From jiaoshuo1443 at 163.com Sat Jun 6 14:46:46 2015 From: jiaoshuo1443 at 163.com (jiaoshuo1443 at 163.com) Date: Sat, 6 Jun 2015 20:46:46 +0800 (CST) Subject: [anti-abuse-wg] To anti-abuse-wg@ripe.net RB EyegIasses Hottest Styles from 14.36 Message-ID: <2183da9e.1198d.14dc8e8c13a.Coremail.jiaoshuo1443@163.com> Dear My friend R&B Eyeg1asses Hottest Styles from 14.13 Order Discount Eyeglasses Shop Now. And Save Up to 95%! Free Shipping On Order 50USD www.bbbzl.top Have a good day Sean -------------- next part -------------- An HTML attachment was scrubbed... URL: From denatrisconsult at hotmail.nl Mon Jun 8 13:52:55 2015 From: denatrisconsult at hotmail.nl (Wout de Natris) Date: Mon, 8 Jun 2015 13:52:55 +0200 Subject: [anti-abuse-wg] anti-abuse-wg Digest, Vol 44, Issue 1 In-Reply-To: References: Message-ID: Interesting. Spam over anti-abuse lsit. Recently malware over internal IGF list. What is this world coming to? Wout - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - De Natris Consult Raaphorst 33 Tel: +31 648388813 2352 KJ Leiderdorp Skype: wout.de.natris denatrisconsult at hotmail.nl http://www.denatrisconsult.nl Blog http://woutdenatris.wordpress.com > From: anti-abuse-wg-request at ripe.net > Subject: anti-abuse-wg Digest, Vol 44, Issue 1 > To: anti-abuse-wg at ripe.net > Date: Mon, 8 Jun 2015 12:00:01 +0200 > > Send anti-abuse-wg mailing list submissions to > anti-abuse-wg at ripe.net > > To subscribe or unsubscribe via the World Wide Web, visit > https://www.ripe.net/mailman/listinfo/anti-abuse-wg > or, via email, send a message with subject or body 'help' to > anti-abuse-wg-request at ripe.net > > You can reach the person managing the list at > anti-abuse-wg-owner at ripe.net > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of anti-abuse-wg digest..." > > > Today's Topics: > > 1. To anti-abuse-wg at ripe.net RB EyegIasses Hottest Styles from > 14.36 (jiaoshuo1443 at 163.com) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sat, 6 Jun 2015 20:46:46 +0800 (CST) > From: jiaoshuo1443 at 163.com > To: anti-abuse-wg > Subject: [anti-abuse-wg] To anti-abuse-wg at ripe.net RB EyegIasses > Hottest Styles from 14.36 > Message-ID: <2183da9e.1198d.14dc8e8c13a.Coremail.jiaoshuo1443 at 163.com> > Content-Type: text/plain; charset="gbk" > > Dear My friend > > R&B Eyeg1asses Hottest Styles from 14.13 > Order Discount Eyeglasses Shop Now. And Save Up to 95%! > Free Shipping On Order 50USD > www.bbbzl.top > > Have a good day > Sean > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: > > End of anti-abuse-wg Digest, Vol 44, Issue 1 > ******************************************** -------------- next part -------------- An HTML attachment was scrubbed... URL: From ops.lists at gmail.com Mon Jun 8 14:04:33 2015 From: ops.lists at gmail.com (Suresh Ramasubramanian) Date: Mon, 8 Jun 2015 17:34:33 +0530 Subject: [anti-abuse-wg] anti-abuse-wg Digest, Vol 44, Issue 1 In-Reply-To: References: Message-ID: On 08-Jun-2015, at 5:22 pm, Wout de Natris wrote: > > Interesting. Spam over anti-abuse lsit. Recently malware over internal IGF list. What is this world coming to? > > Wout postmaster and abuse mailboxes have historically been spam magnets. I like it - it reminds me of this old cartoon I saw where Donald Duck - in full hunter?s costume - is chasing Goofy (a tarzan style wild man, in this cartoon) They both rush straight into a lion?s den - with the lion sitting outside. In a priceless sequence, the lion gets this surprised look on its face, and then happily starts licking its lips at the sight of lunch running into his cave. That is the kind of feeling I get when this sort of thing happens. ?srs -------------- next part -------------- An HTML attachment was scrubbed... URL: From rfg at tristatelogic.com Mon Jun 8 20:30:51 2015 From: rfg at tristatelogic.com (Ronald F. Guilmette) Date: Mon, 08 Jun 2015 11:30:51 -0700 Subject: [anti-abuse-wg] anti-abuse-wg Digest, Vol 44, Issue 1 In-Reply-To: Message-ID: <58409.1433788251@server1.tristatelogic.com> In message , Wout de Natris wrote: >Interesting. Spam over anti-abuse lsit. Recently malware over internal IGF >list. What is this world coming to? Not to worry mate! If things keep going the way they are going, pretty soon the NSA will be taking the lead in hunting down and eradicating spammers... http://www.nytimes.com/2015/06/05/us/hunting-for-hackers-nsa-secretly-expands-internet-spying-at-us-border.html From brian.nisbet at heanet.ie Mon Jun 22 17:39:46 2015 From: brian.nisbet at heanet.ie (Brian Nisbet) Date: Mon, 22 Jun 2015 16:39:46 +0100 Subject: [anti-abuse-wg] Fwd: [aa-wg-chair] AAWG - Draft RIPE 70 minutes In-Reply-To: <5581357C.9080807@ripe.net> References: <5581357C.9080807@ripe.net> Message-ID: <55882C42.2030901@heanet.ie> Afternoon, Please find below the draft minutes from the AA-WG session at RIPE71. Please let me know if any corrections are required. Thanks, Brian ---- Draft Minutes: Anti-Abuse WG ? RIPE 70 Date: Wednesday, 13 May 14:00 - 15:30 Location: Okura Hotel, Amsterdam WG Chairs: Brian Nisbet, Tobias Knecht Scribe: Matt Parker Chat Monitor: Mirjam K?hne A. Administrative Matters Brian opened the session and welcomed the attendees. He introduced the WG co-chair, Tobias Knecht, and thanked the support staff including the scribe, chat monitor and stenographer. Brian mentioned that the minutes of RIPE 69 were circulated and did not receive any comments so they are now deemed official. B. Update B1. AA-WG Chair Matters Tobias Knecht, WG co-chair, explained that Brian Nisbet would be stepping down as WG co-chair and that there was one new candidate for the role - Brian Nisbet. Tobias explained that there had been no feedback on the mailing list and unless there were any objections in the room Brian would be confirmed as the WG co-chair for a further three years. There were no objections and Tobias congratulated Brian on his appointment. Brian thanked the WG for it?s support and for putting in place a process for electing new co-chairs and giving other people the opportunity to get involved in the Working Group. Brian stressed that this new process only applies to the Anti-Abuse Working Group (and not all Working Groups as originally mentioned in the agreement sent to the mailing list. B2. Recent Mailing List Discussions The most recent discussion on the AA mailing list concerned abuse-c contact methods. People were asking about other solutions, for example web forms, rather than solely using email for abuse reports. Brian believed that this was sufficiently discussed on the mailing list but asked for comments from the audience. Piotr Strzyzewski, Database WG co-chair, approached the microphone and noted that he had posted an email to the Euro-IX mailing list to bring the abuse-c discussion to their attention. He also mentioned the proposed 'cleanup' of abuse contacts that is currently being discussed in BoF groups in both the anti-abuse and database working groups. Brian explained that he believed the proper place for the discussion was the Database WG and the associated mailing list but he will keep a close eye on it in relation to the activities of the Anti-Abuse WG. C. Policies Brian announced that the only policy currently involving the Anti-Abuse WG is the abuse-c cleanup that was discussed in the previous agenda item. In addition Brian spoke about a discussion earlier in the day during the Address Policy WG where the RIPE NCC has been asked about performing regular verification checks on AS Number usage. The Anti-Abuse WG had previously discussed regular verification of information and, with this in mind, Brian will keep an eye on the discussion in Address Policy. Brian?s only comment at this stage was that the proposal could potentially open the door to adding extra information to the verification email. He stressed that his comment was neither negative nor positive ? simply something to be aware of. D. Interactions D1. Working Groups Brian commented that the regular interaction with the Database WG was good and should continue. D2. RIPE NCC Government/LEA Interactions Update ? Marco Hogewoning, RIPE NCC The presentation is available at: https://ripe70.ripe.net/presentations/58-MH-RIPE70-AA-LEA-update-draft-AG.pdf Alexander Isavin, private person, mentioned that he had read the report on LEA requests and asked whether the presentations from the meeting with the UK national crime agency would be published. Marco replied that the RIPE NCC would publish their presentation but the UK National Crime Agency would need to give permission to also share their presentation. Alexander also raised the question of whether the training and education that the RIPE NCC is providing to LEAs could be abused. He asked how the public could control the activities of the LEAs. Brian noted that the education and training provided by the RIPE NCC only shows LEAs how to use the relevant tools to access publicly available information. Requests for private information would require the usual court orders etc. D3. AA-WG at MAAWG Brian announced that he and his co-chair, Tobias, would be attending at the Mobile Anti-Abuse Working Group in Dublin this year. Brian will be presenting about the RIPE community, the AA-WG and the RIPE NCC. E. Presentations E1. Mapping out Cyber Crime Infrastructure - A Law Enforcement Approach - Jon Flaherty, UK National Crime Agency National Cyber Crime Unit The presentation is available at: https://ripe70.ripe.net/presentations/56-Mapping-An-LE-Approach-RIPE-70-Final.pdf Jim Reid, RTFM, thanked Jon for coming and speaking to the working group and commented that it was useful for the Internet community to get an understanding of the challenges that are facing law enforcement. He also commented that the focus of the presentation was public data sources and asked what law enforcement were able to do about criminals who were anonymising their IP addresses. Jon replied that this is a challenge for law enforcement and that although they have some tools available to them there is still some work to do. Jim Reid commented that it must be problematic dealing with multiple jurisdictions when trying to tackle cyber crime. Marco Hogewoning asked if they were able to share intelligence cross-border or if they were limited to sharing only with UK ISPs. Jon replied that this was something that was still under legal consideration and is certainly of interest. Alexander Isavin, private person, asked if Jon could share the results of the research in terms of crimes prevented, criminals jailed etc. Jon replied that they would be happy to share their findings but that currently these are ongoing investigations and they are not at a stage where findings can be shared yet. Brian added that over the years the community interaction with law enforcement has gotten better and better and that he hopes this will not be the last presentation of this kind that we have at RIPE meetings. E2. DNS-Based DDoS: Fast Changing Threat - Bruce Van Nice, Nominum The presentation is available at: https://ripe70.ripe.net/presentations/103-DNSBasedDDoSEvolvingThreatRIPEMAYl2015FINAL.pdf There were no questions. X. A.O.B. Piotr Strzyzewski, Database WG co-chair, raised attention to the ongoing discussion in the Database Working Group about UTF8 implementation in the RIPE Database. Brian encouraged the attendees to take a look. R?diger Volk, Deutsche Telekom Technik, asked whether other attendees had been spammed by one of the meeting sponsors and commented that we should not endorse this type of activity. Brian replied that he was not aware of this but would be happy to formally take it up with the relevant parties at the RIPE NCC. Blake Willis, L33 Networks, spoke about the ?traceability? of users and discussed challenge of dealing with differing ?requirements? for collecting, storing and requesting data across Europe. He would like to encourage more discussion about technologies such as IPv6 and Carrier Grade NAT as well as standardisation of logging requirements. He believes that the Anti-Abuse Working Group is a good place for this discussion. Z. Agenda for RIPE 71 Brian reminded everybody that agenda items can be submitted at any time, they do not have to wait for the final two months. From Piotr.Strzyzewski at polsl.pl Mon Jun 22 18:50:30 2015 From: Piotr.Strzyzewski at polsl.pl (Piotr Strzyzewski) Date: Mon, 22 Jun 2015 18:50:30 +0200 Subject: [anti-abuse-wg] Fwd: [aa-wg-chair] AAWG - Draft RIPE 70 minutes In-Reply-To: <55882C42.2030901@heanet.ie> References: <5581357C.9080807@ripe.net> <55882C42.2030901@heanet.ie> Message-ID: <20150622165030.GB530@hydra.ck.polsl.pl> On Mon, Jun 22, 2015 at 04:39:46PM +0100, Brian Nisbet wrote: > B2. Recent Mailing List Discussions > > The most recent discussion on the AA mailing list concerned abuse-c > contact methods. People were asking about other solutions, for example > web forms, rather than solely using email for abuse reports. Brian > believed that this was sufficiently discussed on the mailing list but > asked for comments from the audience. > > Piotr Strzyzewski, Database WG co-chair, approached the microphone and > noted that he had posted an email to the Euro-IX mailing list to bring It was ERX-HOLDERS mailing list. > the abuse-c discussion to their attention. He also mentioned the > proposed 'cleanup' of abuse contacts that is currently being discussed > in BoF groups in both the anti-abuse and database working groups. Piotr -- gucio -> Piotr Strzy?ewski E-mail: Piotr.Strzyzewski at polsl.pl From brian.nisbet at heanet.ie Tue Jun 30 12:21:42 2015 From: brian.nisbet at heanet.ie (Brian Nisbet) Date: Tue, 30 Jun 2015 11:21:42 +0100 Subject: [anti-abuse-wg] Fwd: [aa-wg-chair] AAWG - Draft RIPE 70 minutes In-Reply-To: <20150622165030.GB530@hydra.ck.polsl.pl> References: <5581357C.9080807@ripe.net> <55882C42.2030901@heanet.ie> <20150622165030.GB530@hydra.ck.polsl.pl> Message-ID: <55926DB6.5090602@heanet.ie> Thanks for this Piotr, any other comments from anyone? Brian Brian Nisbet, Network Operations Manager HEAnet Limited, Ireland's Education and Research Network 1st Floor, 5 George's Dock, IFSC, Dublin 1 Registered in Ireland, no 275301 tel: +35316609040 fax: +35316603666 web: http://www.heanet.ie/ On 22/06/2015 17:50, Piotr Strzyzewski wrote: > On Mon, Jun 22, 2015 at 04:39:46PM +0100, Brian Nisbet wrote: >> B2. Recent Mailing List Discussions >> >> The most recent discussion on the AA mailing list concerned abuse-c >> contact methods. People were asking about other solutions, for example >> web forms, rather than solely using email for abuse reports. Brian >> believed that this was sufficiently discussed on the mailing list but >> asked for comments from the audience. >> >> Piotr Strzyzewski, Database WG co-chair, approached the microphone and >> noted that he had posted an email to the Euro-IX mailing list to bring > > It was ERX-HOLDERS mailing list. > >> the abuse-c discussion to their attention. He also mentioned the >> proposed 'cleanup' of abuse contacts that is currently being discussed >> in BoF groups in both the anti-abuse and database working groups. > > Piotr >