- anti-abuse-wg - mailman.ripe.net

Re: [anti-abuse-wg] What am I missing in this mnt-by query for MNT-ANONYMOUS?
by Karl-Josef Ziegler 05 Mar '13

05 Mar '13

1 0

Allocation of number resources
by Ronald F. Guilmette 01 Mar '13

01 Mar '13

Assume for the moment that there exists a provider, within the RIPE region, that has been allocated a sizeable IPv4 block. Let's say a /17, just for the sake of argument. Assume that this allocation was made to the provider, by RIPE NCC, some long time ago... Let's say early 2011. I would like to know the following things. If someone can answer these questions, please do: (1) What would have been the requirements, at that time (early 2011) that the provider would have had to meet in order to be allocated the /17 in question by RIPE NCC staff? (In the ARIN region, for IPv4 allocations there has been for some time various requirements in place that say that the provider being issued the address block must have some certain amount of hardware infrastructure in place in order to qualify for the allocation. Does RIPE have any similar rules? If so, then what are the rules, when did they go into effect, and what exactly does RIPE NCC staff do in order to actually enforce those rules, i.e. _prior_ to awarding an allocation to a given provider?) (2) If there are indeed requirements along the lines above, then are those requirements only in effect during and at the time of the initial allocation? Or is the provider who has been awarded an alloction either asked or required to maintain some certain amount of hardware infra- structure corresponding to the IPv4 address block allocation that it was awarded? (3) If there are indeed ``maintenance'' requirements along the lines in (2) above, then has there ever been a single publically documented instance in which a provider's failure to maintain the minimum required hardware infrastructure dedicated to some given IP address block allocation has caused the RIPE NCC to actually revoke the address block allocation in question? Regards, rfg

11 32

where do i report fraudulent AS?
by kai 21 Feb '13

21 Feb '13

Hello, where should I report fraudulent AS(Autonomous Systems), which are announcing mainly cybercriminal hosting subnetworks? sorry if i'm posting to wrong maillist. Cheers, Kai

2 1

Re: [anti-abuse-wg] New on RIPE Labs: Finding Abuse Contact Information Using RIPEstat
by Michele Neylon :: Blacknight 21 Feb '13

21 Feb '13

Mirjam Handy tool Question - how do you arrive at the rating? Checking some of our IPs we get 3 out of 4 stars, so I'm curious why :) Regards Michele -- Mr Michele Neylon Blacknight Solutions Hosting & Colocation, Brand Protection http://www.blacknight.com/ http://blog.blacknight.com/ http://mneylon.tel/ Intl. +353 (0) 59 9183072 Locall: 1850 929 929 Direct Dial: +353 (0)59 9183090 Fax. +353 (0) 1 4811 763 Twitter: http://twitter.com/mneylon ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,Ireland Company No.: 370845 ________________________________________ From: anti-abuse-wg-bounces(a)ripe.net [anti-abuse-wg-bounces(a)ripe.net] on behalf of Mirjam Kuehne [mir(a)ripe.net] Sent: 19 February 2013 14:36 To: anti-abuse-wg(a)ripe.net Subject: [anti-abuse-wg] New on RIPE Labs: Finding Abuse Contact Information Using RIPEstat [apologies for duplicates] Dear colleagues, We implemented a new widget in RIPEstat that allows you to find abuse contact information registered in the RIPE Database. Please find more information on RIPE Labs: https://labs.ripe.net/Members/cteusche/finding-anti-abuse-contact-informati… Kind regards, Mirjam Kuehne RIPE NCC

3 2

2013-01 New Policy Proposal (Openness about Policy Violations)
by Brückner, Carsten (BIT A 5) 19 Feb '13

19 Feb '13

To prevent abuse and to give the holder a fair chance to resolve any policy violation before the report is published there has to be a time for a reply of four weeks. If the holder has resolved all problems before expiration of the deadline, the report is not published. Best regards Carsten Brückner

1 0

New on RIPE Labs: Finding Abuse Contact Information Using RIPEstat
by Mirjam Kuehne 19 Feb '13

19 Feb '13

[apologies for duplicates] Dear colleagues, We implemented a new widget in RIPEstat that allows you to find abuse contact information registered in the RIPE Database. Please find more information on RIPE Labs: https://labs.ripe.net/Members/cteusche/finding-anti-abuse-contact-informati… Kind regards, Mirjam Kuehne RIPE NCC

1 0

Re: [anti-abuse-wg] [ncc-services-wg] Fwd: 2013-01 New Policy Proposal (Openness about Policy Violations)
by Sascha Luck 18 Feb '13

18 Feb '13

On Fri, Feb 15, 2013 at 11:38:36AM +0000, Brian Nisbet wrote: >The following policy '2013-01 Openness about Policy Violations' >started it's trip through the PDP yesterday. While the discussions on >this proposal will take place in the Anti-Abuse working group, I just >wanted to make sure this WG was aware as there are obvious >implications for NCC processes & procedures. Utterly and completely unacceptable. The proposal, in its current form, is akin to the police publishing every complaint they receive, with full details of the subject of the complaint, whether justified or not. I also note that is "The identity of the submitter, if the submitter indicated that it can be made public;" No such protection is afforded the subject of the complaint. This proposal is nothing but a denunciant's charter, the legality of which is doubtful (NCC Legal please to comment). The idea that publishing these reports makes abuse of the reporting system less likely - where the attack *is* the publishing of these reports - is laughable. I therefore register my vehement opposition and, indeed, protest against this proposal in its current form. As a possible compromise, I could accept the publication of reports where the NCC has found that a violation was indeed committed. Regards, Sascha Luck

6 14

Re: [anti-abuse-wg] where do i report fraudulent AS?
by Reza Farzan 18 Feb '13

18 Feb '13

Hello Kai, You may want to use this useful site, http://spamlinks.net/track-report-addresses.htm, first. There, you will find many links that may assist you. Reza Farzan ***** -----Original Message----- >From: kai <kai(a)rhynn.net> >Sent: Feb 15, 2013 2:13 PM >To: anti-abuse-wg(a)ripe.net >Subject: [anti-abuse-wg] where do i report fraudulent AS? > >Hello, > >where should I report fraudulent AS(Autonomous Systems), which are >announcing mainly cybercriminal hosting subnetworks? > >sorry if i'm posting to wrong maillist. > > >Cheers, > >Kai >

1 0

Re: [anti-abuse-wg] [ncc-services-wg] 2013-01 New Policy Proposal(Openness about Policy Violations)
by Jørgen Hovland 17 Feb '13

17 Feb '13

2 1

2013-01 New Policy Proposal (Openness about Policy Violations)
by Emilio Madaio 16 Feb '13

16 Feb '13

Dear Colleagues, A new RIPE Policy Proposal has been made and is now available for discussion. You can find the full proposal at: https://www.ripe.net/ripe/policies/proposals/2013-01 We encourage you to review this proposal and send your comments to <anti-abuse-wg(a)ripe.net> before 14 March 2013. Regards Emilio Madaio Policy Development Officer RIPE NCC

3 4