- anti-abuse-wg - mailman.ripe.net

IP Block wirh no contact details
by Karl-Josef Ziegler 24 Sep '12

24 Sep '12

Hello! How is such a 'whois' handled by RIPE: inetnum: 84.22.127.40 - 84.22.127.47 address: Customer did not enter their own contact details yet see also: http://www.spamhaus.org/sbl/query/SBL99505 'Spammer & cybercriminal hosting (escalation)' http://www.spamhaus.org/sbl/query/SBL154878 'illegal pharma botnet spammer hosting' So this block seems to be used since October 2011 for cybercriminal activities and has no real contact details yet in whois database? Best regards, - Karl-Josef Ziegler

6 8

Update on the EU Clean-IT project
by Erik Bais 24 Sep '12

24 Sep '12

Hi, The EU Clean-IT project did a presentation on RIPE64. EDRI (European Digital Rights) was informed via a leaked document on the projects wishlist and planned (internal) discussion topics and current recommendations. They posted a summary on their website: http://www.edri.org/cleanIT The document itself can be found here: http://www.edri.org/files/cleanIT_sept2012.pdf If this is where the EU regulation is moving towards, under the umbrella of terrorism .... Oh boy ... Regards, Erik Bais

6 11

RIPE 65 AA-WG Agenda ver 3.0
by Brian Nisbet 17 Sep '12

17 Sep '12

An updated agenda, with one additional talk from the RIPE NCC on "Re-allocation of address blocks". The WG meeting will take place on Thursday 27th September at 14:00 CEST. It looks now like we have a fairly packed agenda with lots to discuss. A. Administrative Matters * Welcome * Scribe, Jabber, Stenography * Microphone Etiquette * Approve Minutes from RIPE 64 * Finalise agenda B. Update * B1. Recent List Discussion * B2. CleanIT Project Update * B3. RIPE NCC Data Protection Legal Advice Update * B4. "Requesting feedback about abuse-finder widget in RIPEstat" * B5. "Re-allocation of address blocks" - RIPE NCC * B6. Operation of "Copy Shops" C. Policies * RIPE Policy 2011-06 D. Interactions * D1. Working Groups * D3. RIPE NCC Gov/LEA Interactions Update X. A.O.B. Z. Agenda for RIPE 66 As always, if you have any comments or anything to add, please don't hesitate to get in contact. Regards, Brian & Tobias

1 0

Updated AA-WG RIPE 65 Agenda
by Brian Nisbet 10 Sep '12

10 Sep '12

Colleagues, An updated agenda, with one additional talk from the RIPE NCC on "Requesting feedback about abuse-finder widget in RIPEstat". The WG meeting will take place on Thursday 27th September at 14:00 CEST. A. Administrative Matters * Welcome * Scribe, Jabber, Stenography * Microphone Etiquette * Approve Minutes from RIPE 64 * Finalise agenda B. Update * B1. Recent List Discussion * B2. CleanIT Project Update * B3. RIPE NCC Data Protection Legal Advice Update * B4. "Requesting feedback about abuse-finder widget in RIPEstat" * B5. Operation of "Copy Shops" C. Policies * RIPE Policy 2011-06 D. Interactions * D1. Working Groups * D3. RIPE NCC Gov/LEA Interactions Update X. A.O.B. Z. Agenda for RIPE 66 As always, if you have any comments or anything to add, please don't hesitate to get in contact. Regards, Brian & Tobias

1 0

Re: [anti-abuse-wg] 2011-06 Last Call for Comments (Abuse Contact Management in the RIPE NCC Database)
by Erik Bais 05 Sep '12

05 Sep '12

I support the proposal. Erik Bais

1 0

Re: [anti-abuse-wg] 2011-06 Last Call for Comments (Abuse Contact Management in the RIPE NCC Database)
by Alessandro Vesely 30 Aug '12

30 Aug '12

On Mon 20/Aug/2012 12:10:35 +0200 Emilio Madaio wrote: > > Please e-mail any final comments about this proposal to anti-abuse-wg(a)ripe.net > before 17 September 2012. As an Internet user, I fully support the proposal 2011-06 "Abuse Contact Management in the RIPE NCC Database" --

1 0

vacancesloisirs.fr
by Reza Farzan 29 Aug '12

29 Aug '12

Hello All, This domain, vacancesloisirs.fr, has been promoting itself in spamvertised that sends out. Based on my rudimentary research, the spamvertised website "vacancesloisirs.fr" resides on this IP address: 193.238.229.26 which belongs to Hostway in Germany: inetnum: 193.238.228.0 - 193.238.231.255 netname: HOSTWAY-1 descr: Hostway Deutschland GmbH Their NOC, however, denies that the IP is theirs, and they are not responsible for this domain. I have sent reports to these two addresses, abuse(a)hostway.de and abuse(a)as24679.net, is there another ISP that is responsible for this website, "vacancesloisirs.fr"? Any information would be appreciated. Thank you, Reza Farzan <mailto:rezaf@mindspring.com> rezaf(a)mindspring.com

3 4

Loop error in APNIC whois database
by U.Mutlu 28 Aug '12

28 Aug '12

What do you think about the following technical conversation with APNIC: My last reply, no answer yet: But then how cany I query the content of tech-c handle RCNP1-AP ? As demonstrated below, when I do "whois -h whois.apnic.net RCNP1-AP" then it again shows the same handle, ie. an error loop... XXXXX XXXXX via RT wrote, On 08/28/2012 10:27 AM: > Dear U.Mutlu, > > This is not an error. The role object admic-c and tech-c can use > nic-handle of other person objects or the nic-handle of the role object > itself. > > Thanks, > -- XXXXX ________________________________________________________________________ APNIC Helpdesk > helpdesk(a)apnic.net Asia Pacific Network Information Centre (APNIC) Tel: +61 7 3858 3188 PO Box 3646 South > Brisbane, QLD 4101 Australia Fax: +61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http://www.apnic.net > ________________________________________________________________________ * Sent by email to save paper. Print > only if necessary. On Tue Aug 28 01:00:01 2012, security(a)mutluit.com wrote: >> >Hello, >> >there is a loop (error) in the whois database for the handle RCNP1-AP >> >as it doesn't get resolved, instead it again returns the same >> >handle...: >> > >> ># whois -h whois.apnic.net RCNP1-AP >> > >> >% [whois.apnic.net node-1] >> >% Whois data copyright terms >> >http://www.apnic.net/db/dbcopyright.html >> > >> >role: RK CABLE NET PRIVATE LIMITED - network administr >> >address: Block No 1-2, & 13-18, 1st & 2nd Floor,Annapurna >> >Shopping Centre, Adajan Patiya Circle, Rander >> >Road, >> >country: IN >> >phone: +91-261-2780343 >> >fax-no: +91-261-2787879 >> >e-mail:abuse@rkinfratel.com >> >admin-c: RCNP1-AP >> >tech-c: RCNP1-AP >> >nic-hdl: RCNP1-AP >> >mnt-by: MAINT-RKCABLENET-IN >> >changed:hm-changed@apnic.net 20120523 >> >source: APNIC >> > >> > >> >Regards, >> >U.Mutlu

7 11

mynet.com - A spam network without any abuse contact
by U.Mutlu 26 Aug '12

26 Aug '12

Hi, how come that for the domain mynet.com, clearly a spam network, there is no abuse-contact in the whois database? whois mynet.com gives: " Domain Name: MYNET.COM ------------------------------------------------------------------------ Promote your business to millions of viewers for only $1 a month Learn how you can get an Enhanced Business Listing here for your domain name. Learn more at http://www.NetworkSolutions.com/ ------------------------------------------------------------------------ " ie. a spam network...

3 6

mynet.com - A spam network without any abuse contact
by Reza Farzan 26 Aug '12

26 Aug '12

Hello, MYNET (Mynet Medya Yay. Ulus. Elek.) is a Turkish based domain with these IP addresses: addresses 212.101.97.6 212.101.97.7 212.101.97.8 212.101.122.35 True, this domain does not have a designated Abuse contact, but you may want to send your request to any or all of these addresses: - ripeteknik(a)mynet.com.tr - ripeinfo(a)mynet.com.tr - hakan.turkoner(a)mynet.com - admin(a)mynet.com - administrator(a)mynet.com When reporting any Spam, please make sure that you include its header as well. Thank you, Reza Farzan rezaf(a)mindspring.com -----Original Message----- From: anti-abuse-wg-bounces(a)ripe.net [mailto:anti-abuse-wg-bounces@ripe.net] On Behalf Of U.Mutlu Sent: Sunday, August 26, 2012 3:57 PM To: anti-abuse-wg(a)ripe.net Subject: [anti-abuse-wg] mynet.com - A spam network without any abuse contact Hi, how come that for the domain mynet.com, clearly a spam network, there is no abuse-contact in the whois database? whois mynet.com gives: " Domain Name: MYNET.COM ------------------------------------------------------------------------ Promote your business to millions of viewers for only $1 a month Learn how you can get an Enhanced Business Listing here for your domain name. Learn more at http://www.NetworkSolutions.com/ ------------------------------------------------------------------------ " ie. a spam network...

1 0