And of course ripe isn't the internet police eh --srs ________________________________ From: anti-abuse-wg <anti-abuse-wg-bounces@ripe.net> on behalf of furio ercolessi <furio+as@spin.it> Sent: Friday, May 17, 2019 7:24 PM To: anti-abuse-wg@ripe.net Subject: Re: [anti-abuse-wg] 2019-04 New Policy Proposal (Validation of "abuse-mailbox") On Fri, May 17, 2019 at 10:24:51AM +0000, Suresh Ramasubramanian wrote:
[...] It seems entirely possible for anybody at all to register a company and follow the paperwork required to become a LIR and then allocate /14s at a time back in the day and maybe smaller netblocks now to malicious actors.
LIRs in the RIPE area are now limited to a single /22 ( https://www.ripe.net/publications/docs/ripe-708#51 ), and as a consequence of this we are now seeing people creating multiple LIRs one after the other, each getting a single /22, and amassing a large of amount of v4 space with this simple trick. ARIN seems now to be going more aggressively than in the past after these guys ( https://krebsonsecurity.com/2019/05/a-tough-week-for-ip-address-scammers/ ). furio ercolessi