Re: historic SWIP (or rwhois) data?

2017-12-20 Thread Neal Rauhauser 
An interesting answer to this problem:

whois --list-versions w.x.y.z/prefix - gotta know the object size, so some
hunt & peck might be needed.

And for the princely sum of $45/mo this site seems to have all sorts of
info, and an API, but mysteriously there is no Maltego transform yet.




https://myip.ms/



On Mon, Dec 18, 2017 at 11:54 PM, Yang Yu  wrote:

> APNIC has whowas also
> https://www.apnic.net/static/whowas-ui/
>
> For RWhois, check with the organization operating rwhoisd? They might
> have the information beyond RWhois.
>
>
> Yang
>
> On Mon, Dec 18, 2017 at 9:11 AM, Benoit Panizzon 
> wrote:
> > Well @ RIPE ist is quite simple to query historical data:
> >
> > https://www.ripe.net/manage-ips-and-asns/db/support/
> documentation/ripe-database-documentation/types-of-
> queries/16-12-historical-queries
> >
> > I don't know if other registries offer similar services.
> >
> > Mit freundlichen Grüssen
> >
> > -Benoît Panizzon-
> > --
> > I m p r o W a r e   A G-Leiter Commerce Kunden
> > __
> >
> > Zurlindenstrasse 29 Tel  +41 61 826 93 00
> > CH-4133 PrattelnFax  +41 61 826 93 01
> > Schweiz Web  http://www.imp.ch
> > __
>

Re: historic SWIP (or rwhois) data?

2017-12-18 Thread Yang Yu 
APNIC has whowas also
https://www.apnic.net/static/whowas-ui/

For RWhois, check with the organization operating rwhoisd? They might
have the information beyond RWhois.


Yang

On Mon, Dec 18, 2017 at 9:11 AM, Benoit Panizzon  wrote:
> Well @ RIPE ist is quite simple to query historical data:
>
> https://www.ripe.net/manage-ips-and-asns/db/support/documentation/ripe-database-documentation/types-of-queries/16-12-historical-queries
>
> I don't know if other registries offer similar services.
>
> Mit freundlichen Grüssen
>
> -Benoît Panizzon-
> --
> I m p r o W a r e   A G-Leiter Commerce Kunden
> __
>
> Zurlindenstrasse 29 Tel  +41 61 826 93 00
> CH-4133 PrattelnFax  +41 61 826 93 01
> Schweiz Web  http://www.imp.ch
> __

Re: historic SWIP (or rwhois) data?

2017-12-18 Thread Benoit Panizzon 
Well @ RIPE ist is quite simple to query historical data:

https://www.ripe.net/manage-ips-and-asns/db/support/documentation/ripe-database-documentation/types-of-queries/16-12-historical-queries

I don't know if other registries offer similar services.

Mit freundlichen Grüssen

-Benoît Panizzon-
-- 
I m p r o W a r e   A G-Leiter Commerce Kunden
__

Zurlindenstrasse 29 Tel  +41 61 826 93 00
CH-4133 PrattelnFax  +41 61 826 93 01
Schweiz Web  http://www.imp.ch
__

Re: historic SWIP (or rwhois) data?

2017-12-18 Thread Mike Hammett 
ARIN's WhoWas service? 




- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP 

- Original Message -

From: "Neal Rauhauser"  
To: "NANOG list"  
Sent: Sunday, December 17, 2017 2:41:57 PM 
Subject: historic SWIP (or rwhois) data? 

Hello, 


I'm working on a forensics problem rather than a network operations issue. 

I've got a /28 that I can see is currently assigned to a certain company 
via rwhois. 

What I want to do is see this block's history over the last five years. It 
was involved in some problematic behavior back in 2012, I'd really like to 
know whose name was on it then. 

It would be ideal if this data were available in some sort of flat file 
format, or if a sensible API to it exists. 

I've been searching a little bit, just found this, not really seeing any 
place to download any of this data though. 

https://gist.github.com/NetwarSystem/eed78b65d881d0d384664ab713cf5e1f