Re: 190.2.141.250
By: Bj”rn Felten to All on Wed Oct 23 2019 12:16:33
Can someone please try to find out what the above system is all about?
Unfortunately, with the new EU rules, whois does no longer work here.
$ whois 190.2.141.250
% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries
% LACNIC resource: whois.lacnic.net
% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2019-10-25 09:04:56 (-03 -03:00)
inetnum: 190.2.128/20
status: reallocated
owner: WorldStream B.V.
ownerid: NL-WOBV-LACNIC
responsible: WorldStream B.V.
address: Industriestraat, 24, -
address: 2671CT - Naaldwijk -
country: NL
phone: +31 017471211 [0000]
owner-c: WLB5
tech-c: WOB2
abuse-c: WOB2
inetrev: 190.2.128/20
nserver: NS1.WORLDSTREAM.NL
nsstat: 20191023 AA
nslastaa: 20191023
nserver: NS2.WORLDSTREAM.NL
nsstat: 20191023 AA
nslastaa: 20191023
nserver: NS3.WORLDSTREAM.NL
nsstat: 20191023 AA
nslastaa: 20191023
created: 20171127
changed: 20171127
inetnum-up: 190.2.128/19
nic-hdl: WLB5
person: WorldStream B.V.
e-mail:
dv@WORLDSTREAM.CW
address: E-Commerce Park Vredenberg, -, -
address: 0000CW - Willemstad -
country: CW
phone: +5999 8200002 [0000]
created: 20151217
changed: 20190522
nic-hdl: WOB2
person: WorldStream B.V.
e-mail:
abuse@WORLDSTREAM.NL
address: Industriestraat, 24,
address: 2671CT - Naaldwijk -
country: NL
phone: +31 0174712117 []
created: 20171127
changed: 20180704
% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.
The system above has been blocking my news server for quite some time
now. I
don't know (and don't care) if it's deliberate or by accident, all I want
is for it to stop.
what do you mean "has been blocking my news server"?? do you mean that folks coming from that system cannot connect to your server or what?
what i find most interesting is the IP is apparently held by a NL entity but is apparently a latin american IP... i say that because all the responses i can find are from lacnic...
apparently that IP is also known for hosting malware or some other sort of attack entity and has been attacking a lot of systems recently...
https://www.abuseipdb.com/check/190.2.141.250
if what you were trying to say above is "that IP is attacking my system" then the correct response is to block that IP in your firewall...
)\/(ark
--- SBBSecho 3.09-Linux
* Origin: SouthEast Star Mail HUB - SESTAR (1:3634/12)