WHOIS(1) General Commands Manual WHOIS(1)

whoisInternet domain name and network number directory service

whois [-aAbfgiIklmPQrRS] [-c TLD | -h host] [-p port] [--] name ...

The whois utility looks up records in the databases maintained by several Network Information Centers (NICs).

By default whois starts by querying the Internet Assigned Numbers Authority (IANA) whois server, and follows referrals to whois servers that have more specific details about the query name. The IANA whois server knows about IP address and AS numbers as well as domain names.

There are a few special cases where referrals do not work, so whois goes directly to the appropriate server. These include point-of-contact handles for ARIN, nic.at, NORID, and RIPE, and domain names under ac.uk.

The options are as follows:

Use the American Registry for Internet Numbers (ARIN) database. It contains network numbers used in those parts of the world covered neither by APNIC, AfriNIC, LACNIC, nor by RIPE. The query syntax is documented at https://www.arin.net/resources/whoisrws/whois_api.html#nicname
Use the Asia/Pacific Network Information Center (APNIC) database. It contains network numbers used in East Asia, Australia, New Zealand, and the Pacific islands. Get query syntax documentation using whois -A help
Use the Network Abuse Clearinghouse database. It contains addresses to which network abuse should be reported, indexed by domain name.
TLD
This is the equivalent of using the -h option with an argument of "TLD.whois-servers.net". This can be helpful for locating country-class TLD whois servers.
Use the African Network Information Centre (AfriNIC) database. It contains network numbers used in Africa and the islands of the western Indian Ocean. Get query syntax documentation using whois -f help
Use the US non-military federal government database, which contains points of contact for subdomains of .GOV.
host
Use the specified host instead of the default. Either a host name or an IP address may be specified.
Use the traditional Network Information Center (InterNIC) (whois.internic.net) database. This now contains only registrations for domain names under .COM, .NET, .EDU. You can specify the type of object to search for like whois -i 'type name' where type can be domain, nameserver, registrar. The name can contain * wildcards.
Use the Internet Assigned Numbers Authority (IANA) database.
Use the National Internet Development Agency of Korea's (KRNIC) database. It contains network numbers and domain contact information for Korea.
Use the Latin American and Caribbean IP address Regional Registry (LACNIC) database. It contains network numbers used in much of Latin America and the Caribbean.
Use the Route Arbiter Database (RADB) database. It contains route policy specifications for a large number of operators' networks.
port
Connect to the whois server on port. If this option is not specified, whois defaults to port 43.
Use the PeeringDB database of AS numbers. It contains details about presence at internet peering points for many network operators.
Do a quick lookup; whois will not attempt to follow referrals to other whois servers. This is the default if a server is explicitly specified using one of the other options or in an environment variable. See also the -R option.
Use the R´eseaux IP Europ´eens (RIPE) database. It contains network numbers and domain contact information for Europe. Get query syntax documentation using whois -r help
Do a recursive lookup; whois will attempt to follow referrals to other whois servers. This is the default if no server is explicitly specified. See also the -Q option.
By default whois adjusts simple queries (without spaces) to produce more useful output from certain whois servers, and it suppresses some uninformative output. With the -S option, whois sends the query and prints the output verbatim.

The operands specified to whois are treated independently and may be used as queries on different whois servers.

The primary default whois server. If this is unset, whois uses the RA_SERVER environment variable.
The secondary default whois server. If this is unset, whois will use whois.iana.org.

The whois utility exits 0 on success, and >0 if an error occurs.

To obtain contact information about an administrator located in the Russian TLD domain "RU", use the -c option as shown in the following example, where CONTACT-ID is substituted with the actual contact identifier.

whois -c RU CONTACT-ID

(Note: This example is specific to the TLD "RU", but other TLDs can be queried by using a similar syntax.)

The following example demonstrates how to query a whois server using a non-standard port, where “query-data” is the query to be sent to “whois.example.com” on port “rwhois” (written numerically as 4321).

whois -h whois.example.com -p rwhois query-data

Some whois servers support complex queries with dash-letter options. You can use the -- option to separate whois command options from whois server query options. A query containing spaces must be quoted as one argument to the whois command. The following example asks the RIPE whois server to return a brief description of its “domain” object type:

whois -r -- '-t domain'

K. Harrenstien, M. Stahl, and E. Feinler, NICNAME/WHOIS, RFC 954, October 1985.

L. Daigle, WHOIS Protocol Specification, RFC 3912, September 2004.

The whois command appeared in 4.3BSD.

April 25, 2016 Mac OS X 12