IP WHOIS Lookup
Find the organization an IP address block is registered to, with its range and abuse contact.
How to use this tool and read the results
Enter an IPv4 or IPv6 address, or a hostname, and the tool asks the regional internet registry that manages the address block for its public record, using RDAP. You get the network name, the exact address range, the organization it is registered to, the country, the dates, and the abuse mailbox where problems should be reported.
This answers who the address block belongs to, which is often a hosting company or internet provider, not the person using the address. For an approximate location and the network (ASN) that routes the address, use the IP lookup. To see whether the address is on a spam blocklist, use the blacklist checker. The name your provider publishes for the address is shown by the reverse DNS lookup.
Personal contact details of individuals in a registry record are not shown. Only the organization and the abuse mailbox are.
Frequently asked questions
What is an IP WHOIS lookup?
It looks up an IP address in the records of the regional internet registries and shows who the surrounding address block was assigned to: the network name, range, organization and abuse contact.
How do I find who owns an IP address?
Enter it above. The organization shown is the one the address block is registered to, usually an internet provider or hosting company. To find the actual customer you would need to contact that provider.
Which registries does the lookup use?
The five regional registries: ARIN (North America), RIPE NCC (Europe and the Middle East), APNIC (Asia Pacific), LACNIC (Latin America) and AFRINIC (Africa). The tool picks the right one from the IANA list.
What is the abuse contact for?
It is the mailbox the network owner publishes for reports of spam, attacks or other misuse coming from addresses in the block. Send complaints there, with the evidence.
Why does the country differ from the IP lookup location?
The registry country is where the block was registered, often the owner's head office. Geolocation databases estimate where the address is used, so the two can differ.
Is the WHOIS data always current?
Registry records are updated by the network owners. Large providers keep them accurate; small or old assignments may be stale. The updated date in the result shows when the record last changed.