North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Reply to Sean Donelan (was: Yet more hijacked space? -

  • From: jlewis
  • Date: Tue May 06 10:41:27 2003

On Tue, 6 May 2003 [email protected] wrote:

> BS. Cogent provides publically available reassignment info in its rwhois 
> database. 
> Comment:    ********************************************
> Comment:    Reassignment information for this block is
> Comment:    available at port 4321
> Comment:    ********************************************

Not for all of their the very least, not for ones acquired via 

$ whois [email protected]:4321
%rwhois V-1.5:0010b0:00
%Error 230 No objects found.

There are multiple systems in spewing spam.  How do you 
tell who they belong to and how much address space they have?

Fortunately, in this case, reverse DNS and traceroutes make it pretty 
clear this is a single (entire) /24 of spammer systems.

OrgName:    Performance Systems International Inc.
OrgID:      PSI
Address:    1015 31st Street, NW
City:       Washington
StateProv:  DC
PostalCode: 20007
Country:    US
NetRange: -
NetName:    PSINETA
NetHandle:  NET-38-0-0-0-1
NetType:    Direct Allocation
NameServer: NS.PSI.NET
NameServer: NS2.PSI.NET
RegDate:    1991-04-16
Updated:    2003-03-14
TechName:   PSINet, Inc.
TechPhone:  +1-518-283-8860
TechEmail:  [email protected]
OrgAbuseHandle: COGEN-ARIN
OrgAbuseName:   Cogent Abuse
OrgAbusePhone:  +1-877-875-4311
OrgAbuseEmail:  [email protected]
OrgNOCHandle: ZC108-ARIN
OrgNOCName:   Cogent Communications
OrgNOCPhone:  +1-877-875-4311
OrgNOCEmail:  [email protected]
OrgTechHandle: IPALL-ARIN
OrgTechName:   IP Allocation
OrgTechPhone:  +1-877-875-4311
OrgTechEmail:  [email protected]

 Jon Lewis *[email protected]*|  I route
 System Administrator        |  therefore you are
 Atlantic Net                |  
_________ for PGP public key_________