FIELD GUIDE / START HERE
Read the Network, Not the Person.
A useful lookup tells you what is registered, where the answer came from and what remains unknown. Start with the record, then decide what to investigate next.
What the Fields Mean.
Ranges, handles, country codes and dates—explained without overclaiming.
4 min read →02 / FOLLOW THE SOURCEFrom IP to Registry.
How RDAP, IANA routing and registry referrals fit together.
3 min read →03 / USE THE CONTEXTA Better Next Step.
Investigate a network question without mistaking registration for identity.
4 min read →A Quick Reading Order
- Confirm the query. Check the exact IP and its address family. A browser, VPN or proxy may use a different address from another connection.
- Read the range. Locate the first and last addresses in the returned network record.
- Check the source and age. The registry, source link and fetch timestamp tell you where this observation came from.
- Separate facts from conclusions. A network name, country field or active status does not identify a user or prove a network is safe.
What This Tool Actually Returns
IPWHOIS displays a limited network-registration summary. It does not request a complete ownership chain, identify the current BGP origin, scan a host or calculate reputation. Contact entities and other extensions in the full record are not expanded in this view.
For scripts, use the CLI / API guide. For a hostname, start with a DNS lookup before investigating an address.