Skip to content
InternetData
HomeIP Abuse Contact Lookup
Tool

IP Abuse Contact Lookup

Enter an IP address to see who takes abuse reports for it: the contact's name, email and phone, and the network block whose record names them.

What to do about IP abuse

Spam, a brute-force login, a scan or an attack from an address is for the network that runs it to stop, so report it to that network's abuse contact. The registry record of the block the address is in names who takes reports for every address in it.

Put in the report the address, the date and time with its time zone, what happened, and your evidence: log lines, or a spam message with its full headers.

Where the contact comes from

An address's page shows its contact in the IP Abuse Contact card, resolved from the registries' records and operators' RWHOIS servers, with the block it was taken from. The record itself is beside it, in the IP Whois card.

To send what your own detection finds to the right contacts without a lookup each, IP Abuse Contact is licensed as a database, with every range's contact and its email, phone and postal address.

On this page

Why not report it to the registry?

A registry only allocates the space. The abuse contact is the one that handles abuse for that range.

00 · Evaluate

Test the real build first.

An evaluation license puts a full current build in your hands, with no sampling, so you can measure it against your own traffic before anyone talks about terms.

01 · License

Then license what you use.

Standard, for detection and decisions inside your own product and operations.
Redistribution, when the data ships onward inside what you sell, priced by scope rather than by seat.
Annual terms, a named contact, and monthly, quarterly or yearly payment.