Inaccuracy of IRT-Objects, by Aftab Siddiqui. A presentation given at APNIC 38 during the Network Abuse BoF.

1. Inaccuracy of IRT-Objects
Aftab A. Siddiqui
Cyber Internet Services (Pvt) Ltd/
IPv6 Task Force Pakistan/
NRO NC/ASO AC

2. APNIC Members in Pakistan
• Total Members: 86
– Very Large: 1
– Large: 6
– Medium: 16
– Small: 21
– Very Small: 34
– Associate: 8

3. Status of IRT Object
With IRT Object,
75
Without
IRT Object,
12

4. IRT-CYBERNET-PK
• We receive approx 200 network related abuse
reports per day.
• 70% complaints are of Email Spamming
• 20% complaints are of network scanning or
IRC Botnets.
• 5% complaints are of Phishing
• 5% are miscellaneous complaints that include
Copyright Infringements.

5. Reporting Abuse
• We report approx 100 network abuse per month which
crosses our threshold.
• Not productive to report spam generating from
hotmail, yahoo and Google.
• We only report to SPs and Enterprises.
• Issues in AP Region:
– No response from email addresses mentioned as abuse
contact.
– Email box full or doesn’t exist messages.
– No abuse email box exist.
– Usually no issues while reporting within Pakistan as we
know people who can fix the issue.

6. Bottom Line
• APNIC should keep a check if IRT objects are
updated and working.
• NO this is not operational stuff for RIR, its like
keep a clean and working resource database.

7. APNIC – About Us
• APNIC (Asia Pacific Network Information Centre)
is an open, membership-based, not-for-profit
organization. It is one of five Regional Internet
Registries (RIRs) charged with ensuring the fair
distribution and responsible management of IP
addresses and related resources. These resources
are required for the stable and reliable operation
of the global Internet.
• Source : http://www.apnic.net/about-APNIC/organization

8. Inaccuracy of IRT Objects
• There are two main reasons for data
inaccuracy in whois:
– Wrong data is published intentionally to
camouflage illegal actions.
– Wrong data is published because object owners
forget to update the whois information (e.g. staff
change).
• There can be few other reasons like typos, too
many resources to manage, etc.

9. How to fix it?
• APNIC sends an email every year to all its
corporate contacts to keep the data clean and
accurate.
• APNIC forces all members to create IRT objects.
• APNIC should send email to all abuse contact
mentioned in IRT and block myapnic access in
case of no response.
• Once an IRT object is created by member, APNIC
should add it to all the resources of that member.
• APNIC should regularly run a process to clean up
invalid data.

10. Useful Links
• http://www.nr3c.gov.pk/
• http://www.nr3c.gov.pk/contact.html
• http://www.fia.gov.pk/contact.htm