Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-12-03 Thread Töma Gavrichenkov
Peace, On Fri, Dec 4, 2020, 12:40 AM Ronald F. Guilmette wrote: > The first is doing everything possible to try to get RPKI adopted more > widely. > Totally agree, The second is persuading everyone, certainly including Petersburg Internet, > to stop even trying to use an data from RADB. That

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-12-03 Thread Ronald F. Guilmette
In message , IP Abuse Research wrote: >What the >continued findings indicate is a need for IANA and the RIRs to adapt to a >new stage in the resource issuance and governance lifecycle. Since this is >by definition a working group, would it make sense to establish some >metrics to quantify the

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-12-03 Thread Töma Gavrichenkov
Peace, On Thu, Dec 3, 2020, 1:48 PM Ronald F. Guilmette wrote: > Yes, but if any of -our- criminals attack people or businesses located in > other countries, we will allow them to be extradited to those other > countries > to face trial. > This is slowly sliding into the territory of

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-12-03 Thread Ronald F. Guilmette
In message , =?UTF-8?Q?T=C3=B6ma_Gavrichenkov?= wrote: >> Neither AS44050 nor AS58552 was never announcing any of the squatted >> prefixes themselves directly. >> Rather AS44050 was... for reasons which have yet to be explained... peering >> with the set of four apparently squatted ASNs >

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-12-02 Thread Ronald F. Guilmette
In message , Brian Nisbet wrote: >My comments about the apnic-talk address was that I wasn't sure if that list >was used to the kind of content, and I was worried that it might not get >Ronald's message where it would it best for it to go... I've looked around and frankly, the pickings, when

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-12-02 Thread Suresh Ramasubramanian
: "anti-abuse-wg@ripe.net" Subject: Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552 Mr. Michele have no proposals, all he can do is to complain. From: anti-abuse-wg on behalf of Suresh Ramasubramanian Sent: Wednesday, December 2, 20

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-12-02 Thread Suresh Ramasubramanian
ubject: Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552 I don’t think it’s simply a matter of two sides, which your language attempts to categorise it as. Some of us refuse to have our processes and businesses dictated to by people who won’t listen to reasonable argumen

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-12-02 Thread Michele Neylon - Blacknight via anti-abuse-wg
020 at 7:25 PM To: Serge Droz Cc: "anti-abuse-wg@ripe.net" Subject: Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552 I'd like to second Serge's sentiment, RFG catches a good deal of abuse for his contributions, which we have all seen on this and other lists. What the con

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-12-02 Thread IP Abuse Research
I'd like to second Serge's sentiment, RFG catches a good deal of abuse for his contributions, which we have all seen on this and other lists. What the continued findings indicate is a need for IANA and the RIRs to adapt to a new stage in the resource issuance and governance lifecycle. Since this

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-12-02 Thread Töma Gavrichenkov
Peace, On Wed, Dec 2, 2020 at 12:42 PM Töma Gavrichenkov wrote: > AS44050 is basically the SOHO provider for the St. Petersburg Internet > Exchange. St. Petersburg's population is slightly below 5 million > people, not counting satellite cities and suburbs (which, if counted, > would contribute

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-12-02 Thread Töma Gavrichenkov
Peace, On Wed, Dec 2, 2020 at 1:53 AM Ronald F. Guilmette wrote: > >> Please be advised that the set of IPv4 blocks listed below appear to be > >> squatted on at the present time, with the apparent aid and assistance of > >> AS44050 -- "Petersburg Internet Network Ltd." (Russia) and also AS58552

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-12-02 Thread Serge Droz via anti-abuse-wg
First of: Congrats and thank you Ronald for this work. What makes me a bit sad is, that posting this here immediately starts a discussion about what is expected behavior on these lists, rather than how we could combat abuse more efficiently. It seems a seeminglu, to me at least, humorous remark,

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-12-01 Thread Ronald F. Guilmette
In message =?UTF-8?Q?T=C3=B6ma_Gavrichenkov?= wrote: >On Mon, Nov 30, 2020 at 10:09 AM Ronald F. Guilmette > wrote: >> Please be advised that the set of IPv4 blocks listed below appear to be >> squatted on at the present time, with the apparent aid and assistance of >> AS44050 -- "Petersburg

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-12-01 Thread Ronald F. Guilmette
In message , Brian Nisbet wrote: >However I suspect that X-posting to a list like apnic-talk may not be the >wisest idea, given the different populations etc... It is among my fondest hopes that cybercriminals of all stripes, and particularly the ones who squat on IPv4 space that doesn't belong

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-12-01 Thread Töma Gavrichenkov
Peace, On Mon, Nov 30, 2020 at 10:09 AM Ronald F. Guilmette wrote: > Please be advised that the set of IPv4 blocks listed below appear to be > squatted on at the present time, with the apparent aid and assistance of > AS44050 -- "Petersburg Internet Network Ltd." (Russia) and also AS58552 -- >

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-12-01 Thread Brian Nisbet
From: anti-abuse-wg on behalf of Ronald F. Guilmette Sent: Tuesday 1 December 2020 05:12 To: apnic-t...@lists.apnic.net ; anti-abuse-wg@ripe.net Subject: Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552 CAUTION[External]: This email originated from

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-12-01 Thread Alessandro Vesely
On Mon 30/Nov/2020 22:56:22 +0100 John Levine wrote: In article , Richard Clayton wrote: Only a few of them are listed on https://www.spamhaus.org/drop/ So announcing a prefix that is on that list is not a good sign (indeed far from it) -- but don't expect a "new" hijacker to only choose

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-11-30 Thread Ronald F. Guilmette
In message , Randy Bush wrote: >> Amongst the greatest mysteries of the shady underbelly of the >> internet: how to pronounce "Guilmette" > >speaking of anti-abuse; back in the '80s we agreed that making fun of >others' typos, misspellings, personal names, etc. was impolite. I do not believe

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-11-30 Thread Randy Bush
> Amongst the greatest mysteries of the shady underbelly of the > internet: how to pronounce "Guilmette" speaking of anti-abuse; back in the '80s we agreed that making fun of others' typos, misspellings, personal names, etc. was impolite. randy

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-11-30 Thread PP
Amongst the greatest mysteries of the shady underbelly of the internet: how to pronounce "Guilmette" --

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-11-30 Thread John Levine
In article , Richard Clayton wrote: >>Only a few of them are listed on https://www.spamhaus.org/drop/ >So announcing a prefix that is on that list is not a good sign (indeed >far from it) -- but don't expect a "new" hijacker to only choose from >that list or indeed to pick any prefixes from that

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-11-30 Thread Richard Clayton
In message , Alessandro Vesely writes >> These blocks appear to be mostly or entirely very old "legacy" block, >> primarily from the ARIN region. > > >Only a few of them are listed on https://www.spamhaus.org/drop/ Spamhaus have built that table from what they know of previous hijacking events

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-11-30 Thread Ronald F. Guilmette
In message , Alessandro Vesely wrote: >Only a few of them are listed on https://www.spamhaus.org/drop/ I have some hope and faith that that state of affairs will be rectified in due course, and likely before too long, now that I have shared this info widely. Regards, rfg

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-11-30 Thread Alessandro Vesely
On 30/11/2020 08:08, Ronald F. Guilmette wrote: Please be advised that the set of IPv4 blocks listed below appear to be squatted on at the present time, with the apparent aid and assistance of AS44050 -- "Petersburg Internet Network Ltd." (Russia) and also AS58552 -- "PT Multidata Rancana Prima"

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-11-30 Thread Hans-Martin Mosner
Am 30.11.2020 09:15, schrieb Eileen Morris-Ross via anti-abuse-wg: What the hell is all that crap about As far as I understand (I'm not a routing expert at all) it's about network abuse by hijacking ip ranges without having actual ownership for the given network blocks. An AS registered

Re: [anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-11-30 Thread Eileen Morris-Ross via anti-abuse-wg
What the hell is all that crap about  Sent from Yahoo Mail on Android On Mon, 30 Nov 2020 at 7:09, Ronald F. Guilmette wrote: Please be advised that the set of IPv4 blocks listed below appear to be squatted on at the present time, with the apparent aid and assistance of AS44050 --

[anti-abuse-wg] IPv4 squatting -- Courtesy of AS44050, AS58552

2020-11-29 Thread Ronald F. Guilmette
Please be advised that the set of IPv4 blocks listed below appear to be squatted on at the present time, with the apparent aid and assistance of AS44050 -- "Petersburg Internet Network Ltd." (Russia) and also AS58552 -- "PT Multidata Rancana Prima" (Indonesia). These blocks appear to be mostly or