FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
Andy_G
Staff
Staff
Article Id 197480

Description

Summary of Topic

This article will describe what does port 43 do when AO connects outbound.  Also how many locations do we search whois on.

 

Additional Information

Our whois call sends a request on port 43 to each server on a list below.  AO will start at the top and work down.  AO will stop sending requests once it finds a server that provides a response.

NOTE: This access is only done by the super, and no changes can be made to the super to edit this list.

 

List of servers:

whois.geektools.com

whois.arin.net

whois.networksolutions.com

whois.internic.net

whois.nic.af

whois.ripe.net

whois.apnic.net

whois.amnic.net

whois.nic.gov

whois.nic.ad.jp

whois.nic.mx

whois.nic.us



 
Contributors