Hi Alessandro
On Thu 30/Jul/2026 01:38:48 +0200 denis walker wrote:
> # Article 1: For the purposes of RIPE Address Policy, "Network Abuse" is defined
> by the technical threat classifications maintained under the European Union
> Cybercrime framework (specifically DDoS, malware hosting, phishing networks and
> systemic spam botnet distribution).
Hm... most automatic abuse reports I send are about dictionary attacks. They
don't seem to be included in the four categories you mention. Yet, they are
very common and presumably indicate an 0wned host, so I think it's useful to
report them. Isn't it?
So maybe:
Article 1
1.1 For the purposes of RIPE Address Policy, "Network Abuse" is defined, as a base line, by the technical threat classifications maintained under the European Union Cybercrime framework (specifically DDoS, malware hosting, phishing networks and systemic spam botnet distribution).
1.2 The following items are also included:
- dictionary attacks
This could be updated over time. Or to avoid updating the policy every time a new threat emerges it could refer to a list maintained by the RIPE NCC on behalf of the community.
Cheers
Denis