spammer from outer space? (routing error)

Ingo Flaschberger if at
Sat Aug 25 21:47:47 UTC 2007

Dear Peter,

> But whois keeps telling me:
> ReferralServer: whois://
> NetRange: -
> NetName:    APNIC-125
> NetType:    Allocated to APNIC
> Comment:    This IP address range is not registered in the ARIN database.
> Comment:    For details, refer to the APNIC Whois Database via
> Comment:    WHOIS.APNIC.NET or

> So I should never have seen a packet from them?

you have only queried arin ip database, which is not the only one.
The right one is apnic in this case (asia region).

ripe-whois -h  WHOIS.APNIC.NET
% [ node-1]
% Whois data copyright terms

inetnum: -
netname:      XPEED
country:      KR
descr:        POWERCOM
descr:        ************************************************
descr:        If you would like to find assignment
descr:        information in detail please refer to
descr:        the KRNIC Whois Database at
descr:        ************************************************
admin-c:      HM127-AP
tech-c:       HM127-AP
status:       Allocated Portable
changed:      hostmaster at 20060621
mnt-by:       MNT-KRNIC-AP
source:       APNIC


More information about the NANOG mailing list