Loading
Loading
Query real-time WHOIS records for any IPv4 or IPv6 address. Returns organization, CIDR range, network handle, and abuse contacts — sourced live from all 5 RIRs.
The WHOIS IP Lookup API provides full network registration data including inet_num blocks, organization details, technical and abuse contacts, routing information, and raw WHOIS text. Perfect for abuse reporting, fraud detection, and network intelligence.
Pass your API key as the apiKey parameter in every request.
This is version v1.0 of the API.
The following parameters can be used in your API requests. All parameters are passed as query string parameters.
iprequiredStringIPv4 or IPv6 whose WHOIS required
A successful request returns a 200 OK response with a JSON object containing the WHOIS data. The response includes the top-level fields listed below. See the response preview on the right for the full JSON structure.
statusIndicates if the WHOIS response from whois_server is a complete response
ip_addressIP address (IPv4 or IPv6) to query live WHOIS
query_timeDate and time of WHOIS query in the yyyy-MM-dd HH:mm:ss format
whois_serverWHOIS host server used to query the ip_address
inet_numsList of inet nums. Each object contains the following fields:
irtIRT (Incident Response Team) object
organizationOrganization object
administrative_contactsList of administrative contacts
technical_contactsList of technical contacts
abuse_contactsList of abuse contacts
routesList of routes
whois_raw_responseWHOIS response (unparsed) from the whois_server WHOIS server
r_whois_raw_responseWHOIS response from the rwhois server
Each inet_nums object contains the following fields:
start_ipStart IP in the IP range
end_ipEnd IP in the IP range
cidrIP range in the CIDR format
net_nameNet-Name (unique ID) of this inetnum in the WHOIS data
net_handleNet-Handle (unique ID) of this inetnum in the WHOIS data, only available in the ARIN's response
descriptionAll values of description in this inetnum
countriesAll ISO 3166-2 letter country codes from where the IP block is allocated
geofeedLink to the geofeed (RFC 8805)
latitudeLatitude value parsed from geoloc in the inetnum object
longitudeLongitude value parsed from geoloc in the inetnum object
cityCity of allocation for the inetnum, only returned from the LACNIC's response
languagesAll regional languages in countries of allocation
statusAllocation or assignment status
organizationHandle (unique ID) of the organization in WHOIS data, managing this inetnum
sponsoring_organizationHandle (unique ID) of the sponsoring organization in WHOIS data, sponsoring this inetnum
admin_contactsAll handles (unique IDs) of admin persons or roles in WHOIS data
tech_contactsAll handles (unique IDs) of tech persons or roles in WHOIS data
abuse_contactsAll handles (unique IDs) of abuse persons or roles in WHOIS data
remarksAll values of remarks in inetnum object
assignment_sizeAllocation or assignment size of IP network or block
notifyAll values of notify in the inetnum object
mnt_byAll values of mnt-by in the inetnum object
mnt_lowerAll values of mnt-lower in the inetnum object
mnt_domainsAll values of mnt-domains in the inetnum object
mnt_routesAll values of mnt-routes in the inetnum object
mnt_irtAll values of mnt-irt in the inetnum object
date_createdThis object's registration date, parsed in yyyy-MM-dd format
date_updatedThis object's last update date, parsed in yyyy-MM-dd format
sourceWHOIS data source of this object
parentsParent allocations or assignments of this inetnum block
Each irt object contains the following fields:
handleHandle or unique identifier of this irt in the WHOIS data
addressAll values of address in the irt object
streetParsed street address from address
cityParsed city from address
districtParsed district from address
stateParsed state from address
zip_codeParsed ZIP code from address
countryParsed country from address
emailAll values of email in the irt object
abuse_mailboxAll values of abuse-mailbox in the irt object
phoneAll values of phone in the irt object
fax_noAll values of fax-no in the irt object
organizationsAll handles of organization objects, irt object is linked to
admin_contactsAll handles (unique IDs) of admin persons or roles in WHOIS data
tech_contactsAll handles (unique IDs) of tech persons or roles in WHOIS data
remarksAll values of remarks in the irt object
signatureAll values of signature in the irt object
encryptionAll values of encryption in the irt object
authAll values of auth in the irt object
notifyAll values of notify in the irt object
irt_nfyAll values of irt-nfy in the irt object
mnt_byAll values of mnt-by in the irt object
mnt_refAll values of mnt-ref in the irt object
date_createdThis object's registration date, parsed in yyyy-MM-dd format
date_updatedThis object's last update date, parsed in yyyy-MM-dd format
sourceWHOIS data source of this object
Each organization object contains the following fields:
handleHandle or unique identifier of this organization object in WHOIS data
nameName of the organization
typeType of the organization
descriptionAll values of description in the organization object
addressAll values of address in the organization object
streetParsed street address from address
cityParsed city from address
districtParsed district from address
stateParsed state from address
zip_codeParsed ZIP code from address
countryParsed country from address
latitudelatitude parsed from the geoloc field
longitudelongitude parsed from the geoloc field
emailAll values of email in the organization object
abuse_mailboxAll values of abuse-mailbox in the organization object
phoneAll values of phone in the organization object
fax_noAll values of fax-no in the organization object
organizationsAll handles of organization objects, organization object is linked to
admin_contactsAll handles (unique IDs) of admin persons or roles in WHOIS data
tech_contactsAll handles (unique IDs) of tech persons or roles in WHOIS data
abuse_contactsAll handles (unique IDs) of abuse persons or roles in WHOIS data
languagesAll values of language in the organization object
remarksAll values of remarks in the organization object
notifyAll values of notify in the organization object
ref_nfyAll values of ref-nfy in the organization object
mnt_byAll values of mnt-by in the organization object
mnt_refAll values of mnt-ref in the organization object
date_createdThis object's registration date, parsed in yyyy-MM-dd format
date_updatedThis object's last update date, parsed in yyyy-MM-dd format
sourceWHOIS data source of this object
Each contact object contains the following fields:
handleHandle or unique identifier of this person or role object in WHOIS data
nameName of the person or role
addressAll values of address in the object
streetParsed street address from address
cityParsed city from address
districtParsed district from address
stateParsed state from address
zip_codeParsed ZIP code from address
countryParsed country from address
emailAll values of email in the object
abuse_mailboxAll values of abuse-mailbox in the object
phoneAll values of phone in the object
fax_noAll values of fax-no in the object
organizationsAll handles of organization objects, managing this person or role object
admin_contactsAll handles (unique IDs) of admin persons or roles in WHOIS data
tech_contactsAll handles (unique IDs) of tech persons or roles in WHOIS data
remarksAll values of remarks in the person or role object
notifyAll values of notify in the person or role object
mnt_byAll values of mnt-by in the person or role object
mnt_refAll values of mnt-ref in the person or role object
date_createdThis object's registration date, parsed in yyyy-MM-dd format
date_updatedThis object's last update date, parsed in yyyy-MM-dd format
sourceWHOIS data source of this object
Each route object contains the following fields:
routeBGP route
originAS number
descriptionAll values of description in the route
countryCountry of organization, managing this route
pingableAll values of pingable in the route
ping_hdlAll values of ping-hdl in the route
holesAll values of holes in the route
member_ofAll values of member-of in the route
injectAll values of inject in the route
aggr_mtdValue of aggr-mtd in the route
aggr_bndryValue of aggr-bndry in the route
export_compsValue of export-comps in the route
componentsValue of components in the route
organizationsAll handles of Organization objects related to the route
remarksAll values of remarks in the route
notifyAll values of notify in the route
mnt_lowerAll values of mnt-lower in the route
mnt_byAll values of mnt-by in the route
date_createdThis object's registration date, parsed in yyyy-MM-dd format
date_updatedThis object's last update date, parsed in yyyy-MM-dd format
sourceWHOIS data source of this object
The API uses standard HTTP status codes to indicate the success or failure of requests. For common status codes like 429 (Too Many Requests), refer to the general API documentation.
Request-param 'ip' (<ip>) is not valid.
Service is unavailable.
Request is timed-out.