Home page logo
/

nanog logo nanog mailing list archives

Re: whois breakage
From: Mark Milhollan <mlm () ftel net>
Date: Wed, 25 Oct 2000 09:49:45 -0700


Joshua Goodall <joshua () roughtrade net> wrote:
If anyone is using automated whois in production (very likely), check
your results!

Always.  Even the results given by whois.internet.net (ne
whois.crsnic.net) are completely distinct, and unambiguous, provided you
supply the _nearly critical_ options ("dump" and a "=" prefix, see
sample below).  Those two microsoft.com's are both registered by NSI. 
The first is a nameserver, the second a domain.


        $ whois -V microsoft.com
        Connecting to whois.crsnic.net.
        Query string: "dump =microsoft.com"

        Whois Server Version 1.3

        Domain names in the .com, .net, and .org domains can now be registered
        with many different competing registrars. Go to http://www.internic.net
        for detailed information.

           (0)Server Name: MICROSOFT.COM.IS.SECRETLY.RUN.BY.ILLUMINATI.TERRORISTS.NET
           (1)IP Address: 170.1.75.143
           (2)Registrar: NETWORK SOLUTIONS, INC.
           (3)Whois Server: whois.networksolutions.com
           (4)Referral URL: www.networksolutions.com



           (0)Domain Name: MICROSOFT.COM
           (1)Registrar: NETWORK SOLUTIONS, INC.
           (2)Whois Server: whois.networksolutions.com
           (3)Referral URL: www.networksolutions.com
           (4)Name Server: DNS4.CP.MSFT.NET
           (5)Name Server: DNS5.CP.MSFT.NET
           (6)Name Server: DNS7.CP.MSFT.NET
           (7)Name Server: DNS6.CP.MSFT.NET
           (8)Updated Date: 29-sep-2000


        >>> Last update of whois database: Tue, 24 Oct 2000 08:08:25 EDT <<<

        The Registry database contains ONLY .COM, .NET, .ORG, .EDU domains and
        Registrars.


        Detected CRSNIC referral to whois.networksolutions.com.
        Query string: "host =microsoft.com.is.secretly.run.by.illuminati.terrorists.net
        [NSI header elided]

           Hostname: MICROSOFT.COM.IS.SECRETLY.RUN.BY.ILLUMINATI.TERRORISTS.NET
           Address: 170.1.75.143
           System: ? running ?

           Coordinator:
              Lamo, Adrian  (AL9235)  adrian () ADRIAN ORG
              1254 Market St. 3rd Floor
              San Francisco, CA 94102
              415-505-HACK (FAX) 415-505-HACK (by prior request)

           Record last updated on 14-Oct-2000.
           Database last updated on 24-Oct-2000 16:49:02 EDT.



        Detected CRSNIC referral to whois.networksolutions.com.
        Query string: "domain =microsoft.com"
        [NSI header elided]

        Registrant:
        Microsoft Corporation (MICROSOFT-DOM)
           1 microsoft way
           redmond, WA 98052
           US

           Domain Name: MICROSOFT.COM

           Administrative Contact:
              Microsoft Hostmaster  (MH37-ORG)  msnhst () MICROSOFT COM
              Microsoft Corp
              One Microsoft Way
              Redmond, WA 98052
              US
              425 882 8080
              Fax- - - .: 206 703 2641
           Technical Contact, Zone Contact:
              MSN NOC  (MN5-ORG)  msnnoc () MICROSOFT COM
              Microsoft Corp
              One Microsoft Way
              Redmond, WA 98052
              US
              425 882 8080
              Fax- PATH
           Billing Contact:
              Microsoft-Internic Billing Issues  (MDB-ORG)  msnbill () MICROSOFT COM
              Microsoft Corp
              One Microsoft Way
              Redmond, WA 98052
              US
              425 882 8080
              Fax- ïvxt

           Record last updated on 29-Sep-2000.
           Record expires on 03-May-2010.
           Record created on 02-May-1991.
           Database last updated on 24-Oct-2000 16:49:02 EDT.

           Domain servers in listed order:

           DNS4.CP.MSFT.NET             207.46.138.11
           DNS5.CP.MSFT.NET             207.46.138.12
           DNS6.CP.MSFT.NET             207.46.138.20
           DNS7.CP.MSFT.NET             207.46.138.21




  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault