Curiosity got the better of me, so I installed "whois" and gave it a try.
Below are the responses I get, for "$whois 191.96.36.56" and I tried a whois on the ip in "%ERROR:201: access denied for 190.112.52.14" I wonder what this information might mean to anyone? How would this information be useful? My guess is that Timothy's whois request was sent to lacnic.net (Internet Directorate Registry for Latin America and the Caribbean) which rejected the request with "%ERROR:201: access denied for 190.112.52.14". Is my explanation plausible? I could not determine which Registry served my whois request. George. https://www.lacnic.net/ LACNIC The Internet Directorate Registry for Latin America and the Caribbean is a non-profit organization that seeks to ensure the stability of the Internet in our region and promote its expansion as a tool for social, cultural and productive development on the basis of a neutral, open, transparent and participatory management system. ================================================== $ whois 191.96.36.56 % IP Client: 2001:44b8:1120:2400:efb6:3ccd:6ddb:4be8 % This is the RIPE Database query service. % The objects are in RPSL format. % % The RIPE Database is subject to Terms and Conditions. % See https://docs.db.ripe.net/terms-conditions.html % Note: this output has been filtered. % To receive output for a database update, use the "-B" flag. % Information related to '191.96.0.0 - 191.96.127.255' % Abuse contact for '191.96.0.0 - 191.96.127.255' is 'ab...@ipxo.com' inetnum: 191.96.0.0 - 191.96.127.255 netname: IPXO country: US org: ORG-IL687-RIPE admin-c: NOC834 tech-c: NOC834 abuse-c: IPXO834 status: SUB-ALLOCATED PA mnt-by: IPXO-MNT mnt-by: netutils-mnt created: 2022-07-07T06:48:39Z last-modified: 2024-11-26T12:25:09Z source: RIPE organisation: ORG-IL687-RIPE org-name: Internet Utilities Europe and Asia Limited org-type: LIR address: Regent street 207 address: W1B 3HH address: London address: UNITED KINGDOM country: GB phone: +370 699 08833 admin-c: NOC834 tech-c: NOC834 abuse-c: IPXO834 mnt-ref: IPXO-MNT mnt-by: RIPE-NCC-HM-MNT mnt-by: IPXO-MNT created: 2021-04-28T09:11:24Z last-modified: 2024-07-23T13:36:03Z source: RIPE # Filtered role: IPXO Admin/Tech Contact address: Ground Floor, 4 Victoria Square, St Albans, Hertfordshire, AL1 3TF, UK nic-hdl: NOC834 mnt-by: IPXO-MNT created: 2021-07-27T09:53:47Z last-modified: 2021-07-29T08:24:01Z source: RIPE # Filtered % Information related to '191.96.36.0/24AS174' route: 191.96.36.0/24 origin: AS174 mnt-by: IPXO-MNT mnt-by: netutils-mnt created: 2022-11-14T08:48:03Z last-modified: 2024-11-26T13:00:16Z source: RIPE % This query was served by the RIPE Database Query Service version 1.114 (ABERDEEN) ========================================================== $ whois 190.112.52.14 % IP Client: 2001:44b8:1120:2400:efb6:3ccd:6ddb:4be8 % Joint Whois - whois.lacnic.net % This server accepts single ASN, IPv4 or IPv6 queries % LACNIC resource: whois.lacnic.net % Copyright LACNIC lacnic.net % The data below is provided for information purposes % and to assist persons in obtaining information about or % related to AS and IP numbers registrations % By submitting a whois query, you agree to use this data % only for lawful purposes. % 2024-11-27 04:12:26 (-03 -03:00) inetnum: 190.112.52.0/22 status: assigned aut-num: AS7777 aut-num: AS264845 owner: LACNIC - Latin American and Caribbean IP address ownerid: UY-LACN-LACNIC responsible: Ernesto Majó address: Rambla República de México, 6125, Esq. 6 de Abril address: 11400 - Montevideo - Montevideo country: UY phone: +598 26042222 [4401] owner-c: AIL tech-c: AIL abuse-c: AIL inetrev: 190.112.52.0/22 nserver: NS.LACNIC.NET.UY nsstat: 20241124 AA nslastaa: 20241124 nserver: NS2.LACNIC.NET.UY nsstat: 20241124 AA nslastaa: 20241124 created: 20131024 changed: 20131024 nic-hdl: AIL person: Carlos M Martínez e-mail: ipad...@lacnic.net address: Rambla Rep. Mexico, 6125, Casa de Internet address: 11400 - Montevideo - Montevideo country: UY phone: +598 26042222 [4401] created: 20080125 changed: 20240208 % whois.lacnic.net accepts only direct match queries. % Types of queries are: POCs, ownerid, CIDR blocks, IP % and AS numbers. On Wednesday, 27-11-2024 at 17:51 Timothy M Butterworth wrote: On Tue, Nov 26, 2024 at 4:02 PM vi...@wlcr.net wrote: Can anyone explain why whois on a Debian server gets a rejection as if through a proxy server? Does the Debian command "whois" not connect directly to the various databases? $whois 191.96.36.56 % IP Client: 64.25x.xx.xx % This is the RIPE Database query service. % The objects are in RPSL format. % % The RIPE Database is subject to Terms and Conditions. % See https://docs.db.ripe.net/terms-conditions.html %ERROR:201: access denied for 190.112.52.13 % % Sorry, access from your host has been permanently % denied because of a repeated excessive querying. % For more information, see % https://docs.db.ripe.net/FAQ/#why-did-i-receive-an-error-201-access-denied % This query was served by the RIPE Database Query Service version 1.114 (SHETLAND) I get a similar but slightly different error message. tmb@hp-debian:~$ whois 191.96.36.56 % IP Client: 2607:fb90:db98:991c:6b9d:c93f:73d:7514 % This is the RIPE Database query service. % The objects are in RPSL format. % % The RIPE Database is subject to Terms and Conditions. % See https://docs.db.ripe.net/terms-conditions.html %ERROR:201: access denied for 190.112.52.14 % % Queries from your IP address have passed the daily limit of controlled objects. % Access from your host has been temporarily denied. % For more information, see % https://docs.db.ripe.net/FAQ/#why-did-i-receive-an-error-201-access-denied % This query was served by the RIPE Database Query Service version 1.114 (ABERDEEN) Show my ip address says my public IPv4 address is 172.59.137.156. I do not know where 190.112.52.14 is coming from. -- ⢀⣴⠾⠻⢶⣦⠀ ⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system ⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/ ⠈⠳⣄⠀⠀
