[db-wg] RIPE abuse finder
- Previous message (by thread): [db-wg] RIPE abuse finder
- Next message (by thread): [db-wg] RIPE abuse finder
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Denis Walker
denis at ripe.net
Wed Mar 6 12:06:33 CET 2013
Hi Max There is still a link to NETASSIST-MNT: inetnum: 31.133.32.0 - 31.133.63.255 org: ORG-FTVM1-RIPE organisation: ORG-FTVM1-RIPE admin-c: TV1866-RIPE person: Trubnikov Valeriy nic-hdl: TV1866-RIPE mnt-by: NETASSIST-MNT This nicely highlights the main problem with the legacy abuse contact management. It relies on this spaghetti of relationships between many objects in the database. With the introduction of "abuse-c:" this problem will be solved...in time. According to the schedule the RIPE NCC published on the Anti-Abuse Working Group the "abuse-c:" will be enforced on all allocations within 6 months and on all PI assignments after a further 6 to 12 months. If you want a 'quick fix' for the current abuse contact management, either change the "admin-c:" of the organisation above, or create a new MNTNER for the PERSON object TV1866-RIPE which has no connection with NETASSIST. If you are not responsible for this range, then as long as you break the connection between this resource and NETASSIST you will no longer be reported as the abuse contact by the Abuse Finder tool. Hope this helps. Regards Denis Walker Business Analyst RIPE NCC Database Group On 06/03/2013 11:00, Max Tulyev wrote: > Daniel, > > but exactly for that case 31.133.58.219, this net is not mantained by > NETASSIST-MNT, it maintaned by TRUBNIKOV-MNT, for inetnum. org, *-c and > mntner (take a look in my quote or current RIPE DB whois)? > > I found it _was_ maintained by NETASSIST-MNT, but a long time ago. May > be there is some cache not updated? > > In some cases it is not possible to ask for it at all, for a different > reasons. There should be a way to solve it only from my side... > > On 05.03.13 16:54, Daniel Karrenberg wrote: >> Max, >> >> In addition to what Dennis has said I point out the following: >> >> The address block has no abuse-mailbox registered, otherwise we would >> have reported that. >> >> None of the contacts for the address block have registered an e-mail >> address, otherwise we could have used that. >> >> The admin-c person object for the address block is maintained by >> NETASSIST-MNT. NETASSIST-MNT has an abuse-mailbox attribute which we >> reported in the absence of better information. So there apparently is >> a connection between this address block and yourself. >> >> If you wish to avoid abuse e-mail to your abuse-mailbox I suggest you >> ask the users of this address space to register e-mail addresses we >> can use. This can be done immediately. In the near future this will be >> made even easier as explained in >> https://labs.ripe.net/Members/kranjbar/implementation-details-of-policy-2011-06 >> >> >> Daniel >> >> On 05.03.2013, at 11:52 , Max Tulyev <president at ukraine.su> wrote: >> >>> Hello! >>> >>> Recently our company started to receive a lot of strange complaints >>> relating to network we don't operate or route. I fount these >>> complaints was sent to points of contact got by RIPE abuse finder. >>> >>> This is the fresh sample of it: >>> >>> IP: 31.133.58.219 >>> >>> Output of RIPE abuse finder: >>> >>> https://apps.db.ripe.net/whois/use-cases/abuse-finder.json?source=ripe&primary-key=31.133.58.219 >>> >>> >>> { >>> "abuse-resources":{ >>> "service":"abuse-finder", >>> "link":{ >>> "xlink:type":"locator", >>> >>> "xlink:href":"http://apps.db.ripe.net/whois/use-cases/abuse-finder.json?source=ripe&primary-key=31.133.58.219"} >>> >>> , >>> "parameters":{ >>> "primary-key":{ >>> "value":"31.133.58.219"} >>> , >>> "sources":{ >>> "source":{ >>> "name":"RIPE", >>> "id":"ripe"} >>> } >>> } >>> , >>> "irt-objects":null, >>> "abuse-mailbox-attributes":{ >>> "attribute":{ >>> "name":"abuse-mailbox", >>> "value":"support at netassist.ua"} >>> } >>> , >>> "objects-with-abuse-related-remarks":null} >>> } >>> >>> whois -B 31.133.58.219 >>> % This is the RIPE Database query service. >>> % The objects are in RPSL format. >>> % >>> % The RIPE Database is subject to Terms and Conditions. >>> % See http://www.ripe.net/db/support/db-terms-conditions.pdf >>> >>> % Information related to '31.133.32.0 - 31.133.63.255' >>> >>> inetnum: 31.133.32.0 - 31.133.63.255 >>> netname: DIDAN >>> descr: FOP Trubnikov Valeriy Muhaylovich >>> country: UA >>> org: ORG-FTVM1-RIPE >>> admin-c: TA3197-RIPE >>> tech-c: TA3197-RIPE >>> status: ASSIGNED PI >>> mnt-by: RIPE-NCC-END-MNT >>> mnt-lower: RIPE-NCC-END-MNT >>> mnt-by: TRUBNIKOV-MNT >>> mnt-routes: TRUBNIKOV-MNT >>> mnt-domains: TRUBNIKOV-MNT >>> changed: hostmaster at ripe.net 20110415 >>> changed: hostmaster at ripe.net 20110415 >>> source: RIPE >>> >>> organisation: ORG-FTVM1-RIPE >>> org-name: FOP Trubnikov Valeriy Muhaylovich >>> org-type: other >>> address: 86156, Ukraine, Makiyivka, Zeleniy, 60/182 >>> admin-c: TV1866-RIPE >>> tech-c: TA3197-RIPE >>> e-mail: core at didan.org >>> mnt-ref: TRUBNIKOV-MNT >>> mnt-by: TRUBNIKOV-MNT >>> changed: core at didan.org 20110414 >>> source: RIPE >>> >>> person: Trubnikov Andrey >>> address: 86156, Ukraine, Makiyivka, Zeleniy, 60/182, >>> phone: +380623277657 >>> nic-hdl: TA3197-RIPE >>> changed: core at didan.org 20110331 >>> mnt-by: TRUBNIKOV-MNT >>> source: RIPE >>> >>> % Information related to '31.133.48.0/20AS52091' >>> >>> route: 31.133.48.0/20 >>> descr: FOP Trubnikov Valeriy Muhaylovich >>> origin: AS52091 >>> mnt-by: TRUBNIKOV-MNT >>> changed: core at didan.org 20110423 >>> source: RIPE >>> >>> % Information related to 'AS52091' >>> >>> aut-num: AS52091 >>> as-name: TRUBNIKOV-AS >>> descr: FOP Trubnikov Valeriy Muhaylovich >>> org: ORG-FTVM1-RIPE >>> import: from AS47694 accept ANY >>> export: to AS47694 announce AS52091 >>> import: from AS21189 accept ANY >>> export: to AS21189 announce AS52091 >>> admin-c: TA3197-RIPE >>> tech-c: TA3197-RIPE >>> mnt-by: RIPE-NCC-END-MNT >>> mnt-by: TRUBNIKOV-MNT >>> mnt-routes: TRUBNIKOV-MNT >>> changed: hostmaster at ripe.net 20110415 >>> source: RIPE >>> >>> organisation: ORG-FTVM1-RIPE >>> org-name: FOP Trubnikov Valeriy Muhaylovich >>> org-type: other >>> address: 86156, Ukraine, Makiyivka, Zeleniy, 60/182 >>> admin-c: TV1866-RIPE >>> tech-c: TA3197-RIPE >>> e-mail: core at didan.org >>> mnt-ref: TRUBNIKOV-MNT >>> mnt-by: TRUBNIKOV-MNT >>> changed: core at didan.org 20110414 >>> source: RIPE >>> >>> person: Trubnikov Andrey >>> address: 86156, Ukraine, Makiyivka, Zeleniy, 60/182, >>> phone: +380623277657 >>> nic-hdl: TA3197-RIPE >>> changed: core at didan.org 20110331 >>> mnt-by: TRUBNIKOV-MNT >>> source: RIPE >>> >>> whois -B TRUBNIKOV-MNT >>> % This is the RIPE Database query service. >>> % The objects are in RPSL format. >>> % >>> % The RIPE Database is subject to Terms and Conditions. >>> % See http://www.ripe.net/db/support/db-terms-conditions.pdf >>> >>> % Information related to 'TRUBNIKOV-MNT' >>> >>> mntner: TRUBNIKOV-MNT >>> descr: FOP Trubnikov Valeriy Muhaylovich >>> admin-c: TA3197-RIPE >>> upd-to: core at didan.org >>> auth: MD5-PW # Filtered >>> mnt-by: TRUBNIKOV-MNT >>> referral-by: TRUBNIKOV-MNT >>> changed: core at didan.org 20110418 >>> source: RIPE # Filtered >>> >>> person: Trubnikov Andrey >>> address: 86156, Ukraine, Makiyivka, Zeleniy, 60/182, >>> phone: +380623277657 >>> nic-hdl: TA3197-RIPE >>> changed: core at didan.org 20110331 >>> mnt-by: TRUBNIKOV-MNT >>> source: RIPE >>> >>> Is it a bug or a feature, and why? >>> >>> >>> >> >> >> > > >
- Previous message (by thread): [db-wg] RIPE abuse finder
- Next message (by thread): [db-wg] RIPE abuse finder
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
[ db-wg Archives ]