March 2022 - anti-abuse-wg - mailman.ripe.net

UCEPROTECT DNSBL possibly abusive practice and RIPEStat Blacklist entries widget
by Kristijonas Lukas Bukauskas 19 May '22

19 May '22

Hello, I noticed that RIPE NCC uses uceprotect-level1, uceprotect-level2 and uceprotect-level3 in RIPEStat Anti Abuse Blacklist Entries widget. There have been controversial positions about this blacklist recently: 1) https://success.trendmicro.com/solution/000236583-Emails-being-rejected-by-… [1] 2) https://blog.sucuri.net/2021/02/uceprotect-when-rbls-go-bad.html [2] UCEPROTECT blacklists the whole range of IP addresses, including the full IP range of some autonomous systems: UCEPROTECT states, '_Who is responsible for this listing? YOU ARE NOT! Your IP was NOT directly involved in abuse but has a bad neighborhood. Other customers within this range did not care about their security and got hacked, started spamming, or were even attacking others, while your provider has possibly not even noticed that there is a serious problem. We are sorry for you, but you have chosen a provider not acting fast enough on abusers'_) [http://www.uceprotect.net/en/rblcheck.php [3]]. It asks for a fee if some individual IP address wants to be whitelisted (http://www.whitelisted.org/), It abuses people who decide to challenge their blacklist by publishing conversations in their so-called _Cart00ney_ (http://www.uceprotect.net/en/index.php?m=8&s=0 [4]; http://www.uceprotect.org/cart00neys/index.html [5]). And the other type of threatening: http://www.uceprotect.org/ Does RIPE NCC have any position on this specific blacklist? Thank you! Links: ------ [1] https://success.trendmicro.com/solution/000236583-Emails-being-rejected-by-… [2] https://blog.sucuri.net/2021/02/uceprotect-when-rbls-go-bad.html [3] http://www.uceprotect.net/en/rblcheck.php [4] http://www.uceprotect.net/en/index.php?m=8&s=0 [5] http://www.uceprotect.org/cart00neys/index.html

16 42

RIPE NCC Open House: Anti-Abuse, 23 March, 11 UTC / 12 CET
by Gergana Petrova 23 Mar '22

23 Mar '22

Dear colleagues, The RIPE NCC will be hosting an Open House on Anti-Abuse on 23 March from 11:00-12:30 UTC / 12:00-13:30 CET. During the session, you will hear from two industry experts, Tobias Knecht, CEO at Abusix, and Dennis van Drunen, Senior Abuse Specialist at KPN, about how to run an effective abuse desk. There will be a discussion during which you can ask questions and share your own experiences and recommendations for best practices. Learn more and register at: https://www.ripe.net/participate/meetings/open-house/ripe-ncc-open-house-an… Feel free to share the link with colleagues who might find the event interesting. I hope to see you there! Kind regards, Gergana Gergana Petrova Community Development Manager RIPE NCC

1 1

Call For Agenda Items - RIPE 84!
by Brian Nisbet 03 Mar '22

03 Mar '22

Colleagues, As you have hopefully seen, registration has now opened for RIPE 84 in Berlin - https://ripe84.ripe.net/ The meeting, running from the 16th - 20th May, will be a return to our hybrid style, but with the implementation of lots of the lessons learned from the last four online only meetings. The Anti-Abuse WG will be meeting and Markus, Tobias and I would invite people to submit topics for discussion, presentations for general enlightenment and, of course, work items for the working group. Speakers & presenters can either be present in Berlin or reaching us live via the Internet! The session is currently scheduled for Thursday 19th May, but the date and time may both change as the various agendas fill up, we'll keep you posted. As always you can reach us at aa-wg-chair(a)ripe.net Thanks, Brian Co-Chair, RIPE AA-WG Brian Nisbet (he/him) Service Operations Manager HEAnet CLG, Ireland's National Education and Research Network 1st Floor, 5 George's Dock, IFSC, Dublin D01 X8N7, Ireland +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

1 0