[58264] in North American Network Operators' Group
Re: Reply to Sean Donelan (was: Yet more hijacked space? - deru.net)
daemon@ATHENA.MIT.EDU (jlewis@lewis.org)
Tue May 6 10:40:02 2003
Date: Tue, 6 May 2003 10:39:26 -0400 (EDT)
From: jlewis@lewis.org
To: alex@pilosoft.com
Cc: nanog@merit.edu
In-Reply-To: <Pine.LNX.4.44.0305061006360.21048-100000@paix.pilosoft.com>
Errors-To: owner-nanog-outgoing@merit.edu
On Tue, 6 May 2003 alex@pilosoft.com wrote:
> BS. Cogent provides publically available reassignment info in its rwhois
> database.
>
> Comment: ********************************************
> Comment: Reassignment information for this block is
> Comment: available at rwhois.cogentco.com port 4321
> Comment: ********************************************
Not for all of their blocks...at the very least, not for ones acquired via
PSI.
$ whois 38.144.198.0@rwhois.cogentco.com:4321
[rwhois.cogentco.com]
%rwhois V-1.5:0010b0:00 rwhois.cogentco.com
%Error 230 No objects found.
There are multiple systems in 38.144.198.0/24 spewing spam. How do you
tell who they belong to and how much address space they have?
Fortunately, in this case, reverse DNS and traceroutes make it pretty
clear this is a single (entire) /24 of spammer systems.
Query: 38.144.198.0
Registry: whois.arin.net
Results:
OrgName: Performance Systems International Inc.
OrgID: PSI
Address: 1015 31st Street, NW
City: Washington
StateProv: DC
PostalCode: 20007
Country: US
NetRange: 38.0.0.0 - 38.255.255.255
CIDR: 38.0.0.0/8
NetName: PSINETA
NetHandle: NET-38-0-0-0-1
Parent:
NetType: Direct Allocation
NameServer: NS.PSI.NET
NameServer: NS2.PSI.NET
Comment:
RegDate: 1991-04-16
Updated: 2003-03-14
TechHandle: PSI-NISC-ARIN
TechName: PSINet, Inc.
TechPhone: +1-518-283-8860
TechEmail: hostinfo@psi.com
OrgAbuseHandle: COGEN-ARIN
OrgAbuseName: Cogent Abuse
OrgAbusePhone: +1-877-875-4311
OrgAbuseEmail: abuse@cogentco.com
OrgNOCHandle: ZC108-ARIN
OrgNOCName: Cogent Communications
OrgNOCPhone: +1-877-875-4311
OrgNOCEmail: noc@cogentco.com
OrgTechHandle: IPALL-ARIN
OrgTechName: IP Allocation
OrgTechPhone: +1-877-875-4311
OrgTechEmail: ipalloc@cogentco.com
----------------------------------------------------------------------
Jon Lewis *jlewis@lewis.org*| I route
System Administrator | therefore you are
Atlantic Net |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
