IP WHOIS API - Real-time IP Ownership & Network Lookup for Any IP Address

The WhoisFreaks IP WHOIS API lets you query real-time ownership, routing, and abuse contact data for any IP address, across all five Regional Internet Registries (ARIN, RIPE, APNIC, AFRINIC, LACNIC). Get structured JSON or XML responses in milliseconds best for security teams and network engineers.

curl --location --request GET 'https://api.whoisfreaks.com/v1.0/ip-whois?apiKey=API_KEY&ip=1.0.0.0'
[
  {
    "range": "1.0.0.0-1.255.255.255",
    "name": "APNIC-AP",
    "country": "AU",
    "domain": "apnic.net",
    "rir": "apnic",
    "org": {
      "handle": "org-apni3-ap",
      "name": "Asia Pacific Network Information Center, Pty. Ltd.",
      "type": "rir",
      "address": "Level 1 - 33 Park Road, Australia",
      "country": "AU",
      "email": "[email protected]",
      "phone": "",
      "fax": "",
      "date_updated": "2023-09-05T13:05:31",
      "source": "apnic"
    },
    "admin": [
      {
        "handle": "hm20-ap",
        "name": "APNIC Hostmaster",
        "country": "AU",
        "email": "[email protected]",
        "phone": "+61 7 3858 3100",
        "fax": "+61 7 3858 3199",
        "address": "6 Cordelia Street, South Brisbane, QLD 4101, Australia",
        "date_updated": "2013-10-23T04:06:51",
        "source": "APNIC"
      }
    ],
    "tech": [
      {
        "handle": "no4-ap",
        "name": "APNIC Network Operations",
        "country": "AU",
        "email": "[email protected]",
        "phone": "+61 7 3858 3100",
        "fax": "+61 7 3858 3199",
        "address": "6 Cordelia Street, South Brisbane, QLD 4101, Australia",
        "date_updated": "2023-11-29T22:50:07",
        "source": "APNIC"
      }
    ],
    "abuse": [
      {
        "handle": "aa1452-ap",
        "name": "ABUSE APNICAP",
        "country": "ZZ",
        "email": "[email protected]",
        "phone": "+000000000",
        "fax": "",
        "address": "Brisbane, Australia, ZZ",
        "date_updated": "2025-11-28T01:00:58",
        "source": "APNIC"
      }
    ],
    "irt": [
      {
        "handle": "IRT-ENTITY",
        "name": "IRT-APNIC-AP",
        "country": "",
        "email": "[email protected]",
        "phone": "",
        "fax": "",
        "address": "Brisbane, Australia",
        "date_updated": "2025-11-18T00:26:21",
        "source": "APNIC"
      }
    ],
    "bgp": null,
    "raw_whois": "% [whois.apnic.net]\n% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html\n\n% Information related to '1.0.0.0 - 1.255.255.255'\n\n% Abuse contact for '1.0.0.0 - 1.255.255.255' is '[email protected]'\n\ninetnum:        1.0.0.0 - 1.255.255.255\nnetname:        APNIC-AP\ndescr:          Asia Pacific Network Information Centre\ndescr:          Regional Internet Registry for the Asia-Pacific Region\ndescr:          6 Cordelia Street\ndescr:          PO Box 3646\ndescr:          South Brisbane, QLD 4101\ndescr:          Australia\ncountry:        AU\norg:            ORG-APNI3-AP\nadmin-c:        HM20-AP\ntech-c:         NO4-AP\nabuse-c:        AA1452-AP\nstatus:         ALLOCATED PORTABLE\nmnt-by:         APNIC-HM\nmnt-lower:      APNIC-HM\nmnt-irt:        IRT-APNIC-AP\nlast-modified:  2023-09-05T01:46:01Z\nsource:         APNIC\n\nirt:            IRT-APNIC-AP\naddress:        Brisbane, Australia\ne-mail:         [email protected]\nabuse-mailbox:  [email protected]\nadmin-c:        HM20-AP\ntech-c:         NO4-AP\nremarks:        APNIC is a Regional Internet Registry.\nremarks:        We do not operate the referring network and\nremarks:        are unable to investigate complaints of network abuse.\nremarks:        For information about IRT, see www.apnic.net/irt\nremarks:        [email protected] was validated on 2020-02-03\nauth:           # Filtered\nmnt-by:         APNIC-HM\nlast-modified:  2025-11-18T00:26:21Z\nsource:         APNIC\n\norganisation:   ORG-APNI3-AP\norg-name:       Asia Pacific Network Information Center, Pty. Ltd.\norg-type:       RIR\ncountry:        AU\naddress:        Level 1 - 33 Park Road\ne-mail:         [email protected]\nmnt-ref:        APNIC-HM\nmnt-by:         APNIC-HM\nlast-modified:  2023-09-05T13:05:31Z\nsource:         APNIC\n\nrole:           ABUSE APNICAP\ncountry:        ZZ\naddress:        Brisbane, Australia\nphone:          +000000000\ne-mail:         [email protected]\nadmin-c:        HM20-AP\ntech-c:         NO4-AP\nnic-hdl:        AA1452-AP\nremarks:        Generated from irt object IRT-APNIC-AP\nremarks:        [email protected] was validated on 2020-02-03\nabuse-mailbox:  [email protected]\nmnt-by:         APNIC-ABUSE\nlast-modified:  2025-11-28T01:00:58Z\nsource:         APNIC\n\nrole:           APNIC Hostmaster\naddress:        6 Cordelia Street\naddress:        South Brisbane\naddress:        QLD 4101\ncountry:        AU\nphone:          +61 7 3858 3100\nfax-no:         +61 7 3858 3199\ne-mail:         [email protected]\nadmin-c:        AMS11-AP\ntech-c:         AH256-AP\nnic-hdl:        HM20-AP\nremarks:        Administrator for APNIC\nnotify:         [email protected]\nmnt-by:         MAINT-APNIC-AP\nlast-modified:  2013-10-23T04:06:51Z\nsource:         APNIC\n\nperson:         APNIC Network Operations\naddress:        6 Cordelia Street\naddress:        South Brisbane\naddress:        QLD 4101\ncountry:        AU\nphone:          +61 7 3858 3100\nfax-no:         +61 7 3858 3199\ne-mail:         [email protected]\nnic-hdl:        NO4-AP\nremarks:        Administrator for APNIC Network Operations\nnotify:         [email protected]\nmnt-by:         MAINT-APNIC-AP\nlast-modified:  2023-11-29T22:50:07Z\nsource:         APNIC\n\n% This query was served by the APNIC Whois Service version 1.88.34 (WHOIS-UK2)\n\n",
    "date_created": null,
    "date_updated": "2023-09-05T01:46:01"
  }
]
pricing backgroundEclipse Top RightEclipse Top LeftEclipse WHOIS Stats

Product

IP WHOIS Lookup API

Use the IP WHOIS API to look up the registered owner, RIR allocation, routing details, and abuse contacts for any IP address, in real time.

IP WHOIS API

Each response includes IP range, network name, organisation details, administrative and technical contacts, routing (BGP) data, and the raw WHOIS record. Results are returned in structured JSON or XML, ready to plug into your security dashboards, threat intelligence pipelines, or network monitoring tools.

monitoring

Features

What IP WHOIS API Provide

Integrate the IP WHOIS API into your system to identify networks in real time.

Feature icon

Real Time Data

Access real-time IP data, including ownership, routing, and contact details, with a single API request using IP WHOIS Lookup.

Feature icon

Global RIR Coverage

The IP WHOIS API provides coverage of all Regional Internet Registries, including RIPE, ARIN, APNIC, AFRINIC, and LACNIC.

Feature icon

IP Routes and Abuse Contacts

The IP WHOIS Lookup API delivers real-time routing details and abuse contact information for IPs in a structured format.

Feature icon

Supported Formats

The IP WHOIS API provides structured IP WHOIS details in multiple formats, including JSON and XML.

Product

IP Whois Database

Access the IP WHOIS Database for in-depth network analysis.

IP WHOIS Database

The IP WHOIS Database provides complete snapshots containing around 11.2 million entries. Each snapshot takes 3–4 days to prepare and is available in multiple formats, including CSV and MaxMind (MMDB). IP WHOIS snapshots cover all Regional Internet Registries.

monitoring

Use Cases

IP WHOIS API in Action

Real-world applications of IP WHOIS for security and analysis.

Feature icon

Network Troubleshooting

Resolve network issues faster by identifying IP ownership and contacts through IP WHOIS Lookup.

Feature icon

Cybersecurity Threat Detection

Use IP WHOIS Lookup to trace malicious IPs, identify their sources, and uncover context behind suspicious activity.

Feature icon

Regulatory Compliance

Use WHOIS IP API to verify IP allocations, ensure compliance, and keep accurate records for audits and investigations.

Feature icon

Abuse Management

WHOIS IP API identifies and contacts parties behind abusive IPs, ensuring quick resolution, compliance, and network trust.

Feature icon

Market Research

WHOIS IP Lookup analyzes regional IP distribution to reveal trends, opportunities, and guide market expansion.

Feature icon

IP Route Validation

IP WHOIS Lookup checks IP route ownership and AS details to detect hijacks and ensure secure network operations.

Request demo background

Resolve issues faster, stop malicious IPs, validate routes, ensure compliance, and unlock market insights—all with WHOIS IP API.

Integrations

Seamless Integration For Every Workflow

The WhoisFreaks IP WHOIS API ships with official Python and Go SDKs so you can retrieve full inet number, CIDR range, organization, and abuse contact data for any IP address in a single function call.

Zapier, Make, and n8n let non-technical teams enrich IP-based records in CRM tools, alert channels, and case management systems without any backend work.

Security operations centers integrate it into SIEM and SOAR platforms to append network ownership intelligence to firewall alerts, flag datacenter-originated traffic, and route enriched indicators into active response workflows.

button

FAQs

FAQs about the IP WHOIS API: usage and integration.

What is an IP WHOIS API?

An IP WHOIS API lets you programmatically query the registration and ownership data for any IP address from the five Regional Internet Registries (RIRs) ARIN, RIPE, APNIC, AFRINIC, and LACNIC. Instead of manually running WHOIS lookups, you send an API request and receive structured data instantly.

What data does the IP WHOIS API return?

Each response includes the IP range, network name, RIR source, organisation name and handle, routing (BGP) data, country, administrative contacts, technical contacts, and abuse contacts in JSON or XML format.

Is IP WHOIS Lookup data always accurate?

WHOIS data relies on registrants providing accurate information. While registries strive for accuracy, there can be outdated or incomplete records.

Does the API support IPv6?

Yes. The IP WHOIS API supports both IPv4 and IPv6 address lookups.

How is this different from a free WHOIS lookup tool?

The API is designed for programmatic use. You can send thousands of lookups per day, receive clean structured data instead of raw text, and integrate results directly into your applications, SIEM, or security workflows