Questions tagged [whois]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
43 views

What is best practice for reporting vulnerability scans?

While reading our logs I came across several requests that seems to be scanning for vulnerabilities on our web app. 2021-09-25T17:32:44.164858+00:00 app[web.1]: 54.39.216.121 - - [25/Sep/2021:17:32:44 ...
0
votes
0answers
30 views

How do I identify registerable/registered domains (ones with whois) and domains without whois (subdomains)

I have an issue. I am trying to check if a given string is a valid "registered" or "registerable" domainname. Ideally I want to see if the given string can have a valid "...
4
votes
1answer
439 views

Whois tells me a domain is unregistered but registrars want ~$3k for it. How come?

Whois tells me tiger.top is unregistered but NameSilo, Hover and Namecheap all claim that it is a 'premium' domain and want over $3k for its initial registration. What's going on? Why is the price so ...
0
votes
1answer
28 views

Two way handshake for WHOIS protocol? RFC 3912

From RFC 3912: 3. Protocol Example If one places a request of the WHOIS server located at whois.nic.mil for information about "Smith", the packets on the wire will look like: client ...
1
vote
0answers
11 views

If two RDAP server responses disagree, what happens?

My current registrar (which I won't name here) seems to be having troubles. Their RDAP server is reporting very, very out-of-date information. And as I dig around it seems most (possibly all) of their ...
0
votes
0answers
60 views

How can I use nginx as a whois server with PHP-FPM?

How can I use nginx as a whois server with PHP-FPM? I am unable to find any way to do this. And editing the source would take a long time. Because, the source is built for HTTP purpose mainly, and ...
0
votes
1answer
78 views

How to identity who is scraping my website?

I have an e-commerce website, hosted on AWS. I understand there are tools that prevent/block the scraping bots. But is it possible to detect who is scraping my website? I mean, would I be able to ...
0
votes
0answers
22 views

Find domain details if whois is empty

Is it possible to find out domain data if whois(from many different whois services) are empty. And how can i protect my own domains from whois? Thanks.
0
votes
2answers
95 views

Does "Registry Domain ID" change on transfer [closed]

Can the Registry Domain ID be used to track if a domain still belongs to the same registrant (except for ownership changes) if transferred to a different registrar?
0
votes
3answers
433 views

Expiry of domain from zone file [closed]

I've read that a domain may appear in a daily zone file on multiple days through some change to the dns record. Unfortunately, the source didn't explain the circumstances of when it appears in the ...
1
vote
1answer
146 views

ICANN Domain Grace Period for expired domains

Recently my domain has expired (2 weeks ago) According to the ICANN website: https://www.icann.org/resources/pages/errp-2013-02-28-en, it says the following: 3.1. With the exception of sponsored ...
0
votes
1answer
209 views

Do any linux services query the RIPE database?

Lately when I query whois from one of our servers I almost always receive the following message indicating that we are exceedind daily usage limits: Queries from your IP address have passed the daily ...
1
vote
1answer
57 views

how can I know since when has a BGP prefix been allocated?

I am a bit confused. I would like to know since when a current ASN (and its corresponding prefixes) have been in place. When I look at the example at team-cymru (http://www.team-cymru.com/IP-ASN-...
0
votes
1answer
52 views

can I still map an IP address to its ASN number when the last octet is masked?

I have a database of IP addresses whose last octet has been masked IpAnonymizer.mask_ip("8.8.4.4") # => "8.8.4.0" Can I still use map these IPs to their respective Autonomous Numbers or the ...
-1
votes
3answers
778 views

Is it possible to know who hosts a website using cmd only?

I read similar questions but I didn't find something similar to what I'm asking. Suppose that we want to know who hosts a particular website knowing the domain name using the cmd only. I found many ...
1
vote
1answer
213 views

nameservers reported by whois cannot be found by nslookup

The nameservers of my domain are listed correctly on the whois entry: whois destiglobal.com | grep NS gives the following result: Name Server: HEATHER.NS.CLOUDFLARE.COM Name Server: OWEN.NS....
-4
votes
1answer
407 views

How does the domain name system know the authoritative nameserver for my domain name? [duplicate]

Note: Someone linked to Why does DNS work the way it does? as a possible duplicate. But this link does not answer my question. Specifically, this link does not describe where exactly a regular domain ...
-1
votes
2answers
2k views

Dig DNS vs Whois

I have a client that has their name services done through some third part. The domain was registered through Godaddy (yet a different third party). The name service provider had their domain names ...
0
votes
1answer
261 views

Can you tell who own's an IP address? Like a whois lookup but for IPs [closed]

I'm renting a VPS from a company and I wanted to not be associated with this IP. Mostly for free speech reasons (life blog) to prevent doxxing. Anyway I registered the domain privately, and I rented ...
0
votes
1answer
314 views

Why nslookup or dig doesn't return nameservers for certain domains?

Why nslookup or dig doesn't return nameservers for certain domains? Example: dig @8.8.8.8 NS zzy.pl ; <<>> DiG 9.9.5-9+deb8u10-Raspbian <<>> @8.8.8.8 NS zzy.pl ; (1 server ...
1
vote
2answers
147 views

My domain whois admin contact is pointing to a nonexistent email address

I've registered a domain name with OldRegistar. I've used the private whois information option, that meant the admin contact was set to a proxy email address that forwarded to my real email address. ...
0
votes
1answer
64 views

What's the meaning of "blocked_word: CG" in whois?

A customer says they want to park a domain with us. In theory, they should have registered that domain already. But when I look it up with whois, I get this: jcastro@localhost:~$ whois ...
24
votes
3answers
5k views

Why do some domain names have extremely truncated whois information?

Recently I saw the whois record for google.com, and it has none of the usual information such as the admin's contact details. It is extremely truncated: Domain Name: GOOGLE.COM Registry Domain ID: ...
1
vote
2answers
267 views

CentOS 6.9, jwhois incomplete output

From some days I noticing a strange whois output under CentOS 6.9 with .com domains: whois google.com [Interrogando whois.verisign-grs.com] [whois.verisign-grs.com] Domain Name: GOOGLE.COM ...
0
votes
2answers
95 views

Hundreds of the same IP Address in survey [closed]

In my business we have surveys about corporations (kinda like yelp). When we looked at the IP Addresses of those who voted, there where several hundred from the same 4 IP Addresses. I looked those ...
2
votes
3answers
2k views

Why do name servers occur in whois as well as DNS?

I am trying to understand why the name servers for a domain occurs in both whois information and DNS information. For example, the following whois output shows that ns1.google.com, ns2.google.com, ...
-1
votes
1answer
71 views

40.96.18.165 keeps visiting my web server

Something/someone from 40.96.18.165 has been hitting my web server exactly eight times a day everyday since Feb 5, 2017. The user agent used is Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0). ...
0
votes
2answers
486 views

Migrating DNS provider when having high NS-record TTL

I have recently migrated one of my .com-domain zones from DNS provider A to DNS provider B, however the TTL on the NS-records for the zone on provider A is very high = 432000 (5 days), and thus I feel ...
1
vote
1answer
333 views

Is it valid for a domain to have whois but no NS or A record?

I've been doing system administration for a couple of decades and my understanding has always been that: whois was allocated as part of domain registration (obviously not all TLDs have whois, but for ...
1
vote
2answers
731 views

Getting the ISP for sending a DMCA Takedown Notice from IP address or domain name

There is this site which is cloning our project "pixabay.com" in basically everything: contents, layout, etc. We would like to send a DMCA Takedown Notice to their ISP. However, when looking up the ...
3
votes
0answers
465 views

How do I install an rwhois server?

I want to run an rwhois server as an ISP, to manage customers' WHOIS information. ARIN's implementation seems to be abandoned or lost. Is that still the server to run? Are there updated instructions ...
7
votes
3answers
3k views

Domain renewal/expiration date for european domains (whois)

How can I get from the console information about domain expiration date for european domains, like .eu, .de, .sk? For .com domains I just use whois example.com, but for european domains I get just ...
-5
votes
2answers
1k views

Are there alternatives to the 'who.is' website? [closed]

I'm looking for alternatives to who.is. I tried the following Linux commands: host -a dig example.nl ANY nslookup example.nl -all But none display all the information, just as in who.is website, DNS ...
3
votes
3answers
297 views

How can I get WHOIS records for domains with similar domains?

When I make a WHOIS query for google.com I get the following list of similar domains back: $ whois google.com Aborting search 50 records found ..... GOOGLE.COM.AFRICANBATS.ORG GOOGLE.COM....
0
votes
2answers
811 views

whois records for nameserver, how and why?

How are whois-records for nameservers handled? There are websites with searchfuntion for whois-nameservrs, like: https://who.is/nameserver/ How do I get my own nameserver to be searchable? Why ...
4
votes
2answers
2k views

Why can't I whois '.google' domains?

I know of only two domains under the TLD google (owned by Google, obviously): nic.google lers.google However, neither of these give valid output when used with whois: $ whois nic.google No whois ...
1
vote
3answers
252 views

Arvixe claims that my physical host is located in Europe eventhough the whois information

When I look whois of the site it seems like located in US. My site is: www.evdore.com. 1 * * * 2 hos-tr1.juniper1.rz13.hetzner.de 213.239.224.1 de 0.145 ms hos-tr4....
2
votes
2answers
182 views

Hostname lookup fails, name server set up correctly

We have a small network, with a main server (hosting our own website and functioning as a name server) and some web hosting servers. Since yesterday we have an issue with a domain of a client of ours ...
0
votes
0answers
297 views

Registering domain with NIC handle?

Many moons ago I was a system administrator for a small company. I vaguely remember that when I registered domains, they would be using a "handle" which I think was for me "BP897". My previous ...
-1
votes
1answer
1k views

Is there any rate limit when using the whois command on ips? [closed]

The data returned by whois ip-address appears to be very useful and more accurate than the data I get from the maxmind geoip databsae I am currently using. Where does the data come from and are there ...
1
vote
1answer
3k views

High CPU usage by whois | CentOs 6

I am not a server guy and currently maintaining a small server for my own needs (Development and testing). I got a notification that my Server CPU usuage is around 99% from last 3+ hours.I know that ...
6
votes
1answer
87 views

Which domains list my server in their glue records?

My DNS server used to be the DNS server for a company's domain. However they moved elsewhere. Oddly enough, years later they were still listing my DNS server in their whois record (or, more properly,...
-1
votes
1answer
299 views

What is the public whois server for .IN.NET domain names? [closed]

If I am going to be performing a Whois lookup for a domain name with the extension .IN.NET, which whois server should I connect to? For example, for .com domain names, I would format my whois query ...
3
votes
3answers
108 views

For the .com TLD, is there any known change tracking for WhoIs information?

A client exposed information regarding what will become a controversial website in the domain WhoIs after she purchased it from auction. Is there any whois cache that will detect, save, and share ...
3
votes
3answers
1k views

DNS Nameserver updates affected by TTL? or is it just A records, MX etc?

The TTL has been set to 1H, so that IP changes for example.com can be made more quickly. The registrar has been configured with ns1.example.com and ns2.example.com, verified using WHOIS lookup. ns1 ...
0
votes
1answer
218 views

digging an IP gives me an unregistered domain name, why? [closed]

I get spam all the time (what a surprise!) and once in a while I check the IP address to see where it comes from (i.e. .cn, .cz, .pl, etc.) Today I was surprised as I found the output of dig to be: ...
0
votes
1answer
2k views

Exist a way to make gTLD servers update its NS records for a given domain? [closed]

I changed the DNS servers for a given domain and still days after that change gTLD continue replying a set of NS records that include the old NS entries. dig @g.gtld-servers.net. example.com ns ...
-2
votes
1answer
96 views

How to get ns records that are registered to ip adress

I have ip ranges. I would like to find ns addresses that are pointing to corresponding ip adress I'm looking for a command to do over nslookup or dig Expected result http://reports.internic.net/...
2
votes
1answer
517 views

Communicating with ARIN Whois server [closed]

Connecting to the ARIN Whois server via telnet works like so: telnet whois.arin.net 43 Once connected, getting information about an IP address is equally trivial: n 119.194.24.35 A lot of ...
5
votes
1answer
297 views

How does a registrar update the gtld name servers?

Is there a standardized protocol how a registrar updates the NS information for a domain? For example, if, through my registrar's interface, I set the name servers for "example.com" to "ns1.example....