And of course ripe isn't the internet police eh
From: anti-abuse-wg <anti-abuse-wg-bounces@ripe.net> on behalf of furio ercolessi <furio+as@spin.it>
Sent: Friday, May 17, 2019 7:24 PM
To: anti-abuse-wg@ripe.net
Subject: Re: [anti-abuse-wg] 2019-04 New Policy Proposal (Validation of "abuse-mailbox")
On Fri, May 17, 2019 at 10:24:51AM +0000, Suresh Ramasubramanian wrote:
> [...]
> It seems entirely possible for anybody at all to register a company and follow the paperwork
> required to become a LIR and then allocate /14s at a time back in the day and maybe smaller
> netblocks now to malicious actors.
LIRs in the RIPE area are now limited to a single /22 ( https://www.ripe.net/publications/docs/ripe-708#51 ),
and as a consequence of this we are now seeing people creating multiple LIRs one
after the other, each getting a single /22, and amassing a large of amount of v4 space
with this simple trick.
ARIN seems now to be going more aggressively than in the past after these guys
( https://krebsonsecurity.com/2019/05/a-tough-week-for-ip-address-scammers/ ).
furio ercolessi