2016年我们就提供了IP地址的几种工具服务，其中包含IP的whois查询服务，按照规范是从几个whois服务器查询、返回信息的，最近又需要进行一些完善工作，特把一些信息摘录如下：
- ARIC: whois.arin.net 美洲区 北美,包含非洲地区的查询
- APNIC: whois.apnic.net 亚太区 包括亚洲和澳大利亚
- RIPE: whois.ripe.net 欧洲区 欧洲/中东(西亚)/北非
- LACNIC: whois.lacnic.net 拉美区 拉丁美洲和加勒比海区域
- AFRINIC: 非洲
各种返回数据例子：
whois.arin.net
whois 8.8.8.8 [Querying whois.arin.net] [whois.arin.net] # # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/resources/registry/whois/tou/ # # If you see inaccuracies in the results, please report at # https://www.arin.net/resources/registry/whois/inaccuracy_reporting/ # # Copyright 1997-2020, American Registry for Internet Numbers, Ltd. # # # Query terms are ambiguous. The query is assumed to be: # "n 8.8.8.8" # # Use "?" to get help. # Level 3 Parent, LLC LVLT-ORG-8-8 (NET-8-0-0-0-1) 8.0.0.0 - 8.127.255.255 Google LLC LVLT-GOGL-8-8-8 (NET-8-8-8-0-1) 8.8.8.0 - 8.8.8.255 # # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/resources/registry/whois/tou/ # # If you see inaccuracies in the results, please report at # https://www.arin.net/resources/registry/whois/inaccuracy_reporting/ # # Copyright 1997-2020, American Registry for Internet Numbers, Ltd. #
whois.apnic.net
whois 202.103.24.68 [Querying whois.apnic.net] [whois.apnic.net] % [whois.apnic.net] % Whois data copyright terms http://www.apnic.net/db/dbcopyright.html % Information related to '202.103.24.0 - 202.103.24.127' % Abuse contact for '202.103.24.0 - 202.103.24.127' is 'anti-spam@ns.chinanet.cn.net' inetnum: 202.103.24.0 - 202.103.24.127 netname: WH-CHINANET-NIC descr: The Network Information Center of Chinanet WuHan node, in Wuchang district, Wuhan city, HuBei province country: CN admin-c: YZ83-AP admin-c: ZC77-AP tech-c: YZ83-AP tech-c: ZC77-AP tech-c: XT6-AP mnt-by: MAINT-CN-CHINANET-HB status: ASSIGNED NON-PORTABLE last-modified: 2008-09-04T06:51:23Z source: APNIC person: Xiaowei Tu address: No.1 Hongshan Road,Wuhan ,China country: CN phone: +86-27-87897599 fax-no: +86-27-87894099 e-mail: tuxw@public.wh.hb.cn nic-hdl: XT6-AP mnt-by: MAINT-CN-CHINANET-HB last-modified: 2008-09-04T07:30:20Z source: APNIC person: YanLing Zhang nic-hdl: YZ83-AP e-mail: ip_admin_hb@public.wh.hb.cn address: 8th floor of JinGuang Building address: 232# of Macao Road address: HanKou Wuhan Hubei Province address: P.R.China phone: +86-27-65655699 fax-no: +86-27-65654499 country: CN mnt-by: MAINT-CN-CHINANET-HB last-modified: 2008-09-04T07:29:20Z source: APNIC person: Zhengding Cai address: 8th floor of JinGuang Building address: 232# of Macao Road address: HanKou Wuhan Hubei Province address: P.R.China country: CN phone: +86-27-82862199 fax-no: +86-27-82861499 e-mail: caizhengding@21cn.com nic-hdl: ZC77-AP mnt-by: MAINT-CN-CHINANET-HB last-modified: 2008-09-04T07:30:00Z source: APNIC % This query was served by the APNIC Whois Service version 1.88.15-SNAPSHOT (WHOIS-US3)
whois.ripe.net
whois 5.5.5.5 [Querying whois.arin.net] [Redirected to whois.ripe.net] [Querying whois.ripe.net] [whois.ripe.net] % This is the RIPE Database query service. % The objects are in RPSL format. % % The RIPE Database is subject to Terms and Conditions. % See http://www.ripe.net/db/support/db-terms-conditions.pdf % Note: this output has been filtered. % To receive output for a database update, use the "-B" flag. % Information related to '5.4.0.0 - 5.7.255.255' % Abuse contact for '5.4.0.0 - 5.7.255.255' is 'abuse.de@telefonica.com' inetnum: 5.4.0.0 - 5.7.255.255 netname: DE-MEDIAWAYS-20120425 country: DE org: ORG-TDG4-RIPE admin-c: MWH6-RIPE tech-c: MWH6-RIPE status: ALLOCATED PA mnt-by: RIPE-NCC-HM-MNT mnt-by: MDA-Z mnt-lower: MDA-Z mnt-routes: MDA-Z created: 2012-04-25T06:13:17Z last-modified: 2018-07-30T09:52:34Z source: RIPE organisation: ORG-TDG4-RIPE org-name: Telefonica Germany GmbH & Co.OHG org-type: LIR address: Georg-Brauchle-Ring 50 address: 80992 address: M�nchen address: GERMANY phone: +498924420 fax-no: +49892442198224 admin-c: RCM25-RIPE admin-c: WT546-RIPE admin-c: DK9212-RIPE abuse-c: MWH6-RIPE mnt-ref: RIPE-NCC-HM-MNT mnt-ref: MDA-Z mnt-by: RIPE-NCC-HM-MNT mnt-by: MDA-Z created: 2004-04-17T12:45:50Z last-modified: 2018-09-25T14:13:22Z source: RIPE # Filtered role: mediaWays Hostmaster address: Telefonica Germany GmbH & Co. OHG address: Georg-Brauchle-Ring 50 address: 80992 Muenchen address: DE phone: +498924420 fax-no: +49892442198224 abuse-mailbox: abuse.de@telefonica.com admin-c: DK9212-RIPE admin-c: RCM25-RIPE admin-c: WT546-RIPE tech-c: TG819-RIPE tech-c: ASZ-RIPE nic-hdl: MWH6-RIPE mnt-by: MDA-Z created: 2001-11-06T10:42:25Z last-modified: 2018-04-26T12:03:39Z source: RIPE # Filtered % Information related to '5.4.0.0/14AS6805' route: 5.4.0.0/14 descr: Telefonica Germany GmbH & Co. OHG remarks: netname: DE-MEDIAWAYS origin: AS6805 mnt-by: MDA-Z created: 2018-08-08T09:03:25Z last-modified: 2018-08-08T09:13:47Z source: RIPE % This query was served by the RIPE Database Query Service version 1.97.2 (BLAARKOP)
whois.lacnic.net
whois 191.168.87.80 [Querying whois.arin.net] [Redirected to whois.lacnic.net] [Querying whois.lacnic.net] [Redirected to whois.registro.br] [Querying whois.registro.br] [whois.registro.br] % Copyright (c) Nic.br % The use of the data below is only permitted as described in % full by the terms of use at https://registro.br/termo/en.html , % being prohibited its distribution, commercialization or % reproduction, in particular, to use it for advertising or % any similar purpose. % 2020-07-30T07:55:11-03:00 inetnum: 191.168.0.0/14 aut-num: AS26615 abuse-c: TISOC3 owner: TIM S/A ownerid: 02.421.421/0117-41 responsible: Andre Luiz de Lima owner-c: MAN173 tech-c: TISOC3 inetrev: 191.168.0.0/14 nserver: snepns01p01.isp.timbrasil.com.br nsstat: 20200726 AA nslastaa: 20200726 nserver: snepns01p02.isp.timbrasil.com.br nsstat: 20200726 AA nslastaa: 20200726 created: 20131024 changed: 20190911 nic-hdl-br: MAN173 person: Marcello do Nascimento created: 20000515 changed: 20200514 nic-hdl-br: TISOC3 person: TIM SOC created: 20090826 changed: 20181105 % Security and mail abuse issues should also be addressed to % cert.br, http://www.cert.br/ , respectivelly to cert@cert.br % and mail-abuse@cert.br % % whois.registro.br accepts only direct match queries. Types % of queries are: domain (.br), registrant (tax ID), ticket, % provider, contact handle (ID), CIDR block, IP and ASN.
一些技术分析后续再补充。
除了传统的WHOIS命令行来获取文本信息以外，还可以通过网站查询或者QUERY API来获取json数据，这种Registration Data Access Protocol注册数据访问协议。
另外，网上也有专门销售可下载IP Whois数据库的，只是费用比较高，1000美元起步。
评论