IPIPv4 and IPv6 · AFRINIC · APNIC · ARIN · LACNIC · RIPE NCC
IP WHOIS lookup
Which network an address belongs to, who it is registered to and where to report abuse, straight from the regional internet registry.
What comes back
- Network name and handle
- Address range and CIDR blocks
- Registered country and organisation
- Abuse contact for reports
- Registration and last-change dates
- Raw RDAP JSON and a text summary
How it works
Every public IP address is allocated by one of five regional internet registries. DNS Raven finds the right one in IANA's bootstrap files, asks it over RDAP, and follows any redirect: an address that moved between regions is answered by the registry that holds it now. A registry may also hand you on to a national registry, such as NIC.br for Brazil.
The registered country is where the holder is registered, not necessarily where the address is used. The abuse contact is the address the network asks you to use for spam, attacks or other misuse.
Questions
Can I look up a private address like 192.168.1.1?
Private, loopback, link-local, carrier-grade NAT and documentation ranges are not registered to anyone, so there is no record to fetch. DNS Raven names the range and its RFC instead, and sends nothing.
Why does the network look bigger than one address?
Registries record blocks, not single addresses. You get the most specific block on file, which might be a /24 assigned to a company or a large allocation to its provider.
Is the location accurate?
The country is part of the registration, not a geolocation. Cloud and anycast networks register addresses in one country and use them everywhere.