From ahmed at gccitcom.com Mon Feb 10 03:34:35 2014 From: ahmed at gccitcom.com (Ahmed issam Al-Shaikh) Date: Mon, 10 Feb 2014 05:34:35 +0300 Subject: [anti-abuse-wg] out side UDP attack on my IPs Message-ID: <002f01cf2608$a4157fe0$ec407fa0$@gccitcom.com> Hello We are facing an outside attack from many different IPs for about 4 days now , we have contact some of the IPs owners and tried filtering from our side with no results , bellow I have attached reported IPs that its attacking my network can you please take look on it and help in this case , Regards ---------------------------------------------------------------------------- ---------------------------------------------------------------------------- -- Global Construction , Communication & information Technology [ GCCIT ] Description: cid:image001.png at 01CE20F8.BCB3A0B0Description: cid:image002.png at 01CE20F8.BCB3A0B0 Ahmed issam Al-Sheikh Al-Sheikh Group / GCCIT Operations Manage MTCNA , MTCTCE IRAQ / Baghdad / Zayouna E : ahmed at gccitcom.com Tel : 00964 7902272267 Web : www.gccitcom.com www.gccitcall.com -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image001.png Type: image/png Size: 7093 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image002.png Type: image/png Size: 7599 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: attacke report.doc Type: application/msword Size: 347648 bytes Desc: not available URL: From brak at gameservers.com Mon Feb 10 04:12:02 2014 From: brak at gameservers.com (Brian Rak) Date: Sun, 09 Feb 2014 22:12:02 -0500 Subject: [anti-abuse-wg] out side UDP attack on my IPs In-Reply-To: <002f01cf2608$a4157fe0$ec407fa0$@gccitcom.com> References: <002f01cf2608$a4157fe0$ec407fa0$@gccitcom.com> Message-ID: <52F84382.204@gameservers.com> Well, if you're sending other abuse emails word documents, that would explain why. Try including the details in the actual email. Also, what makes you think this is real traffic, and not a spoofed attack? On 2/9/2014 9:34 PM, Ahmed issam Al-Shaikh wrote: > > Hello > > We are facing an outside attack from many different IPs for about 4 > days now , we have contact some of the IPs owners and tried filtering > from our side with no results , bellow I have attached reported IPs > that its attacking my network can you please take look on it and help > in this case , > > Regards > > *----------------------------------------------------------------------------------------------------------------------------------------------------------* > > *Global Construction , Communication * > > * & information Technology [ GCCIT ] * > > Description: cid:image001.png at 01CE20F8.BCB3A0B0Description: > cid:image002.png at 01CE20F8.BCB3A0B0 > > *Ahmed issam Al-Sheikh * > > *Al-Sheikh Group / GCCIT * > > *Operations Manage* > > *MTCNA , MTCTCE* > > *IRAQ / Baghdad / Zayouna * > > *E : ahmed at gccitcom.com * > > *Tel : 00964 7902272267 * > > *Web : www.gccitcom.com * > > *www.gccitcall.com * > -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/png Size: 7093 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/png Size: 7599 bytes Desc: not available URL: From ahmed at gccitcom.com Mon Feb 10 04:55:49 2014 From: ahmed at gccitcom.com (Ahmed issam Al-Shaikh) Date: Mon, 10 Feb 2014 06:55:49 +0300 Subject: [anti-abuse-wg] out side UDP attack on my IPs In-Reply-To: <002f01cf2608$a4157fe0$ec407fa0$@gccitcom.com> References: <002f01cf2608$a4157fe0$ec407fa0$@gccitcom.com> Message-ID: <004801cf2613$fd101f00$f7305d00$@gccitcom.com> I would like to thank you all ,, we have solved the issue . Thanks Ahmed From: anti-abuse-wg-bounces at ripe.net [mailto:anti-abuse-wg-bounces at ripe.net] On Behalf Of Ahmed issam Al-Shaikh Sent: Monday, February 10, 2014 5:35 AM To: anti-abuse-wg at ripe.net Subject: [anti-abuse-wg] out side UDP attack on my IPs Hello We are facing an outside attack from many different IPs for about 4 days now , we have contact some of the IPs owners and tried filtering from our side with no results , bellow I have attached reported IPs that its attacking my network can you please take look on it and help in this case , Regards ---------------------------------------------------------------------------- ---------------------------------------------------------------------------- -- Global Construction , Communication & information Technology [ GCCIT ] Description: cid:image001.png at 01CE20F8.BCB3A0B0Description: cid:image002.png at 01CE20F8.BCB3A0B0 Ahmed issam Al-Sheikh Al-Sheikh Group / GCCIT Operations Manage MTCNA , MTCTCE IRAQ / Baghdad / Zayouna E : ahmed at gccitcom.com Tel : 00964 7902272267 Web : www.gccitcom.com www.gccitcall.com -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image001.png Type: image/png Size: 7093 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image002.png Type: image/png Size: 7599 bytes Desc: not available URL: From brian.nisbet at heanet.ie Wed Feb 12 13:27:55 2014 From: brian.nisbet at heanet.ie (Brian Nisbet) Date: Wed, 12 Feb 2014 12:27:55 +0000 Subject: [anti-abuse-wg] Call for RIPE68 Agenda Items Message-ID: <52FB68CB.5060705@heanet.ie> Colleagues, As we slowly (very slowly in Ireland) pull ourselves out of Winter towards Spring, it seems like a good time to put out a call for agenda items for the Anti-Abuse WG session at RIPE 68 in Warsaw - ripe68.ripe.net . The meeting takes place from the 12th - 16th of May and the AA WG session is on Thursday 15th May at 14:00 CEST. If you would like to submit any items to the agenda, please don't hesitate to contact Tobias or I. This is also a good moment to remind you of the upcoming deadline for Plenary talk submissions for the meeting. This deadline is on the 2nd of March and more details can be found here: https://ripe68.ripe.net/submit-topic/cfp/ Brian, Co-Chair, RIPE AA-WG From levon.avagyan at ucom.am Thu Feb 13 10:46:20 2014 From: levon.avagyan at ucom.am (Levon Avagyan) Date: Thu, 13 Feb 2014 13:46:20 +0400 Subject: [anti-abuse-wg] Abuse Contact Finder is not checking admin-c from org object? Message-ID: <5834548.HuyDks0DFr@levipc> Hi all, I need some help with proper setup of RIPE DB. I am currently updating our records and noticed that if i am adding ROLE abuse-c: "UCAB101-RIPE" with abuse-mailbox: "abuse at ucom.am" attribute to our org :"ORG-UL31-RIPE" object, it is not showing up in "Abuse Contact Finder" tool in Ripe Stat. It shows me message: "No contact information found for 44395" While if i am adding abuse-mailbox: attribute to org: object directly, it finds abuse contact just fine, however gives us 4/5 stars. Is it a known bug or am i doing something wrong? Thanks in advance. P.S. Query: "whois as44395" returns abuse contact just fine. -- Best regards Levon Avagyan Core network engineer Ucom LLC From mphelan at ripe.net Thu Feb 13 12:07:49 2014 From: mphelan at ripe.net (Marita Phelan) Date: Thu, 13 Feb 2014 12:07:49 +0100 Subject: [anti-abuse-wg] Your mail to the Anti-Abuse Working Group Mailing List In-Reply-To: <510BDE9F.4080509@ripe.net> References: <510BDE9F.4080509@ripe.net> Message-ID: <52FCA785.5020703@ripe.net> Dear , I have approved your mail dated 13/2/14, subject "Abuse Contact Finder is not checking admin-c from org object?" to the Anti-Abuse Working Group Mailing List. However, if you wish to continue discussion on this mailing list, please consider subscribing to the list as due to the amount of spam we receive on the mailing lists, future mails may be overlooked. Best regards, Marita -- Marita Phelan Content Webmaster RIPE NCC From mphelan at ripe.net Thu Feb 13 12:12:30 2014 From: mphelan at ripe.net (Marita Phelan) Date: Thu, 13 Feb 2014 12:12:30 +0100 Subject: [anti-abuse-wg] Your mail to the Anti-Abuse Working Group Mailing List In-Reply-To: <52FCA785.5020703@ripe.net> References: <510BDE9F.4080509@ripe.net> <52FCA785.5020703@ripe.net> Message-ID: <52FCA89E.2070805@ripe.net> Apologies for this mail, it was sent to the wrong email address and I made a mistake in moderation. Best regards, Marita On 13/2/14 12:07 PM, Marita Phelan wrote: > Dear , > > I have approved your mail dated 13/2/14, subject "Abuse Contact Finder > is not checking admin-c from org object?" to the Anti-Abuse Working > Group Mailing List. > > However, if you wish to continue discussion on this mailing list, please > consider subscribing to the list as due to the amount of spam we receive > on the mailing lists, future mails may be overlooked. > > Best regards, > > Marita > -- Marita Phelan Content Webmaster RIPE NCC From levon.avagyan at ucom.am Thu Feb 13 13:58:42 2014 From: levon.avagyan at ucom.am (Levon Avagyan) Date: Thu, 13 Feb 2014 16:58:42 +0400 Subject: [anti-abuse-wg] Abuse Contact Finder is not checking admin-c from org object? In-Reply-To: <20140213123723.GE19293@hydra.ck.polsl.pl> References: <5834548.HuyDks0DFr@levipc> <20140213123723.GE19293@hydra.ck.polsl.pl> Message-ID: <2971421.zURX3FjWYu@levipc> Hello Piotr, Thanks for reply! You are absolutely right! I was using first resource to verify my changes. So as I understood my current DB information is OK from RIPE's point of view and the tool is not processing it correctly. And from the rest of Your message I understood that it wise to duplicate abuse contact in org: object as abuse-mailbox: attribute until everything will settle down right? Thanks! -- Best regards Levon Avagyan Core network engineer Ucom LLC On Thursday 13 February 2014 13:37:23 Piotr Strzyzewski wrote: > On Thu, Feb 13, 2014 at 01:46:20PM +0400, Levon Avagyan wrote: > > Dear Levon > > > I need some help with proper setup of RIPE DB. > > I am currently updating our records and noticed that if i am adding ROLE > > abuse-c: "UCAB101-RIPE" with abuse-mailbox: "abuse at ucom.am" attribute to > > our org :"ORG-UL31-RIPE" object, it is not showing up in "Abuse Contact > > Finder" tool in Ripe Stat. It shows me message: "No contact information > > found for 44395" > > While if i am adding abuse-mailbox: attribute to org: object directly, it > > finds abuse contact just fine, however gives us 4/5 stars. > > > > Is it a known bug or am i doing something wrong? > > > > Thanks in advance. > > > > P.S. > > Query: "whois as44395" returns abuse contact just fine. > > Short answer: Don't use it. ;) > > I assume that the tool you are using is this one: > https://stat.ripe.net/special/abuse > > The correct one is this one: > http://apps.db.ripe.net/search/abuse-finder.html > > However, the first one (from Ripe Stat) is still widely used due the > fact that abuse-c is not fully deployed yet. Among others, the notable > Abusix.org claims to use it. > > If I understand > https://labs.ripe.net/Members/Paul_P_/content-abuse-finder correctly, > this tool doesn't look at aut-num at all. Please corect me if I'm wrong. > > Moreover, this tool is full of false positives, no matter of how many > stars it will show at the end. For example - it was just two weeks ago > when I have deliberately created the situation that for not mine and not > maintained by me inetnum I have forced this tool to claim with 4/5 stars > that abuse at example.net is the contact information. Right now this is > impossible, since I have notified about this the RIPE NCC and this tool > is filtering the RFC-2606 dummy addresses out. Unfortunately, this was > just one of examples. > > Best regards, > Piotr From Piotr.Strzyzewski at polsl.pl Thu Feb 13 13:37:23 2014 From: Piotr.Strzyzewski at polsl.pl (Piotr Strzyzewski) Date: Thu, 13 Feb 2014 13:37:23 +0100 Subject: [anti-abuse-wg] Abuse Contact Finder is not checking admin-c from org object? In-Reply-To: <5834548.HuyDks0DFr@levipc> References: <5834548.HuyDks0DFr@levipc> Message-ID: <20140213123723.GE19293@hydra.ck.polsl.pl> On Thu, Feb 13, 2014 at 01:46:20PM +0400, Levon Avagyan wrote: Dear Levon > I need some help with proper setup of RIPE DB. > I am currently updating our records and noticed that if i am adding ROLE abuse-c: "UCAB101-RIPE" with abuse-mailbox: "abuse at ucom.am" attribute to our org :"ORG-UL31-RIPE" object, it is not showing up in "Abuse Contact Finder" tool in Ripe Stat. > It shows me message: "No contact information found for 44395" > While if i am adding abuse-mailbox: attribute to org: object directly, it finds abuse contact just fine, however gives us 4/5 stars. > > Is it a known bug or am i doing something wrong? > > Thanks in advance. > > P.S. > Query: "whois as44395" returns abuse contact just fine. Short answer: Don't use it. ;) I assume that the tool you are using is this one: https://stat.ripe.net/special/abuse The correct one is this one: http://apps.db.ripe.net/search/abuse-finder.html However, the first one (from Ripe Stat) is still widely used due the fact that abuse-c is not fully deployed yet. Among others, the notable Abusix.org claims to use it. If I understand https://labs.ripe.net/Members/Paul_P_/content-abuse-finder correctly, this tool doesn't look at aut-num at all. Please corect me if I'm wrong. Moreover, this tool is full of false positives, no matter of how many stars it will show at the end. For example - it was just two weeks ago when I have deliberately created the situation that for not mine and not maintained by me inetnum I have forced this tool to claim with 4/5 stars that abuse at example.net is the contact information. Right now this is impossible, since I have notified about this the RIPE NCC and this tool is filtering the RFC-2606 dummy addresses out. Unfortunately, this was just one of examples. Best regards, Piotr -- gucio -> Piotr Strzy?ewski E-mail: Piotr.Strzyzewski at polsl.pl From Piotr.Strzyzewski at polsl.pl Thu Feb 13 14:12:22 2014 From: Piotr.Strzyzewski at polsl.pl (Piotr Strzyzewski) Date: Thu, 13 Feb 2014 14:12:22 +0100 Subject: [anti-abuse-wg] Abuse Contact Finder is not checking admin-c from org object? In-Reply-To: <2971421.zURX3FjWYu@levipc> References: <5834548.HuyDks0DFr@levipc> <20140213123723.GE19293@hydra.ck.polsl.pl> <2971421.zURX3FjWYu@levipc> Message-ID: <20140213131222.GA10007@hydra.ck.polsl.pl> On Thu, Feb 13, 2014 at 04:58:42PM +0400, Levon Avagyan wrote: Dear Levon > Thanks for reply! > > You are absolutely right! I was using first resource to verify my changes. > So as I understood my current DB information is OK from RIPE's point of view > and the tool is not processing it correctly. > And from the rest of Your message I understood that it wise to duplicate abuse > contact in org: object as abuse-mailbox: attribute until everything will > settle down right? I think that this will be helpful to you: https://www.ripe.net/lir-services/resource-management/faqs-for-abuse-c Although I personally put abuse-mailbox in both ORGANISATION and ROLE objects, the only one which is necessary is the one from the ROLE object referenced from the ORGANISATION referenced from the resource. Best regards, Piotr -- gucio -> Piotr Strzy?ewski E-mail: Piotr.Strzyzewski at polsl.pl From levon.avagyan at ucom.am Thu Feb 13 14:17:40 2014 From: levon.avagyan at ucom.am (Levon Avagyan) Date: Thu, 13 Feb 2014 17:17:40 +0400 Subject: [anti-abuse-wg] Abuse Contact Finder is not checking admin-c from org object? In-Reply-To: <20140213131222.GA10007@hydra.ck.polsl.pl> References: <5834548.HuyDks0DFr@levipc> <2971421.zURX3FjWYu@levipc> <20140213131222.GA10007@hydra.ck.polsl.pl> Message-ID: <2545149.yRxT0lN1IZ@levipc> Dear Piotr, That's all i needed to know! Thank You very much for your time! On Thursday 13 February 2014 14:12:22 Piotr Strzyzewski wrote: > On Thu, Feb 13, 2014 at 04:58:42PM +0400, Levon Avagyan wrote: > > Dear Levon > > > Thanks for reply! > > > > You are absolutely right! I was using first resource to verify my changes. > > So as I understood my current DB information is OK from RIPE's point of > > view and the tool is not processing it correctly. > > And from the rest of Your message I understood that it wise to duplicate > > abuse contact in org: object as abuse-mailbox: attribute until everything > > will settle down right? > > I think that this will be helpful to you: > https://www.ripe.net/lir-services/resource-management/faqs-for-abuse-c > > Although I personally put abuse-mailbox in both ORGANISATION and ROLE > objects, the only one which is necessary is the one from the ROLE > object referenced from the ORGANISATION referenced from the resource. > > Best regards, > Piotr -- Best regards Levon Avagyan Core network engineer Ucom LLC From christian.teuschel at ripe.net Thu Feb 13 14:42:42 2014 From: christian.teuschel at ripe.net (Christian Teuschel) Date: Thu, 13 Feb 2014 14:42:42 +0100 Subject: [anti-abuse-wg] Abuse Contact Finder is not checking admin-c from org object? In-Reply-To: <5834548.HuyDks0DFr@levipc> References: <5834548.HuyDks0DFr@levipc> Message-ID: <52FCCBD2.3090105@ripe.net> Hi Levon, You did it correctly but we had an issue with the internal API, which got fixed. If you try it now you will see the abuse-c contact returned. 5 stars included :) Apologises for the inconvenience, Christian On 13/02/14 10:46, Levon Avagyan wrote: > Hi all, > > I need some help with proper setup of RIPE DB. > I am currently updating our records and noticed that if i am adding ROLE abuse-c: "UCAB101-RIPE" with abuse-mailbox: "abuse at ucom.am" attribute to our org :"ORG-UL31-RIPE" object, it is not showing up in "Abuse Contact Finder" tool in Ripe Stat. > It shows me message: "No contact information found for 44395" > While if i am adding abuse-mailbox: attribute to org: object directly, it finds abuse contact just fine, however gives us 4/5 stars. > > Is it a known bug or am i doing something wrong? > > Thanks in advance. > > P.S. > Query: "whois as44395" returns abuse contact just fine. > -------------- next part -------------- A non-text attachment was scrubbed... Name: christian_teuschel.vcf Type: text/x-vcard Size: 342 bytes Desc: not available URL: From levon.avagyan at ucom.am Thu Feb 13 14:53:57 2014 From: levon.avagyan at ucom.am (Levon Avagyan) Date: Thu, 13 Feb 2014 17:53:57 +0400 Subject: [anti-abuse-wg] Abuse Contact Finder is not checking admin-c from org object? In-Reply-To: <52FCCBD2.3090105@ripe.net> References: <5834548.HuyDks0DFr@levipc> <52FCCBD2.3090105@ripe.net> Message-ID: <3481157.H9odEUNavl@levipc> Hello Christian, WOW. that was really fast! :-) Thank You so much! On Thursday 13 February 2014 14:42:42 Christian Teuschel wrote: > Hi Levon, > > You did it correctly but we had an issue with the internal API, which > got fixed. If you try it now you will see the abuse-c contact returned. > 5 stars included :) > > Apologises for the inconvenience, > Christian > > On 13/02/14 10:46, Levon Avagyan wrote: > > Hi all, > > > > I need some help with proper setup of RIPE DB. > > I am currently updating our records and noticed that if i am adding ROLE > > abuse-c: "UCAB101-RIPE" with abuse-mailbox: "abuse at ucom.am" attribute to > > our org :"ORG-UL31-RIPE" object, it is not showing up in "Abuse Contact > > Finder" tool in Ripe Stat. It shows me message: "No contact information > > found for 44395" > > While if i am adding abuse-mailbox: attribute to org: object directly, it > > finds abuse contact just fine, however gives us 4/5 stars. > > > > Is it a known bug or am i doing something wrong? > > > > Thanks in advance. > > > > P.S. > > Query: "whois as44395" returns abuse contact just fine. -- Best regards Levon Avagyan Core network engineer Ucom LLC From christian.teuschel at ripe.net Thu Feb 13 14:57:11 2014 From: christian.teuschel at ripe.net (Christian Teuschel) Date: Thu, 13 Feb 2014 14:57:11 +0100 Subject: [anti-abuse-wg] Abuse Contact Finder is not checking admin-c from org object? In-Reply-To: <20140213123723.GE19293@hydra.ck.polsl.pl> References: <5834548.HuyDks0DFr@levipc> <20140213123723.GE19293@hydra.ck.polsl.pl> Message-ID: <52FCCF37.5050707@ripe.net> Hi Piotr, The Abuse-Contact-Finder in RIPEstat considers aut-num objects as well. The article you referenced describes an out-dated version of the Abuse-Contact-Finder which is not part of RIPEstat. That RIPEstat considers aut-num objects could have been seen as a benefit especially in the pre abuse-c era. But we understood that this fishing for abuse contacts in the RIPE DB does not always deliver high-quality results. This was, by the way, the reason we came up with the star rating. I hope that as soon as we have the abuse-c rolled out completely this will not matter anymore. Kind regards, Christian On 13/02/14 13:37, Piotr Strzyzewski wrote: > On Thu, Feb 13, 2014 at 01:46:20PM +0400, Levon Avagyan wrote: > > Dear Levon > >> I need some help with proper setup of RIPE DB. >> I am currently updating our records and noticed that if i am adding ROLE abuse-c: "UCAB101-RIPE" with abuse-mailbox: "abuse at ucom.am" attribute to our org :"ORG-UL31-RIPE" object, it is not showing up in "Abuse Contact Finder" tool in Ripe Stat. >> It shows me message: "No contact information found for 44395" >> While if i am adding abuse-mailbox: attribute to org: object directly, it finds abuse contact just fine, however gives us 4/5 stars. >> >> Is it a known bug or am i doing something wrong? >> >> Thanks in advance. >> >> P.S. >> Query: "whois as44395" returns abuse contact just fine. > > Short answer: Don't use it. ;) > > I assume that the tool you are using is this one: > https://stat.ripe.net/special/abuse > > The correct one is this one: > http://apps.db.ripe.net/search/abuse-finder.html > > However, the first one (from Ripe Stat) is still widely used due the > fact that abuse-c is not fully deployed yet. Among others, the notable > Abusix.org claims to use it. > > If I understand > https://labs.ripe.net/Members/Paul_P_/content-abuse-finder correctly, > this tool doesn't look at aut-num at all. Please corect me if I'm wrong. > > Moreover, this tool is full of false positives, no matter of how many > stars it will show at the end. For example - it was just two weeks ago > when I have deliberately created the situation that for not mine and not > maintained by me inetnum I have forced this tool to claim with 4/5 stars > that abuse at example.net is the contact information. Right now this is > impossible, since I have notified about this the RIPE NCC and this tool > is filtering the RFC-2606 dummy addresses out. Unfortunately, this was > just one of examples. > > Best regards, > Piotr > -------------- next part -------------- A non-text attachment was scrubbed... Name: christian_teuschel.vcf Type: text/x-vcard Size: 355 bytes Desc: not available URL: From riyaz_mariner17 at hotmail.com Mon Feb 17 06:20:32 2014 From: riyaz_mariner17 at hotmail.com (mohammed riyaz) Date: Mon, 17 Feb 2014 10:50:32 +0530 Subject: [anti-abuse-wg] enquiry Message-ID: hi, am receiving fake messages from this is ip address 212.52.84.102. is this your ip address pls confrim n tell me. thanks -------------- next part -------------- An HTML attachment was scrubbed... URL: From ahmed at gccitcom.com Mon Feb 17 09:26:43 2014 From: ahmed at gccitcom.com (Ahmed issam Al-Shaikh) Date: Mon, 17 Feb 2014 11:26:43 +0300 Subject: [anti-abuse-wg] enquiry In-Reply-To: References: Message-ID: <003e01cf2bb9$ff1760a0$fd4621e0$@gccitcom.com> No its not From: anti-abuse-wg-bounces at ripe.net [mailto:anti-abuse-wg-bounces at ripe.net] On Behalf Of mohammed riyaz Sent: Monday, February 17, 2014 8:21 AM To: anti-abuse-wg at ripe.net Subject: [anti-abuse-wg] enquiry hi, am receiving fake messages from this is ip address 212.52.84.102. is this your ip address pls confrim n tell me. thanks -------------- next part -------------- An HTML attachment was scrubbed... URL: From brian.nisbet at heanet.ie Mon Feb 17 10:05:25 2014 From: brian.nisbet at heanet.ie (Brian Nisbet) Date: Mon, 17 Feb 2014 09:05:25 +0000 Subject: [anti-abuse-wg] enquiry In-Reply-To: References: Message-ID: <5301D0D5.8000502@heanet.ie> Mohammed, That IP address is in use by Libero / Italia Online, an Italian ISP. You should direct any abuse reports to abuse at libero.it Brian, Co-Chair, RIPE AA-WG mohammed riyaz wrote the following on 17/02/2014 05:20: > hi, > am receiving fake messages from this is ip address > > 212.52.84.102. is this your ip address pls confrim n tell me. > thanks > From 8916 at 5800672.ru Sat Feb 22 20:31:13 2014 From: 8916 at 5800672.ru (=?koi8-r?B?6czY0SDwz8zV28vJzg==?=) Date: Sat, 22 Feb 2014 23:31:13 +0400 Subject: [anti-abuse-wg] ABUSE IP 176.57.210.40 planetadeneg.com Message-ID: <94091393097473@web11g.yandex.ru> Welcome to the IP 176.57.210.40 planetadeneg.com domain is the so-called HYIP project administrator who collects the money and cheating people. Please take steps to block IP 176.57.210.40 work or I will be forced to contact the police. ? ?????????, ???????? ???? ???.: 7(916)5800672 From rezaf at mindspring.com Mon Feb 24 13:43:56 2014 From: rezaf at mindspring.com (Reza Farzan) Date: Mon, 24 Feb 2014 07:43:56 -0500 (GMT-05:00) Subject: [anti-abuse-wg] Israel Police Contact E-mail Message-ID: <13769993.1393245837168.JavaMail.root@elwamui-little.atl.sa.earthlink.net> Hello, Does anyone here has an e-mail contact for Israel Police? Their contact page, http://www.police.gov.il/eng_contacts.aspx, only shows telephone numbers. Thank you, Reza Farzan From james.davis at ja.net Wed Feb 26 10:26:06 2014 From: james.davis at ja.net (James Davis) Date: Wed, 26 Feb 2014 09:26:06 +0000 Subject: [anti-abuse-wg] Israel Police Contact E-mail In-Reply-To: <13769993.1393245837168.JavaMail.root@elwamui-little.atl.sa.earthlink.net> References: <13769993.1393245837168.JavaMail.root@elwamui-little.atl.sa.earthlink.net> Message-ID: <530DB32E.1040504@ja.net> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 24/02/2014 12:43, Reza Farzan wrote: > Does anyone here has an e-mail contact for Israel Police? > > Their contact page, http://www.police.gov.il/eng_contacts.aspx, > only shows telephone numbers. Contact details sent off-list. James - -- James Davis 0300 999 2340 (+44 1235 822340) Senior CSIRT Member Lumen House, Library Avenue, Didcot, Oxfordshire, OX11 0SG -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJTDbMuAAoJEHRLPxE0xhCCklsIAM+06RGc781taa94Mj8WUgUj 3tsxU2zFdWYCuhkaW0h6LBE9AeXCJsXhcd4CbbK3k6DA8YmAGuPwNO/wMLMA23ya hIU7AAwMgkRHcRmJszJZ2soNCweUdreq/jyPWGHvxj3o+4lZApSlqUeeEh4mwe0T OCx2zEM5WYjCygvEruWqNCigJlCTK0B8nuLJP4v35qRT01LXPKy8uVZfiRGDoZxT TOBTtm7U+z8IdnvH55lFoTdy3GtxltO2OCoDTTX9HmtdYwUH14M2qHDFI0JvuOvF PQP/eyh2OSuTI7HF2z292mtg7Ve+wVKkWvHERxAZtGOWXpdjLQjOriGbOWbxA9E= =kmxa -----END PGP SIGNATURE----- Janet(UK) is a trading name of Jisc Collections and Janet Limited, a not-for-profit company which is registered in England under No. 2881024 and whose Registered Office is at Lumen House, Library Avenue, Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. 614944238 From brak at gameservers.com Wed Feb 26 22:38:04 2014 From: brak at gameservers.com (Brian Rak) Date: Wed, 26 Feb 2014 16:38:04 -0500 Subject: [anti-abuse-wg] Overview of abuse-c? Message-ID: <530E5EBC.9080906@gameservers.com> Is there a (short) simple overview of what abuse-c contacts are, and why they're useful? I've been in contact with a couple datacenters who respond to my abuse reports with "please see this other address, like whois says". I let them know their abuse-c entry points to their email address, and they proceed to tell me the exact same thing. It would be quite handy if there were a page with a short description of what it is, and why they should implement it. So far, the only thing I've found is https://labs.ripe.net/Members/denis/creating-and-finding-abuse-contacts-in-the-ripe-database , which is pretty detailed. From denis at ripe.net Thu Feb 27 10:52:16 2014 From: denis at ripe.net (Denis Walker) Date: Thu, 27 Feb 2014 10:52:16 +0100 Subject: [anti-abuse-wg] Overview of abuse-c? In-Reply-To: <530E5EBC.9080906@gameservers.com> References: <530E5EBC.9080906@gameservers.com> Message-ID: <530F0AD0.1090906@ripe.net> Dear Brian There is an FAQ that gives an overview and simple instructions for setting up your abuse details or changing them https://www.ripe.net/lir-services/resource-management/faqs-for-abuse-c Please let me know if you think there is anything missing or not clear. Regards Denis Walker Business Analyst RIPE NCC Database Team On 26/02/2014 22:38, Brian Rak wrote: > Is there a (short) simple overview of what abuse-c contacts are, and > why they're useful? > > I've been in contact with a couple datacenters who respond to my abuse > reports with "please see this other address, like whois says". I let > them know their abuse-c entry points to their email address, and they > proceed to tell me the exact same thing. > > It would be quite handy if there were a page with a short description > of what it is, and why they should implement it. So far, the only > thing I've found is > https://labs.ripe.net/Members/denis/creating-and-finding-abuse-contacts-in-the-ripe-database > , which is pretty detailed. > > -------------- next part -------------- An HTML attachment was scrubbed... URL: