[anti-abuse-wg] hosting with anonymous whois

Karl-Josef,

On Saturday, 2013-01-12 20:43:11 +0100, 
Karl-Josef Ziegler <kjz at gmx.net> wrote:
> Today I go a spam for pillz (CAPRXPHARMACY.RU) 'hosted' at IP
> 84.22.104.117.


> So is it really possible to get an IP block with anonymous whois
> entries at RIPE?

The parent block refers to this organisation object:

organisation:   ORG-CA76-RIPE
org-name:       CB3ROB Ltd. & Co. KG
org-type:       LIR
address:        CB3ROB Ltd. & Co. KG
                Hostmaster
                Koloniestrasse 34
                D-13359 BERLIN
                GERMANY
phone:          +31878747479

A quick Google search reveals what seems to be the home page:

http://www.cb3rob.net/

According to the RIPE policy:

    All assignments and allocations must be registered in the RIPE
    Database. This is necessary to ensure uniqueness and to support
    network operations.

    Only allocations and assignments registered in the RIPE Database
    are considered valid. Registration of objects in the database is
    the final step in making an allocation or assignment. Registration
    data (range, contact information, status etc.) must be correct at
    all times (i.e. they have to be maintained). 

They only have 2 assignments which are not obviously at a fictitious
address, so they seem to be in violation here.

I guess the best thing to do is ask for an audit?

http://www.ripe.net/ripe/docs/audit

Cheers,

--
Shane