Home page logo
/

nanog logo nanog mailing list archives

RE: Digex and Akamai are raping the ARIN whois database
From: chuck goolsbee <cg () forest net>
Date: Tue, 4 Sep 2001 19:48:22 -0700


</lurk>
Nothing like the smell of spam in the morning - coming to you through the
"benevolent" acts of Akamai and Digex - sent to POC handles blatantly stolen
from ARIN's whois database.

Did it come to an address *only* used with ARIN? I realize that is a stupid question, but it has to be asked.


Yo, Digex:

Tell them, not us. I'd call their marketing dept, sales dept, whatever and give them a piece of your mind. However, by odd coincidence I can fill you in on some background info:

from=<bounces () bounce innovyx com>, <snip>

Well I *can* confirm for you that 'Innovyx' is a spamhaus.

I unfortunately worked for their parent company several years ago, until I got a clue and bailed. 'Innovyx' spun off just before I left, and unfortunately my name (with an ancient low-number personal NIC handle... remmber those?) was on their WHOIS records, both at NSI and ARIN, for way too long. I got endlessly harrassed by pissed off people, until my attorney reminded their attorney about the agreement we all signed when we settled.

They haven't updated their own ARIN WHOIS data <http://www.arin.net/cgi-bin/whois.pl?queryinput=NET-TPDI3>, so there is at least one human listed there you *can* harass... however he isn't the one who can do anything for you. Ping me off-list if you want the names of the guilty. You *really need* to contact Digex & Akamai, as they were actually foolish enough to *pay* Innovyx good money to harass you.

P.T. Barnum *was* right.



> [censored]
> Received-Date: Tue, 4 Sep 2001 11:4x:xx -0400 (EDT)
> Received: from shiner.innovyx.com (shiner.innovyx.com [63.143.186.194] (may be forged))

I hope 'shiner' isn't the 'shiner' I set up. Sad to hear of a good host used for evil purposes... <sigh>

They (innovyx) seem to have moved out of the frying pan (UUnet) and into the fire (Winstar) though.

But wait...
heh... looks like a "poor mans' BGP"??? with multiple IPs on every host? Their ARIN records indicate UUnet address space, but your mail points to Winstar ones...

Start: 9/4/01     7:21:03 PM
Find route from: 216.168.32.90
to: shiner.innovyx.com (207.78.109.20), Max 30 hops, 40 byte packets
Host Names truncated to 32 bytes
1 out.bothell.forest.net. (216.168.32.1 ): 1ms 0ms 0ms 2 border001.sea.forest.net. (216.168.46.1 ): 1ms 1ms 1ms 3 500.serial1-1.gw4.sea4.alter.net (157.130.181.1 ): 1ms 1ms 1ms 4 117.atm2-0.xr2.sea4.alter.net. (152.63.105.142 ): 4ms 2ms 2ms 5 192.atm2-0.xr2.sea1.alter.net. (146.188.200.145): 3ms 4ms 3ms 6 194.atm6-0.gw7.sea1.alter.net. (152.63.105.173 ): 3ms 3ms 3ms 7 gw.tpdinc.com. (206.136.148.1 ): 7ms!U * 9ms!U
*Trace completed*

Unreachable. Maybe they are leaving UU for less green pastures. Or maybe their DNS is all screwed up...

Start: 9/4/01     7:21:12 PM
Find route from: 216.168.32.90
             to: 63.143.186.194 (63.143.186.194), Max 30 hops, 40 byte packets
Host Names truncated to 32 bytes
1 out.bothell.forest.net. (216.168.32.1 ): 1ms 0ms 1ms 2 border001.sea.forest.net. (216.168.46.1 ): 1ms 1ms 1ms 3 s4-0-5.evrtwa1-cr2.bbnplanet.net (4.0.63.17 ): 2ms 2ms 2ms 4 p3-0.evrtwa1-ba2.bbnplanet.net. (4.24.5.109 ): 2ms 2ms 2ms 5 p3-0.sttlwa1-cr2.bbnplanet.net. (4.24.6.61 ): 3ms 3ms 7ms 6 p13-0.snjpca1-br1.bbnplanet.net. (4.24.4.182 ): 22ms 22ms 20ms 7 p1-0.snjpca1-cr1.bbnplanet.net. (4.24.9.134 ): 20ms 20ms 21ms 8 mae-west-atm-gtei.good.net. (4.24.145.30 ): 44ms 36ms 57ms 9 3.atm8-0.snv1-bb1.winstar.net. (65.36.0.174 ): 51ms 37ms 39ms 10 6.atm4-0-0.seattle-0.winstar.net (63.141.227.177 ): 61ms 61ms 56ms 11 158.winstar.net. (63.142.195.158 ): 62ms 62ms 65ms 12 shiner.innovyx.com. (63.143.186.194 ): 64ms 61ms 62ms
* Trace completed 9/4/01     7:21:15 PM   *


So either their DNS, or their routing, or *both* are completely fsck'ed. Couldn't have happened to a more deserving bunch.

<snip>



> We're sending you this invitation because we received your e-mail
> address from one of our marketing partners. If you'd like to receive
> future emails, please click here:

Groan. See, it *is* opt-in!


lame.

> http://edge.akamai.com/redir.asp?[censored]&SubscriberID=[censored]
> Not confirming your interest automatically leaves you unsubscribed and
> we will not send you future emails. Additionally, each issue you receive
> as a subscriber will contain unsubscription instructions.

Jeez, it's like a frikkin man-trap. Yes, you will only receive one mail about *this* 'event, but no way of ever permanently removing you address?

These guys are in Washington state, which does have a pretty good anti-spam law. You might want to see if they are toeing the line here or stepping over it.

Given that this is not even trivially operational, I'm dropping back into lurk mode now...

<lurk>



Chuck Goolsbee                          V.P. Technical Operations
_________________________________________________________________
digital.forest                      Phone: +1-877-720-0483, x2001
where Internet solutions grow              Int'l: +1-425-483-0483
19515 North Creek Parkway                    Fax: +1-425-482-6871
Suite 208                                   http://www.forest.net
Bothell, WA 98011                            email: cg () forest net


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]