[Dshield] whois

mark rowlands mark.rowlands at mypost.se
Sat Sep 27 05:55:54 GMT 2003


In the relentless search for....  Nah  it was the office mailling lists
actually

A better? whois

http://www.cyberabuse.org/whois/ 

Clients for windows (requires .net) and unix (tested under Freebsd)

 Usage: zcw [flags] <host>

  Flags are:

   * /e : search for the "Abuse E-mail" only
   * /c : search for the "Country" only
   * /s : search for the "Source" only

   * -t : show only the TLD in the "Country" field
   * -h : hide the standard headers and footers

   * +a : search for "Announced by" infos
   * +f : display the IP whois query output
   * +w : use abuse.net to correct "Abuse E-mail"

   * update : check if an update is available



zcw /e -h  www.dshield.org

abuse-mail at mci.com

And an ASN whois.....

  http://www.cymru.com/BGP/whois.html


Whois -h whois.cymru.com 

whois -h whois.cymru.com 63.100.47.44  
    ASN |               IP | Name
    701 |     63.100.47.44 | ALTERNET-AS UUNET Technologies

Which also has a bulk mode

  cat << iplist | nc whois.cymru.com 43
  > begin
  > 217.151.192.121
  > 65.61.155.140
  > 195.54.156.154
  > end
  > iplist

  Bulk mode.  Type one IP per line.
    20514 |  217.151.192.121 | QBRANCH  Qbranch 365-24 AB, Pr
    10532 |    65.61.155.140 | RACKSPACE Rackspace Managed Ho
     3246 |   195.54.156.154 | SONGNETWORKS  Song Networks  

Enjoy.....

 




More information about the list mailing list