[RFCI-Discuss] Re: send all credit cards with info

[Abuse Desk]

Alan Brown wrote:
> On Wed, 8 Mar 2006, Jeff Makey wrote:
>
>> The message was injected from a network apparently hijacked by
>> AFRINIC (who is delegated only up through 196.29.39.255 according to
>> ARIN)
>
> ARIN's recordkeeping is somewhat lax at the moment, other registries
> are providing appropriate redirects though.
>
> This has been getting discussion on another list with various NIC
> representatives. Needless to say ARIN have been getting prodded about
> it.

One of us sent the following to ARIN's hostmaster two weeks ago (21
February) and haven't gotten a human response yet:

"Please add a record for IP Address Range 196.0.0.0/8 indicating
association with AfriNIC.  Details follow.

For the source of the following spam email message, IP Address
196.1.176.54, both whois.arin.net and
http://ws.arin.net/whois?queryinput=196.1.176.54 return "No match found
for 196.1.176.54."  It appears that 196.1.176.54 (as a part of 196.0.0.0
to 196.255.255.255, CIDR 196.0.0.0/8) is associated with AfriNIC, and
your services should reflect that allocation per your statement "The
ARIN WHOIS database also contains records for IP address ranges
associated with other RIRs, including AfriNIC (Africa)" on
http://www.arin.net/abuse.html ."

The auto-ack stated "due to the high volume of requests we receive
regularly, it may take up to three business days for you to receive a
response from us."

-- 
Best Regards,

Abuse Desk
DeSpam.Us