- anti-abuse-wg - mailman.ripe.net

RIPE NCC Report: Law Enforcement Agency Requests 2013
by Athina Fragkouli 12 Mar '14

12 Mar '14

Dear colleagues, The RIPE NCC has published a transparency report that details the nature of the requests we received from law enforcement agencies (LEAs) in 2013. https://www.ripe.net/ripe/docs/ripe-607 Kind regards, Athina Fragkouli Legal Counsel RIPE NCC

3 2

Overview of abuse-c?
by Brian Rak 27 Feb '14

27 Feb '14

Is there a (short) simple overview of what abuse-c contacts are, and why they're useful? I've been in contact with a couple datacenters who respond to my abuse reports with "please see this other address, like whois says". I let them know their abuse-c entry points to their email address, and they proceed to tell me the exact same thing. It would be quite handy if there were a page with a short description of what it is, and why they should implement it. So far, the only thing I've found is https://labs.ripe.net/Members/denis/creating-and-finding-abuse-contacts-in-… , which is pretty detailed.

2 1

Israel Police Contact E-mail
by Reza Farzan 26 Feb '14

26 Feb '14

Hello, Does anyone here has an e-mail contact for Israel Police? Their contact page, http://www.police.gov.il/eng_contacts.aspx, only shows telephone numbers. Thank you, Reza Farzan

2 1

ABUSE IP 176.57.210.40 planetadeneg.com
by Илья Полушкин 22 Feb '14

22 Feb '14

Welcome to the IP 176.57.210.40 planetadeneg.com domain is the so-called HYIP project administrator who collects the money and cheating people. Please take steps to block IP 176.57.210.40 work or I will be forced to contact the police. С уважением, Полушкин Илья тел.: 7(916)5800672

1 0

enquiry
by mohammed riyaz 17 Feb '14

17 Feb '14

hi, am receiving fake messages from this is ip address 212.52.84.102. is this your ip address pls confrim n tell me. thanks

3 2

Abuse Contact Finder is not checking admin-c from org object?
by Levon Avagyan 13 Feb '14

13 Feb '14

Hi all, I need some help with proper setup of RIPE DB. I am currently updating our records and noticed that if i am adding ROLE abuse-c: "UCAB101-RIPE" with abuse-mailbox: "abuse(a)ucom.am" attribute to our org :"ORG-UL31-RIPE" object, it is not showing up in "Abuse Contact Finder" tool in Ripe Stat. It shows me message: "No contact information found for 44395" While if i am adding abuse-mailbox: attribute to org: object directly, it finds abuse contact just fine, however gives us 4/5 stars. Is it a known bug or am i doing something wrong? Thanks in advance. P.S. Query: "whois as44395" returns abuse contact just fine. -- Best regards Levon Avagyan Core network engineer Ucom LLC

3 4

Your mail to the Anti-Abuse Working Group Mailing List
by Marita Phelan 13 Feb '14

13 Feb '14

Dear , I have approved your mail dated 13/2/14, subject "Abuse Contact Finder is not checking admin-c from org object?" to the Anti-Abuse Working Group Mailing List. However, if you wish to continue discussion on this mailing list, please consider subscribing to the list as due to the amount of spam we receive on the mailing lists, future mails may be overlooked. Best regards, Marita -- Marita Phelan Content Webmaster RIPE NCC

1 1

Call for RIPE68 Agenda Items
by Brian Nisbet 12 Feb '14

12 Feb '14

Colleagues, As we slowly (very slowly in Ireland) pull ourselves out of Winter towards Spring, it seems like a good time to put out a call for agenda items for the Anti-Abuse WG session at RIPE 68 in Warsaw - ripe68.ripe.net . The meeting takes place from the 12th - 16th of May and the AA WG session is on Thursday 15th May at 14:00 CEST. If you would like to submit any items to the agenda, please don't hesitate to contact Tobias or I. This is also a good moment to remind you of the upcoming deadline for Plenary talk submissions for the meeting. This deadline is on the 2nd of March and more details can be found here: https://ripe68.ripe.net/submit-topic/cfp/ Brian, Co-Chair, RIPE AA-WG

1 0

out side UDP attack on my IPs
by Ahmed issam Al-Shaikh 10 Feb '14

10 Feb '14

Hello We are facing an outside attack from many different IPs for about 4 days now , we have contact some of the IPs owners and tried filtering from our side with no results , bellow I have attached reported IPs that its attacking my network can you please take look on it and help in this case , Regards ---------------------------------------------------------------------------- ---------------------------------------------------------------------------- -- Global Construction , Communication & information Technology [ GCCIT ] Description: cid:image001.png@01CE20F8.BCB3A0B0Description: cid:image002.png@01CE20F8.BCB3A0B0 Ahmed issam Al-Sheikh Al-Sheikh Group / GCCIT Operations Manage MTCNA , MTCTCE IRAQ / Baghdad / Zayouna E : <mailto:ahmed@gccitcom.com> ahmed(a)gccitcom.com Tel : 00964 7902272267 Web : <http://www.gccitcom.com> www.gccitcom.com <http://www.gccitcall.com> www.gccitcall.com

2 2

So now spam on v6?
by Lu Heng 23 Jan '14

23 Jan '14

Hey Guys: Just receive following today, wonder how trillions of address only worth 2000USD:): Hi, We are media company specializing in PPC and high-traffic campaigns. For our email operations we are looking to lease a IPv6 space. We guarantee that our marketing operation does not generate any complaints. If you have a /29 or few /32 available that you could lease then let me know. Since IPv6 is experimental I am willing to pay up to $400 for a /32 lease on which I will test 4-5 days. If testing is successful, I will take 2x /32 space and commit to use minimum 6-month. Payment will be like this: 1st month = $2000 x 1 /32s 2,3,4 month = $1500 5,6 month = $1100 Let me know. -- -- Kind regards. Lu This transmission is intended solely for the addressee(s) shown above. It may contain information that is privileged, confidential or otherwise protected from disclosure. Any review, dissemination or use of this transmission or its contents by persons other than the intended addressee(s) is strictly prohibited. If you have received this transmission in error, please notify this office immediately and e-mail the original at the sender's address above by replying to this message and including the text of the transmission received.

6 5