August 2020 - anti-abuse-wg - mailman.ripe.net

New on RIPE Labs: DDoS Hide & Seek - On the Effectiveness of a Booter Services Takedown
by Mirjam Kuehne 25 Aug '20

25 Aug '20

Dear colleagues, In this article, the authors investigate booter-based DDoS attacks in the wild and the impact of an FBI takedown targeting fifteen booter websites: https://labs.ripe.net/Members/daniel_kopp/ddos-hide-and-seek Kind regards, Mirjam Kühne RIPE NCC

1 0

Re: [anti-abuse-wg] 2019-04 Review Phase (Validation of "abuse-mailbox") Reminder
by Michele Neylon - Blacknight 18 Aug '20

18 Aug '20

Brian Thanks for the reminder. I’m not sure if there’s anything to be gained in my repeating previous comments on this, but to summarise briefly: * We oppose policy forcing operators to use email only for handling abuse reports. If an operator’s processes and procedures require reporters to use a form then so be it. * We oppose increasing the costs to RIPE NCC due to the proposed policy change * We do not believe that tweaking the proposal again is of any value and we, therefore, believe that the proposal should be shelved Regards Michele -- Mr Michele Neylon Blacknight Solutions Hosting, Colocation & Domains https://www.blacknight.com https://blacknight.blog / http://ceo.hosting/ Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park, Sleaty Road, Graiguecullen, Carlow, R93 X265,Ireland Company No.: 370845 From: anti-abuse-wg <anti-abuse-wg-bounces(a)ripe.net> on behalf of Brian Nisbet <brian.nisbet(a)heanet.ie> Date: Monday 17 August 2020 at 09:42 To: "anti-abuse-wg(a)ripe.net" <anti-abuse-wg(a)ripe.net> Subject: [anti-abuse-wg] 2019-04 Review Phase (Validation of "abuse-mailbox") Reminder Folks, Just to remind you all, the current Review Phase is formally due to end tomorrow. If you haven't, then now is an excellent opportunity to look at Petrit's email from the 22nd of July and to read the Impact Analysis from the NCC and make any comments you wish to make. Thanks, Brian Co-Chair, RIPE AA-WG Brian Nisbet Service Operations Manager HEAnet CLG, Ireland's National Education and Research Network 1st Floor, 5 George's Dock, IFSC, Dublin D01 X8N7, Ireland +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

3 2

Re: [anti-abuse-wg] [address-policy-wg] New on RIPE Labs: IPv4 Transfer Markets Misuse: A First Look
by Randy Bush 17 Aug '20

17 Aug '20

> In this article Vasileios Giotsas summarises the results of a detailed > study of how transferred IPv4 prefixes are misused in the wild by > synthesising an array of longitudinal IP blacklists, honeypot data, and > AS reputation lists: > > https://labs.ripe.net/Members/vgiotsas/a-first-look-at-the-misuse-and-abuse… an interesting read, and looks to be a solid analysis. as a researcher, i like it a lot. as an operator, i am not sure what the heck we can do about it. randy

1 0

New on RIPE Labs: IPv4 Transfer Markets Misuse: A First Look
by Mirjam Kuehne 17 Aug '20

17 Aug '20

Dear colleagues, In this article Vasileios Giotsas summarises the results of a detailed study of how transferred IPv4 prefixes are misused in the wild by synthesising an array of longitudinal IP blacklists, honeypot data, and AS reputation lists: https://labs.ripe.net/Members/vgiotsas/a-first-look-at-the-misuse-and-abuse… This research was supported by the RIPE NCC Projects Fund. Kind regards, Mirjam Kühne RIPE NCC

1 0

2019-04 Review Phase (Validation of "abuse-mailbox") Reminder
by Brian Nisbet 17 Aug '20

17 Aug '20

Folks, Just to remind you all, the current Review Phase is formally due to end tomorrow. If you haven't, then now is an excellent opportunity to look at Petrit's email from the 22nd of July and to read the Impact Analysis from the NCC and make any comments you wish to make. Thanks, Brian Co-Chair, RIPE AA-WG Brian Nisbet Service Operations Manager HEAnet CLG, Ireland's National Education and Research Network 1st Floor, 5 George's Dock, IFSC, Dublin D01 X8N7, Ireland +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

1 0