Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!

Look up IP address host information with geektools.com UNIX
want to look up an IP address to check what domain it's on? Well, you could use the standard whois command, or you could use the whois proxy from geektools.com instead. Many times, the geektools.com information will be more complete than the standard whois report.

To use geektools instead of the standard whois host, just type:
whois -h geektools.com 1.2.3.4
Where 1.2.3.4 is the IP number to look up (this could also be a host name, of course). If you find yourself doing this often, put this alias in your ~/.tcshrc file:
alias gwhois "whois -h geektools.com"
This will allow you to simply type gwhois 1.2.3.4. As an example, assuming you have a dynamic IP number assigned by your ISP each time you connect, if you run a standard whois on your IP number, it will return "No match found for 1.2.3.4." Running the same query with geektools.com will tell you the owner of the IP number you used, as seen here:
% whois -h geektools.com 1.2.3.4
GeekTools Whois Proxy v5.0 Ready.
Checking access for 1.2.3.4... ok.
Final results obtained from whois.arin.net.
Results:

OrgName:    AT&T WorldNet Services 
OrgID:      ATTW
Address:    400 Interpace Parkway
City:       Parsippany
StateProv:  NJ
PostalCode: 07054
Country:    US
... ....
[robg adds: I don't spend a ton of time doing whois lookups, but this could be useful if you're digging for more info on a particular IP number.]
    •    
  • Currently 2.33 / 5
  • 1
  • 2
  • 3
  • 4
  • 5
  (3 votes cast)
 
[16,787 views]  

Look up IP address host information with geektools.com | 10 comments | Create New Account
Click here to return to the 'Look up IP address host information with geektools.com' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Look up IP address host information with geektools.com
Authored by: eno on Jun 05, '03 01:55:49PM

Neat.



[ Reply to This | # ]
YES!
Authored by: xeno on Jun 05, '03 06:24:22PM

hella useful for me!



[ Reply to This | # ]
hey! why hadn't I heard of that...
Authored by: discordantus on Jun 06, '03 04:23:05AM

!!! Thank you! I had never heard of the proxy, and have been contemplating writing a shell script to do a double lookup... ugh. No fun there.



[ Reply to This | # ]
Look up IP address host information with geektools.com
Authored by: bluehz on Jun 06, '03 10:40:56AM

I get an error when I try the alias above:

whois -h geektools.com
whois: option requires an argument -- h
usage: whois [-h hostname] name ...
usage: whois [-h hostname] name ...



[ Reply to This | # ]
Look up IP address host information with geektools.com
Authored by: Anonymous on Jun 06, '03 11:16:23AM
Try including a domain to lookup:

# whois -h whois.geektools.com macosxhints.com
# whois -h whois.geektools.com macslash.org
# whois -h whois.geektools.com slashdot.org

---
--
Gypsy

[ Reply to This | # ]

Look up IP address host information with geektools.com
Authored by: Kynn on Jun 06, '03 08:59:08PM

You can also use this with the "Network Utility" GUI application (found in, unsurprisingly, /Applications/Utilities/), as described in this previous hint. (As a comment notes, you can also just type in the geektools.com address without having to mess with plists.)

Network Utility also contains GUI versions of netstat, ping, nslookup, traceroute, and finger, plus network interface info and port scanning capability. Many users have never tried it, but it's one of the most useful Utilities.

--Kynn

---
--
http://www.maccessibility.com/

[ Reply to This | # ]

Look up IP address host information with geektools.com
Authored by: aaronp58 on Jun 06, '03 09:07:00PM

You could just go straight to the source, arin.net.

whois -h whois.arin.net 1.2.3.4

Looks like geektools.com just gets their info from arin.net.



[ Reply to This | # ]
Look up IP address host information with geektools.com
Authored by: bluehz on Jun 07, '03 06:56:43AM

Doesn't matter what I do with whois... always returns error:

whois -h whois.arin.net macosxhints.com
whois: option requires an argument -- h
usage: whois [-h hostname] name ...
usage: whois [-h hostname] name ...



[ Reply to This | # ]
Look up IP address host information with geektools.com
Authored by: pcunix on Jun 07, '03 06:55:08AM

Probably the quickest way to find the domain associated with an ip address is "dig -x"

dig -x 1.2.3.4

Dig is a great tool anyway:

dig xyz.com mx

gets the mx record

dig @somednsserver xyz.com any

looks to see what a specific dns server thinks about xyz.com

See "man dig"

---
--
Tony Lawrence
Free SCO, Mac OS X and Linux Skills Tests: http://aplawrence.com/skillstest.html



[ Reply to This | # ]
Look up IP address host information with geektools.com
Authored by: palahala on Sep 09, '09 04:07:26AM

Using the command line whois -h geektools.com ... or whois -h whois-servers.net ... is also a good way to easily get information for domains that suffer from Whois Spam (aka DNS Spam).

For example, compare:

$ whois apple.com

Whois Server Version 2.0
[..]
APPLE.COM.WWW.BEYONDWHOIS.COM
APPLE.COM.MORE.INFO.AT.WWW.BEYONDWHOIS.COM
APPLE.COM.IS.OWN3D.BY.NAKEDJER.COM
APPLE.COM.IS.0WN3D.BY.GULLI.COM
APPLE.COM.BEYONDWHOIS.COM
APPLE.COM.AT.WWW.BEYONDWHOIS.COM
APPLE.COM

To single out one record, look it up with "xxx", where xxx is one of the
of the records displayed above. If the records are the same, look them up
with "=xxx" to receive a full display for each record.

...to:

$ whois -h geektools.com apple.com

GeekTools Whois Proxy v5.0.4 Ready.
[..]
    Registrant:
        Apple Inc.
        Apple Inc.
        1 Infinite Loop
         Cupertino CA 95014
        US
    [..]
    Administrative Contact:
        Apple Inc.
        Apple Inc.
        1 Infinite Loop
         Cupertino CA 95014
        US
    [..]
    Created on..............: 1987-02-19.
    Expires on..............: 2011-02-19.
    Record last updated on..: 2009-01-21.

    Domain servers in listed order:

    nserver.euro.apple.com
    nserver3.apple.com
    nserver4.apple.com
    [..]

To get the latter details manually, one first needs to run whois apple.com, and given the output get some more details using whois =apple.com instead. From the second output one needs to retrieve the Whois Server information. And finally, for this example, one needs to run whois -h whois.markmonitor.com apple.com. The GeekTools Whois Proxy does it all in one go: very much appreciated!

(On other platforms, whois may behave differently. Like on Debian, a single whois apple.com --for version 4.7.20-- combines the output from both the commands above.)

Still, some here might find the results of a plain whois microsoft.com worth a look. And while looking at the details: also compare the creation date to that of apple.com! ;-)



[ Reply to This | # ]