<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> </head> <body> <div> <div> <div> <div style="direction: ltr;">The number of outright fake networks with shell company contacts might have something to do with that eastern european number :)</div> <div><br> </div> <div style="direction: ltr;">Or there's one or two outfits that can't make up their mind whether they are in the Netherlands, Dubai or Belize.</div> <div style="direction: ltr;"></div> </div> <div><br> </div> <div class="ms-outlook-ios-signature"> <div style="direction: ltr;">--srs</div> </div> </div> <div> </div> <hr style="display:inline-block;width:98%" tabindex="-1"> <div id="divRplyFwdMsg" dir="dir="ltr""><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> anti-abuse-wg <anti-abuse-wg-bounces@ripe.net> on behalf of Thomas Hungenberg <th@cert-bund.de><br> <b>Sent:</b> Tuesday, February 19, 2019 6:37 PM<br> <b>To:</b> Carlos Friaças<br> <b>Cc:</b> anti-abuse-wg@ripe.net<br> <b>Subject:</b> Re: [anti-abuse-wg] Decision on Proposal 2017-02 <div> </div> </font></div> On 19.02.19 13:23, Carlos Friaças wrote: <br> > Regarding the non-"DE" the figures are worse, right? <br> <br> The statistics are based on our automated reports only. <br> Our automated system is sending 8,000+ reports per day - but only <br> addresses abuse contacts for networks registered with country code <br> "DE" directly. Data for networks registered with other country codes <br> is sent with aggregated reports to the respective national CSIRTs. <br> <br> I don't have any statistics on bounces for reports manually sent <br> to abuse contacts for networks in other countries directly. <br> <br> But yes, it looks like the number of invalid contacts for networks <br> in other countries is (much) higher, in particular for Eastern Europe. <br> <br> <br> - Thomas <br> <br> CERT-Bund Incident Response & Malware Analysis Team <br> <br> <br> </div> </body> </html>