There appears to be abuse happening in the RIPE db – presumably to allow other online activity to be done with abuse indirection to an innocent bystander (e.g. my employer) – all over the last day or two…
The specific items I noticed are all inet6num maintained by BSKYB-BROADBAND44-MNT, along with BSKYB-BROADBAND44-MNT itself, and ORG-BBH4-RIPE and ACRO772-RIPE
This was due to the fake objects referring to our real role/person objects.
It appears that there are many other faked entries under 2a07:7ec0::/29 – pretending to be Deutsche Telekom or Time Warner Cable for example.
Either that LIR is a bad actor, or their maintainer credentials have been 0wned.
This needs to be killed off.
Cheers,
--
Ian Dickinson
Network Architect
Sky Network Services
ian.dickinson@sky.uk