countries and see what is the guidance for non-native denouncer. And stop talking nonsense. > Criminals will be convicted. If there is no > conviction, there probably is no crime but only hyperbole. Mamma mia! You've distorted everything. For there to be conviction there must be a crime. If there is no crime, probably there is no conviction. Can a native help us about the word conviction? Hyperbole? Exaggerated statements? For 18 months, 18 MONTHS, I reported a same criminal customer to YOUR COLLEAGUE, with evidence. For each complaint the teamabuse of YOUR COLLEAGUE replied that the IP was suspended. And in the next day the customer of YOUR COLLEAGUE was sending scam with a new IP. I denounced a client by name, Marcos Antonio Hora da Silva, and YOUR COLLEAGUE suspended an IP as if an IP could commit a crime. It is a lot of disrespect, excess of mockery, excess of arrogance, excess of abuse that need to be punished. And the possible punishment is to properly qualify them using the adjectives that best explain their actions. And mass dissemination to the whole world. Hyperbole?! Marilson From: anti-abuse-wg-request(a)ripe.net Sent: Thursday, June 01, 2017 7:00 AM To: anti-abuse-wg(a)ripe.net Subject: anti-abuse-wg Digest, Vol 67, Issue 1 Send anti-abuse-wg mailing list submissions to anti-abuse-wg(a)ripe.net To subscribe or unsubscribe via the World Wide Web, visit https://lists.ripe.net/mailman/listinfo/anti-abuse-wg or, via email, send a message with subject or body 'help' to anti-abuse-wg-request(a)ripe.net You can reach the person managing the list at anti-abuse-wg-owner(a)ripe.net When replying, please edit your Subject line so it is more specific than "Re: Contents of anti-abuse-wg digest..." Today's Topics: 1. Re: Recent List Discussion (Volker Greimann) ---------------------------------------------------------------------- Message: 1 Date: Wed, 31 May 2017 12:50:03 +0200 From: Volker Greimann <vgreimann(a)key-systems.net> To: anti-abuse-wg(a)ripe.net Subject: Re: [anti-abuse-wg] Recent List Discussion Message-ID: <940b1104-a1cb-4672-bb8b-b96d649357c1(a)key-systems.net> Content-Type: text/plain; charset="utf-8"; Format="flowed" Can we tone down the rhetoric and stop accusing each other of criminal activity (which in itself may be libel and therefore a criminal act). If you have evidence of criminal activities, report them to the appropriate authorities. Criminals will be convicted. If there is no conviction, there probably is no crime but only hyperbole. This has gone far enough. Best, Volker Am 31.05.2017 um 03:12 schrieb Marilson: > Brian, > Please read this very carefully. There is no place on the World for > people like you and your criminal partners, ISP owner. > This is a list to discuss how to protect network abuse. > Please consider your contributions to the list very carefully. You are > not acting in the spirit of the Europe community nor are you providing > useful content for good people, for honest people. Neither you nor the > other members of the Pro-Abuse Working Group of R.O.T.T.E.N., ex-RIPE, > with rare exceptions. > I do not wish to have to take further action, ahhh I want to, and this > email should be taken as a warning that if you continue to act as you > have done until today, that action will be taken. You will have to > explain why you are scandalized by words like bullshit - Nazi - > criminal, but tolerate Nazi and criminal behavior of customer. Oh > yeah, you're not police and customer behavior is not your > responsibility, right? Nor reporting crimes is your responsibility, > right? Your arguments do not hold. In the face of the gravity of the > acts, your arguments are a joke. > Surely that will not result in short term moderation of your behavior, > but, regrettably, if necessary I will have to look at further steps > such as to show that your anti-abuse is a joke of bad taste. > Now, prove that you also do not tolerate the contradictory banning me. > :))))) > Marilson > *From:* Brian Nisbet <mailto:brian.nisbet@heanet.ie> > *Sent:* Monday, May 29, 2017 10:26 AM > *To:* Marilson <mailto:marilson.mapa@gmail.com> > *Cc:* Tobias Knecht <mailto:tk@abusix.com> > *Subject:* Recent List Discussion > Marilson, > > As I said on list and I have said before there is no place on the > mailing list for ad hominem attacks, personal insults or accusations > (really of any sort). This is a list to discuss how to deal with network > abuse. It is not here for you to act in the way you have acted today. > > Please consider your contributions to the list very carefully. You are > not acting in the spirit of the RIPE community nor are you providing > useful content for the other members of the Anti-Abuse Working Group. > > I do not wish to have to take further action, but this email should be > taken as a warning that if your posts continue to have the content they > had today, that action will be taken. At the very least that will result > in short term moderation of your posts, but, regrettably, if necessary > we will have to look at further steps such as removal from the list. > > Brian > Co-Chair, RIPE Anti-Abuse WG > -- Bei weiteren Fragen stehen wir Ihnen gerne zur Verf?gung. Mit freundlichen Gr??en, Volker A. Greimann - Rechtsabteilung - Key-Systems GmbH Im Oberen Werk 1 66386 St. Ingbert Tel.: +49 (0) 6894 - 9396 901 Fax.: +49 (0) 6894 - 9396 851 Email: vgreimann(a)key-systems.net Web: www.key-systems.net / www.RRPproxy.net www.domaindiscount24.com / www.BrandShelter.com Folgen Sie uns bei Twitter oder werden Sie unser Fan bei Facebook: www.facebook.com/KeySystems www.twitter.com/key_systems Gesch?ftsf?hrer: Alexander Siffrin Handelsregister Nr.: HR B 18835 - Saarbruecken Umsatzsteuer ID.: DE211006534 Member of the KEYDRIVE GROUP www.keydrive.lu Der Inhalt dieser Nachricht ist vertraulich und nur f?r den angegebenen Empf?nger bestimmt. Jede Form der Kenntnisgabe, Ver?ffentlichung oder Weitergabe an Dritte durch den Empf?nger ist unzul?ssig. Sollte diese Nachricht nicht f?r Sie bestimmt sein, so bitten wir Sie, sich mit uns per E-Mail oder telefonisch in Verbindung zu setzen. -------------------------------------------- Should you have any further questions, please do not hesitate to contact us. Best regards, Volker A. Greimann - legal department - Key-Systems GmbH Im Oberen Werk 1 66386 St. Ingbert Tel.: +49 (0) 6894 - 9396 901 Fax.: +49 (0) 6894 - 9396 851 Email: vgreimann(a)key-systems.net Web: www.key-systems.net / www.RRPproxy.net www.domaindiscount24.com / www.BrandShelter.com Follow us on Twitter or join our fan community on Facebook and stay updated: www.facebook.com/KeySystems www.twitter.com/key_systems CEO: Alexander Siffrin Registration No.: HR B 18835 - Saarbruecken V.A.T. ID.: DE211006534 Member of the KEYDRIVE GROUP www.keydrive.lu This e-mail and its attachments is intended only for the person to whom it is addressed. Furthermore it is not permitted to publish any content of this email. You must not use, disclose, copy, print or rely on this e-mail. If an addressing or transmission error has misdirected this e-mail, kindly notify the author by replying to this e-mail or contacting us by telephone.

1 0

Re: [anti-abuse-wg] Recent List Discussion
by Marilson 04 Jun '17

04 Jun '17

Volker wrote: > Can we tone down the rhetoric and stop accusing each other of criminal > activity (which in itself may be libel and therefore a criminal act). Volker, do as the others do, use a crystal ball instead of trying to guess - "maybe" "if" or, talk to your colleague Ralf Ramm of your KS teamabuse about our message exchange from 14 to 28-08-2015. It's a small example of how the bad ISPs act. See the proof of the crime and see the falsehood and complicity of your teamabuse. And stop guessing or someone can call you an accomplice. > If you have evidence of criminal activities, report them to the > appropriate authorities. I did that. I forwarded a dossier to DIG-DEIC - 4th Precinct - Crimes practiced by Electronic Media - 4dp.dig.deic(a)policiacivil.sp.gov.br reporting misrepresentation, swindle and criminal conspiracy. With evidence. Read again! WITH EVIDENCE. The scammer was born and lives in Brazil. But his accomplice, owner of Hetzner.de, was born and lives in Germany. This one is out of reach. Access the authorities of other countries and see what is the guidance for non-native denouncer. And stop talking nonsense. > Criminals will be convicted. If there is no > conviction, there probably is no crime but only hyperbole. Mamma mia! You've distorted everything. For there to be conviction there must be a crime. If there is no crime, probably there is no conviction. Can a native help us about the word conviction? Hyperbole? Exaggerated statements? For 18 months, 18 MONTHS, I reported a same criminal customer to YOUR COLLEAGUE, with evidence. For each complaint the teamabuse of YOUR COLLEAGUE replied that the IP was suspended. And in the next day the customer of YOUR COLLEAGUE was sending scam with a new IP. I denounced a client by name, Marcos Antonio Hora da Silva, and YOUR COLLEAGUE suspended an IP as if an IP could commit a crime. It is a lot of disrespect, excess of mockery, excess of arrogance, excess of abuse that need to be punished. And the possible punishment is to properly qualify them using the adjectives that best explain their actions. And mass dissemination to the whole world. Hyperbole?! Marilson From: anti-abuse-wg-request(a)ripe.net Sent: Thursday, June 01, 2017 7:00 AM To: anti-abuse-wg(a)ripe.net Subject: anti-abuse-wg Digest, Vol 67, Issue 1 Send anti-abuse-wg mailing list submissions to anti-abuse-wg(a)ripe.net To subscribe or unsubscribe via the World Wide Web, visit https://lists.ripe.net/mailman/listinfo/anti-abuse-wg or, via email, send a message with subject or body 'help' to anti-abuse-wg-request(a)ripe.net You can reach the person managing the list at anti-abuse-wg-owner(a)ripe.net When replying, please edit your Subject line so it is more specific than "Re: Contents of anti-abuse-wg digest..." Today's Topics: 1. Re: Recent List Discussion (Volker Greimann) ---------------------------------------------------------------------- Message: 1 Date: Wed, 31 May 2017 12:50:03 +0200 From: Volker Greimann <vgreimann(a)key-systems.net> To: anti-abuse-wg(a)ripe.net Subject: Re: [anti-abuse-wg] Recent List Discussion Message-ID: <940b1104-a1cb-4672-bb8b-b96d649357c1(a)key-systems.net> Content-Type: text/plain; charset="utf-8"; Format="flowed" Can we tone down the rhetoric and stop accusing each other of criminal activity (which in itself may be libel and therefore a criminal act). If you have evidence of criminal activities, report them to the appropriate authorities. Criminals will be convicted. If there is no conviction, there probably is no crime but only hyperbole. This has gone far enough. Best, Volker Am 31.05.2017 um 03:12 schrieb Marilson: > Brian, > Please read this very carefully. There is no place on the World for > people like you and your criminal partners, ISP owner. > This is a list to discuss how to protect network abuse. > Please consider your contributions to the list very carefully. You are > not acting in the spirit of the Europe community nor are you providing > useful content for good people, for honest people. Neither you nor the > other members of the Pro-Abuse Working Group of R.O.T.T.E.N., ex-RIPE, > with rare exceptions. > I do not wish to have to take further action, ahhh I want to, and this > email should be taken as a warning that if you continue to act as you > have done until today, that action will be taken. You will have to > explain why you are scandalized by words like bullshit - Nazi - > criminal, but tolerate Nazi and criminal behavior of customer. Oh > yeah, you're not police and customer behavior is not your > responsibility, right? Nor reporting crimes is your responsibility, > right? Your arguments do not hold. In the face of the gravity of the > acts, your arguments are a joke. > Surely that will not result in short term moderation of your behavior, > but, regrettably, if necessary I will have to look at further steps > such as to show that your anti-abuse is a joke of bad taste. > Now, prove that you also do not tolerate the contradictory banning me. > :))))) > Marilson > *From:* Brian Nisbet <mailto:brian.nisbet@heanet.ie> > *Sent:* Monday, May 29, 2017 10:26 AM > *To:* Marilson <mailto:marilson.mapa@gmail.com> > *Cc:* Tobias Knecht <mailto:tk@abusix.com> > *Subject:* Recent List Discussion > Marilson, > > As I said on list and I have said before there is no place on the > mailing list for ad hominem attacks, personal insults or accusations > (really of any sort). This is a list to discuss how to deal with network > abuse. It is not here for you to act in the way you have acted today. > > Please consider your contributions to the list very carefully. You are > not acting in the spirit of the RIPE community nor are you providing > useful content for the other members of the Anti-Abuse Working Group. > > I do not wish to have to take further action, but this email should be > taken as a warning that if your posts continue to have the content they > had today, that action will be taken. At the very least that will result > in short term moderation of your posts, but, regrettably, if necessary > we will have to look at further steps such as removal from the list. > > Brian > Co-Chair, RIPE Anti-Abuse WG > -- Bei weiteren Fragen stehen wir Ihnen gerne zur Verf?gung. Mit freundlichen Gr??en, Volker A. Greimann - Rechtsabteilung - Key-Systems GmbH Im Oberen Werk 1 66386 St. Ingbert Tel.: +49 (0) 6894 - 9396 901 Fax.: +49 (0) 6894 - 9396 851 Email: vgreimann(a)key-systems.net Web: www.key-systems.net / www.RRPproxy.net www.domaindiscount24.com / www.BrandShelter.com Folgen Sie uns bei Twitter oder werden Sie unser Fan bei Facebook: www.facebook.com/KeySystems www.twitter.com/key_systems Gesch?ftsf?hrer: Alexander Siffrin Handelsregister Nr.: HR B 18835 - Saarbruecken Umsatzsteuer ID.: DE211006534 Member of the KEYDRIVE GROUP www.keydrive.lu Der Inhalt dieser Nachricht ist vertraulich und nur f?r den angegebenen Empf?nger bestimmt. Jede Form der Kenntnisgabe, Ver?ffentlichung oder Weitergabe an Dritte durch den Empf?nger ist unzul?ssig. Sollte diese Nachricht nicht f?r Sie bestimmt sein, so bitten wir Sie, sich mit uns per E-Mail oder telefonisch in Verbindung zu setzen. -------------------------------------------- Should you have any further questions, please do not hesitate to contact us. Best regards, Volker A. Greimann - legal department - Key-Systems GmbH Im Oberen Werk 1 66386 St. Ingbert Tel.: +49 (0) 6894 - 9396 901 Fax.: +49 (0) 6894 - 9396 851 Email: vgreimann(a)key-systems.net Web: www.key-systems.net / www.RRPproxy.net www.domaindiscount24.com / www.BrandShelter.com Follow us on Twitter or join our fan community on Facebook and stay updated: www.facebook.com/KeySystems www.twitter.com/key_systems CEO: Alexander Siffrin Registration No.: HR B 18835 - Saarbruecken V.A.T. ID.: DE211006534 Member of the KEYDRIVE GROUP www.keydrive.lu This e-mail and its attachments is intended only for the person to whom it is addressed. Furthermore it is not permitted to publish any content of this email. You must not use, disclose, copy, print or rely on this e-mail. If an addressing or transmission error has misdirected this e-mail, kindly notify the author by replying to this e-mail or contacting us by telephone.

1 0