Interesting Point of view - Russian police and RIPE accused of aiding RBN

Sat Oct 24 09:11:33 UTC 2009

I'd like to apologise in advance for SOCA. Frankly, I am surprised that they are even aware of RIPE or its role in life. They have done so poorly since subsuming the old National Hi-Tech Crime Unit that the other police forces want NHTCU back.

It ought to be superfluous to point out that the only effective action taken against RBN was by the Internet community in getting all their upstreams to null route them. As is blindingly obvious, SOCA would never have been granted a warrant by the Russians.

Pathetic to take it out on RIPE. 
-original message-
Subject: RE: Interesting Point of view - Russian police and RIPE accused of aiding RBN
From: "Martin, Paul" <Paul.Martin at viatel.com>
Date: 24/10/2009 9:23 am

So considering they're widely regarded as a criminal network hosting the
more dodgy/dangerous stuff on the net, surely we could 'protect' our
customers by blocking the 91.202.60.0/22 range?

Consider that can of worms opened :o)

Paul

-----Original Message-----
From: Jeffrey Lyon [mailto:jeffrey.lyon at blacklotus.net] 
Sent: 24 October 2009 08:18
To: Suresh Ramasubramanian
Cc: nanog at nanog.org
Subject: Re: Interesting Point of view - Russian police and RIPE accused
of aiding RBN

Since we're on the subject, here is where RBN went:

inetnum:         91.202.60.0 - 91.202.63.255
netname:         AKRINO-NET
descr:           Akrino Inc
country:         VG
org:             ORG-AI38-RIPE
admin-c:         IVM27-RIPE
tech-c:          IVM27-RIPE
status:          ASSIGNED PI
mnt-by:          RIPE-NCC-HM-PI-MNT
mnt-by:          MNT-AKRINO
mnt-lower:       RIPE-NCC-HM-PI-MNT
mnt-routes:      MNT-AKRINO
mnt-domains:     MNT-AKRINO
source:          RIPE # Filtered
organisation:    ORG-AI38-RIPE
org-name:        Akrino Inc
org-type:        OTHER
address:         Akrino Inc.
address:         P.O.Box 146 Trident Chambers
address:         Road Town, Tortola
address:         BVI
e-mail:          noc.akrino at gmail.com
mnt-ref:         MNT-AKRINO
mnt-by:          MNT-AKRINO
source:          RIPE # Filtered
person:          Igoren V Murzak
address:         Akrino Inc
address:         P.O.Box 146 Trident Chambers
address:         Road Town, Tortola
address:         BVI
phone:           +1 914 5952753
e-mail:          noc.akrino at gmail.com
nic-hdl:         IVM27-RIPE
mnt-by:          MNT-AKRINO
source:          RIPE # Filtered
% Information related to '91.202.60.0/22AS44571'
route:           91.202.60.0/22
descr:           AKRINO BLOCK
origin:          AS44571
mnt-by:          MNT-AKRINO
source:          RIPE # Filtered

On Sat, Oct 24, 2009 at 3:00 AM, Suresh Ramasubramanian
<ops.lists at gmail.com> wrote:
>
http://www.eweekeurope.co.uk/news/russian-police-and-internet-registry-a
ccused-of-aiding-cybercrime-2165
>
> Some quotes from the article -
>
> Internet registry RIPE NCC turned a blind eye to cybercrime, and
Russian police
> corruption helped the perpetrators get away with it, according to the
UK
> Serious Organised Crime Agency
>
> [...]
>
> "RIPE was being paid by RBN for that service, for its IP allocation,"
he said.
> "Essentially what you have - and I make no apologies for saying this
is - if
> you were going to interpret this very harshly RIPE as the IP
allocation body
> was receiving criminal funds and therefore RIPE was involved in money
> laundering offences," said Auld.
>
> [...]
>
> "All we could get there was a disruption, we weren't able to get a
prosecution
> in Russia," admitted Auld. "Our biggest concern is where did RBN go?
Our
> information suggests that RBN is back in business but now pursuing a
slightly
> different business model which is bad news."
>
> [...]
>
> "Where you have got LIRs (Local Internet Registries) set up to run a
criminal
> business- that is criminal actvity being taken by the regional
internet
> registries themselves. "So what we are trying to do is work with them
to make
> internet governance a somewhat less permissive environment for
criminals and
> make it more about protecting consumers and individuals," added Auld.
> RBN looked legitimate, says RIPE NCC
>
> In response to the comments that it could be accused of being involved
in
> criminal activity, Paul Rendek, head of external relations and
communications
> at RIPE NCC said that the organisation has very strict guidelines for
dealing
> with LIRs.
>
> "The RBN was accepted as an LIR based on our checklists," he said."
Our
> checklists include the provision of proof that a prospective LIR has
the
> necessary legal documentation, which proves that a business is bona
fide."
>
> etc
>
>

-- 
Jeffrey Lyon, Leadership Team
jeffrey.lyon at blacklotus.net | http://www.blacklotus.net
Black Lotus Communications of The IRC Company, Inc.

Platinum sponsor of HostingCon 2010. Come to Austin, TX on July 19 -
21 to find out how to "protect your booty."

For more information about the Viatel Group, please visit www.viatel.com

VTL (UK) Limited Registered in England and Wales
Registered Address: Inbucon House, Wick Road, Egham, Surrey TW20 0HR  
Company Registration No: 04287100 VAT Registration Number: 781 4991 88

THIS MESSAGE IS INTENDED ONLY FOR THE USE OF THE INTENDED RECIPIENT TO WHICH IT IS ADDRESSED AND MAY CONTAIN INFORMATION THAT IS PRIVILEGED, CONFIDENTIAL AND EXEMPT FROM DISCLOSURE.  If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering the message to the intended recipient, you are notified that any dissemination, distribution or copying of this e-mail is prohibited, and you should delete this e-mail from your system.

This message has been scanned for viruses and spam by Viatel MailControl - www.viatel.com