Historical WHOIS / BGP for an Indicator
whisper_historyGet historical WHOIS records, BGP origin, and prefix announcements for any IP, domain, CIDR, or ASN. Auto-detects indicator type.
Instructions
Retrieve historical WHOIS or BGP data for a single indicator. The indicator can be an IPv4, IPv6, hostname, CIDR, or ASN - the procedure auto-detects the type.
Returns shape varies by indicator type:
IP / prefix (type=routing): { origin, prefix, startTime, endTime, peersSeing }
Domain (type=domain): WHOIS snapshots - { queryTime, createDate, updateDate, expiryDate, registrar, nameServers }
ASN (type=asn): prefix announcement history (slow, ~9s for large ASNs)
On upstream failure (the data source is rate-limiting or temporarily down), the row shape is: { available: false, error: "timeout" | ..., retryAfter: }. Surface the retryAfter to the user - DO NOT loop on retry.
Argument: indicator (string, required). Allowed characters: letters, digits, '.', '-', ':', '/', '_'.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| indicator | Yes | IPv4 / IPv6 / hostname / CIDR / ASN. Examples: "8.8.8.8", "google.com", "8.8.8.0/24", "AS15169". |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| rows | Yes |