[PLUG] PLUG

Russell Senior russell at personaltelco.net
Sat Nov 4 03:59:33 UTC 2006


>>>>> "Galen" == Galen Seitz <galens at seitzassoc.com> writes:

Galen> Does Zot have some sort of Australian connection?  Why does
Galen> www.whiteknighthackers.com point to the web site for an
Galen> Australian surveying company?

  $ dig a www.whiteknighthackers.com

  ; <<>> DiG 9.3.2-P1 <<>> a www.whiteknighthackers.com
  ;; global options:  printcmd
  ;; Got answer:
  ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33165
  ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

  ;; QUESTION SECTION:
  ;www.whiteknighthackers.com.    IN      A

  ;; ANSWER SECTION:
  www.whiteknighthackers.com. 86091 IN    A       209.197.99.126

  ;; AUTHORITY SECTION:
  whiteknighthackers.com. 86091   IN      NS      ns.zotnet.com.

  ;; ADDITIONAL SECTION:
  ns.zotnet.com.          166721  IN      A       70.96.227.58

  ;; Query time: 1 msec
  ;; SERVER: 192.168.0.1#53(192.168.0.1)
  ;; WHEN: Fri Nov  3 19:53:59 2006
  ;; MSG SIZE  rcvd: 100

  $ whois 209.197.99.126

  OrgName:    pair Networks 
  OrgID:      PAIR
  Address:    2403 Sidney St
  Address:    Suite 510
  City:       Pittsburgh
  StateProv:  PA
  PostalCode: 15232
  Country:    US

  NetRange:   209.197.64.0 - 209.197.127.255 
  CIDR:       209.197.64.0/18 
  NetName:    PAIRNET-BLK-2
  NetHandle:  NET-209-197-64-0-1
  Parent:     NET-209-0-0-0-0
  NetType:    Direct Allocation
  NameServer: NS1.PAIR.COM
  NameServer: NS0.NS0.COM
  Comment:    ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
  RegDate:    1998-01-28
  Updated:    2001-06-14

  RTechHandle: KM383-ARIN
  RTechName:   Martin, Kevin J.
  RTechPhone:  +1-412-381-7247
  RTechEmail:  sigma at pair.com 

  OrgAbuseHandle: ABUSE848-ARIN
  OrgAbuseName:   Abuse Handling 
  OrgAbusePhone:  +1-412-381-7247
  OrgAbuseEmail:  abuse at pair.com

  OrgTechHandle: KM383-ARIN
  OrgTechName:   Martin, Kevin J.
  OrgTechPhone:  +1-412-381-7247
  OrgTechEmail:  sigma at pair.com

  # ARIN WHOIS database, last updated 2006-11-03 19:10
  # Enter ? for additional hints on searching ARIN's WHOIS database.

Hmm.  My guess is his hosting service lapsed and that IP now points at
someone elses server.  The lists.whiteknighthackers.com is at the same
IP as the NS.WHITEKNIGHTHACKERS.COM and lives within an Electric
Lightwave allocation.


-- 
Russell Senior, Secretary
russell at personaltelco.net



More information about the PLUG mailing list