IP Whois
Network registration, geolocation, and abuse contact information.
Network Information
Network Information
The range of IP addresses allocated as a single block. NetRange shows start/end IPs (192.0.2.0 - 192.0.2.255), CIDR uses slash notation (192.0.2.0/24).
How to Interpret
/24 = 256 IPs (small organizations), /22 = 1,024 IPs (larger businesses), /16 = 65,536 IPs (large ISPs), /8 = 16.7 million IPs (extremely large).
Network Information
The range of IP addresses allocated as a single block. NetRange shows start/end IPs (192.0.2.0 - 192.0.2.255), CIDR uses slash notation (192.0.2.0/24).
How to Interpret
/24 = 256 IPs (small organizations), /22 = 1,024 IPs (larger businesses), /16 = 65,536 IPs (large ISPs), /8 = 16.7 million IPs (extremely large).
Organization
Organization
The legal entity that controls this IP address block. This is the actual owner or operator of the network infrastructure.
How to Interpret
ISP names (Comcast, AT&T) indicate residential/business customers. Cloud providers (Amazon, Microsoft) indicate hosting infrastructure. Direct organizations operate their own networks.
Organization
The legal entity that controls this IP address block. This is the actual owner or operator of the network infrastructure.
How to Interpret
ISP names (Comcast, AT&T) indicate residential/business customers. Cloud providers (Amazon, Microsoft) indicate hosting infrastructure. Direct organizations operate their own networks.
Geolocation
Geolocation
Physical location where the IP address is being used, determined by geolocation databases. This differs from WHOIS registration data, which shows ownership.
What You'll See
- City, region, and country of the server/device
- Coordinates with link to map
- Timezone and postal code
- ISP and organization operating at that location
- Security flags: Proxy, VPN, Tor, Hosting/Datacenter
Diagnostic Value
- Identify actual server location for latency/compliance
- Detect VPNs, proxies, and hosting providers
- Verify expected geographic distribution
- Identify datacenter vs residential traffic
How to Interpret
WHOIS shows who OWNS the IP (organizational registration). Geolocation shows where it's USED (physical server location). A Lithuanian company can own IPs used in Phoenix datacenter.
History
IP geolocation databases emerged in the early 2000s. Accuracy improved dramatically with commercial services like MaxMind. Modern services achieve city-level accuracy for 80%+ of IPs.
Geolocation
Physical location where the IP address is being used, determined by geolocation databases. This differs from WHOIS registration data, which shows ownership.
What You'll See
- City, region, and country of the server/device
- Coordinates with link to map
- Timezone and postal code
- ISP and organization operating at that location
- Security flags: Proxy, VPN, Tor, Hosting/Datacenter
Diagnostic Value
- Identify actual server location for latency/compliance
- Detect VPNs, proxies, and hosting providers
- Verify expected geographic distribution
- Identify datacenter vs residential traffic
How to Interpret
WHOIS shows who OWNS the IP (organizational registration). Geolocation shows where it's USED (physical server location). A Lithuanian company can own IPs used in Phoenix datacenter.
History
IP geolocation databases emerged in the early 2000s. Accuracy improved dramatically with commercial services like MaxMind. Modern services achieve city-level accuracy for 80%+ of IPs.
Contacts
Contacts
Email address for reporting network abuse, spam, hacking attempts, or security incidents originating from this IP block.
How to Interpret
[email protected] indicates a dedicated team. Generic contacts (noc@, security@) may be monitored but less specialized.
Contacts
Email address for reporting network abuse, spam, hacking attempts, or security incidents originating from this IP block.
How to Interpret
[email protected] indicates a dedicated team. Generic contacts (noc@, security@) may be monitored but less specialized.
Registration
Registration
IP WHOIS provides registration information for IP address blocks, revealing who owns and operates specific IP addresses. Unlike domain WHOIS (website ownership), IP WHOIS focuses on network infrastructure.
History
The RIR system was established in the 1990s to manage growing demand. IANA allocated the final IPv4 blocks to RIRs in 2011, leading to IPv6 adoption and IPv4 address trading markets.
Registration
IP WHOIS provides registration information for IP address blocks, revealing who owns and operates specific IP addresses. Unlike domain WHOIS (website ownership), IP WHOIS focuses on network infrastructure.
History
The RIR system was established in the 1990s to manage growing demand. IANA allocated the final IPv4 blocks to RIRs in 2011, leading to IPv6 adoption and IPv4 address trading markets.
% [whois.apnic.net] % Whois data copyright terms http://www.apnic.net/db/dbcopyright.html % Information related to '1.1.1.0 - 1.1.1.255' % Abuse contact for '1.1.1.0 - 1.1.1.255' is '[email protected]' inetnum: 1.1.1.0 - 1.1.1.255 netname: APNIC-LABS descr: APNIC and Cloudflare DNS Resolver project descr: Routed globally by AS13335/Cloudflare descr: Research prefix for APNIC Labs country: AU org: ORG-ARAD1-AP admin-c: AIC3-AP tech-c: AIC3-AP abuse-c: AA1412-AP status: ASSIGNED PORTABLE remarks: --------------- remarks: All Cloudflare abuse reporting can be done via remarks: [email protected] remarks: --------------- mnt-by: APNIC-HM mnt-routes: MAINT-APNICRANDNET mnt-irt: IRT-APNICRANDNET-AU last-modified: 2023-04-26T22:57:58Z mnt-lower: MAINT-APNICRANDNET source: APNIC irt: IRT-APNICRANDNET-AU address: PO Box 3646 address: South Brisbane, QLD 4101 address: Australia e-mail: [email protected] abuse-mailbox: [email protected] admin-c: AR302-AP tech-c: AR302-AP auth: # Filtered remarks: [email protected] was validated on 2021-02-09 mnt-by: MAINT-APNICRANDNET last-modified: 2025-11-18T00:26:57Z source: APNIC organisation: ORG-ARAD1-AP org-name: APNIC Research and Development org-type: LIR country: AU address: 6 Cordelia St phone: +61-7-38583100 fax-no: +61-7-38583199 e-mail: [email protected] mnt-ref: APNIC-HM mnt-by: APNIC-HM last-modified: 2023-09-05T02:15:19Z source: APNIC role: ABUSE APNICRANDNETAU country: ZZ address: PO Box 3646 address: South Brisbane, QLD 4101 address: Australia phone: +000000000 e-mail: [email protected] admin-c: AR302-AP tech-c: AR302-AP nic-hdl: AA1412-AP remarks: Generated from irt object IRT-APNICRANDNET-AU remarks: [email protected] was validated on 2021-02-09 abuse-mailbox: [email protected] mnt-by: APNIC-ABUSE last-modified: 2025-05-28T03:31:35Z source: APNIC role: APNICRANDNET Infrastructure Contact address: 6 Cordelia St South Brisbane QLD 4101 country: AU phone: +61 7 3858 3100 e-mail: [email protected] admin-c: AIC3-AP tech-c: AIC3-AP nic-hdl: AIC3-AP mnt-by: MAINT-APNICRANDNET last-modified: 2024-07-18T04:37:37Z source: APNIC % Information related to '1.1.1.0/24AS13335' route: 1.1.1.0/24 origin: AS13335 descr: APNIC Research and Development 6 Cordelia St mnt-by: MAINT-APNICRANDNET last-modified: 2023-04-26T02:42:44Z source: APNIC % This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-US2)