Network Abuse Update

Frank Salanitri

Project & Systems Services Manager, APNIC

What is APNIC role in preventing network abuse?

• As a registry, APNIC adopts and applies policies for it’s community which address network abuse. APNIC does not have the capacity to investigate abuse complaints or the legal powers to regulate Internet activity.

• APNIC seeks to raise awareness of the need for responsible network management in the Asia Pacific region, through training and communication.

2

IRT Object• Reporting of network abuse can be directed to specialized teams such as Incident

Response Teams (IRTs)

• Implemented in AP region by policy Prop-079 in November 2010.– Mandatory for inetnum, inet6num and aut-num objects created and updated in whois database.– South Asia has approximately 56000 inetnum objects. 35000 with missing IRT maintainer.

3

Complaints to security@apnic.net 03/2011

4

Distribution of Complaints March 2011

5

Distribution of email type complains by region

6

Distribution of Non-email type complains by region

7

5900 Complaints March – South Asia

300,000 Complaints by Region 09/2011

In Conclusion• The most frequent complaint type received for South Area

is Spams(87%)• IRT objects are registered in APNIC Whois to reach the

appropriate people for abuse complaints• We understand there are issues with POCs in handling

these complaints:– POCs are always not uptodate/reachable– POCs receive a large amout of spams

• We need to ensure that the mechanism in place is adequate in helping resolve these complaints

What can you do?

• We need your co-operation to maintain correct contacts in WHOIS

– Please review your contacts in Whois - email/phone.– Report incorrect contacts in APNIC WHOIS to helpdesk@apnic.net

　

• Give us your feedback about effectiveness of IRT objects, or if any problems/suggested solutions in abuse handling

– APNIC secretariat : “helpdesk@apnic.net” – You can make policy proposals to improve IRT and POCs in Whois

if you feel there is a need for change.

Thank you