Presentation is loading. Please wait.

Presentation is loading. Please wait.

A week in the life of (IRT address) Frank Salanitri Project & Systems Services Manager, APNIC.

Published byBaldric Gordon Modified over 8 years ago

Similar presentations

Presentation on theme: "A week in the life of (IRT address) Frank Salanitri Project & Systems Services Manager, APNIC."— Presentation transcript:

1 A week in the life of security@apnic.net (IRT email address) Frank Salanitri Project & Systems Services Manager, APNIC

2 What is APNIC role in preventing network abuse? As a registry, APNIC adopts and applies policies for it’s community which address network abuse. APNIC does not have the capacity to investigate abuse complaints or the legal powers to regulate Internet activity. APNIC seeks to raise awareness of the need for responsible network management in the Asia Pacific, through training and communication. 2

3 How to address abuse complaints If a search refers you to APNIC, it means that the network in question is registered in the Asia Pacific region. Use APNIC Whois Database to get contact information on the network involved. If you are not able to get the cooperation of the network administrators, then you need to contact law enforcement agencies either in your jurisdiction or the jurisdiction where the problem originates. http://www.apnic.net/apnic-info/whois_search/abuse-and- spamming/reporting-abuse-and-spam 3

4 IRT Object Reporting of network abuse can be directed to specialized teams such as Incident Response Teams (IRTs) Implemented in AP region by policy Prop-079 in November 2010. Mandatory for inetnum, inet6num and aut-num objects created and updated in whois database. 4

5 How many complaints? 5

6 Example abuse complaints http://www.dnsbl.de/ #1711061: DNSBL: unsolicited email from your network 113.171.104.0 http://blacklist.woody.ch/ Abuse report about 210.125.221.66 http://www.blocklist.de [noreply] abuse report about 61.183.16.199 - Thu, 24 Mar 2011 11:20:22 +0100 -- service: ssh (Again x 10) RID: 815438 [noreply] abuse report about 59.94.243.90 - Thu, 24 Mar 2011 11:31:29 +0100 -- service: mail (First x 1) RID: 815144 6

7 Snapshot 14 th – 20 th March 2011 7

8 Distribution of Complaints for the week 8

9 Distribution of email type complains by economy 9

10 Distribution of Non-email type complains by economy 10

11 Recurring IP Usage over 6 weeks 11

12 Blacklisted 5 months later Querying DNSBL zen.spamhaus.org 12

13 Observations Spammers and attackers generally move on. However there is a pattern of address reuse. IP Addresses do get blacklisted. Addresses do remain in blacklists. APNIC cannot avoid tainted address returns. APNIC tests returned address space but will current tests be sufficient before reuse? 13

14 Questions ? 14

Download ppt "A week in the life of (IRT address) Frank Salanitri Project & Systems Services Manager, APNIC."

Similar presentations

A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Network Abuse: The APNIC perspective Network Abuse BOF APNIC 12 th Open Policy Meeting.

A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Network Abuse: The APNIC perspective Network Abuse BOF APNIC 12 th Open Policy Meeting.
Anti-Spam Management for Service Provider in Malaysia Alan Lee NTT MSC.

Anti-Spam Management for Service Provider in Malaysia Alan Lee NTT MSC.
APNIC Internet Routing Registry Routing SIG APNIC-15, Taipei 26 February 2003.

APNIC Internet Routing Registry Routing SIG APNIC-15, Taipei 26 February 2003.
APNIC update ARIN XX 17 October 2007 Srinivas Chendi.

APNIC update ARIN XX 17 October 2007 Srinivas Chendi.
Managing IP addresses for your private clouds 2013 ASEAN CAS Summit Bangkok, Thailand 7 February 2013 George Kuo Member Services Manager.

Managing IP addresses for your private clouds 2013 ASEAN CAS Summit Bangkok, Thailand 7 February 2013 George Kuo Member Services Manager.
Handling Internet Network Abuse Reports at APNIC 21 October 2010 LAP-CNSA Workshop, Melbourne George Kuo.

Handling Internet Network Abuse Reports at APNIC 21 October 2010 LAP-CNSA Workshop, Melbourne George Kuo.
Addressing spam email and enforcing a Do Not Email Registry using a Certified Electronic Mail System Information Technology Advisory Group, Inc.

Addressing spam and enforcing a Do Not Registry using a Certified Electronic Mail System Information Technology Advisory Group, Inc.
Joint efforts in incident response in AP region and future work with RIR Suguru Yamaguchi JPCERT/CC.

Joint efforts in incident response in AP region and future work with RIR Suguru Yamaguchi JPCERT/CC.
Sweeping lame DNS reverse delegations APNIC16 – DNS Operations SIG Seoul, Korea, 20 August 2003.

Sweeping lame DNS reverse delegations APNIC16 – DNS Operations SIG Seoul, Korea, 20 August 2003.
1 prop-018-v001 Protecting historical records in the APNIC Whois Database Project Update DB SIG APNIC18 2 September 2004 Nadi, Fiji Sanjaya, Project Manager,

1 prop-018-v001 Protecting historical records in the APNIC Whois Database Project Update DB SIG APNIC18 2 September 2004 Nadi, Fiji Sanjaya, Project Manager,
1 Korea status and future plan on spam & hacking complaints August 30, 2001 Yong Wan Ju Korea Network Information Center.

1 Korea status and future plan on spam & hacking complaints August 30, 2001 Yong Wan Ju Korea Network Information Center.
1 Axel Pawlik APNIC 22, 8 September 2006, Kaohsiung RIPE NCC Update APNIC 22.

1 Axel Pawlik APNIC 22, 8 September 2006, Kaohsiung RIPE NCC Update APNIC 22.
APNIC Update LACNIC XVI 7 October 2011 Buenos Aires Geoff Huston, APNIC 1.

APNIC Update LACNIC XVI 7 October 2011 Buenos Aires Geoff Huston, APNIC 1.
APNIC Last /8 Policy Implementation Report Sanjaya Services Area Director.

APNIC Last /8 Policy Implementation Report Sanjaya Services Area Director.
Implementation Update Adam Gosling APNIC Policy SIG Meeting Thursday, 18 September 2014.

Implementation Update Adam Gosling APNIC Policy SIG Meeting Thursday, 18 September 2014.
Policy Documentation Adam Gosling APNIC 38 Policy SIG Meeting 18 September 2014.

Policy Documentation Adam Gosling APNIC 38 Policy SIG Meeting 18 September 2014.
APNIC Policy SIG1 5 th APNIC Address Policy SIG Report March 7, 2002 Takashi Arano Address Policy SIG Chair Asia Global Crossing.

APNIC Policy SIG1 5 th APNIC Address Policy SIG Report March 7, 2002 Takashi Arano Address Policy SIG Chair Asia Global Crossing.
A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Database SIG APNIC Database Privacy Issues 1 March 2001 APRICOT, Malaysia Fabrina.

A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Database SIG APNIC Database Privacy Issues 1 March 2001 APRICOT, Malaysia Fabrina.
Network Abuse Handling in CNNIC and JPNIC Terence Zhang, CNNIC Izumi Okutani, JPNIC.

Network Abuse Handling in CNNIC and JPNIC Terence Zhang, CNNIC Izumi Okutani, JPNIC.
APNIC Update Paul Wilson Director General. APNIC RIR for Asia Pacific –IP address allocation and management –Open policy development Support for Internet.

APNIC Update Paul Wilson Director General. APNIC RIR for Asia Pacific –IP address allocation and management –Open policy development Support for Internet.

Similar presentations

Ads by Google