[anti-abuse-wg] RIPE NCC Abuse Complaints, Audits and Reports

Athina Fragkouli wrote:

> Dear colleagues,
> 
> Following discussions and comments on the mailing list, we would like to
> inform you about the current status of audits and handling abuse
> complaints, and on plans to improve the way we deal with these.

Thanks for the numbers!

> Currently, abuse complaints come in via abuse at ripe.net.

Just wondering....

On the sender's end, an address of "abuse at something.tld" usually, raises
some semantic expectations, in some environments.

I am not proposing to abandon or to replace "abuse at ripe.net", because it
probably does serve a valid purpose, within the fremawork of the assumed
semantics (as Peter has pointed out already!),
but rather to create a sort of formal complaints process against an LIR.

This process of course SHOULD include some serious safeguards
(<quote>When this is a valid complaint</quote>),
to avoid beeing misused for DoS attacks on the administrative plane ;-)

Wilfried.

> When this is a
> valid complaint, we investigate the matter, we contact the relevant LIR
> and we execute an audit on the LIR.
> 
> Apart from audits initiated by complaints, we also execute audits of
> randomly selected LIRs as well as LIRs in whose registration records we
> notice inconsistencies.
> 
> Here are some statistics on the number of audits and on the outcomes of
> those audits:
> - 2009: 319 audits, all LIRs were in order or complied with auditors’
> instructions
> - 2010: 447 audits, seven PI assignments were deregistered
> - 2011: 234 audits, 124 are complete, two LIRs were closed as a result
> of the audits, two PI assignments were deregistered, 110 audits are ongoing
> 
> For confidentiality reasons, the RIPE NCC does not report on individual
> audits, on the changes/amendments made in the audits or on the
> comments/communication with the LIR during the audit.
> 
> Reports on audits will take place during the update from the RIPE NCC at
> the RIPE NCC Services Working Group at every RIPE Meeting.
> 
> We acknowledge there is a lack of clarity and transparency on our abuse
> and complaint procedure. We are in the process of redeveloping this
> process to improve our services in this area. We will present the
> revised process during the RIPE 63 Meeting in Vienna.
> 
> Because we are in the process of setting this up, we welcome your
> feedback and any experiences you would like to share on this mailing
> list. We will not comment on each and every suggestion, but we will take
> the feedback/comments into account in developing this new procedure.
> 
> Kind regards,
> Athina Fragkouli
> RIPE NCC
> 
>