nanog mailing list archives
Re: Reply to Sean Donelan (was: Yet more hijacked space? - deru.net)
From: jlewis () lewis org
Date: Tue, 6 May 2003 10:39:26 -0400 (EDT)
On Tue, 6 May 2003 alex () pilosoft com wrote:
BS. Cogent provides publically available reassignment info in its rwhois database. Comment: ******************************************** Comment: Reassignment information for this block is Comment: available at rwhois.cogentco.com port 4321 Comment: ********************************************
Not for all of their blocks...at the very least, not for ones acquired via PSI. $ whois 38.144.198.0 () rwhois cogentco com:4321 [rwhois.cogentco.com] %rwhois V-1.5:0010b0:00 rwhois.cogentco.com %Error 230 No objects found. There are multiple systems in 38.144.198.0/24 spewing spam. How do you tell who they belong to and how much address space they have? Fortunately, in this case, reverse DNS and traceroutes make it pretty clear this is a single (entire) /24 of spammer systems. Query: 38.144.198.0 Registry: whois.arin.net Results: OrgName: Performance Systems International Inc. OrgID: PSI Address: 1015 31st Street, NW City: Washington StateProv: DC PostalCode: 20007 Country: US NetRange: 38.0.0.0 - 38.255.255.255 CIDR: 38.0.0.0/8 NetName: PSINETA NetHandle: NET-38-0-0-0-1 Parent: NetType: Direct Allocation NameServer: NS.PSI.NET NameServer: NS2.PSI.NET Comment: RegDate: 1991-04-16 Updated: 2003-03-14 TechHandle: PSI-NISC-ARIN TechName: PSINet, Inc. TechPhone: +1-518-283-8860 TechEmail: hostinfo () psi com OrgAbuseHandle: COGEN-ARIN OrgAbuseName: Cogent Abuse OrgAbusePhone: +1-877-875-4311 OrgAbuseEmail: abuse () cogentco com OrgNOCHandle: ZC108-ARIN OrgNOCName: Cogent Communications OrgNOCPhone: +1-877-875-4311 OrgNOCEmail: noc () cogentco com OrgTechHandle: IPALL-ARIN OrgTechName: IP Allocation OrgTechPhone: +1-877-875-4311 OrgTechEmail: ipalloc () cogentco com ---------------------------------------------------------------------- Jon Lewis *jlewis () lewis org*| I route System Administrator | therefore you are Atlantic Net | _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
Current thread:
- Reply to Sean Donelan (was: Yet more hijacked space? - deru.net) Michael . Dillon (May 06)
- Re: Reply to Sean Donelan (was: Yet more hijacked space? - deru.net) Frank Louwers (May 06)
- Re: Reply to Sean Donelan (was: Yet more hijacked space? - deru.net) Joseph T. Klein (May 06)
- Re: Reply to Sean Donelan (was: Yet more hijacked space? - deru.net) jlewis (May 06)
- Re: Reply to Sean Donelan (was: Yet more hijacked space? - deru.net) alex (May 06)
- Re: Reply to Sean Donelan (was: Yet more hijacked space? - deru.net) jlewis (May 06)
- Re: Reply to Sean Donelan (was: Yet more hijacked space? - deru.net) alex (May 06)
- <Possible follow-ups>
- Re: Reply to Sean Donelan (was: Yet more hijacked space? - deru.net) Michael . Dillon (May 06)
- Re: Reply to Sean Donelan (was: Yet more hijacked space? - deru.net) Frank Louwers (May 06)