IP RDAP Lookup: Network Owner, CIDR & Country (Bulk)

Look up who owns any list of IPv4/IPv6 addresses with official RDAP data: network name, handle, CIDR blocks, address range, country, registry status and registration dates. Great for security investigations, abuse reports and traffic analysis. No key needed.

What does IP RDAP Lookup do?

Bulk IP address ownership lookup via RDAP: network name, CIDR range, country, registry and dates.

What can you use it for?

• Identify the network operator behind suspicious traffic.
• Enrich server logs with owner and country.
• Find abuse contacts' networks for security reports.
• Audit which providers host your assets.

Why use this Actor?

• Fast and cheap: lightweight HTTP-based Actor with no browser, so runs finish in seconds and cost very little.
• No API keys or accounts needed for the data source (see notes below).
• Clean, structured JSON that you can export as CSV, Excel, JSON or XML, or pull through the Apify API and integrations.
• Scheduling, webhooks and integrations: run it daily and send results to Google Sheets, Slack, Zapier, Make, n8n or your own API.

Input

Configure the run in the Input tab (all fields have sensible defaults).

Field	Type	Required	Default	Description
ips	array of strings	yes	-	IPv4 or IPv6 addresses, one per line.

Example input

{
  "ips": [
    "8.8.8.8",
    "1.1.1.1",
    "2001:4860:4860::8888"
  ]
}

Output

Results are stored in the default dataset. Download them from the Output tab or via the API.

Example result

{
  "name": "APNIC-LABS",
  "handle": "1.1.1.0 - 1.1.1.255",
  "ipVersion": "v4",
  "type": "ASSIGNED PORTABLE",
  "country": "AU",
  "startAddress": "1.1.1.0",
  "endAddress": "1.1.1.255",
  "cidrBlocks": "1.1.1.0/24",
  "parentHandle": null,
  "status": "active",
  "registeredAt": "2011-08-10T23:12:35.000Z",
  "lastChangedAt": "2023-04-26T22:57:58.000Z",
  "entityHandles": "AIC3-AP, IRT-APNICRANDNET-AU, ORG-ARAD1-AP",
  "port43": "whois.apnic.net",
  "scrapedAt": "2026-09-25T07:32:48.098Z",
  "ip": "1.1.1.1"
}

Output fields

Field	Type	Example
name	string	"APNIC-LABS"
handle	string	"1.1.1.0 - 1.1.1.255"
ipVersion	string	"v4"
type	string	"ASSIGNED PORTABLE"
country	string	"AU"
startAddress	string	"1.1.1.0"
endAddress	string	"1.1.1.255"
cidrBlocks	string	"1.1.1.0/24"
parentHandle	null	null
status	string	"active"
registeredAt	string	"2011-08-10T23:12:35.000Z"
lastChangedAt	string	"2023-04-26T22:57:58.000Z"
entityHandles	string	"AIC3-AP, IRT-APNICRANDNET-AU, ORG-ARAD1-AP"
port43	string	"whois.apnic.net"
scrapedAt	string	"2026-09-25T07:32:48.098Z"
ip	string	"1.1.1.1"

How much does it cost?

The Actor is billed by Apify according to the pricing shown on the Pricing tab of this page. Runs are small and fast, and the Apify Free plan includes monthly platform credits so you can try it at no cost. You can set a maximum cost per run, and the Actor stops cleanly when that limit is reached.

Notes and limitations

• Data comes from the regional internet registries (ARIN, RIPE, APNIC, LACNIC, AFRINIC) through RDAP.
• This is ownership data, not GPS geolocation of the device.

Tips

• Start with a small test run, then scale up the input.
• Use Schedules to automate recurring runs and Webhooks or Integrations to deliver the data where you need it.
• Call the Actor from your code with the Apify API or the official JavaScript and Python clients.

FAQ

Does it work for IPv6?

Yes, IPv4 and IPv6 are supported.

Feedback

Found a bug or need an extra field? Open an issue from the Issues tab of this Actor and it will be looked at quickly.

More tools from the same author

• WHOIS & RDAP Domain Lookup (Expiry, Registrar, Age) - Bulk domain registration data: registrar, created/expiry dates, days left, nameservers, status.
• DNS Records Lookup & Email Security Check (Bulk) - Bulk DNS lookup with SPF, DMARC and DKIM checks and mail/DNS provider detection.
• SSL/TLS Certificate Checker & Expiry Monitor (Bulk) - Check SSL certificate expiry, issuer, chain, hostname match and TLS version for many hosts.