This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/[email protected]/
[db-wg] RIPE abuse finder

Previous message (by thread): [db-wg] RIPE abuse finder
Next message (by thread): [db-wg] RIPE abuse finder
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Denis Walker denis at ripe.net
Wed Mar 6 12:06:33 CET 2013
Hi Max

There is still a link to NETASSIST-MNT:

inetnum:        31.133.32.0 - 31.133.63.255
org:            ORG-FTVM1-RIPE

organisation:   ORG-FTVM1-RIPE
admin-c:        TV1866-RIPE

person:         Trubnikov Valeriy
nic-hdl:        TV1866-RIPE
mnt-by:         NETASSIST-MNT

This nicely highlights the main problem with the legacy abuse contact 
management. It relies on this spaghetti of relationships between many 
objects in the database.

With the introduction of "abuse-c:" this problem will be solved...in 
time. According to the schedule the RIPE NCC published on the Anti-Abuse 
Working Group the "abuse-c:" will be enforced on all allocations within 
6 months and on all PI assignments after a further 6 to 12 months.

If you want a 'quick fix' for the current abuse contact management, 
either change the "admin-c:" of the organisation above, or create a new 
MNTNER for the PERSON object TV1866-RIPE which has no connection with 
NETASSIST. If you are not responsible for this range, then as long as 
you break the connection between this resource and NETASSIST you will no 
longer be reported as the abuse contact by the Abuse Finder tool.

Hope this helps.
Regards
Denis Walker
Business Analyst
RIPE NCC Database Group


On 06/03/2013 11:00, Max Tulyev wrote:
> Daniel,
>
> but exactly for that case 31.133.58.219, this net is not mantained by
> NETASSIST-MNT, it maintaned by TRUBNIKOV-MNT, for inetnum. org, *-c and
> mntner (take a look in my quote or current RIPE DB whois)?
>
> I found it _was_ maintained by NETASSIST-MNT, but a long time ago. May
> be there is some cache not updated?
>
> In some cases it is not possible to ask for it at all, for a different
> reasons. There should be a way to solve it only from my side...
>
> On 05.03.13 16:54, Daniel Karrenberg wrote:
>> Max,
>>
>> In addition to what Dennis has said I point out the following:
>>
>> The address block has no abuse-mailbox registered, otherwise we would
>> have reported that.
>>
>> None of the contacts for the address block have registered an e-mail
>> address, otherwise we could have used that.
>>
>> The admin-c person object for the address block is maintained by
>> NETASSIST-MNT. NETASSIST-MNT has an abuse-mailbox attribute which we
>> reported in the absence of better information. So there apparently is
>> a connection between this address block and yourself.
>>
>> If you wish to avoid abuse e-mail to your abuse-mailbox I suggest you
>> ask the users of this address space to register e-mail addresses we
>> can use. This can be done immediately. In the near future this will be
>> made even easier as explained in
>> https://labs.ripe.net/Members/kranjbar/implementation-details-of-policy-2011-06
>>
>>
>> Daniel
>>
>> On 05.03.2013, at 11:52 , Max Tulyev <president at ukraine.su> wrote:
>>
>>> Hello!
>>>
>>> Recently our company started to receive a lot of strange complaints
>>> relating to network we don't operate or route. I fount these
>>> complaints was sent to points of contact got by RIPE abuse finder.
>>>
>>> This is the fresh sample of it:
>>>
>>> IP: 31.133.58.219
>>>
>>> Output of RIPE abuse finder:
>>>
>>> https://apps.db.ripe.net/whois/use-cases/abuse-finder.json?source=ripe&primary-key=31.133.58.219
>>>
>>>
>>> {
>>>         "abuse-resources":{
>>>         "service":"abuse-finder",
>>>         "link":{
>>>         "xlink:type":"locator",
>>>
>>> "xlink:href":"http://apps.db.ripe.net/whois/use-cases/abuse-finder.json?source=ripe&primary-key=31.133.58.219"}
>>>
>>>         ,
>>>         "parameters":{
>>>         "primary-key":{
>>>         "value":"31.133.58.219"}
>>>         ,
>>>         "sources":{
>>>         "source":{
>>>         "name":"RIPE",
>>>         "id":"ripe"}
>>>         }
>>>         }
>>>         ,
>>>         "irt-objects":null,
>>>         "abuse-mailbox-attributes":{
>>>         "attribute":{
>>>         "name":"abuse-mailbox",
>>>         "value":"support at netassist.ua"}
>>>         }
>>>         ,
>>>         "objects-with-abuse-related-remarks":null}
>>>         }
>>>
>>> whois -B 31.133.58.219
>>> % This is the RIPE Database query service.
>>> % The objects are in RPSL format.
>>> %
>>> % The RIPE Database is subject to Terms and Conditions.
>>> % See http://www.ripe.net/db/support/db-terms-conditions.pdf
>>>
>>> % Information related to '31.133.32.0 - 31.133.63.255'
>>>
>>> inetnum:        31.133.32.0 - 31.133.63.255
>>> netname:        DIDAN
>>> descr:          FOP Trubnikov Valeriy Muhaylovich
>>> country:        UA
>>> org:            ORG-FTVM1-RIPE
>>> admin-c:        TA3197-RIPE
>>> tech-c:         TA3197-RIPE
>>> status:         ASSIGNED PI
>>> mnt-by:         RIPE-NCC-END-MNT
>>> mnt-lower:      RIPE-NCC-END-MNT
>>> mnt-by:         TRUBNIKOV-MNT
>>> mnt-routes:     TRUBNIKOV-MNT
>>> mnt-domains:    TRUBNIKOV-MNT
>>> changed:        hostmaster at ripe.net 20110415
>>> changed:        hostmaster at ripe.net 20110415
>>> source:         RIPE
>>>
>>> organisation:   ORG-FTVM1-RIPE
>>> org-name:       FOP Trubnikov Valeriy Muhaylovich
>>> org-type:       other
>>> address:        86156, Ukraine, Makiyivka, Zeleniy, 60/182
>>> admin-c:        TV1866-RIPE
>>> tech-c:         TA3197-RIPE
>>> e-mail:         core at didan.org
>>> mnt-ref:        TRUBNIKOV-MNT
>>> mnt-by:         TRUBNIKOV-MNT
>>> changed:        core at didan.org 20110414
>>> source:         RIPE
>>>
>>> person:         Trubnikov Andrey
>>> address:        86156, Ukraine, Makiyivka, Zeleniy, 60/182,
>>> phone:          +380623277657
>>> nic-hdl:        TA3197-RIPE
>>> changed:        core at didan.org 20110331
>>> mnt-by:         TRUBNIKOV-MNT
>>> source:         RIPE
>>>
>>> % Information related to '31.133.48.0/20AS52091'
>>>
>>> route:          31.133.48.0/20
>>> descr:          FOP Trubnikov Valeriy Muhaylovich
>>> origin:         AS52091
>>> mnt-by:         TRUBNIKOV-MNT
>>> changed:        core at didan.org 20110423
>>> source:         RIPE
>>>
>>> % Information related to 'AS52091'
>>>
>>> aut-num:        AS52091
>>> as-name:        TRUBNIKOV-AS
>>> descr:          FOP Trubnikov Valeriy Muhaylovich
>>> org:            ORG-FTVM1-RIPE
>>> import:         from AS47694 accept ANY
>>> export:         to AS47694 announce AS52091
>>> import:         from AS21189 accept ANY
>>> export:         to AS21189 announce AS52091
>>> admin-c:        TA3197-RIPE
>>> tech-c:         TA3197-RIPE
>>> mnt-by:         RIPE-NCC-END-MNT
>>> mnt-by:         TRUBNIKOV-MNT
>>> mnt-routes:     TRUBNIKOV-MNT
>>> changed:        hostmaster at ripe.net 20110415
>>> source:         RIPE
>>>
>>> organisation:   ORG-FTVM1-RIPE
>>> org-name:       FOP Trubnikov Valeriy Muhaylovich
>>> org-type:       other
>>> address:        86156, Ukraine, Makiyivka, Zeleniy, 60/182
>>> admin-c:        TV1866-RIPE
>>> tech-c:         TA3197-RIPE
>>> e-mail:         core at didan.org
>>> mnt-ref:        TRUBNIKOV-MNT
>>> mnt-by:         TRUBNIKOV-MNT
>>> changed:        core at didan.org 20110414
>>> source:         RIPE
>>>
>>> person:         Trubnikov Andrey
>>> address:        86156, Ukraine, Makiyivka, Zeleniy, 60/182,
>>> phone:          +380623277657
>>> nic-hdl:        TA3197-RIPE
>>> changed:        core at didan.org 20110331
>>> mnt-by:         TRUBNIKOV-MNT
>>> source:         RIPE
>>>
>>> whois -B TRUBNIKOV-MNT
>>> % This is the RIPE Database query service.
>>> % The objects are in RPSL format.
>>> %
>>> % The RIPE Database is subject to Terms and Conditions.
>>> % See http://www.ripe.net/db/support/db-terms-conditions.pdf
>>>
>>> % Information related to 'TRUBNIKOV-MNT'
>>>
>>> mntner:         TRUBNIKOV-MNT
>>> descr:          FOP Trubnikov Valeriy Muhaylovich
>>> admin-c:        TA3197-RIPE
>>> upd-to:         core at didan.org
>>> auth:           MD5-PW # Filtered
>>> mnt-by:         TRUBNIKOV-MNT
>>> referral-by:    TRUBNIKOV-MNT
>>> changed:        core at didan.org 20110418
>>> source:         RIPE # Filtered
>>>
>>> person:         Trubnikov Andrey
>>> address:        86156, Ukraine, Makiyivka, Zeleniy, 60/182,
>>> phone:          +380623277657
>>> nic-hdl:        TA3197-RIPE
>>> changed:        core at didan.org 20110331
>>> mnt-by:         TRUBNIKOV-MNT
>>> source:         RIPE
>>>
>>> Is it a bug or a feature, and why?
>>>
>>>
>>>
>>
>>
>>
>
>
>
Previous message (by thread): [db-wg] RIPE abuse finder
Next message (by thread): [db-wg] RIPE abuse finder
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
[ db-wg Archives ]