Re: [anti-spam-wg] Non-cooperation of RIPE ISP in investigating report of email abuse (spam)

[Brian Nisbet <brian.nisbet@localhost]

Michele,

The query is over the abuse details they have listed in both
the RIPE database and places like abuse.net, rather than phone
or postal details.

That aside, however, currently there is no policy or procedures
for RIPE to follow up on incorrect contact information in the
database.

Motion was made in this direction after the last conversation
on this topic in August of 2007, however nothing was achieved.
I will not make any rash promises at this point and I suspect
a rehashing of the discussion from last year is unlikely to be
helpful without some new input.

In addition while RIPE has produced a number of documents
(most recently RIPE-409) regarding best practice for the members
neither the NCC nor this WG are empowered to act to stop an
ISP or their customers from sending out unsolicited emails.
So, in short, we are not the right people to whom to report
this issue.

Regards,

Brian.

Michele Neylon :: Blacknight wrote:

They probably aren't keeping their RIPE details up to date ...

In any case, you obviously didn't try very hard to contact them, as they are

publishing full contact details on their site:

http://www.awalnet.net.sa/English/Files/contact.asp

Mr Michele Neylon
Blacknight Solutions
Hosting & Colocation, Brand Protection
http://www.blacknight.com/
http://blog.blacknight.com/
Intl. +353 (0) 59  9183072
Locall: 1850 929 929
Direct Dial: +353 (0)59 9183090
Fax. +353 (0) 1 4811 763
-------------------------------
Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty
Road,Graiguecullen,Carlow,Ireland  Company No.: 370845

________________________________

From: anti-spam-wg-admin@localhost [
	    
	    
] On
Behalf Of rubaduk
Sent: 09 January 2008 23:56
Subject: [anti-spam-wg] Non-cooperation of RIPE ISP in investigating report
of email abuse (spam)


Dear Sirs,

I'm attempting to report an instance of spam originating from the IP

86.60.49.241 .  The RIPE database indicates that the proper venue for this
report is abuse@localhost .  However, the server at that address
rejects with the admonition, "You are not allowed to send emails!"
(Diagnostic code: smtp;550 5.7.1).  The hostmaster gives the same reply.

I'm fairly new to investigating spam, being recently inspired by a few

prodigious spammers that flood my inbox daily with repetitive invitations.
Among these is US Pharmacy, which somehow causes its unwanted blandishments
to be sent to me from networks all over the world, including the above ISP.
I'm not sure how this is accomplished, but I suspect a virus of some sort
infects the sending computer which allows it to be controlled remotely.

Not allowed, R.Duck.