ARIN WHOIS for leads

Patrick W. Gilmore patrick at
Fri Jul 26 14:58:23 UTC 2013

On Jul 26, 2013, at 09:32 , Ryan Pavely <paradox at> wrote:

> What about the 2am phone calls from the guy, who did a nslookup on a website, and then whois on the ip, who is calling to say his porn site is partially not working and he's pissed.
> imho.  The days of having public records like whois/rwhois available has passed.  The data use to be protected with a simple clue test.  Only the clue minded folks knew about the data, and were pretty responsible with it.  Now anyone can look it up.  We use to use that data to be able to directly communicate with another provider for a serious problem.  It was great knowing exactly how to get a hold of someone, and not have to forage your way through tech support... noc.. etc..
> Even the anti-spam army out there seem to ignore 'This is the abuse contact', and end up spamming all whois org contacts. What's the point in that?
> Why can't we implement a method where you have to be a registered, and paying, user/member with an AS number to be able to get IP whois 'contact' info?  Sure list my name and company.  But keep my email and phone number private.  In fact show me a web log of all registered users that looked me up.
> I doubt that will ever happen.  So it's time for me to update my arin contact as this past weekend I got exactly that 2am porn call and it was quite disturbing which website was being referenced. In all my years I knew there was some crazy stuff out there, but this took the cake.

You can change anything you want. ARIN & ICANN are both member organizations. Propose a change, get the votes, and POOF!, things are changed.

Even better, only the "clued" (and paid) get to vote. So it is exactly what you wanted.


> On 7/25/2013 7:02 PM, Justin Vocke wrote:
>> Sent this little e-mail to ARIN:
>> I'm not sure that you guys can do anything about this, but it's worth
>> looking into. I registered AS626XX a week ago, and since it's registration,
>> I've been getting calls from "wholesale" carriers trying to get me to
>> purchase IP transit from them. Someone is obviously using your database of
>> contact information to generate sales leads.
>> 512-377-6827 was one of the numbers trying to get more information about my
>> network and how they could "help" me.
>> My guess is someone is using your mass whois database, looking at the most
>> recently issued/created AS numbers, and cold calling.
>> Just thought I'd pass this along.
>> ---------
>> Due to the amount of calls I've received, I'm guessing its probably a good
>> idea to remove my contact info from the registration and setup role's
>> instead.
>> Does this sorta thing happen frequently with new registrations or did I
>> just draw the short straw?
>> Best,
>> Justin

More information about the NANOG mailing list