How to limit the output of the whois command

parsingwhois

How do I get only the owner/orgname from a PTR whois lookup?
I don't need all the other entires, just the part about ownership (google in this case).

Edit /usr/bin/whois 74.125.236.52 or any ip
get OrgName

  #
  # Query terms are ambiguous.  The query is assumed to be:
  #     "n 74.125.236.52"
  #
  # Use "?" to get help.
  #

  #
  # The following results may also be obtained via:
  # http://whois.arin.net/rest/nets;q=74.125.236.52?showDetails=true&showARIN=false&ext=netref2
  #

  NetRange:       74.125.0.0 - 74.125.255.255
  CIDR:           74.125.0.0/16
  OriginAS:
  NetName:        GOOGLE
  NetHandle:      NET-74-125-0-0-1
  Parent:         NET-74-0-0-0-0
  NetType:        Direct Allocation
  RegDate:        2007-03-13
  Updated:        2012-02-24
  Ref:            http://whois.arin.net/rest/net/NET-74-125-0-0-1


  OrgName:        Google Inc.
  OrgId:          GOGL
  Address:        1600 Amphitheatre Parkway
  City:           Mountain View
  StateProv:      CA
  PostalCode:     94043
  Country:        US
  RegDate:        2000-03-30
  Updated:        2011-09-24
  Ref:            http://whois.arin.net/rest/org/GOGL

  OrgAbuseHandle: ZG39-ARIN
  OrgAbuseName:   Google Inc
  OrgAbusePhone:  +1-650-253-0000
  OrgAbuseEmail:  arin-contact@google.com
  OrgAbuseRef:    http://whois.arin.net/rest/poc/ZG39-ARIN

  OrgTechHandle: ZG39-ARIN
  OrgTechName:   Google Inc
  OrgTechPhone:  +1-650-253-0000
  OrgTechEmail:  arin-contact@google.com
  OrgTechRef:    http://whois.arin.net/rest/poc/ZG39-ARIN

  #
  # ARIN WHOIS data and services are subject to the Terms of Use
  # available at: https://www.arin.net/whois_tou.html
  #

Best Answer

If you want the domain name of the owner of an IP-address (rather than, say, a company name), perhaps you might be better served by using dig -x ?

$ dig +short -x 74.125.236.52
maa03s04-in-f20.1e100.net.

-- EDIT --

If you just want the "OrgName:" line from the whois output, you can single it out with grep:

$ whois 74.125.236.52 | grep OrgName
OrgName:        Google Inc.

As mentioned elsewhere though, this may not always work, since the output-format is not specified anywhere.

Related Topic