This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/[email protected]/
[anti-abuse-wg] Time Stamps (?)
- Previous message (by thread): [anti-abuse-wg] Policy Proposal: Place for Abuse Contact Information
- Next message (by thread): [anti-abuse-wg] Time Stamps (?)
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Ronald F. Guilmette
rfg at tristatelogic.com
Tue Sep 28 01:57:35 CEST 2010
Network abuse, in particular the kind of network abuse where some spammer gets hold of an IP address block so that he can proceed to do snowshoe spamming out of it, is somewhat easier to detect and correctly identify within the ARIN region than other RiR regions due to the fact that ARIN whois records all contain date/time stamps. The date/time stamps on ARIN whois records help to make the true situation apparent whenever a spammer obtains a new IP block and proceeds immediately to start spamming from it. (One look at the whois often makes it obvious why some specific block has suddenly lit up like a Christmas tree, i.e. pumping out spam like there's no tomorrow... because some new resident has just recently moved into that spcific bit of IPv4 space.) So anyway, has it ever been considered to add date/time stamps to RIPE whois records, at least for record _creation_ if not also for last modification time? Regards, rfg
- Previous message (by thread): [anti-abuse-wg] Policy Proposal: Place for Abuse Contact Information
- Next message (by thread): [anti-abuse-wg] Time Stamps (?)
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]