[outages] .org whois outage?

Jeremy Chadwick jdc at koitsu.org
Sat Sep 10 14:21:38 EDT 2016


Can confirm.  On FreeBSD using native base system whois:

$ truss -f whois koitsu.org
...
28050: socket(PF_INET,SOCK_DGRAM,17)             = 3 (0x3)
28050: connect(3,{ AF_INET 199.15.84.131:1 },16) = 0 (0x0)
28050: getsockname(3,{ AF_INET 192.168.1.51:32474 },0x7fffffffe61c) = 0 (0x0)
28050: close(3)                                  = 0 (0x0)
28050: socket(PF_INET,SOCK_STREAM,6)             = 3 (0x3)
^C28050: connect(3,{ AF_INET 199.15.84.131:43 },16) ERR#4 'Interrupted system call'
28050: SIGNAL 2 (SIGINT)
28050: process exit, rval = 0

It appears 199.15.84.131 isn't responding on TCP port 43 (WHOIS service
port):

11:17:48.119258 IP 192.168.1.51.56576 > 199.15.84.131.43: Flags [S], seq 4226693514, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 2452140445 ecr 0], length 0
11:17:51.118877 IP 192.168.1.51.56576 > 199.15.84.131.43: Flags [S], seq 4226693514, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 2452143445 ecr 0], length 0
11:17:54.318888 IP 192.168.1.51.56576 > 199.15.84.131.43: Flags [S], seq 4226693514, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 2452146645 ecr 0], length 0

Wondering where that IP comes from?  It's org.whois-servers.net, a.k.a.
whois.publicinterestregistry.net:

$ host org.whois-servers.net.
org.whois-servers.net is an alias for whois.publicinterestregistry.net.
whois.publicinterestregistry.net has address 199.15.84.131
whois.publicinterestregistry.net has IPv6 address 2001:500:106::17:12

I don't use IPv6, so I can only confirm IPv4.

-- 
| Jeremy Chadwick                                   jdc at koitsu.org |
| UNIX Systems Administrator                http://jdc.koitsu.org/ |
| Making life hard for others since 1977.             PGP 4BD6C0CB |

On Sat, Sep 10, 2016 at 10:53:53AM -0700, Aaron C. de Bruyn via Outages wrote:
> I've tried running a few whois queries in the .org domain over the last few
> minutes and I'm getting "connect: Network is unreachable".
> 
> I tried from a few websites (Godaddy, namecheap, gkg, etc...) and their web
> apps all break, return blank responses, etc...
> 
> Anyone else seeing the same thing?
> 
> -A

> _______________________________________________
> Outages mailing list
> Outages at outages.org
> https://puck.nether.net/mailman/listinfo/outages




More information about the Outages mailing list