Reverse WHOIS lookup
Results 1 to 9 of 9

Thread: Reverse WHOIS lookup

  1. #1
    Junior Member
    Join Date
    Apr 2004
    Posts
    5

    Reverse WHOIS lookup

    Does anyone know of a way to do a WHOIS search to find all domains registered to a person or company?

    If there is no web tool in place for this, is there any way to access raw WHOIS data as a single file or small number of files so that I could write a search tool for it?
    A voice out of chaos spoke to me, saying \"Laugh and be happy, for it cannot get any worse.\" So I laughed, and was happy, and it got worse.

  2. #2
    Just Another Geek
    Join Date
    Jul 2002
    Location
    Rotterdam, Netherlands
    Posts
    3,401
    Yep, you can do that..

    If you look at the whois info of a domain you'll notice admin contact, technical contact etc..
    These "persons" have a nic-hdl and an admin-c, something like AB1234-RIPE,
    You can search for these handles just like you can search for a domain..

    The easiest way to use whois is to use a *nix system. There are programs for windows too..
    Oliver's Law:
    Experience is something you don't get until just after you need it.

  3. #3
    Senior Member nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,190
    Well, in theory SirDice is correct however I don't think that you fully understand what you are asking.

    1. There must be at least 20 "whois" registrars.
    2. They don't all keep their records in the same way.
    3. The whole damn shooting match is entirely dependent on the honesty and accuracy of the person registering.
    4. There must be at least 25million registered domains?

    Now the contractual agreement between ICANN (?) and these registrars is that they must supply you with a copy of their entire databases on request. They are allowed to charge you up to $10,000 for this service (each!!!!).

    There are commercial organisations who will charge you for the service, for example:

    http://www.name.com/name.com_brand/n...rse-whois.html

    Perhaps if you could give us a better idea of your requirement, we could come up with a cost effective solution?


  4. #4
    I have one question though ,how is a normal "whois" different from a "Reversewhois" ??

  5. #5
    Just Another Geek
    Join Date
    Jul 2002
    Location
    Rotterdam, Netherlands
    Posts
    3,401
    There is no "reverse whois".. It's all about searching with the right keywords..
    Oliver's Law:
    Experience is something you don't get until just after you need it.

  6. #6
    Senior Member IKnowNot's Avatar
    Join Date
    Jan 2003
    Posts
    792
    If there is no web tool in place for this, is there any way to access raw WHOIS data as a single file or small number of files so that I could write a search tool for it?
    Correct me if I am wrong, but this was very possible a few years ago, maybe less.

    Because of the very frequent abuses of the databases, changes were implemented to stymie such actions.

    So, why do you wish to do this?

    Spammers were using this. Bots would search the databases and hackers were crafting phishing messages to trick admins ( is this considered social engineering? ) to responding with passwords to their web accounts.

    Because of this Thread I did a search of my Registrant ID, the Tech ID, and my Admin ID.

    Found nothing on Registrant ID and Admin ID, found garbage on Tech ID.

    Again, why do you ask?
    " And maddest of all, to see life as it is and not as it should be" --Miguel Cervantes

  7. #7
    Just Another Geek
    Join Date
    Jul 2002
    Location
    Rotterdam, Netherlands
    Posts
    3,401
    whois info, dns records etc.. are non-invasive networkscans..
    It can help during pentesting..
    Oliver's Law:
    Experience is something you don't get until just after you need it.

  8. #8
    Senior Member nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,190
    SirDice said:
    whois info, dns records etc.. are non-invasive networkscans..
    Exactly!, it can show how far your butt is hanging out of your pants

    To add to SirDice's earlier explanation for White_Pawn :

    It is normal to have an IP address (like 22.33.44.55) and want to know who that is? So "whois" tells you it is John Doe. You may now wonder how many other domains does John Doe have?

    A "reverse whois?" will give that information, subject to the reservations in my previous post.

    Actually it is not a "reverse" it is just searching the same database with different parameters. In the first instance you are looking for a 1:1 relationship, and in the second you are looking for a 1:many relationship. If you were scripting a database query you would see this immediately

  9. #9
    Banned
    Join Date
    Aug 2001
    Location
    Yes
    Posts
    4,424
    Registrant to IP address is a 1:M, not a 1:1
    Bad comparison, nihil

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •