How to Get Domain and IP Address Information Using WHOIS Command?

The WHOIS command is a widely-used protocol for retrieving registration information about domain names and IP addresses. Originally intended for system administrators and network engineers to diagnose network issues, it has now become a popular tool for anyone looking to gather information on a domain or IP address.

When you initiate a WHOIS query, your computer sends a request to a WHOIS server ? a database of registered domain names and IP addresses. In response, the server provides registration information for the requested domain or IP address. The Internet Corporation for Assigned Names and Numbers (ICANN) governs the WHOIS protocol, managing domain name systems and IP address allocation.

Information Retrieved by WHOIS

The data obtained by the WHOIS command includes:

• Domain owner details Name and contact information of the registrant

• Registration dates Creation date, last update, and expiration date

• Technical information Name servers, DNS records, and registrar details

• Administrative contacts Technical and billing contact information

How to Use WHOIS Command

Step 1: Open Command Prompt or Terminal

On Windows, press Windows + R, type cmd and press Enter. On Mac/Linux, open Terminal from the applications menu or search for "Terminal".

Step 2: Execute WHOIS Command

The basic syntax for the WHOIS command:

whois <domain name or IP address>

For example, to get information about a domain:

whois tutorialspoint.com

Sample output for domain query:

Domain Name: TUTORIALSPOINT.COM
Registry Domain ID: 233634230_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Updated Date: 2022-08-15T19:27:37Z
Creation Date: 2005-10-06T19:39:45Z
Registry Expiry Date: 2027-10-06T19:39:45Z
Registrar: GoDaddy.com, LLC
Domain Status: clientDeleteProhibited
Name Server: NS-1148.AWSDNS-15.ORG
Name Server: NS-1918.AWSDNS-47.CO.UK
DNSSEC: unsigned

Step 3: Query IP Address Information

To fetch details about an IP address:

whois 93.184.216.34

Sample output for IP address query:

NetRange:       93.184.0.0 - 93.185.255.255
CIDR:           93.184.0.0/15
NetName:        AKAMAI
Organization:   Akamai Technologies, Inc.
Address:        145 Broadway
City:           Cambridge
StateProv:      MA
PostalCode:     02142
Country:        US
RegDate:        2008-05-30
Updated:        2019-07-31

Common Use Cases

• Network troubleshooting Identifying IP address owners for connectivity issues

• Security analysis Investigating suspicious domains or IP addresses

• Domain research Checking domain availability and ownership before purchase

• Legal compliance Contacting domain owners for copyright or trademark issues

Conclusion

The WHOIS command is an essential tool for retrieving registration information about domain names and IP addresses. It provides valuable insights for network administrators, security professionals, and researchers by offering access to ownership details, registration dates, and technical information from public domain registries.