[anti-abuse-wg] What am I missing in this mnt-by query for MNT-ANONYMOUS?

Mon Mar 4 18:02:28 CET 2013

inetnum:        37.114.49.0 -
37.114.49.255
netname:
DE-NETWORK-ABUSE-3706
descr:
Network-Abuse.info
country:
DE
admin-c:
HA2568-RIPE
tech-c:
HA2568-RIPE
status:         ASSIGNED
PA
mnt-by:
MNT-INTERCOLO
mnt-by:
MNT-WEESLY
source:         RIPE #
Filtered

% Information related to 'HA2568-RIPE'

person:         Holger Anonymous
address:        Please contact us by E-Mail
phone:          +49.180.4100100
abuse-mailbox:  abuse at network-abuse.info
remarks:        *******************************************
remarks:        *     SPAM / ABUSE / SECURITY / OTHERS    *
remarks:        *******************************************
remarks:        *  For spam/abuse/security issues please  *
remarks:        *  contact : abuse at network-abuse.info     *
remarks:        *******************************************
remarks:        * For other information or issues please  *
remarks:        * sent to abuse at network-abuse.info        *
remarks:        *******************************************
nic-hdl:        HA2568-RIPE
mnt-by:         MNT-ANONYMOUS
source:         RIPE # Filtered

and network-abuse.info is domain clocked on godaddy -

Domain Name:NETWORK-ABUSE.INFO
Created On:19-Sep-2011 12:28:46 UTC
Last Updated On:21-Jun-2012 09:56:51 UTC
Expiration Date:19-Sep-2013 12:28:46 UTC

Now for what I wanted to ask.  A RIPE query from the command line doesnt
show anything.

suresh at oc2751464200 22:27:52 <~> $ whois -h whois.ripe.net -i mnt-by
MNT-ANONYMOUS
[Querying whois.ripe.net]
[whois.ripe.net]

%ERROR:101: no entries found
%
% No entries found in source RIPE.

 But he has at least two other interesting (to a postmaster for a large
email service, hint, hint) netblocks this guy has -

37.114.43.0/24
37.114.45.0/24

Doing a RIPE full text search does get me these and other netblocks

inetnum: 89.144.17.0 -
89.144.18.255

mnt-by=MNT-WEESLY ISP4P-MNT
MNT-ANONYMOUS

inetnum: 185.10.68.0 -
185.10.69.255

mnt-by=MNT-ANONYMOUS

inetnum: 185.10.70.0 -
185.10.70.255

mnt-by=MNT-ANONYMOUS

inetnum: 185.10.71.128 -
185.10.71.159

mnt-by=MNT-ANONYMOUS

inetnum: 185.10.71.160 -
185.10.71.167

mnt-by=MNT-ANONYMOUS

inetnum: 185.10.71.192 -
185.10.71.255

mnt-by=MNT-ANONYMOUS

mntner:
MNT-ANONYMOUS

mnt-by=MNT-ANONYMOUS, referral-by=MNT-ANONYMOUS,
mntner=MNT-ANONYMOUS

route: 185.10.68.0/22AS198599

mnt-by=MNT-ANONYMOUS

route: 37.114.43.0/24AS5577

mnt-by=MNT-ANONYMOUS
ROOT-MNT

route: 37.114.45.0/24AS198599

mnt-by=MNT-ANONYMOUS

route: 37.114.46.0/24AS198599

mnt-by=MNT-ANONYMOUS

route: 37.114.47.0/24AS198599

mnt-by=MNT-ANONYMOUS

route: 37.114.48.0/24AS198599

mnt-by=MNT-ANONYMOUS

route: 37.114.49.0/24AS198599

mnt-by=MNT-ANONYMOUS

route: 37.114.51.0/24AS198599

mnt-by=MNT-ANONYMOUS

-- 
Suresh Ramasubramanian (ops.lists at gmail.com)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ripe.net/ripe/mail/archives/anti-abuse-wg/attachments/20130304/b9206ef9/attachment.html>