RIPE Network Coordination Centre

http://www.ripe.net

Abuse Finder

Paul Palse Database Manager, RIPE NCC

RIPE 60 1 Paul Palse

http://www.ripe.net

RIPE Network Coordination Centre

Outline

•  RIPE Database RESTful Query WS •  Abuse Finder tool

RIPE 60 2 Paul Palse

http://www.ripe.net

RIPE Network Coordination Centre

Publications on RIPE Labs

•  RIPE Database Query API in the form of RESTful Web Services: -  REST allows for “create, read, update, and delete”

transactions over HTTP -  Resources have a unique portable address in the form

of an URL - Web Service responds in XML and JSON -  Response is easy to parse by script -  XML can be easily transformed (to RPSL for example)

using style sheets -  Protocol has big industry support. Google, Amazon…

RIPE 60 3 Paul Palse

http://www.ripe.net

RIPE Network Coordination Centre

“Abuse Finder” Use Case Search

•  Precise answer to a specific question •  Give me the Abuse Handler details for this network

resource? •  We’ll do the data mining!

RIPE 60 4 Paul Palse

RIPE Network Coordination Centre

http://www.ripe.net

123.123.123.123

Find IRT info

Find Person or Role

Find Organisation and Route info

Add all referenced maintainer, admin and tech contacts

Harvest Abuse Mailbox details

The service accumulates the information

Then harvests contact details

Find comments that mention abuse

irt: irt-123 abuse-mailbox: a@b.com abuse-mailbox: b@c.com remarks

http://www.ripe.net

RIPE Network Coordination Centre

Abuse Finder Demo

RIPE 60 6 Paul Palse

http://www.ripe.net

RIPE Network Coordination Centre

Abuse Finder Service

•  A “quick and dirty” script shows: -  Roughly 50% of allocations are not covered by any

kind of abuse contact info.

•  Go ahead, and start using the abuse finder API…

•  Hint: Split Files + Abuse Finder + Script…

RIPE 60 7 Paul Palse

http://www.ripe.net

RIPE Network Coordination Centre

RIPE 60 8 Paul Palse

Questions?

RIPE Network Coordination Centre

http://www.ripe.net RIPE 60 9 Paul Palse