shell console with highlighted ip address

Have you run into an unknown IP address and are wondering where it came from? Perhaps you’re curious about the organization or person behind a website you visit often. Regardless of the reason, you can use an IP address lookup through a WHOIS search to find more information about this curious string of digits. 

In this article, we’ll show you what exactly a WHOIS search is, how it helps with IP address lookups, whether you can change your IP address, and go into more detail about the nuances of IP addresses. 

What Does WHOIS Mean?

WHOIS (pronounced “who is”) stands for a query and response protocol for accessing databases full of information about registered users or assignees of different internet resources. If that sounds complicated, it’s because it is. Think of it as a giant phonebook for the online world. 

The most common reason to use WHOIS is for domain name lookups, but you can just as easily use it to find details about IP address blocks and autonomous systems (organizations that manage large groups of IP addresses).

When you perform a WHOIS lookup, you’re essentially querying a database to see who registered a specific domain name or IP address. The information retrieved will likely have the name of the registrant, their contact details (depending on privacy settings), the creation date and expiration of the registration, and the nameservers associated with the domain. This information can save you a lot of trouble, whether you’re trying to find the owner of a website or troubleshooting technical issues.

Finding an IP Address Owner With a WHOIS Lookup

If you’ve ever received a suspicious email or been bothered by an unknown device connected to your WiFi, you have a good reason to wonder who the owner is. To find that out, we’re now going to use the WHOIS lookup tool and get as much info as we can on the owner of the IP address.

IP addresses, in a nutshell, are unique digital addresses given to every device connected to the internet. It’s like a house address in the online world, except the house is the device that’s connected to the internet. WHOIS acts like a phonebook for these addresses. Use the following steps to perform a WHOIS lookup:

  1. Find a WHOIS Lookup Tool: There are a number of free WHOIS lookup tools online. Do a quick Google search for “WHOIS lookup” and take your pick, making sure that the tool is legitimate.
  2. Enter the IP Address: Once you have your chosen tool, simply copy and paste the IP address of the unknown sender into the search bar.
  3. Interpret the Results: After hitting search, you’ll be shown a page with details about the IP address. Keep in mind that the information you see can change depending on the WHOIS database and privacy settings.

Here’s a breakdown of what you’ll see in the results and what they mean:

  • Registered By/Net Name: This shows the name of the organization or person who registered the IP address block.
  • ISP (Internet Service Provider): This shows the name of the ISP for the device using the IP address.

WHOIS is generally the easiest way to get information on an IP address, but it doesn’t always pinpoint the exact owner. You’ll usually be directed to the organization that manages the IP address block, like an internet service provider (ISP).

Some IP address owners can also just choose to hide their contact details through privacy protection features. If this is the case, the WHOIS lookup will not reveal any personal information.

That said, though WHOIS may not get you the name of the person using the IP address every time, it’s still a good starting point for your search. For one, it’ll help you figure out what organization is responsible for the IP address; you can get more clues about its exact origin from there. 

Can Someone Change Their IP Address?

Yes, and often not by choice. Even though WHOIS might show an owner of an IP address, that owner doesn’t necessarily equate to the person using the device. This is because IP addresses have types, and the more common ones are dynamic, meaning they change after a certain time. 

This change would occur through your ISP, who will automatically assign you a new IP address when you restart your router or modem. While you can’t choose the new IP address, it still gives you some control over your IP address. 

More commonly, people use tools like VPNs (Virtual Private Networks) to mask their IP address entirely, making it appear as if you’re browsing from a different location. Technically, this also changes a person’s IP address for outside parties. Let’s take a closer look at the two types of IP address changes next:

Temporary

Temporarily changing your IP address happens in two ways. The first option is simpler and will depend on how your internet connection is set up. If you have a dynamic IP address (which is common for most home users), restarting your router or modem will be all you need. 

Often, this restart will trigger your ISP to assign you a new IP. Dynamic IPs are automatically leased for a certain period and then reassigned to other devices on the network, which is what causes this change.

The second method is for when you want more deliberate control and privacy for your IP – use a Virtual Private Network (VPN). A VPN encrypts your internet traffic and routes it through a remote server in a location of your choosing. This server has its own IP address, which is what websites and services you visit will see instead of your own actual IP. By making it look as if you’re browsing from the VPN server’s location, this effectively hides your true IP address temporarily.

Permanent

Getting a permanent IP address change is possible, but it requires contacting your ISP. The specific feature you’ll be asking for is a “static” IP. Most ISPs have static IP addresses as an optional upgrade to their plans, but it’s not always a given. 

If it is offered, expect to pay a small, recurring fee for it. Static IPs will work as a permanent change for most, but they aren’t truly “permanent” in the strictest sense. Your ISP might still need to reassign the address for maintenance or other reasons.

An alternative for a more persistent change, although not technically permanent, is using a Dynamic DNS (DDNS). With DDNS, you register a domain name and link it to your dynamic IP address. Even though your IP itself keeps changing, the DDNS service updates the domain name to always point to your current IP. With this, you get a way to consistently access your home network or server from anywhere, regardless of your actual IP address.

What Is an IP Address Block, and Who Owns It?

We’re going to use a metaphor to explain this one – think of a massive apartment building with hundreds of units. Each unit has its own unique address to receive mail and visitors. An IP address block is essentially the same thing on the internet. 

It’s a large pool of IP addresses that are grouped together and managed by a single entity. These blocks also aren’t randomly distributed; they come in different sizes for different requirements and are adjusted as needed.

Ownership of an IP address block follows a hierarchical structure. At the top, the Internet Assigned Numbers Authority (IANA) will be the central custodian, overseeing the global allocation of IP addresses. 

IANA works with five Regional Internet Registries (RIRs) spread across the globe – ARIN for North America, RIPE for Europe and the Middle East, APNIC for Asia Pacific, LACNIC for Latin America and the Caribbean, and AFRINIC for Africa. These RIRs are made responsible for IP address block distribution to orgs within their regions.

A key thing to note here is that ownership of an IP address block doesn’t necessarily translate to owning individual IP addresses within the block. Going back to the example of an apartment building, think of its owner; they manage the entire building but don’t occupy every unit. The same goes for organizations that own IP address blocks, like ISPs, who are going to further distribute these addresses to their customers or internal devices, rather than using them themselves.

Use a Reverse People Lookup Tool to Find Information About Someone

Figuring out who owns an IP address can be tricky, especially if you’re not very tech-savvy. If you simply want to find information about a person, then we recommend using PublicRecord’s reverse people lookup tool

It searches through multiple public databases to find the information you want. Type in the person’s name into the tool and hit the search button. It’ll then collect all the relevant information about the person and then present it to you in the form of a report. 

You’ll be able to find things like the person’s home address, phone number, email address, and social media handles. 

Finding the Person Behind the Numbers

As we’ve seen in this article, finding the owner of an IP address isn’t as simple as performing a WHOIS lookup, though it is the easiest way to get started. Remember, to perform a WHOIS lookup, you’ll need a tool, input the IP address, and interpret what exactly the results are saying. The name that it shows you may not be a person at all. 

Lastly, we’d like to emphasize the importance of preserving people’s privacy while using a WHOIS lookup – the tool should only be used for cases of suspicious activity and never for any malicious reasons.

Tyron Pitch

Tyron Pitch

author