Search for IP WHOIS information using the IP WHOIS lookup tool for any allocated IP address. This IP search tool functions as a registry-level search to provide you with the IP address owner’s contact information and registration details. The results also show the regional Internet registry (RIR) that assigned the IP. You'll see the assigned ownerlocationand abuse reporting details.

With the toolyou can also see the number of IP addresses that are in the block assigned to the organization or owner of the IP you search. Once you have the IP address informationyou can then use the IP Address Lookup tool to get geolocation information.

How do I run a WHOIS search?

To run an Internet WHOIS lookup for IP addressesenter the IP address into the space above. Click "Lookup" and the tool will run a WHOIS search for the IP. You'll receive WHOIS data from the appropriate Regional Internet Registry (such as ARINRIPE NCCAPNICLACNICor AFRINIC) as well as information on your Internet service provider or the organization to whom the WHOIS block is assigned.

Using the IP WHOIS results

The WHOIS IP lookup tool is how you find out who an IP address belongs to. With the IP WHOIS resultsyou’ll be able to find out exactly who to contact should you need to reach the owner of a given IP address. You’ll also see information regarding the Internet service provider (ISP) responsible for allocating or routing traffic for that IP address. You can find the same information for your own IP on the What Is My IP homepagewhich automatically displays your public IP and links to WHOIS and IP lookup tools for verification.

If you are a victim of IP abuse or IP spamminguse the IP WHOIS results to contact the ISP and file a complaint. You can also use the non-abuse contact information. Howeversecurity professionals recommend contacting the ISP first as the IP address’ owner may not actually be behind the abuse. This helps ensure your report reaches an entity capable of investigating network-level misuse.

What does WHOIS stand for?

WHOIS does not stand for anything; it's simply read as "who is," referring to the question of who is responsible for the resource. The phrase is capitalized because it is a query and response protocol. It is used for querying databases that contain the registered users of IP addresses and related network resources. Like RDAP (Registration Data Access Protocol)WHOIS protocol is also used to query other types of databases that contain similar information regarding domain names.

Finding other IP information

Searching a WHOIS database of IP addresses helps users identify the organization or individual to whom an IP is registered. It also returns important administrative and technical contact details. This is useful when you already know the IP address and need to confirm ownershipabuse contactsor hosting information.

Howeverin some instancesyou may need to first find an IP address from a domain in order to search it in the WHOIS lookup tool.

To find an IP address from a domainlook up the domain in the domain name system with the DNS lookup tool. To find a domain from an IP addressinstead of a WHOIS IP address lookupuse a hostname lookup or reverse DNS lookup.

In order to find out if your IP is on a blacklistuse the IP blacklist check. If you want to find other identifying information about your own devicelike your user agentor find hidden information from the website you're visitingutilize the user agent check tool or the server headers check.

What are the Regional Internet Registries?

The Regional Internet Registriesor RIRsare organizations that manage the allocation and registration of Internet number resourcessuch as IP addresses. They are divided across the worldwith each registry providing coverage to a different region.

An RIR is needed because of the expansive nature of the Internet. Although IPv6 use dramatically expanded the available address spaceIPv4 addresses remain limited. Thereforethe Regional Internet Registries establish guidelines to handle allocation based on policies coordinated with the Internet Assigned Numbers Authority (IANA)which oversees global IP address distribution.

Each RIR follows the same base policy. From thereeach registry can govern in the way necessary for their region. These policies are created through publictransparent governance processeswhich strengthen global Internet reliability and security. They monitor the IP pool and protect the policies of the Internet for all users.

The 5 Regional Internet Registries

All five RIRs are united by participation in the collective Number Resource Organization (NRO). Howeverthey also operate separately as follows:

• African Network Information Centre (AfriNIC) administers IP addresses for the continent of Africa.
• American Registry for Internet Numbers (ARIN) administers IP addresses for Canada and the United States. It also oversees many Caribbean and North Atlantic islands. ARIN operates the ARIN WHOIS/RDAP serviceswhich provide authoritative ownership and abuse-reporting information for IPs in its region.
• Asia-Pacific Network Information Centre (APNIC) administers IP addresses for AsiaAustraliaand surrounding countries. This was technically the second RIR to be established after RIPE NCC.
• Latin America and Caribbean Network Information Centre (LACNIC) administers IP addresses for Latin America and parts of the Caribbean.
• Réseaux IP Européens Network Coordination Centre (RIPE NCC) administers IP addresses for Europethe Middle Eastand the former USSR. This registry is considered to be the first established registry. It manages some of the earliest allocated IPv4 address blocks.