WHOIS Properties

WHOIS Agent Client Extension
Provides the results of a WHOIS lookup of the endpoint. Microsoft Windows Microsoft Windows Apple macOS Apple iOS Ubuntu Chrome OS IGEL OS Stratodesk NoTouch OS Unicon™ eLux
Adapter                  
The name of the network adapter used to query the whois data. Dynamic property with text data type. Persists as LOCAL_WHOIS_ADAPTER for the local agent and REMOTE_WHOIS_ADAPTER for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️   ✔️ ✔️ ✔️
Adapter VPN                  
Determines whether the whois data was queried using a VPN connection. Dynamic property with boolean data type. Persists as LOCAL_WHOIS_ADAPTER_VPN for the local agent and REMOTE_WHOIS_ADAPTER_VPN for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️   ✔️ ✔️ ✔️
Country                  
The country reported by the WHOIS provider. Dynamic property with text data type. Persists as LOCAL_WHOIS_COUNTRY for the local agent and REMOTE_WHOIS_COUNTRY for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️   ✔️ ✔️ ✔️
County                  
The county reported by the WHOIS provider. Dynamic property with text data type. Persists as LOCAL_WHOIS_COUNTY for the local agent and REMOTE_WHOIS_COUNTY for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️   ✔️ ✔️ ✔️
DNS                  
The results of a DNS lookup of the IP address. Dynamic property with text data type. Persists as LOCAL_WHOIS_DNS for the local agent and REMOTE_WHOIS_DNS for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️   ✔️ ✔️ ✔️
IP                  
The public IP address of the remote device. Dynamic property with ip, text data types. Persists as LOCAL_WHOIS_IP for the local agent and REMOTE_WHOIS_IP for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️   ✔️ ✔️ ✔️
ISP                  
The ISP reported by the WHOIS provider. Dynamic property with text data type. Persists as LOCAL_WHOIS_ISP for the local agent and REMOTE_WHOIS_ISP for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️   ✔️ ✔️ ✔️
Provider                  
The provider used to query the WHOIS results. Dynamic property with enum data type with options IP2Location, MaxMind. Persists as LOCAL_WHOIS_PROVIDER for the local agent and REMOTE_WHOIS_PROVIDER for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️   ✔️ ✔️ ✔️
Proxy                  
Set to true if a proxy is reported by the WHOIS provider. Dynamic property with boolean data type. Persists as LOCAL_WHOIS_PROXY for the local agent and REMOTE_WHOIS_PROXY for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️   ✔️ ✔️ ✔️
Proxy Type                  
The type of proxy in use as reported by the WHOIS provider. Dynamic property with enum data type with options VPN, TOR, Hosted, Public, Residential. Persists as LOCAL_WHOIS_PROXY_TYPE for the local agent and REMOTE_WHOIS_PROXY_TYPE for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️   ✔️ ✔️ ✔️
State                  
The state reported by the WHOIS provider. Dynamic property with text data type. Persists as LOCAL_WHOIS_STATE for the local agent and REMOTE_WHOIS_STATE for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️   ✔️ ✔️ ✔️
Town                  
The town reported by the WHOIS provider. Dynamic property with text data type. Persists as LOCAL_WHOIS_TOWN for the local agent and REMOTE_WHOIS_TOWN for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️   ✔️ ✔️ ✔️
Usage                  
A classification of the IP address as reported by the WHOIS provider. Dynamic property with text data type. Persists as LOCAL_WHOIS_USAGE for the local agent and REMOTE_WHOIS_USAGE for the remote device. ✔️ ✔️ ✔️ ✔️ ✔️   ✔️ ✔️ ✔️
WHOIS Properties

In this article