A week in the life of security@apnic.net (IRT email address) Frank Salanitri Project & Systems Services Manager, APNIC ＊和訳：JPNIC　奥谷泉

What is APNIC role in preventing network abuse? As a registry, APNIC adopts and applies policies for it’s community which address network abuse. APNIC does not have the capacity to investigate abuse complaints or the legal powers to regulate Internet activity. APNIC seeks to raise awareness of the need for responsible network management in the Asia Pacific, through training and communication. Laws relating to network abuse vary around the world. 2 2

IRT Object Reporting of network abuse can be directed to specialized teams such as Incident Response Teams (IRTs) Implemented in AP region by policy Prop-079 in November 2010. Mandatory for inetnum, inet6num and aut-num objects created and updated in whois database. JAPAN has approximately 7200 inetnum objects. 4000 with missing IRT maintainer. Almost 79% of complaints are spam related. 3 3

No. of complaints to security@apnic.net 14th – 20th March 2011

Distribution of Complaints for the week Almost 79% of complaints are spam related. 5 5

Distribution of email type complains by economy Almost 25% from VN and 17% from India & Korea. China is only 14%. 6 6

Distribution of Non-email type complains by economy Most attacks & port scans come from Chin and Taiwan. However unlike spam only 3.5% of attacks came from Vietnam. 7 7

70 Complaints Week 3 March - JAPAN 8

376 Complaints March - Japan Total 376 9

In Conclusion The top abuse type complaints received for JP are Spams(75%) and Attacks(20%) IRT objects are registered in APNIC Whois to reach the appropriate people for abuse complaints We understand there are issues with POCs in handling these complaints: POCs are always not uptodate/reachable POCs receive a large amout of spams We require a mechanism in place to help resolve these complaints Up to date information about abuse contacts in WHOIS is essential APNIC would like to discuss any issues for registering or disclosing abuse contacts with the community

What can you do? We need your co-operation to maintain correct contacts in WHOIS Please review your contacts in Whois - email/phone. Report incorrect contacts in APNIC WHOIS to helpdesk@apnic.net　 Give us your feedback about effectiveness of IRT objects, or if any problems/suggested solutions in abuse handling APNIC secretariat : “helpdesk@apnic.net” You can make policy proposals to improve IRT and POCs in Whois if you feel there is a need for change.

Thank you Abuse BoF@APNIC33 Join us in APNIC33@New Delhi, India 28 Feb 2012 http://meetings.apnic.net/33/program/bof Thank you