About IP WHOIS Lookup
Run an IP WHOIS lookup when an address shows up and you need to know whose it is, such as an IP hammering your login page, an unfamiliar crawler in the access log, the sending server in a suspicious email header, or a site whose hosting company you're curious about. Enter an IP address, or a domain, which is looked up by its first address, and click Look up.
The record comes over RDAP from the regional registry in charge of the address, whether ARIN, RIPE NCC, APNIC, LACNIC or AFRINIC. You see the network name, organization, country, address range and CIDR, handle, allocation type, postal address, abuse email and the created and updated dates, plus the origin AS number and name, the BGP prefix and the reverse DNS name. Click the AS number to open ASN Lookup. For cloud and hosting addresses the owner is normally the provider, not its customer. Private and reserved addresses such as 192.168.x.x are refused because they have no public owner. The raw RDAP answer is included, and nothing is stored.
How to use IP WHOIS Lookup
- 1Enter an IP or domain
Paste an IPv4 or IPv6 address, or a domain to look up the address it points to.
- 2Click Look up
The IP WHOIS lookup asks the regional registry that manages the address.
- 3Read the owner details
Check the organization, range, country and abuse email, and click the AS number for more.
- 4Keep the record
Copy what you need, or use Download JSON to save the full result.
Why use Cubfile for this
- All five registries
ARIN, RIPE NCC, APNIC, LACNIC and AFRINIC, picked automatically for each address.
- Routing details
Origin AS number and name plus the BGP prefix, from Team Cymru's IP-to-ASN data.
- Abuse contact
The email the network publishes for spam, scanning and attack reports.
- Raw RDAP answer
The registry's original JSON next to the readable summary.