Discussion:
Finding useful/pertinent IP reallocation WHOIS info
(too old to reply)
Fergie (Paul Ferguson)
2005-02-25 00:03:33 UTC
Permalink
Can anyone provide a better way to find, say, the appropriat
contact information for address blocks that are further rellocate
from the regional registries? I've about reached my frustratio
levels over the course of the past year on the issue

Example: Trying to find the approriate contact info for a
abuse@ address responsible for a malicious host that (may
reside within an address block in Brazil (not meaning to pic
on Brazil by no means). Checking the WHOIS database at

http://lacnic.net/cgi-bin/lacnic/whois?lg=E

...you can find that

#These addresses have been further assigned to Brazilian users
#Contact information can be found at the WHOIS server locate
#at whois.registro.br and at http://whois.nic.b

No, it can't. At least not that I can ascertain

And when arriving at either of these web pages, the onl
lookup available to the user is a CGI form for domain-onl
registry lookups, not for IP address allocation info

I was also hoping that the Referral WHOIS (RWhois) databas
might provide some assiatance, I am informed only that th
responsible registry is the Latin American and Caribbean I
address Regional Registry

I have tried many times to solicit a response via e-mai
from someone at the Brazilian registry to no avail

Very frustrating

The system is broken and needs to be fixed. Registries: Are yo
listening

- fer

-
"Fergie", a.k.a. Paul Ferguso
Engineering Architecture for the Interne
***@netzero.net o
***@sbcglobal.ne
Fergie (Paul Ferguson)
2005-02-25 01:05:41 UTC
Permalink
Thanks to all who responded privately off-list

What I was looking for: http://registro.br/cgi-bin/nicbr/whoi

..which wasn't exactly intuitive from the main page
http://registro.br/index.htm

Also, I liked the alternative suggestion of

telnet rwhois.whatever.foo 432
<enter dotted quad or other item of interest

..however, one thing that I didn't mention in my origina
post is that what I was looking for was a _simple_ metho
for our staff to use which didn't require a maze of though
challenges (or a Captain Midnight Decoder Ring) -- somethin
they could just point a web broswer at and find correc
contact information for IP reallocation data. Unfortunately
everyone in a particluar organization has access to a CL
WHOIS client, or even a Windoze WHOIS client that provide
detailed information with a variety of options

Is it the case that SPAM purveyors have put us in th
unfortunate position where there isn't readily availabl
access to SWIP/reallocation information? What a shame

Thanks to one and all

- fer

-- "Fergie (Paul Ferguson)" <***@netzero.net> wrote

Can anyone provide a better way to find, say, the appropriat
contact information for address blocks that are further rellocate
from the regional registries? I've about reached my frustratio
levels over the course of the past year on the issue

Example: Trying to find the approriate contact info for a
abuse@ address responsible for a malicious host that (may
reside within an address block in Brazil (not meaning to pic
on Brazil by no means). Checking the WHOIS database at

http://lacnic.net/cgi-bin/lacnic/whois?lg=E

...you can find that

#These addresses have been further assigned to Brazilian users
#Contact information can be found at the WHOIS server locate
#at whois.registro.br and at http://whois.nic.b

No, it can't. At least not that I can ascertain

And when arriving at either of these web pages, the onl
lookup available to the user is a CGI form for domain-onl
registry lookups, not for IP address allocation info

I was also hoping that the Referral WHOIS (RWhois) databas
might provide some assiatance, I am informed only that th
responsible registry is the Latin American and Caribbean I
address Regional Registry

I have tried many times to solicit a response via e-mai
from someone at the Brazilian registry to no avail

Very frustrating

The system is broken and needs to be fixed. Registries: Are yo
listening

- fer

-
"Fergie", a.k.a. Paul Ferguso
Engineering Architecture for the Interne
***@netzero.net o
***@sbcglobal.ne
M***@radianz.com
2005-02-25 11:23:21 UTC
Permalink
Post by Fergie (Paul Ferguson)
http://lacnic.net/cgi-bin/lacnic/whois?lg=E
...you can find that
#These addresses have been further assigned to Brazilian users
#Contact information can be found at the WHOIS server locate
#at whois.registro.br and at http://whois.nic.b
Well, if you could speak Portuguese you would immediatel
see that they shuffled the website and the page you wan
is at http://registro.br/cgi-bin/nicbr/whoi
And if you don't speak Portuguese, how are you goin
to communicate with a small Brazilian ISP in the firs
place

Also, you have identified an error at LACNIC an
you probably should tell them so that they ca
correct their whois server. LACNIC does have Englis
language capability

--Michael Dillo

P.S. The whole concept of looking up an abuse contac
in a whois database is completely broken and need
to be scrapped. It simply does not scale. We nee
some hierarchy here as in many other areas of th
network
Fergie (Paul Ferguson)
2005-02-25 17:28:14 UTC
Permalink
I can assure you, this Brazilian ISP is not "small"... :-

I have visited with them (as well as a couple of othe
ISP's in Brazil), and communicating with them has neve
been a problem, at least for the ones that I have previousl
met with

As an aside (and not intentionally meaning to soun
like an English biggot), but let's face it, English ha
always been the language of Internet technology, a
least communicating technological issues on a globa
level

- fer

-- ***@radianz.com wrote

Well, if you could speak Portuguese you would immediatel
see that they shuffled the website and the page you wan
is at http://registro.br/cgi-bin/nicbr/whoi
And if you don't speak Portuguese, how are you goin
to communicate with a small Brazilian ISP in the firs
place

-
"Fergie", a.k.a. Paul Ferguso
Engineering Architecture for the Interne
***@netzero.net o
***@sbcglobal.ne

Loading...