Jump to content

Cache refresh disabled to avoid rate-limiting of whois servers


RobiBue
 Share

Recommended Posts

Cache refresh disabled to avoid rate-limiting of whois servers

[refresh cache]

$ whois NET-3-128-0-0-1@whois.arin.net

[whois.arin.net]
ERROR 503: Unable to service request due to high volume.

hmmm interesting....

in the end, although it would go to /dev/nul for amazonaws, it can't find an owner now...

No reporting addresses found for 3.208.7.29, using devnull for tracking.

Edited by RobiBue
Link to comment
Share on other sites

Yeah, I am not sure if there is someone that has the ability to fix these cache entries.  It is a tragedy now that we are here, but at the same time it is at least populating the blacklist.

Display data:
"whois 185.79.243.137@whois.arin.net" (Getting contact from whois.arin.net )
   Redirect to ripe
   Display data:
   "whois 185.79.243.137@whois.ripe.net" (Getting contact from whois.ripe.net)
   whois.ripe.net 185.79.243.137 (nothing found)

[whois.ripe.net]
%ERROR:201: access denied for 184.94.240.92

 

Link to comment
Share on other sites

5 hours ago, gnarlymarley said:

Yeah, I am not sure if there is someone that has the ability to fix these cache entries.  It is a tragedy now that we are here, but at the same time it is at least populating the blacklist.

Display data:
"whois 185.79.243.137@whois.arin.net" (Getting contact from whois.arin.net )
   Redirect to ripe
   Display data:
   "whois 185.79.243.137@whois.ripe.net" (Getting contact from whois.ripe.net)
   whois.ripe.net 185.79.243.137 (nothing found)


[whois.ripe.net]
%ERROR:201: access denied for 184.94.240.92

 

Oooh! This last part means that RIPE is blocking ironport/SpamCop/Cisco from accessing their Whois database...

now that’s bad.

Edited by RobiBue
Link to comment
Share on other sites

I just checked both yours and mine and they come back.   I am not sure how long it takes for the cached whois to expire.  Seeing the owner, I am not surprised about the /dev/null.

 

[refresh cache]

$ whois NET-3-128-0-0-1@whois.arin.net

[whois.arin.net]
. . . .
NetRange:       3.128.0.0 - 3.255.255.255
CIDR:           3.128.0.0/9
NetName:        AT-88-Z
. . . .
OrgAbuseEmail:  abuse@amazonaws.com

 

 

[refresh cache]

$ whois 185.79.243.137@whois.ripe.net

[whois.ripe.net]
. . . .
inetnum:        185.79.240.0 - 185.79.243.255
netname:        PL-INTER-SAT-20141203
country:        PL
org:            ORG-PTAO1-RIPE
admin-c:        JO3356-RIPE
. . . .
abuse-mailbox:  jacek@inter-sat.pl

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...