Related Tools

• WhoisCL - Command-line utility (without user interface) that retrieves WHOIS record of a domain.
• WhoisThisDomain - Retrieves WHOIS record of a domain.
• IPNetInfo - Retrieves IP address information from WHOIS servers.

Description

Notice: WhosIP is a console application. If you don't known how to use it, you should try the IPNetInfo utility. It provides the same functionality, but with user interface.

Versions History

• Version 1.18:
  • Fixed WhosIP to show the IP addresses range ('From IP' and 'To IP' columns) of ARIN IPv6 addresses (taken from NetRange field).
  • Added 'CIDR' field.
• Version 1.17:
  • Fixed to detect the country of whois.registro.br records as Brazil.
• Version 1.16:
  • Fixed bug: WhosIP failed to get information of non-ARIN IPv6 addresses.
• Version 1.15:
  • Added support for IPv6 addresses.
  • WhosIP now adds the -B flag to AFRINIC queries, for extracting email addresses.
• Version 1.11:
  • Fixed WhosIP to detect RIPE IP addresses blocks reassigned back to ARIN.
• Version 1.10:
  • Added support for SOCKS4 and SOCKS5 proxy. (Be aware that user/password authentication is currently not supported.)
• Version 1.08:
  • Updated the internal countries file (The original countries file was generated on 2004, and some countries were missing...)
• Version 1.07:
  • Updated the internal IANA IP assignment table, for using the correct WHOIS server, according to the first byte of the IP address.
  • Fixed issue with ARIN queries: For query result containing more than one IP range, IPNetInfo displayed the wrong network details in the upper table.
• Version 1.06: Fixed WhosIP to work with the changes made in ARIN WHOIS server.
• Version 1.05: Fixed bug: WhosIP displayed an empty owner name when the first 'desc' line of the WHOIS record was empty.
• Version 1.04: Fixed a problem with 151.*.*.* addresses.
• Version 1.03: WhosIP now automatically use the right server according to IP address.
• Version 1.02: Added -B option in ripe.net queries, to avoid the default data filtering.
• Version 1.01: Added support for AfriNIC IP Addresses.
• Version 1.00: First release

Usage

[-r]	If you specify this option, the original WHOIS record is displayed. Otherwise, only a summary of the WHOIS record is displayed.
[-socks4]	Specifies SOCKS4 proxy to use, in IPAddress:Port format
[-socks5]	Specifies SOCKS5 proxy to use, in IPAddress:Port format
host-name	Host name or IP address.

Examples:
WhosIP -r www.nirsoft.net
WhosIP www.yahoo.com
WhosIP 216.239.59.147
WhosIP -socks5 192.168.0.55:1080 12.13.14.15

Example for WhosIP output:

WHOIS Source: ARIN
IP Address:   64.233.167.104
Country:      USA - California
Network Name: GOOGLE
Owner Name:   Google Inc.
From IP:      64.233.160.0
To IP:        64.233.191.255
Allocated:    Yes
Contact Name: Google Inc.
Address:      2400 E. Bayshore Parkway, Mountain View
Email:        arin-contact@google.com
Abuse Email:
Phone:        +1-650-318-0200
Fax:          


WHOIS Record:


OrgName:    Google Inc. 
OrgID:      GOGL
Address:    2400 E. Bayshore Parkway
City:       Mountain View
StateProv:  CA
PostalCode: 94043
Country:    US

NetRange:   64.233.160.0 - 64.233.191.255 
CIDR:       64.233.160.0/19 
NetName:    GOOGLE
NetHandle:  NET-64-233-160-0-1
Parent:     NET-64-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.GOOGLE.COM
NameServer: NS2.GOOGLE.COM
Comment:    
RegDate:    2003-08-18
Updated:    2004-03-05

TechHandle: ZG39-ARIN
TechName:   Google Inc. 
TechPhone:  +1-650-318-0200
TechEmail:  arin-contact@google.com 

OrgTechHandle: ZG39-ARIN
OrgTechName:   Google Inc. 
OrgTechPhone:  +1-650-318-0200
OrgTechEmail:  arin-contact@google.com

# ARIN WHOIS database, last updated 2004-09-22 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

System Requirements

• Any Windows operating system - from Windows 95 and up to Windows 8.
• Internet connection.

License

Disclaimer

Feedback