Bulk IP WHOIS & ASN Lookup (RDAP): Owner, Network, Abuse

Look up any list of IPv4/IPv6 addresses or domains, with no login, no browser and no code. Export to JSON, CSV or Excel, or use the API.

Look up any list of IPv4/IPv6 addresses or domains: owning organization, network name and CIDR, country, registration dates, abuse email and phone (from official registry RDAP), plus ASN, ASN name and prefix, reverse DNS and a cloud/hosting flag. Ideal for security triage, fraud checks and B2B traffic attribution.

Use cases

• Identify which company owns IPs hitting your site
• Find abuse contacts for security incident reports
• Flag cloud/hosting IPs in fraud or signup checks

Input

Field	Type	Notes
targets	array	Domains are resolved to their IPv4 addresses (max 4 each).
includeAsn	boolean	Team Cymru IP-to-ASN DNS service.
includeReverseDns	boolean
maxConcurrency	integer

Example input

{
 "targets": [
  "8.8.8.8",
  "1.1.1.1",
  "2606:4700:4700::1111",
  "therealtour360.com",
  "not-a-real-domain-xyz123.com"
 ]
}

Output

One dataset item per result. Main columns: input, ip, organization, network, cidr, country, asn, asnName, abuseEmail, reverseDns, isCloudOrHosting, registered, error. A RUN_SUMMARY record is saved to the default key-value store. See the sample output in the Output tab.

Example output

{
  "input": "1.1.1.1",
  "ip": "1.1.1.1",
  "network": "APNIC-LABS",
  "handle": "1.1.1.0 - 1.1.1.255",
  "range": "1.1.1.0 - 1.1.1.255",
  "cidr": [
    "1.1.1.0/24"
  ],
  "type": "ASSIGNED PORTABLE",
  "country": "AU",
  "organization": "APNIC Research and Development",
  "orgAddress": "6 Cordelia St",
  "abuseEmail": "helpdesk@apnic.net",
  "abusePhone": null,
  "registered": "2011-08-10T23:12:35Z",
  "lastChanged": "2023-04-26T22:57:58Z",
  "parentHandle": null,
  "rdapUrl": "https://rdap.apnic.net/ip/1.1.1.0/24",
  "asn": 13335,
  "asnPrefix": "1.1.1.0/24"
}

Pricing

Pay per result, with no monthly rental or subscription:

• IP looked up: $0.001

Example: 1,000 results cost about $1.00 in fees. Apify's free plan includes $5 of monthly credit, which is enough to test this Actor.

FAQ

Do I need an account, cookies or a login for the source site? No. Bulk IP WHOIS & ASN Lookup uses public data sources only, so there is nothing to connect and no account to risk.

How much will a run cost? You pay only for results delivered (see Pricing above), plus Apify platform usage, which the free plan's monthly credit easily covers for test runs. Start with a small limit to see the exact cost per run.

Can I export to CSV, Excel or Google Sheets? Yes. Every run's dataset can be downloaded as JSON, CSV, Excel, XML or HTML, or pushed to Google Sheets, Make, Zapier, n8n, Slack or a webhook through Apify integrations.

Can I run it on a schedule or from my own code? Yes. Add an Apify Schedule (hourly, daily, weekly) or call it through the Apify API / Python & JavaScript clients. It also works with AI agents through the Apify MCP server.

What happens if an input is invalid or a source is down? The run keeps going. The bad input gets a row with an error field so you can see what failed, and you are not charged for results that were not delivered.

Is this legal to use? It collects publicly available data. You are responsible for using the output in line with the source's terms and privacy laws such as GDPR/CCPA; don't use it for spam.

Something missing or broken? Open an issue on the Issues tab. Feature requests are usually added within a few days.

Scheduling / monitoring

Create a Schedule (daily/weekly) and connect a webhook or Slack/email integration.

Fair use

Official public APIs only, no login. Do not use output for spam or harassment. Respect the data sources' rate limits and terms.

Related tools

• Bulk DNS Lookup & DNS Change Monitor
• Bulk Domain WHOIS (RDAP) Lookup: Age, Expiry, Registrar & DNS
• Bulk HTTP Security Headers Checker & Grade (with change alerts)
• Subdomain Finder (Certificate Transparency) + Live Check