Enter any IPv4 or IPv6 address to see the registered owner, network range, ASN, geolocation, and reverse DNS — all via live WHOIS queries.
Live WHOIS protocol queries, referral chasing, and enrichment with ASN, geolocation, and reverse DNS.
Direct TCP socket queries to IANA and RIRs (RFC 3912) — no cached or stale data.
Automatically follows WHOIS referrals from IANA → RIR → LIR, ensuring you get the authoritative record.
Uses Team Cymru DNS to map the IP to its autonomous system number, name, and prefix.
Shows city, region, ISP, and the PTR record for the IP, all in one view.
No sign-up, no hidden charges – just enter an IP and see the results.
Paste or type any public IPv4 or IPv6 address. Use the “Use my IP” button to auto-fill your own.
We start at IANA, then follow referrals to ARIN, RIPE, APNIC, LACNIC, or AFRINIC, gathering the full record.
See network owner, abuse contacts, ASN, geolocation, and reverse DNS – all on one page.
A WhoIs by IP lookup is one of the most fundamental diagnostic tools for network administrators, security analysts, and digital marketers. When you perform a whois search by IP, you are essentially asking the global internet registries: “Who is responsible for this IP address?” The answer comes in the form of a structured record that includes the network block owner, contact details, and often the geographic region where the block is registered.
Unlike domain WHOIS, which queries a domain registrar for a domain name's owner, WHOIS on IP address queries the Regional Internet Registries (RIRs) – ARIN (North America), RIPE (Europe), APNIC (Asia-Pacific), LACNIC (Latin America), and AFRINIC (Africa). Each RIR maintains a database of IP allocations and assignments made to ISPs, hosting providers, and large enterprises. The tool follows the referral chain starting from IANA, which delegates authority to each RIR, then to the local Internet registry (LIR) that actually assigned the IP to an end-user.
For example, when you run a reverse IP lookup on 8.8.8.8, you will see that it belongs to Google LLC, with a network range of 8.8.8.0/24, and the abuse contact points to Google's network operations team. The tool also fetches the ASN (Autonomous System Number) – in this case AS15169 – which identifies the routing domain that Google advertises. This ASN information is critical for network troubleshooting and BGP analysis.
Geolocation data, though not part of the official WHOIS, is added by querying ip-api.com, giving you a rough estimate of the physical location of the IP. Combined with reverse DNS (PTR) which shows the configured hostname, you get a 360° view of any public IP. Whether you are investigating spam, tracking down a cyber threat, or simply curious about the infrastructure behind a website, this tool gives you the authoritative answers – in real time, with no registration required.
All queries are performed via the standard WHOIS protocol (RFC 3912) over TCP port 43, ensuring you receive the same data that network engineers and registrars use. The tool is fully server‑side, so your IP is never exposed to third‑party APIs except for geolocation (which is anonymised). Use it as often as you like – it's completely free and built for performance.
Boost your workflow with our suite of 100+ utilities – from bulk URL openers to HTTP header inspectors.