From eric.freyssinet at m4x.org Sat Oct 22 12:59:03 2011 From: eric.freyssinet at m4x.org (Eric Freyssinet) Date: Sat, 22 Oct 2011 12:59:03 +0200 Subject: [anti-abuse-wg] WHOIS Privacy & Proxy Survey In-Reply-To: <4E842F1C.1010004@heanet.ie> References: <4E842F1C.1010004@heanet.ie> Message-ID: Answered ! Best regards, Lt-Col Eric Freyssinet Head Cybercrime division France, Gendarmerie nationale On Thu, Sep 29, 2011 at 10:41, Brian Nisbet wrote: > Colleagues, > > ICANN's Generic Names Supporting Organization (GNSO) is seeking to gain > further insight into the origination and handling of ?relay? and ?reveal? > requests. It was suggested that some members of this community may well have > useful things to say on this topic. > > The full blog post describing the initiative is here: > > http://blog.icann.org/2011/09/**gtld-whois-privacy-and-proxy-** > relay-and-reveal-survey-now-**live/ > > and the survey itself can be found at > > https://www.whois-survey.net > > The WG (nor the chairs) is not officially involved in this survey, but it > is useful and we would encourage anyone who has opinions or experience to > take part. > > Thanks, > > Brian. > > > -- Eric Freyssinet perso: eric.freyssinet at m4x.org pro: eric.freyssinet at gendarmerie.interieur.gouv.fr blog: http://blog.crimenumerique.fr/ -------------- next part -------------- An HTML attachment was scrubbed... URL: From caldcv at gmail.com Sun Oct 30 19:18:53 2011 From: caldcv at gmail.com (Chris) Date: Sun, 30 Oct 2011 14:18:53 -0400 Subject: [anti-abuse-wg] RIPE Abuse Message-ID: Vesna sent me a request to join this group and with your meeting coming up, I would like to put some last minute issues in: XSServer, a German virtual private server / dedicated server hosting provider, is starting to be the new king when it comes to ignored abuse complaints. A lot of their IP ranges are being used for spam, including email and the new comment spam on websites / forums (mainly Wordpress). The simple solution taken by webmasters and system administrators are to create a list of offending IPs to have for comparison purposes, check a potential IP against that and use that IP to block the spam from going through. That doesn't really work in the long term. Examples of offending IPs are: 109.230.216.225 109.230.220.34 109.230.217.166 109.230.220.95 I could find more but I just searched 109.230 in my email client and found these. I have noticed also that a lot of RIPE IPs also have invalid contact information or no abuse / admin information whatsoever on them which I believe is against your rules / guidelines. Thank you and thank you for Vesna for recommending this mailing list for me. I just imagine a day we rely on blacklists and rely more on providers fixing the problems themselves, rather than having any incompetent government intervene to cause more problems to "fix the problem" -- --C "The dumber people think you are, the more surprised they're going to be when you kill them." - Sir William Clayton From michele at blacknight.ie Sun Oct 30 19:34:52 2011 From: michele at blacknight.ie (Michele Neylon :: Blacknight) Date: Sun, 30 Oct 2011 18:34:52 +0000 Subject: [anti-abuse-wg] RIPE Abuse In-Reply-To: References: Message-ID: <8C06FA59-B1C6-420A-8E5C-11F59066538D@blacknight.ie> On 30 Oct 2011, at 18:18, Chris wrote: > > > I have noticed also that a lot of RIPE IPs also have invalid contact > information or no abuse / admin information whatsoever on them which I > believe is against your rules / guidelines. I'm not an expert on RIPE policy / rules, but the invalid contact info would probably be a breach and you can report it to RIPE. The lack of an abuse contact wouldn't be a breach of any rules that I'm aware of Regards Michele Mr Michele Neylon Blacknight Solutions Hosting & Colocation, Brand Protection ICANN Accredited Registrar http://www.blacknight.com/ http://blog.blacknight.com/ http://blacknight.mobi/ http://mneylon.tel Intl. +353 (0) 59 9183072 US: 213-233-1612 UK: 0844 484 9361 Locall: 1850 929 929 Twitter: http://twitter.com/mneylon ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,Ireland Company No.: 370845 From caldcv at gmail.com Sun Oct 30 19:39:30 2011 From: caldcv at gmail.com (Chris) Date: Sun, 30 Oct 2011 14:39:30 -0400 Subject: [anti-abuse-wg] RIPE Abuse In-Reply-To: <8C06FA59-B1C6-420A-8E5C-11F59066538D@blacknight.ie> References: <8C06FA59-B1C6-420A-8E5C-11F59066538D@blacknight.ie> Message-ID: Whats the proper way to report to RIPE for invalid contact info? From michele at blacknight.ie Sun Oct 30 19:52:00 2011 From: michele at blacknight.ie (Michele Neylon :: Blacknight) Date: Sun, 30 Oct 2011 18:52:00 +0000 Subject: [anti-abuse-wg] RIPE Abuse In-Reply-To: References: <8C06FA59-B1C6-420A-8E5C-11F59066538D@blacknight.ie>, Message-ID: I'd try the contact page on the ripe site Mr. Michele Neylon Blacknight http://Blacknight.tel Via iPhone so excuse typos and brevity On 30 Oct 2011, at 18:40, "Chris" wrote: > Whats the proper way to report to RIPE for invalid contact info? > From fweimer at bfk.de Mon Oct 31 09:28:41 2011 From: fweimer at bfk.de (Florian Weimer) Date: Mon, 31 Oct 2011 08:28:41 +0000 Subject: [anti-abuse-wg] RIPE Abuse In-Reply-To: (Chris's message of "Sun, 30 Oct 2011 14:18:53 -0400") References: Message-ID: <824nypmuo6.fsf@mid.bfk.de> * Chris: > XSServer, a German virtual private server / dedicated server hosting > provider, is starting to be the new king when it comes to ignored > abuse complaints. Have you brought this to the attention of the folks at optimate-server.de? (I'm not saying that it would help, I'm just trying to get a more complete picture.) -- Florian Weimer BFK edv-consulting GmbH http://www.bfk.de/ Kriegsstra?e 100 tel: +49-721-96201-1 D-76133 Karlsruhe fax: +49-721-96201-99 From brian.nisbet at heanet.ie Mon Oct 31 10:17:51 2011 From: brian.nisbet at heanet.ie (Brian Nisbet) Date: Mon, 31 Oct 2011 09:17:51 +0000 Subject: [anti-abuse-wg] RIPE Abuse In-Reply-To: References: Message-ID: <4EAE67BF.7030205@heanet.ie> Chris, Chris wrote, On 30/10/2011 18:18: > > I have noticed also that a lot of RIPE IPs also have invalid contact > information or no abuse / admin information whatsoever on them which I > believe is against your rules / guidelines. > > Thank you and thank you for Vesna for recommending this mailing list > for me. I just imagine a day we rely on blacklists and rely more on > providers fixing the problems themselves, rather than having any > incompetent government intervene to cause more problems to "fix the > problem" You're not the only person to have noticed and raised this. There is currently a Task Force examining abuse contact information (due to report on current progress on Tuesday afternoon) and the NCC will be reporting on their new abuse contact measures during the session as well. Hopefully you'll be able to join us (either physically or via the Internet) on Tuesday and hopefully some, if not all, of your questions will be answered. Thanks, Brian. From caldcv at gmail.com Mon Oct 31 15:05:47 2011 From: caldcv at gmail.com (Chris) Date: Mon, 31 Oct 2011 10:05:47 -0400 Subject: [anti-abuse-wg] RIPE Abuse In-Reply-To: <824nypmuo6.fsf@mid.bfk.de> References: <824nypmuo6.fsf@mid.bfk.de> Message-ID: > > Have you brought this to the attention of the folks at > optimate-server.de? > I did last week per suggestion of NANOG and didn't get a response.. but the volume of XSServer Wordpress spam has diminished within the last few days. I haven't had anything on their IP ranges. -- --C "The dumber people think you are, the more surprised they're going to be when you kill them." - Sir William Clayton