[anti-abuse-wg] Abuse Report ignored. What to do as next?

2017-02 doesn’t enforce people really using the abuse-c, neither it constitutes a policy violation to have fake data or non-responsible mailboxes.

You can check how my proposal reached consensus in APNIC and LACNIC and radically changed the situation in both regions, so it is very successful.

Regards,
Jordi

@jordipalet


> El 1 nov 2023, a las 15:21, Sergey Myasoedov <sergey at devnull.ru> escribió:
> 
> 
> We have had 2017-02, which is basically the same as yours 2019-04, except the validation will be done 2x more often.
> 
> But the abuse-c validation does work. What's the problem then?
> 
> 
> --
> Sergey
> 
> 
> 
>> On Nov 1, 2023, at 05:10, jordi.palet--- via anti-abuse-wg <anti-abuse-wg at ripe.net> wrote:
>> 
>> We had a policy proposal to ensure that the abuse mailbox was valid and monitored, but this community didn’t liked it. In other regions it works and it proven to be a very valid tool.
>> 
>> Should we restart that discussion? I’m happy to resubmit the proposal then.
>> 
>> Regards,
>> Jordi
>> 
>> @jordipalet
>> 
>> 
>>> El 31 oct 2023, a las 21:55, U.Mutlu <security at mutluit.com> escribió:
>>> 
>>> Hello,
>>> 
>>> the IP 80.94.95.181 is endlessly (ie. brute-force) trying
>>> to hack our emailserver by attempting to login as a user.
>>> The login attempts of course fail, and we have blocked
>>> that IP in the firewall.
>>> 
>>> But this IP still continues sending packets to our server,
>>> eventhough his packets get dropped/rejected by our firewall.
>>> This now of course constitutes a DoS attack.
>>> 
>>> 10 days ago we filed an Abuse Report to the abuse address
>>> given in the WHOIS database for this IP:
>>> % Abuse contact for '80.94.95.0 - 80.94.95.255' is 'internethosting-ltd at yandex.ru'
>>> 
>>> But this hoster seems to ignore all Abuse Reports,
>>> b/c researching this IP on the web shows that
>>> it's a well known abuser IP and many people have
>>> reported and complained about this IP. For example see this:
>>> https://www.abuseipdb.com/check/80.94.95.181
>>> 
>>> So, what to do if the hoster is uncooperative, like in this case?
>>> Where else to complain, what else to do?
>>> 
>>> Thx
>>> 
>>> U.Mutlu
>>> admin & hostmaster
>>> 
>>> -- 
>>> 
>>> To unsubscribe from this mailing list, get a password reminder, or change your subscription options, please visit: https://mailman.ripe.net/
>> 
>> 
>> **********************************************
>> IPv4 is over
>> Are you ready for the new Internet ?
>> http://www.theipv6company.com
>> The IPv6 Company
>> 
>> This electronic message contains information which may be privileged or confidential. The information is intended to be for the exclusive use of the individual(s) named above and further non-explicilty authorized disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited and will be considered a criminal offense. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited, will be considered a criminal offense, so you must reply to the original sender to inform about this communication and delete it.
>> 
>> 
>> 
>> 
>> 
>> -- 
>> 
>> To unsubscribe from this mailing list, get a password reminder, or change your subscription options, please visit: https://mailman.ripe.net/
> 


**********************************************
IPv4 is over
Are you ready for the new Internet ?
http://www.theipv6company.com
The IPv6 Company

This electronic message contains information which may be privileged or confidential. The information is intended to be for the exclusive use of the individual(s) named above and further non-explicilty authorized disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited and will be considered a criminal offense. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited, will be considered a criminal offense, so you must reply to the original sender to inform about this communication and delete it.