Originally tied in with em5000.com/.net, these guys are now spamming from their own block.
[rwelty@skipper rwelty]$ whois 216.52.219.205@whois.arin.net [whois.arin.net] Internap Network Services (NETBLK-PNAP-8-98) PNAP-8-98 216.52.0.0 - 216.52.255.255 JDR Media (NETBLK-PNAP-LAX-JDRMED-RM-01) PNAP-LAX-JDRMED-RM-01 216.52.219.192 - 216.52.219.223 To single out one record, look it up with "!xxx", where xxx is the handle, shown in parenthesis following the name, which comes first. The ARIN Registration Services Host contains ONLY Internet Network Information: Networks, ASN's, and related POC's. Please use the whois server at rs.internic.net for DOMAIN related Information and whois.nic.mil for NIPRNET Information. [rwelty@skipper rwelty]$