Home/IP WHOIS

IP WHOIS & RDAP lookup

Query the regional internet registry (ARIN, RIPE, APNIC, LACNIC, AFRINIC) for the owner, allocation range and abuse contact behind any IP address. Uses the modern RDAP protocol.

 

WHOIS vs RDAP

Classic WHOIS returns free-form text over an old protocol. RDAP (Registration Data Access Protocol) is its structured, JSON-based successor — standardised, easier to parse and supported by every regional registry. This tool queries RDAP directly from your browser.

What you can learn

  • The organisation that holds the address block (an ISP, hosting company or enterprise).
  • The exact CIDR range the address belongs to.
  • The abuse contact to report spam, attacks or fraud originating from that IP.
  • Which registry (ARIN, RIPE NCC, APNIC, LACNIC, AFRINIC) manages it.
Reporting abuse? Always use the abuse contact from the network's own RDAP record — it routes to the team responsible for that exact block.

Frequently Asked Questions

Does WHOIS show who is using the IP right now?

No. It shows who the address block is registered to — usually an ISP or hosting provider. The end user is only known to that provider.

Why do some fields say not available?

Registries redact personal contact data under privacy rules (especially in Europe). Organisation and abuse contacts are usually present; individual names rarely are.

Can I trust the abuse contact for reporting?

Yes — the abuse email in an RDAP record is the registry-mandated channel for reporting malicious traffic from that network.