inetnum:        37.114.49.0 - 37.114.49.255
netname:        DE-NETWORK-ABUSE-3706
descr:          Network-Abuse.info
country:        DE
admin-c:        HA2568-RIPE
tech-c:         HA2568-RIPE
status:         ASSIGNED PA
mnt-by:         MNT-INTERCOLO
mnt-by:         MNT-WEESLY
source:         RIPE # Filtered

% Information related to 'HA2568-RIPE'

person:         Holger Anonymous
address:        Please contact us by E-Mail
phone:          +49.180.4100100
abuse-mailbox: abuse@network-abuse.info
remarks:        *******************************************
remarks:        *     SPAM / ABUSE / SECURITY / OTHERS    *
remarks:        *******************************************
remarks:        * For spam/abuse/security issues please *
remarks:        * contact : abuse@network-abuse.info     *
remarks:        *******************************************
remarks:        * For other information or issues please *
remarks:        * sent to abuse@network-abuse.info        *
remarks:        *******************************************
nic-hdl:        HA2568-RIPE
mnt-by:         MNT-ANONYMOUS
source:         RIPE # Filtered

and network-abuse.info is domain clocked on godaddy -

Domain Name:NETWORK-ABUSE.INFO
Created On:19-Sep-2011 12:28:46 UTC
Last Updated On:21-Jun-2012 09:56:51 UTC
Expiration Date:19-Sep-2013 12:28:46 UTC

Now for what I wanted to ask. A RIPE query from the command line doesnt show anything.

suresh@oc2751464200 22:27:52 <~> $ whois -h whois.ripe.net -i mnt-by MNT-ANONYMOUS
[Querying whois.ripe.net]
[whois.ripe.net]

%ERROR:101: no entries found
%
% No entries found in source RIPE.

But he has at least two other interesting (to a postmaster for a large email service, hint, hint) netblocks this guy has -

37.114.43.0/24
37.114.45.0/24

Doing a RIPE full text search does get me these and other netblocks

inetnum: 89.144.17.0 - 89.144.18.255
mnt-by=MNT-WEESLY ISP4P-MNT MNT-ANONYMOUS


inetnum: 185.10.68.0 - 185.10.69.255
mnt-by=MNT-ANONYMOUS


inetnum: 185.10.70.0 - 185.10.70.255
mnt-by=MNT-ANONYMOUS


inetnum: 185.10.71.128 - 185.10.71.159
mnt-by=MNT-ANONYMOUS


inetnum: 185.10.71.160 - 185.10.71.167
mnt-by=MNT-ANONYMOUS


inetnum: 185.10.71.192 - 185.10.71.255
mnt-by=MNT-ANONYMOUS


mntner: MNT-ANONYMOUS
mnt-by=MNT-ANONYMOUS, referral-by=MNT-ANONYMOUS, mntner=MNT-ANONYMOUS


route: 185.10.68.0/22AS198599
mnt-by=MNT-ANONYMOUS


route: 37.114.43.0/24AS5577
mnt-by=MNT-ANONYMOUS ROOT-MNT


route: 37.114.45.0/24AS198599
mnt-by=MNT-ANONYMOUS

route: 37.114.46.0/24AS198599
mnt-by=MNT-ANONYMOUS


route: 37.114.47.0/24AS198599
mnt-by=MNT-ANONYMOUS


route: 37.114.48.0/24AS198599
mnt-by=MNT-ANONYMOUS


route: 37.114.49.0/24AS198599
mnt-by=MNT-ANONYMOUS

route: 37.114.51.0/24AS198599
mnt-by=MNT-ANONYMOUS

--
Suresh Ramasubramanian (ops.lists@gmail.com)