Lookup tool
IP WHOIS Lookup
IP WHOIS records can show which network or organisation an IP address is allocated to. This is useful for abuse reports, routing context, and basic network research.
What this lookup actually returns
The data comes from RDAP, the structured successor to classic WHOIS that the regional internet registries publish. It describes the block an address sits inside: the range it was allocated from, the network name, the organisation the allocation was made to, and where an abuse report should be sent. It does not identify the person or household using the address.
Why fields are often missing
Registries publish different fields. ARIN, which covers North America, does not return a country field at all, so that row will usually read "Not available" for US addresses. Registration and change dates are also inconsistent between registries. A missing field means the registry did not publish it, not that the lookup failed.
Reporting abuse from an IP address
If an address is scanning, spamming, or attacking you, the abuse contact shown here is the correct place to send a report. Include timestamps with time zones and a short log excerpt. Remember that the contact is the network operator, not the end user, and that the address may be shared, dynamic, or behind carrier-grade NAT.
You can also look up geolocation details for the same address, or check what your own connection reports.