The document discusses the RIPE Network Coordination Centre's Abuse Finder tool. It describes the RIPE Database Query API which allows users to make RESTful queries of the database. The Abuse Finder tool uses this API to search the database and aggregate information like abuse contact details and remarks for a given IP address or network. It aims to provide a precise answer to questions about abuse resources. An example use case and demo of the Abuse Finder service are presented.
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
RIPE Network Coordination Centre Abuse Finder Tool
1. RIPE Network Coordination Centre
Abuse Finder
Paul Palse
Database Manager, RIPE NCC
Paul Palse RIPE 60 http://www.ripe.net 1
2. RIPE Network Coordination Centre
Outline
• RIPE Database RESTful Query WS
• Abuse Finder tool
Paul Palse RIPE 60 http://www.ripe.net 2
3. RIPE Network Coordination Centre
Publications on RIPE Labs
• RIPE Database Query API in the form of
RESTful Web Services:
- REST allows for “create, read, update, and delete”
transactions over HTTP
- Resources have a unique portable address in the form
of an URL
- Web Service responds in XML and JSON
- Response is easy to parse by script
- XML can be easily transformed (to RPSL for example)
using style sheets
- Protocol has big industry support. Google, Amazon…
Paul Palse RIPE 60 http://www.ripe.net 3
4. RIPE Network Coordination Centre
“Abuse Finder” Use Case Search
• Precise answer to a specific question
• Give me the Abuse Handler details for this network
resource?
• We’ll do the data mining!
Paul Palse RIPE 60 http://www.ripe.net 4
5. RIPE Network Coordination Centre
123.123.123.123
Find IRT info
Find Person or Role
The service accumulates
the information
Find Organisation
and Route info
Add all referenced
maintainer, admin
and tech contacts
Harvest Abuse
Mailbox details Then harvests contact
details
Find comments that
mention abuse
irt: irt-123
abuse-mailbox: a@b.com
abuse-mailbox: b@c.com
remarks
http://www.ripe.net
7. RIPE Network Coordination Centre
Abuse Finder Service
• A “quick and dirty” script shows:
- Roughly 50% of allocations are not covered by any
kind of abuse contact info.
• Go ahead, and start using the abuse finder
API…
• Hint: Split Files + Abuse Finder + Script…
Paul Palse RIPE 60 http://www.ripe.net 7