Who is Asking and for What: WHOIS Traffic Analysis

Authors

DOI:

https://doi.org/10.26636/jtit.2012.4.1286

Keywords:

request map, semantic analysis, SEO, WHOIS

Abstract

The paper presents analysis of WHOIS requests for 13-month period. Both requestor address and the domain name being requested are analyzed, showing that WHOIS traffic can be roughly classified into systematic scanning of domain names and individual low-volume activity, mostly targeting very popular names. The comparison of requested names with standard dictionary entries reveals typical mutations for registered names, and mutations performed by scanning automata. As most popular names in WHOIS coincide with standard top website ranks, the ways of utilizing WHOIS data for the benefit of Internet community as a whole, are proposed.

Downloads

Download data is not yet available.

References

[1] L. Daigle, „WHOIS Protocol Specification”, RFC Draft Standard, 2004 [Online]. Available: http://tools.ietf.org/html/rfc3912
View in Google Scholar

[2] M. Mueller and M. Chango, „Disrupting global governance: the Internet whois service, ICANN, and privacy”, J. Inform. Technol. Polit., vol. 2, no. 3, 2008.
View in Google Scholar

[3] „Obtaining Bulk Whois Data from ARIN”, 2012 [Online]. Available: https://www.arin.net/resources/request/bulkwhois.html
View in Google Scholar

[4] „Thick vs. Thin Whois for New gTLDs”, ICANN Memorandum, 30 May 2009 [Online]. Available: http://archive.icann.org/en/topics/new-gtlds/thick-thin-whois-30may09-en.pdf
View in Google Scholar

[5] „My Address Lookup and Geo Targeting”, 2012 [Online]. Available: https://www.hostip.info
View in Google Scholar

[6] „Visualization: Geomap - Google Chart Tools”, 2012 [Online]. Available: https://developers.google.com/chart/interactive/docs/gallery/geomap
View in Google Scholar

[7] „Alexa Internet - Our Technology”, 2012 [Online]. Available: http://www.alexa.com/company/technology
View in Google Scholar

[8] „Listy frekwencyjne”, 2012 [Online]. Available: http://pl.wiktionary.org/wiki/Kategoria:Listy_frekwencyjne
View in Google Scholar

[9] „Frequency Word Lists”, 2012 [Online]. Available: http://invokeit.wordpress.com/frequency-word-lists/
View in Google Scholar

[10] V. Levenshtein, „Binary codes capable of correcting deletions, insertions, and reversals”, Soviet Phys. Doklady, vol. 10, pp. 707-710, 1966.
View in Google Scholar

[11] „How to Write a Spelling Corrector”, 2012 [Online]. Available: http://www.norvig.com/spell-correct.html
View in Google Scholar

[12] „Alexa Rank”, 2012 [Online]. Available: http://seotracker.pl/alexa-rank.html
View in Google Scholar

[13] „Domain Stock Exchange”, 2012 [Online]. Available: http://www.nazwa.pl/gielda-domen/najciekawsze-domeny/top-lista-domen
View in Google Scholar

[14] „Publishing Domain Name Related Reputation in WHOIS Records”, U.S. Patent Application Publication No. 2006/0095459, 4th May 2006.
View in Google Scholar

[15] P. Arabas, P. Jaskóła, M. Kamola, and M. Karpowicz, „Analysis and modeling of domain registration process”, J. Telecommun. Inform. Technol., no. 2, pp. 63-73, 2012.
View in Google Scholar

[16] K. Lasota and A. Kozakiewicz, „Analysis of the similarities in malicious DNS domain names”, in Proc. Secur. Trust Comput., Data Manag. Appl. STA 2011, Loutraki, Greece, 2011, Springer, vol. 187, pp. 1-6.
View in Google Scholar

Downloads

Submitted

2023-06-29

Published

2012-12-30

Issue

Section

RESEARCH ARTICLES

How to Cite

[1]
M. Kamola, “Who is Asking and for What: WHOIS Traffic Analysis”, JTIT, vol. 50, no. 4, pp. 14–21, Dec. 2012, doi: 10.26636/jtit.2012.4.1286.

Most read articles by the same author(s)