whois scripts?

[prelate]

I've been looking around for a script that allows me to feed in a list of IPs or range which will return the Whois information from the entire list of IPs.

Our PT reports have an appendix which contain the whois output for every ip the company owns. Some of my clients have 100+ IPs, as a result I'm spending entirely too much time running individual whois searches. Yes, I know it's repetitive, it's also a huge time suck for me. But the clients want it, so we do it.

I've reviewed whois man pages but can't seem to find what I'm looking for.

Any suggestions?

Thanks in advance.

[purehate]

Would be easy to script in bash however you would need to decide what info you wanted to keep out off each whois request. here is some bash to get started.

#!/bin/sh
for LINE in `cat ip.txt`
do
  echo "Got [$LINE]"
  whois $LINE >> customer.log
done

I'll see if I can add a way to go into each file in a sec.

[Archangel-Amael]

There are several down the list.
Google

Skip over the first view as these appear to be scripts that one would need to pay for.
I would also suggest a check of All commands | commandlinefu.com
There maybe something of use there as well.

[prelate]

NICE! That is beyond perfect. Once again, you prove you are the man! You have no idea how much time you've just saved me. THANK YOU HATE!

[Archangel-Amael]

NICE! That is beyond perfect. Once again, you prove you are the man! You have no idea how much time you've just saved me. THANK YOU HATE!

You can also use the whob command, it will take stdin and stdout that can be redirected.
Check the -f option in the link.

[prelate]

whob = another new one for me. Thanks again guys.

I searched last night for longer than I care to admit and the only thing I could find was "pay for" scripts or scripts that use languages I'm not comfortable with.

I posted on this forum and both of you not only helped me right away---but you provided solutions which worked perfectly.

I owe you a beer. If you're going to Blackhat DC let me know and I'll pay up.

[purehate]

Glad to help I am always willing to help people with legitimate requests for work.

If you were really lazy you could add a nslook up line to to resole the host names to IPs for you

nslookup forums.remote-exploit.com | grep Add | grep -v '#' | cut -f 2 -d ' '

[Archangel-Amael]

Glad to be of assistance. I actually looked because you piqued my curiosity on the subject. After probably looking at several of the same links that you may have seen above, I thought there has to be a command or two that would do the same, or what you were after. So I followed the links on the man pages, and found whob. I am actually going to look into it a little more tomorrow after I gather some ip addresses.