Look up IP block on ARIN

[abovebrd]

What would be the correct syntax used with the "whois" command to look up IP block information. I'm trying to block spammers and want to block access to their whole IP range. I picked out the starting address from my sendmail log.

Something like :

whois -h whois.arin.net 171.64.232.10

I seem to be missing something.

thanks
-Danny
dan@snoboarder.net

 

[gheist]

whois -h (ip.addr.here.not.name) query


whois -a 171.64.232.10

Stanford University Network (NETBLK-NETBLK-SUNET)
Pine Hall, Room 115
Stanford, CA 94305-4122
US

Netname: NETBLK-SUNET
Netblock: 171.64.0.0 - 171.67.255.255

Coordinator:
Kohn, Jay (JK535-ARIN) security@Stanford.EDU
650-723-7515 (FAX) 650-723-0908

Domain System inverse mapping provided by:

ARGUS.STANFORD.EDU 171.64.2.230
AVALLONE.STANFORD.EDU 171.64.2.210
ATALANTE.STANFORD.EDU 171.64.2.220

Record last updated on 17-Aug-2000.
Database last updated on 20-May-2002 20:01:13 EDT.

The ARIN Registration Services Host contains ONLY Internet
Network Information: Networks, ASN's, and related POC's.
Please use the whois server at rs.internic.net for DOMAIN related
Information and whois.nic.mil for NIPRNET Information.

 

[abovebrd]

thanks,

I feel stupid, no worries

-Danny
dan@snoboarder.net