Curiosity got the better of me, so I installed "whois" and gave it
a try.
Below are the responses I get, for "$whois 191.96.36.56" and I tried
a whois on the ip in "%ERROR:201: access denied for 190.112.52.14"
I wonder what this information might mean to anyone? How would this
information be useful?
My guess is that Timothy's whois request was sent to lacnic.net
(Internet Directorate Registry for Latin America and the Caribbean)
which rejected the request with "%ERROR:201: access denied for 190.112.52.14". Is my explanation plausible? I could not determine
which Registry served my whois request.
George.
https://www.lacnic.net/
LACNIC
The Internet Directorate Registry for Latin America and the Caribbean
is a non-profit organization that seeks to ensure the stability of the
Internet in our region and promote its expansion as a tool for social,
cultural and productive development on the basis of a neutral, open, transparent and participatory management system.
==================================================
$ whois 191.96.36.56
% IP Client: 2001:44b8:1120:2400:efb6:3ccd:6ddb:4be8
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See
https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B"
flag.
% Information related to '191.96.0.0 - 191.96.127.255'
% Abuse contact for '191.96.0.0 - 191.96.127.255' is '
[email protected]'
inetnum: 191.96.0.0 - 191.96.127.255
netname: IPXO
country: US
org: ORG-IL687-RIPE
admin-c: NOC834
tech-c: NOC834
abuse-c: IPXO834
status: SUB-ALLOCATED PA
mnt-by: IPXO-MNT
mnt-by: netutils-mnt
created: 2022-07-07T06:48:39Z
last-modified: 2024-11-26T12:25:09Z
source: RIPE
organisation: ORG-IL687-RIPE
org-name: Internet Utilities Europe and Asia Limited org-type: LIR
address: Regent street 207
address: W1B 3HH
address: London
address: UNITED KINGDOM
country: GB
phone: +370 699 08833
admin-c: NOC834
tech-c: NOC834
abuse-c: IPXO834
mnt-ref: IPXO-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: IPXO-MNT
created: 2021-04-28T09:11:24Z
last-modified: 2024-07-23T13:36:03Z
source: RIPE # Filtered
role: IPXO Admin/Tech Contact
address: Ground Floor, 4 Victoria Square, St Albans, Hertfordshire, AL1 3TF, UK
nic-hdl: NOC834
mnt-by: IPXO-MNT
created: 2021-07-27T09:53:47Z
last-modified: 2021-07-29T08:24:01Z
source: RIPE # Filtered
% Information related to '191.96.36.0/24AS174'
route: 191.96.36.0/24
origin: AS174
mnt-by: IPXO-MNT
mnt-by: netutils-mnt
created: 2022-11-14T08:48:03Z
last-modified: 2024-11-26T13:00:16Z
source: RIPE
% This query was served by the RIPE Database Query Service version
1.114 (ABERDEEN)
==========================================================
$ whois 190.112.52.14
% IP Client: 2001:44b8:1120:2400:efb6:3ccd:6ddb:4be8
% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries
% LACNIC resource: whois.lacnic.net
% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2024-11-27 04:12:26 (-03 -03:00)
inetnum: 190.112.52.0/22
status: assigned
aut-num: AS7777
aut-num: AS264845
owner: LACNIC - Latin American and Caribbean IP address ownerid: UY-LACN-LACNIC
responsible: Ernesto Majó
address: Rambla República de México, 6125, Esq. 6 de Abril address: 11400 - Montevideo - Montevideo
country: UY
phone: +598 26042222 [4401]
owner-c: AIL
tech-c: AIL
abuse-c: AIL
inetrev: 190.112.52.0/22
nserver: NS.LACNIC.NET.UY
nsstat: 20241124 AA
nslastaa: 20241124
nserver: NS2.LACNIC.NET.UY
nsstat: 20241124 AA
nslastaa: 20241124
created: 20131024
changed: 20131024
nic-hdl: AIL
person: Carlos M Martínez
e-mail:
[email protected]
address: Rambla Rep. Mexico, 6125, Casa de Internet
address: 11400 - Montevideo - Montevideo
country: UY
phone: +598 26042222 [4401]
created: 20080125
changed: 20240208
% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.
On Wednesday, 27-11-2024 at 17:51 Timothy M Butterworth wrote:
On Tue, Nov 26, 2024 at 4:02 PM
[email protected] wrote:
Can anyone explain why whois on a Debian server gets a rejection as if
through a proxy server?
Does the Debian command "whois" not connect directly to the various
databases?
$whois 191.96.36.56
% IP Client: 64.25x.xx.xx
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See
https://docs.db.ripe.net/terms-conditions.html
%ERROR:201: access denied for 190.112.52.13
%
% Sorry, access from your host has been permanently
% denied because of a repeated excessive querying.
% For more information, see
%
https://docs.db.ripe.net/FAQ/#why-did-i-receive-an-error-201-access-denied
% This query was served by the RIPE Database Query Service version
1.114
(SHETLAND)
I get a similar but slightly different error message.
tmb@hp-debian:~$ whois 191.96.36.56
% IP Client: 2607:fb90:db98:991c:6b9d:c93f:73d:7514
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See
https://docs.db.ripe.net/terms-conditions.html
%ERROR:201: access denied for 190.112.52.14
%
% Queries from your IP address have passed the daily limit of
controlled objects.
% Access from your host has been temporarily denied.
% For more information, see
%
https://docs.db.ripe.net/FAQ/#why-did-i-receive-an-error-201-access-denied
% This query was served by the RIPE Database Query Service version
1.114 (ABERDEEN)
Show my ip address says my public IPv4 address is 172.59.137.156. I
do not know where 190.112.52.14 is coming from.
--
⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system ⢿⡄⠘⠷⠚⠋⠀
https://www.debian.org/
⠈⠳⣄⠀⠀
<html>
<head>
<style type="text/css">
body,p,td,div,span{
font-size:13px; font-family:Arial, Helvetica, sans-serif;
};
body p{
margin:0px;
}
</style>
</head>
<body><div>Curiosity got the better of me, so I installed "whois" and gave it a try.</div><div><br></div><div>Below are the responses I get, for "$whois 191.96.36.56" and I tried a whois on the ip in "<span style="font-family:monospace">%ERROR:201:
access denied for 190.112.52.14</span>"</div><div><br></div><div>I wonder what this information might mean to anyone? How would this information be useful?</div><div><br></div><div>My guess is that Timothy's whois request was sent to lacnic.net (Internet
Directorate Registry for Latin America and the Caribbean) which rejected the request with "<span style="font-family:monospace">%ERROR:201: access denied for 190.112.52.14</span>".&n