“Whois” is a basic service answer to the question “Who is X”, where X is an IP address, domain name, and some other things.
ARIN, the American Registry for Internet number, is a good place to start. The ARIN Whois can be accessed from http://whois.arin.net in the upper right corner:
Enter the IP address that you are interested and press Return. I will use 72,104,186,113 (an IP address that I know to be specified) is my example:
This is pretty typical of what you’ll get: information that identifies the ISP who owns the “volume” of the IP address that contains the IP address that you are asking about. In this case, the block is owned by Verizon Wireless and includes all the IP addresses from 126.96.36.199 over 72,127,255,255.
With a court order, then law enforcement will have access to ISPs for more detailed information about the IP address that is assigned to at the time in question.
Also note that it is possible that the information is presented can only give you a different whois servers – including ARIN assigned IP addresses in North America; There are other services for the rest of the planet.
In some cases, reverse DNS can be guided.
DNS is a map of a domain name, such as “askleo.com”, to an IP address. Reverse DNS, such as its name, the opposite: for an IP address, it is found the domain name was assigned as identification primary1.
I will use a tool from a third party provider this time, http://whois.domaintools.com:
You can see that this gives the same information that we have seen above, namely the ISP who owns the IP address. But there’s one more tidbit of information.
113.sub-72-104-186.myvzw.com domain names identified IP addresses. This type of domain names that are common to the IP address was assigned to consumers and small businesses to access the internet. You can see that “myvzw” is a clue that the ISP provides this IP address: Verizon Wireless.
Occasionally, you can find things in reverse DNS can lead you to some additional theory about IP ownership of it, perhaps, a real domain name for a website really, or some general location types are encrypted.
Looking at the report from domaintools.com, you can see that it references “United States Newark Verizon Wireless’ position as IP. Needless to say it is inaccurate. It reflects the position of the ISP, Verizon Wireless, but not really referring to the location of any device connected and use the IP address.
We can get a little closer.
A company called MaxMind, who provide information based on the geographical location of IP addresses for businesses to have a page where you can test their technology: http://www.maxmind.com / app / locate_demo_ip. Here’s what we show the IP address that I entered:
Here you can see that the range has narrowed. The location is listed as “CHATTAROY, Washington”.
We’re getting closer, but not much. MaxMind has identified precisely the state where this IP has been assigned. Cities in CHATTAROY, however, is a few hundred miles to the other side of the state from where the IP address is actually used.
This is common. For most normal business connections, or the smallest residential area of public information is accurate only to the state. Sometimes, depending on how the ISPs have built their networks, you can get to the city proper and neighborhood. Maybe, just not popular, and there is no real way to know how accurate the information is when you get it.
Especially when it comes to web servers and web servers, sometimes it can be a lesson to see what other domains can be hosted at the same IP address and server.
We will use this http://whois.webhosting.info looked up.
A search of a house, the IP is assigned to the Internet is not able to return any results (and in fact, a return to lookup 72,104,186,113
no), so we will use an IP address – which askleo.com, 188.8.131.52:
(This search can be slow – the information in the DNS is not optimized at all for this kind of look up.)
As you can see, it reflects that askleo.com and 51 other areas are on the same server and share the IP address. (Yes, I have a number of areas, and hold a few for friends as well.)
If you do this kind of IP lookup on an account at a shared hosting service, you can see that the IP sharing sites with perhaps hundreds or even thousands of other sites.
Depending on the type of storage used, you may or may not draw conclusions from a list of sites that are returned. In my case, it’s a pretty safe bet that askleo.com and pugetsoundsoftware.com (on the same server) concerned. However, if IP is shared with hundreds of other sites in a shared storage location, then no inference can really be done.
This is probably not what you want …
While I have shown you some of the tools that you can use to gather information about an IP address, and there’s a fair amount of information on the most common questions I completely understand that it is still not enough.
Most people want the name of the owner of the IP address, their physical address, email address or their phone number. You can not get there from here. ISPs provide internet service that someone, that’s true, but they will not disclose that information, and that information is not publicly available. You will need the support of the courts, law enforcement and law enforcement can overseas if the IP address is located in another country.
And when you think about it, that is exactly as it should be.
If the tables were reversed, you really do not want random people to track you down by your IP address, you now have?
At the risk of coming off as rude: you do not. There is a certain amount of information you can get, and I’ll show you a short time, but the level of detail most people want is simply not something that you can have be on your own.
Over the years, I have received this question many times and for various reasons. Most commonly, it is from someone being harassed online, and they believe they have the IP address of the person responsible, and now want to track them down.
It is extremely important that you realize that you will not, on your own, can get the information you want. Name, location, phone number, email address or any other specific information is simply not available to just any given IP address. Not only can a change the IP address or shared between multiple computers (and therefore person), but the information that you are seeking to be considered private and is protected by ISPs who IP address owner.
To get that information, you’ll need a legitimate reason to ask for it, and that usually means a court order of some kind.
However, let’s look at what you can determine from an IP address on your own and a few tools that will help you determine at least the ISP that owns it.
See more: Are deleted emails really deleted?