Nmap Hackers: Re: can/should

From: Thomas Reinke <reinke_at_e-softinc.com>
Date: Thu, 25 May 2000 00:30:33 -0400

> I use http://www.arin.net/cgi-bin/queryinput=xxx.xxx.xxx.xxx to dump the
> whois info for offending IPs. I need a better URL to show all domain infos
> but it appears that internic has been divided into 100's of pieces.

The following URL will automatically dump (albeit some HTML stuff around
the
interesting info) an IP's info, regardless of the registrar maintaining
it.
It's not 100% foolproof, but in virtually all cases it knows, based on
the
first octet, which registrar to contact for information (ARIN, APNIC,
RIPE)
It screws up in a couple of instances where the first octet doesn't
uniquely
determine the registrar to visit, but this rarely happens.

Cheers, Thomas

http://www.securityspace.com/cgi-bin/swhois/whois?server=auto&domain=xx.xx.xx.xx
Received on May 24 2000