[anti-abuse-wg] Bulletproof servers causing mischief on the internet

> On 19 Jan 2024, at 10:35, Carlos Friaças via anti-abuse-wg <anti-abuse-wg at ripe.net> wrote:
> 
> 
> 
> Greetings,
> 
> Maybe we need a bulletproof hosting directory on the web? :-))
> 
> From what i've learned, illegal content depends on jurisdiction, and effectively that's what greatly impacts the possibility of takedowns.

Then there is an easy check that should be made: does the LIR that claims to be in that jurisdiction have any hardware and any connectivity from there, or is the majority of their network located outside that jurisdiction and is the 'address' just a postal address?


Jurisdiction is a very tricky thing: is it the "address of the LIR" (eg Seychelles, Bahamas, ...) or is it where the physical hardware is located that actually does the harmful thing (eg hosting illegal content, bulletproof etc etc).


Outside of the NCC though, an ISP can always apply Spamhaus DROP and similar things to their own network.
At that point the only thing these LIRs are doing is causing more IPv4 exhaustion..... though we'll repeat this whole story with IPv6 again... (at least then with easy to block /32s instead of a bunch of /24s from various places, unless one drops ASNs completely and/or start doing the white-list ASN game... which kinda is happening already)

Greets
 Jeroen