Find who owns an IP address

6 tools. 6 run with ot in a sandbox on Windows, macOS and Linux. Compare them side by side ↓

Every public IP address belongs to a range a regional internet registry allocated to an organisation: an ISP, a hosting provider, a cloud platform or a company with its own network. RDAP and WHOIS name that holder, the autonomous system that routes the range and its abuse contact, which tells you whom an address belongs to and where to report it.

With ot, in a sandbox

All IP address tools →

Windows, macOS and Linux, with Docker or Podman. Each tool runs in a read-only container that can reach only the sites it declares, and every result comes back in the same JSON shape.

osintverse-community/ipwhois

Looks up who holds an IP address through RDAP: network, ASN, organisation and contacts

Takes ip address → finds organization, other
No key · Docker
Verified publisher

osintverse-community/asn

Looks up an IP, prefix, AS number, hostname or organisation: ASN, BGP, RPKI, geolocation and reputation

→ finds ip, location, organization, other
No key · Docker
Verified publisher

osintverse-community/whois

Looks up WHOIS records for a domain, IP address or AS number, picking the right server automatically

Takes domain → finds email, organization, other
No key · Docker
Verified publisher

osintverse-community/likexian-whois

Looks up the WHOIS record of a domain, IP address or ASN from the right registry server

Takes domain → finds email, organization, other
No key · Docker
Verified publisher

osintverse-community/ipinfo

Looks up an IP address in IPinfo: host name, location, time zone, network owner and ASN, and whether it is anycast

Takes ip address → finds domain, ip, location, organization
No key · Docker
Verified publisher

osintverse-community/ipdata

Looks up an IP address in ipdata: location, network owner, ASN, time zone and threat flags such as Tor or proxy

Takes ip address → finds location, organization, other
Key required · Docker
Verified publisher
ot install osintverse-community/ipwhois osintverse-community/asn osintverse-community/whois osintverse-community/likexian-whois osintverse-community/ipinfo

Installs the first 5 in one go; ot auto ip:… then runs every installed tool that takes an IP address and saves the results. No ot yet? Install it in one line.

The 6 registry tools side by side

The registry tools on this page, compared. Select a column heading to sort by it.
osintverse-community/asnip, location, organization, otherNoneOnline, passiveNoDockerNo reports yetfewer than 10
osintverse-community/ipdatalocation, organization, otherRequiredOnline, passiveNoDockerNo reports yetfewer than 10
osintverse-community/ipinfodomain, ip, location, organizationNoneOnline, passiveNoDockerNo reports yetfewer than 10
osintverse-community/ipwhoisorganization, otherNoneOnline, passiveNoDockerNo reports yetfewer than 10
osintverse-community/likexian-whoisemail, organization, otherNoneOnline, passiveYesDockerNo reports yetfewer than 10
osintverse-community/whoisemail, organization, otherNoneOnline, passiveYesDockerNo reports yetfewer than 10

Facts from each tool's manifest and what people report about whether it works. "Reaches" says whether a run stays offline, reads public sources, sends requests about the target, or may notify them.

How to find who owns an IP address

  1. Look up the address through RDAP (ipwhois) for the network, organisation and abuse contact.
  2. Check the autonomous system and announced prefix (asn) to see who routes it.
  3. If the holder is a hosting or cloud provider, the customer is not in these records: look for the domains on the address instead.

Every registry tool here runs on your machine in a sandbox, and ot auto ip:… runs all the installed ones on one value.

Before you run one

Does the holder of the IP range run the server?

Often not. A hosting or cloud provider holds the range and rents addresses to customers whose names are not public. The record tells you which provider hosts the server and whom to contact, not who runs it.

What is an ASN?

An autonomous system number identifies a network that routes its own address ranges on the internet. Knowing it lets you find the other ranges the same organisation announces, and asnmap (on the company page) goes the other way, from an organisation to its ranges.

Do these tools send my search anywhere?

No. ot runs each tool on your own machine in a read-only container that can only reach the sites the tool declares, and results stay in your results folder. The registry only counts installs.

Do I need an API key?

Most tools here work without one; the row says "Key required" when one is needed, and ot keys set stores it in your OS keychain so only that tool's container sees it.

More from an IP address

Domains on itReputationOpen portsLocationCDN or originAll IP address tools

Esc

Try

↑ ↓ to move↵ to open