[anti-abuse-wg] 2019-04 New Policy Proposal (Validation of "abuse-mailbox")

And of course ripe isn't the internet police eh

--srs

________________________________
From: anti-abuse-wg <anti-abuse-wg-bounces at ripe.net> on behalf of furio ercolessi <furio+as at spin.it>
Sent: Friday, May 17, 2019 7:24 PM
To: anti-abuse-wg at ripe.net
Subject: Re: [anti-abuse-wg] 2019-04 New Policy Proposal (Validation of "abuse-mailbox")

On Fri, May 17, 2019 at 10:24:51AM +0000, Suresh Ramasubramanian wrote:
> [...]
> It seems entirely possible for anybody at all to register a company and follow the paperwork
> required to become a LIR and then allocate /14s at a time back in the day and maybe smaller
> netblocks now to malicious actors.

LIRs in the RIPE area are now limited to a single /22 ( https://www.ripe.net/publications/docs/ripe-708#51 ),
and as a consequence of this we are now seeing people creating multiple LIRs one
after the other, each getting a single /22, and amassing a large of amount of v4 space
with this simple trick.

ARIN seems now to be going more aggressively than in the past after these guys
( https://krebsonsecurity.com/2019/05/a-tough-week-for-ip-address-scammers/ ).

furio ercolessi


-------------- next part --------------
An HTML attachment was scrubbed...
URL: </ripe/mail/archives/anti-abuse-wg/attachments/20190517/8624bd8b/attachment.html>