nanog mailing list archives

Re: Another day, another illicit SQUAT - WebNX (AS18450) 103.11.67.0/24


From: Doug Clements <dclements () gmail com>
Date: Fri, 28 Oct 2016 18:10:19 -0400

How does one get ARIN to register resources to come up with this result?

https://whois.arin.net/rest/nets;q=103.11.67.105

The /16 is APNIC but there are 2 subnets that appear to be allocated from
ARIN. Having just typed 'whois 103.11.67.105' I completely missed the fact
that the supernet was APNIC until I checked the web interface.

--Doug


On Fri, Oct 28, 2016 at 5:40 PM, Ronald F. Guilmette <rfg () tristatelogic com>
wrote:



I just got a spam from 103.11.67.105.  The containing /24 appears to
be unallocated APNIC space.

RIPE tools seem to say that AS18450 has been routing this block since
around May 23rd.

I see this kind of stuff almost every day now, it seems.  And you know,
there are days when I really do start to wonder "Has the Internet gone
mad?"

I'm going to call these turkeys right now and just ask them, point
blank, what the bleep they think they're doing, routing unallocated
APNIC space.  But if history is any guide, this is probably going to
turn out to be another one of these "absentee landlord" kinds of ASes,
where all they have is an answering machine.

I have to either laugh or cry when I see people posting here about the
non-functionality of abuse@ email addresses, and then see other people
saying "Well, this is why all ASes also have phone numbers."

I wish I had a dollar for every AS I had ever tried to contact where
-neither- the abuse@ address -nor- the phone number got me to any
actual human being.


Regards,
rfg



Current thread: