osintverse-community/ipwhois
Looks up who holds an IP address through RDAP: network, ASN, organisation and contacts
No key · Docker
6 tools. 6 run with ot in a sandbox on Windows, macOS and Linux. Compare them side by side ↓
Every public IP address belongs to a range a regional internet registry allocated to an organisation: an ISP, a hosting provider, a cloud platform or a company with its own network. RDAP and WHOIS name that holder, the autonomous system that routes the range and its abuse contact, which tells you whom an address belongs to and where to report it.
Windows, macOS and Linux, with Docker or Podman. Each tool runs in a read-only container that can reach only the sites it declares, and every result comes back in the same JSON shape.
Looks up who holds an IP address through RDAP: network, ASN, organisation and contacts
Looks up an IP, prefix, AS number, hostname or organisation: ASN, BGP, RPKI, geolocation and reputation
Looks up WHOIS records for a domain, IP address or AS number, picking the right server automatically
Looks up the WHOIS record of a domain, IP address or ASN from the right registry server
Looks up an IP address in IPinfo: host name, location, time zone, network owner and ASN, and whether it is anycast
Looks up an IP address in ipdata: location, network owner, ASN, time zone and threat flags such as Tor or proxy
ot install osintverse-community/ipwhois osintverse-community/asn osintverse-community/whois osintverse-community/likexian-whois osintverse-community/ipinfoInstalls the first 5 in one go; ot auto ip:… then runs every installed tool that takes an IP address and saves the results. No ot yet? Install it in one line.
| osintverse-community/ | ip, location, organization, other | None | Online, passive | No | Docker | No reports yet | fewer than 10 |
| osintverse-community/ | location, organization, other | Required | Online, passive | No | Docker | No reports yet | fewer than 10 |
| osintverse-community/ | domain, ip, location, organization | None | Online, passive | No | Docker | No reports yet | fewer than 10 |
| osintverse-community/ | organization, other | None | Online, passive | No | Docker | No reports yet | fewer than 10 |
| osintverse-community/ | email, organization, other | None | Online, passive | Yes | Docker | No reports yet | fewer than 10 |
| osintverse-community/ | email, organization, other | None | Online, passive | Yes | Docker | No reports yet | fewer than 10 |
Facts from each tool's manifest and what people report about whether it works. "Reaches" says whether a run stays offline, reads public sources, sends requests about the target, or may notify them.
Every registry tool here runs on your machine in a sandbox, and ot auto ip:… runs all the installed ones on one value.
Often not. A hosting or cloud provider holds the range and rents addresses to customers whose names are not public. The record tells you which provider hosts the server and whom to contact, not who runs it.
An autonomous system number identifies a network that routes its own address ranges on the internet. Knowing it lets you find the other ranges the same organisation announces, and asnmap (on the company page) goes the other way, from an organisation to its ranges.
No. ot runs each tool on your own machine in a read-only container that can only reach the sites the tool declares, and results stay in your results folder. The registry only counts installs.
Most tools here work without one; the row says "Key required" when one is needed, and ot keys set stores it in your OS keychain so only that tool's container sees it.
Domains on itReputationOpen portsLocationCDN or originAll IP address tools