DNS区域传输、DNS字典爆破、DNS注册信息

我们可以利用DNS区域传输来查看目标的记录，首先我们要先知道一个域名服务器，因为域名服务器有所有主机的记录，dig @域名服务器 域 传输方法axfr(AXFR请求，是从DNS服务器请求在主DNS服务器上更新信息的一类域名系统的请求。)

我们先挑选一个ns记录，来进行区域传输；

root@kali:~# dig @ns2.sina.com sina.com axfr;; Connection to 114.134.80.145#53(114.134.80.145) for sina.com failed: connection refused.

尝试连接53端口，连接被拒绝；换一个

root@kali:~# dig @ns4.sina.com sina.com axfr; <<>> DiG 9.9.5-9+deb8u3-Debian <<>> @ns4.sina.com sina.com axfr; (1 server found);; global options: +cmd; Transfer failed.

失败
dns是基于UDP，TCP的53端口的（其实当解析器发出一个request后，返回的response中的tc删节标志比特位被置1时，说明反馈报文因为超长而有删节。这是因为UDP的报文最大长度为512字节。解析器发现后，将使用TCP重发request，TCP允许报文长度超过512字节。既然TCP能将data stream分成多个segment，它就能用更多的segment来传送任意长度的数据。

另外一种情况是，当一个域的辅助域名服务器启动时，将从该域的主域名服务器primary DNS server执行区域传送。除此之外，辅域名服务器也会定时(一般时3小时)向PDS进行查询以便了解SOA的数据是否有变动。如有变动，也会执行一次区域传送。区域传送将使用TCP而不是UDP，因为传送的数据量比一个request或response多得多。）

root@kali:~# host -hhost: illegal option -- hUsage: host [-aCdlriTwv] [-c class] [-N ndots] [-t type] [-W time]            [-R number] [-m flag] hostname [server]       -a is equivalent to -v -t ANY       -c specifies query class for non-IN data       -C compares SOA records on authoritative nameservers       -d is equivalent to -v       -l lists all hosts in a domain, using AXFR       -i IP6.INT reverse lookups       -N changes the number of dots allowed before root lookup is done       -r disables recursive processing       -R specifies number of retries for UDP packets       -s a SERVFAIL response should stop query       -t specifies the query type       -T enables TCP/IP mode       -v enables verbose output       -w specifies to wait forever for a reply       -W specifies how long to wait for a reply       -4 use IPv4 query transport only       -6 use IPv6 query transport only       -m set memory debugging flag (trace|record|usage)root@kali:~# man host            //查看该命令的基础用法root@kali:~# info host           //查看该命令的基础用法

root@kali:~# host -T -l sina.com 8.8.8.8 ns3.sina.comUsing domain server:Name: 8.8.8.8Address: 8.8.8.8#53Aliases: Host sina.com not found: 2(SERVFAIL); Transfer failed.

当我们不能进行区域传输时，我们可以使用字典爆破

root@kali:~# fierce -dnsserver 8.8.8.8 -dns sina.com.cn wordlist a.txt /usr/share/fierce/hosts.txtDNS Servers for sina.com.cn:    ns3.sina.com.cn    ns2.sina.com.cn    ns4.sina.com.cn    ns1.sina.com.cnTrying zone transfer first...Unsuccessful in zone transfer (it was worth a shot)Okay, trying the good old fashioned way... brute forceChecking for wildcard DNS...    ** Found 97704271057.sina.com.cn at 202.102.110.204.    ** High probability of wildcard DNS.Now performing 2280 test(s)...123.125.29.250  8.sina.com.cn58.63.236.239   a1.sina.com.cn58.63.236.237   a1.sina.com.cn58.63.236.230   a1.sina.com.cn58.63.236.230   a2.sina.com.cn58.63.236.239   a2.sina.com.cn58.63.236.237   a2.sina.com.cn58.63.236.248   ad.sina.com.cn121.14.1.189    ad.sina.com.cn121.14.1.190    ad.sina.com.cn121.14.1.190    ads.sina.com.cn……

可以看到是先查询了所有的ns记录，然后去axfr,这个程序自带字典，我们查一下
dpkg -L fierce

安装dnsdict6
wget http://www.thc.org/releases/thc-ipv6-2.7.tar.gz
使用上面的命令会出现证书错误，在本机下载然后拖进虚拟，最后打开终端开始安装！

tar zvxf thc-ipv6-2.7.tar.gzcd thc-ipv6-2.7sudo apt-get install libpcap-dev libssl-devmakesudo cp dnsdict6 /usr/bin/

用来枚举域服务器的，它使用你提供的一个字典或者内置的列表来枚举
语法：dnsdict6 [-d46] [-s|-m|-l|-x] [-t 并发线程] [-D] 域名 [字典路径]
参数说明:
-4 显示ipv4
-t 指定要使用的线程 默认：8 最大:32
-D ＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝［只显示字典不扫描］＝＝＝＝
-d 显示在DNS服务器上的NS（一种服务记录类型）MX（邮件服务器） ipv6 的域名信息
-e 忽略没有NS域错误
-S 执行SRV服务名称猜测
-[smlx] 选择字典大小[内置的] -s 小型是50条 -m 中等是796条[默认] -l 大型1416条 -x 最大3211条 -u最大的字典

root@kali:~# dnsdict6 -hdnsdict6 v2.7 (c) 2014 by van Hauser / THC <[e-mail]> www.thc.orgSyntax: dnsdict6 [-d4] [-s|-m|-l|-x|-u] [-t THREADS] [-D] domain [dictionary-file]Enumerates a domain for DNS entries, it uses a dictionary file if suppliedor a built-in list otherwise. This tool is based on dnsmap by gnucitizen.org.Options: -4      do also dump IPv4 addresses -t NO   specify the number of threads to use (default: 8, max: 32). -D      dump the selected built-in wordlist, no scanning. -d      display IPv6 information on NS and MX DNS domain information. -e      ignore no NS for domain errors -S      perform SRV service name guessing -[smlxu] choose the dictionary size by -s(mall=100), -m(edium=1419) (DEFAULT)           -l(arge=2601), -x(treme=5886) or -u(ber=16724)

root@kali:~# dnsdict6 -d4 -t 16 -x sina.com     //枚举域服务器,显示6行，线程16，最大，域名Starting DNS enumeration work on sina.com. ...Gathering NS and MX information...NS of sina.com. is ns4.sina.com.cn => 121.14.1.22NS of sina.com. is ns2.sina.com. => 114.134.80.145         NS of sina.com. is ns1.sina.com. => 114.134.80.144NS of sina.com. is ns4.sina.com. => 123.125.29.29NS of sina.com. is ns2.sina.com.cn => 61.172.201.254NS of sina.com. is ns3.sina.com.cn => 123.125.29.99NS of sina.com. is ns1.sina.com.cn => 202.106.184.166NS of sina.com. is ns.sina.com. => 61.172.201.254 No IPv6 address for NS entries found in DNS for domain sina.com.MX of sina.com is freemx2.sinamil.sina.com.cn => 218.30.115.106

个人感觉dnsdic16比较好用；

root@kali:~# dnsenum -f dnsbig.txt -dnsserver 8.8.8.8 sina.com -o sina.xmldnsenum.pl VERSION:1.2.3-----   sina.com   -----Host's addresses:__________________sina.com.                                47       IN    A        66.102.251.33Name Servers:______________ns2.sina.com.cn.                         12328    IN    A        61.172.201.254ns3.sina.com.cn.                         21599    IN    A        123.125.29.99ns1.sina.com.cn.                         12449    IN    A        202.106.184.166ns1.sina.com.                            21519    IN    A        114.134.80.144ns3.sina.com.                            14250    IN    A        61.172.201.254ns4.sina.com.                            20263    IN    A        123.125.29.99ns2.sina.com.                            20931    IN    A        114.134.80.145ns4.sina.com.cn.                         15452    IN    A        121.14.1.22Mail (MX) Servers:___________________freemx2.sinamail.sina.com.cn.            167      IN    A        218.30.115.106freemx3.sinamail.sina.com.cn.            1194     IN    A        60.28.2.248freemx1.sinamail.sina.com.cn.            11       IN    A        202.108.3.242Trying Zone Transfers and getting Bind Versions:_________________________________________________Trying Zone Transfer for sina.com on ns2.sina.com.cn ... AXFR record query failed: connection failedTrying Zone Transfer for sina.com on ns3.sina.com.cn ... AXFR record query failed: RCODE from server: REFUSEDTrying Zone Transfer for sina.com on ns1.sina.com.cn ... AXFR record query failed: connection failedTrying Zone Transfer for sina.com on ns1.sina.com ... AXFR record query failed: truncated zone transferTrying Zone Transfer for sina.com on ns3.sina.com ... AXFR record query failed: connection failedTrying Zone Transfer for sina.com on ns4.sina.com ... AXFR record query failed: RCODE from server: REFUSEDTrying Zone Transfer for sina.com on ns2.sina.com ... AXFR record query failed: connection failedTrying Zone Transfer for sina.com on ns4.sina.com.cn ... AXFR record query failed: connection failedBrute forcing with dnsbig.txt:_______________________________Error: make sure that the file dnsbig.txt exists and has a size greater than zero.

root@kali:~# dpkg -L dnsenum/./usr/usr/share/usr/share/doc/usr/share/doc/dnsenum/usr/share/doc/dnsenum/README.md/usr/share/doc/dnsenum/copyright/usr/share/doc/dnsenum/changelog.Debian.gz/usr/share/dnsenum/usr/share/dnsenum/dns.txt/usr/bin/usr/bin/dnsenum

root@kali:~# dnsenum -f www -dnsserver 8.8.8.8 sina.com -o sina.xmldnsenum.pl VERSION:1.2.3-----   sina.com   -----Host's addresses:__________________sina.com.                                14       IN    A        66.102.251.33Name Servers:______________ns3.sina.com.cn                               13896     IN     A        123.125.29.99ns1.sina.com                                  7721      IN     A        202.106.184.166ns2.sina.com                                  4482      IN     A        114.134.80.145ns4.sina.com                                  16316     IN     A        123.125.29.99ns3.sina.com                                  177728    IN     A        61.172.201.254ns1.sina.com                                  7274      IN     A        114.134.80.144

源码包使用dpkg不行

root@kali:~# dnsmap sina.com -w dns.txtdnsmap 0.30 - DNS Network Mapper by pagvac (gnucitizen.org)有点慢。。。。。。

root@kali:~# dpkg -L dnsrecon/./usr/usr/share/usr/share/man/usr/share/man/man1/usr/share/man/man1/dnsrecon.1.gz/usr/share/doc/usr/share/doc/dnsrecon/usr/share/doc/dnsrecon/README.md.gz/usr/share/doc/dnsrecon/copyright/usr/share/doc/dnsrecon/changelog.Debian.gz/usr/share/dnsrecon/usr/share/dnsrecon/tools/usr/share/dnsrecon/tools/parser.py/usr/share/dnsrecon/lib/usr/share/dnsrecon/lib/mdnsenum.py/usr/share/dnsrecon/lib/__init__.py/usr/share/dnsrecon/lib/dnshelper.py/usr/share/dnsrecon/lib/msf_print.py/usr/share/dnsrecon/lib/gooenum.py/usr/share/dnsrecon/lib/whois.py/usr/share/dnsrecon/namelist.txt/usr/share/dnsrecon/msf_plugin/usr/share/dnsrecon/msf_plugin/dnsr_import.rb/usr/share/dnsrecon/dnsrecon.py/usr/bin/usr/bin/dnsrecon

root@kali:~# dnsrecon -d sina.com --lifetime（超时时间）  10 -t（强度） brt -D /usr/share/dnsrecon/namelist.txt[*] Performing host and subdomain brute force against sina.com[!] Wildcard resolution is enabled on this domain[!] It is resolving to 202.102.110.204[!] All queries will resolve to this address!![*] Do you wish to continue? y/n y[*]      A 1.sina.com 202.102.110.204[*]      A 0.sina.com 202.102.110.204[*]      A 02.sina.com 202.102.110.204[*]      A 03.sina.com 202.102.110.204[*]      A 01.sina.com 202.102.110.204[*]      A 3.sina.com 202.102.110.204[*]      A 18.sina.com 202.102.110.204[*]      A 20.sina.com 202.102.110.204[*]      A abc.sina.com 202.102.110.204[*]      A adam.sina.com 202.102.110.204[*]      A administrador.sina.com 202.102.110.204[*]      A administrators.sina.com 202.102.110.204[*]      A admins.sina.com 202.102.110.204[*]      CNAME ads.sina.com region.sina.usgcac.cdnetworks.net[*]      CNAME region.sina.usgcac.cdnetworks.net n2.panthercdn.com[*]      A n2.panthercdn.com 14.0.35.230[*]      A n2.panthercdn.com 14.0.38.86[*]      A ae.sina.com 202.102.110.204[*]      A affiliate.sina.com 202.102.110.204[*]      A admin.sina.com 202.102.110.204[*]      A administracion.sina.com 202.102.110.204……^C[-] You have pressed Ctrl-C. Saving found records.[*] Waiting for 9 remaining threads to finish.[*]      A distributer.sina.com 202.102.110.204[*]      A dm.sina.com 202.102.110.204[*]      A devserver.sina.com 202.102.110.204[*]      A dns.sina.com 202.102.110.204[*]      A discuss.sina.com 202.102.110.204[*] 254 Records Found

root@kali:~# dnsrecon -t std -d sina.com 忘了加字典了，这中方式比brt慢[*] Performing General Enumeration of Domain:Traceback (most recent call last):  File "./dnsrecon.py", line 1681, in <module>    main()  File "./dnsrecon.py", line 1524, in main    spf_enum, do_whois, zonewalk)  File "./dnsrecon.py", line 956, in general_enum    dns_sec_check(domain, res)  File "./dnsrecon.py", line 859, in dns_sec_check    answer = res._res.query(domain, 'DNSKEY')  File "/usr/lib/python2.7/dist-packages/dns/resolver.py", line 824, in query    raise NoNameserversdns.resolver.NoNameservers

whois 根据这些网站来查询；

root@kali:~# whois sina.comWhois Server Version 2.0Domain names in the .com and .net domains can now be registeredwith many different competing registrars. Go to http://www.internic.netfor detailed information.   Server Name: SINA.COM.CN   Registrar: ENOM, INC.   Whois Server: whois.enom.com   Referral URL: http://www.enom.com   Domain Name: SINA.COM   Registrar: NETWORK SOLUTIONS, LLC.   Sponsoring Registrar IANA ID: 2   Whois Server: whois.networksolutions.com   Referral URL: http://networksolutions.com   Name Server: NS1.SINA.COM   Name Server: NS1.SINA.COM.CN   Name Server: NS2.SINA.COM   Name Server: NS2.SINA.COM.CN   Name Server: NS3.SINA.COM   Name Server: NS3.SINA.COM.CN   Name Server: NS4.SINA.COM   Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited   Updated Date: 26-nov-2014   Creation Date: 16-sep-1998   Expiration Date: 15-sep-2019>>> Last update of whois database: Fri, 18 Sep 2015 16:00:27 GMT <<<NOTICE: The expiration date displayed in this record is the date the registrar's sponsorship of the domain name registration in the registry is currently set to expire. This date does not necessarily reflect the expiration date of the domain name registrant's agreement with the sponsoring registrar.  Users may consult the sponsoring registrar's Whois database to view the registrar's reported date of expiration for this registration.TERMS OF USE: You are not authorized to access or query our Whois database through the use of electronic processes that are high-volume and automated except as reasonably necessary to register domain names or modify existing registrations; the Data in VeriSign Global Registry Services' ("VeriSign") Whois database is provided by VeriSign for information purposes only, and to assist persons in obtaining information about or related to a domain name registration record. VeriSign does not guarantee its accuracy. By submitting a Whois query, you agree to abide by the following terms of use: You agree that you may use this Data only for lawful purposes and that under no circumstances will you use this Data to: (1) allow, enable, or otherwise support the transmission of mass unsolicited, commercial advertising or solicitations via e-mail, telephone, or facsimile; or (2) enable high volume, automated, electronic processes that apply to VeriSign (or its computer systems). The compilation, repackaging, dissemination or other use of this Data is expressly prohibited without the prior written consent of VeriSign. You agree not to use electronic processes that are automated and high-volume to access or query the Whois database except as reasonably necessary to register domain names or modify existing registrations. VeriSign reserves the right to restrict your access to the Whois database in its sole discretion to ensure operational stability.  VeriSign may restrict or terminate your access to the Whois database for failure to abide by these terms of use. VeriSign reserves the right to modify these terms at any time. The Registry database contains ONLY .COM, .NET, .EDU domains andRegistrars.For more information on Whois status codes, please visit https://www.icann.org/resources/pages/epp-status-codes-2014-06-16-en.Domain Name: SINA.COMRegistry Domain ID: 2243615_DOMAIN_COM-VRSNRegistrar WHOIS Server: whois.networksolutions.comRegistrar URL: http://networksolutions.comUpdated Date: 2015-01-28T23:23:26ZCreation Date: 1998-09-16T04:00:00ZRegistrar Registration Expiration Date: 2019-09-15T04:00:00ZRegistrar: NETWORK SOLUTIONS, LLC.Registrar IANA ID: 2Registrar Abuse Contact Email: [e-mail] Abuse Contact Phone: [phone]Reseller: Domain Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibitedRegistry Registrant ID: Registrant Name: SINA.COM TECHNOLOGY(CHINA)CO.,LTDRegistrant Organization: SINA.COM TECHNOLOGY(CHINA)CO.,LTDRegistrant Street: BEIJING IDEAL PLAZA,20F NO.58Registrant City: beijingRegistrant State/Province: CNRegistrant Postal Code: 100080Registrant Country: CNRegistrant Phone: [phone]Registrant Phone Ext: Registrant Fax: [phone]Registrant Fax Ext: Registrant Email: [e-mail] Admin ID: Admin Name: Xie, GuominAdmin Organization: SINA.COM TECHNOLOGY(CHINA)CO.,LTDAdmin Street: BEIJING IDEAL PLAZA,20F NO.58Admin City: beijingAdmin State/Province: CNAdmin Postal Code: 100080Admin Country: CNAdmin Phone: [phone]Admin Phone Ext: Admin Fax: [phone]Admin Fax Ext: Admin Email: [e-mail] Tech ID: Tech Name: Xie, GuominTech Organization: SINA.COM TECHNOLOGY(CHINA)CO.,LTDTech Street: BEIJING IDEAL PLAZA,20F NO.58Tech City: beijingTech State/Province: CNTech Postal Code: 100080Tech Country: CNTech Phone: [phone]Tech Phone Ext: Tech Fax: [phone]Tech Fax Ext: Tech Email: [e-mail] Server: NS1.SINA.COMName Server: NS2.SINA.COMName Server: NS1.SINA.COM.CNName Server: NS2.SINA.COM.CNName Server: NS3.SINA.COM.CNName Server: NS3.SINA.COMName Server: NS4.SINA.COMDNSSEC: UnsignedURL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/>>> Last update of whois database: Fri, 18 Sep 2015 16:00:27 GMT <<<The data in Networksolutions.com's WHOIS database is provided to you byNetworksolutions.com for information purposes only, that is, to assist you inobtaining information about or related to a domain name registrationrecord. Networksolutions.com makes this information available "as is," anddoes not guarantee its accuracy. By submitting a WHOIS query, youagree that you will use this data only for lawful purposes and that,under no circumstances will you use this data to: (1) allow, enable,or otherwise support the transmission of mass unsolicited, commercialadvertising or solicitations via direct mail, electronic mail, or bytelephone; or (2) enable high volume, automated, electronic processesthat apply to Networksolutions.com  (or its systems). The compilation,repackaging, dissemination or other use of this data is expresslyprohibited without the prior written consent of Networksolutions.com.Networksolutions.com reserves the right to modify these terms at any time.By submitting this query, you agree to abide by these terms.

root@kali:~# whois wooyun.orgDomain Name:WOOYUN.ORGDomain ID: D159099935-LRORCreation Date: 2010-05-06T08:50:48ZUpdated Date: 2015-01-07T03:37:41ZRegistry Expiry Date: 2024-05-06T08:50:48ZSponsoring Registrar:Hichina Zhicheng Technology Limited (R1373-LROR)Sponsoring Registrar IANA ID: 420WHOIS Server: Referral URL: Domain Status: clientDeleteProhibited -- http://www.icann.org/epp#clientDeleteProhibitedDomain Status: clientTransferProhibited -- http://www.icann.org/epp#clientTransferProhibitedRegistrant ID:hc556860480-cnRegistrant Name:Fang Xiao DunRegistrant Organization:Fang Xiao DunRegistrant Street: Haidian District JuYuan Road 6# 502Registrant City:BeijingRegistrant State/Province:BeijingRegistrant Postal Code:100080Registrant Country:CNRegistrant Phone:[phone]Registrant Phone Ext: Registrant Fax: [phone]Registrant Fax Ext: Registrant Email:[e-mail] ID:HC-009652962-CNAdmin Name:Fang XiaodunAdmin Organization:Beijing Bigfish TechnologyAdmin Street: Haidian District JuYuan Road 6# 502Admin City:BeijingAdmin State/Province:BeijingAdmin Postal Code:100080Admin Country:CNAdmin Phone:[phone]Admin Phone Ext: Admin Fax: [phone]Admin Fax Ext: Admin Email:[e-mail] ID:HC-844637505-CNTech Name:Fang XiaodunTech Organization:Beijing Bigfish TechnologyTech Street: Haidian District JuYuan Road 6# 502Tech City:BeijingTech State/Province:BeijingTech Postal Code:100080Tech Country:CNTech Phone:[phone]Tech Phone Ext: Tech Fax: [phone]Tech Fax Ext: Tech Email:[e-mail] Server:NS1.DNSV2.COMName Server:NS2.DNSV2.COMName Server: Name Server: Name Server: Name Server: Name Server: Name Server: Name Server: Name Server: Name Server: Name Server: Name Server: DNSSEC:UnsignedAccess to Public Interest Registry WHOIS information is provided to assist persons in determining the contents of a domain name registration record in the Public Interest Registry registry database. The data in this record is provided by Public Interest Registry for informational purposes only, and Public Interest Registry does not guarantee its accuracy. This service is intended only for query-based access. You agree that you will use this data only for lawful purposes and that, under no circumstances will you use this data to(a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass unsolicited, commercial advertising or solicitations to entities other than the data recipient's own existing customers; or (b) enable high volume, automated, electronic processes that send queries or data to the systems of Registry Operator, a Registrar, or Afilias except as reasonably necessary to register domain names or modify existing registrations. All rights reserved. Public Interest Registry reserves the right to modify these terms at any time. By submitting this query, you agree to abide by this policy. For more information on Whois status codes, please visit https://www.icann.org/resources/pages/epp-status-codes-2014-06-16-en.

root@kali:~# whois 202.106.0.20% [whois.apnic.net]% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html% Information related to '202.106.0.0 - 202.106.255.255'inetnum:        202.106.0.0 - 202.106.255.255netname:        UNICOM-BJdescr:          China Unicom Beijing province networkdescr:          China Unicomcountry:        CNadmin-c:        CH1302-APtech-c:         SY21-APmnt-by:         APNIC-HMmnt-lower:      MAINT-CNCGROUP-BJmnt-routes:     MAINT-CNCGROUP-RRmnt-irt:        IRT-CU-CNchanged:        [e-mail] 20031017status:         ALLOCATED PORTABLEchanged:        [e-mail] 20060124changed:        [e-mail] 20090507changed:        [e-mail] 20090508source:         APNICirt:            IRT-CU-CNaddress:        No.21,Jin-Rong Streetaddress:        Beijing,100140address:        P.R.Chinae-mail:         [e-mail]-mailbox:  [e-mail]-c:        CH1302-APtech-c:         CH1302-APauth:           # Filteredmnt-by:         MAINT-CNCGROUPchanged:        [e-mail] 20101110changed:        [e-mail] 20101116source:         APNICperson:         ChinaUnicom Hostmasternic-hdl:        CH1302-APe-mail:         [e-mail]:        No.21,Jin-Rong Streetaddress:        Beijing,100033address:        P.R.Chinaphone:          [phone]fax-no:         [phone]country:        CNchanged:        [e-mail] 20090408mnt-by:         MAINT-CNCGROUPsource:         APNICperson:         sun yingaddress:        fu xing men nei da jie 97, Xicheng Districtaddress:        Beijing 100800country:        CNphone:          [phone]fax-no:         [phone]e-mail:         [e-mail]-hdl:        SY21-APmnt-by:         MAINT-CNCGROUP-BJchanged:        [e-mail] 19980824changed:        [e-mail] 20060717changed:        [e-mail]  20090630source:         APNIC% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r6 (WHOIS1)