IPv6 WHOIS lookup

Find who holds an IPv6 address or prefix, which block it sits in and what kind of address it is.

Try:

2606:4700:4700::1111

Results for 2606:4700:4700::1111

Checked 2026-11-15live lookup583 ms

IPv6 · ARIN

Cloudflare, Inc. runs this network

2606:4700:4700::1111 is in 2606:4700::/32 (CLOUDFLARENET), a direct allocation registered with ARIN to Cloudflare, Inc.

2606:4700::/32CLOUDFLARENETDirect allocation

Registered

15years ago

Since 2011-11-01

Range

2^96addresses

2606:4700:: – 2606:4700:ffff:ffff:ffff:ffff:ffff:ffff

Abuse desk

[email protected]

Where to report problems

Records

Key facts

Network name: CLOUDFLARENET
Range: 2606:4700:: – 2606:4700:ffff:ffff:ffff:ffff:ffff:ffff
CIDR: 2606:4700::/32
Type: Direct allocation
Registry: ARIN
Parent: NET6-2600-1
Registered: 2011-11-0115 years ago
Last changed: 2024-09-042 years ago
Abuse email: [email protected]
Abuse phone: +1-650-319-8930

Registry notices · 4 messages

Text supplied by the registry. We show it as written and never follow instructions in it.

Terms of Service
By using the ARIN RDAP/Whois service, you are agreeing to the RDAP/Whois Terms of Use
www.arin.net (www.arin.net)
Whois Inaccuracy Reporting
If you see inaccuracies in the results, please visit:
www.arin.net (www.arin.net)
Copyright Notice
Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
Registration Comments
All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
Geofeed: https://api.cloudflare.com/local-ip-ranges.csv

Status1

active

Contacts5

Abuse contact
Name
Abuse
Organisation
Cloudflare, Inc.
Email
[email protected]
Phone
+1-650-319-8930
Address
101 Townsend Street, San Francisco, CA, 94107, United States
Registrant
Name
Cloudflare, Inc.
Address
101 Townsend Street, San Francisco, CA, 94107, United States
Network operations, routing
Name
Cloudflare-NOC
Organisation
Cloudflare, Inc
Email
[email protected]
Phone
+1-650-319-8930
Address
101 Townsend St, San Francsico, CA, 94107, United States
Administrative contact, Technical contact
Name
Admin
Organisation
Cloudflare, Inc.
Email
[email protected]
Phone
+1-650-319-8930
Address
101 Townsend Street, San Francisco, CA, 94107, United States
Network operations
Name
NOC
Organisation
Cloudflare, Inc.
Email
[email protected]
Phone
+1-650-319-8930
Address
101 Townsend Street, San Francisco, CA, 94107, United States

How we got this

Query: ip 2606:4700:4700::1111 · 0 ms
IANA bootstrap (ipv6.json) · 0 msMATCH2600::/12 → https://rdap.arin.net/registry/
ARIN (RDAP) · 580 ms200

Asked: https://rdap.arin.net/registry/ip/2606:4700:4700::1111
Server list entry: ipv6: 2600::/12
Total time: 582 ms
Cache: miss

Raw

{
  "query": {
    "kind": "ip",
    "key": "2606:4700:4700::1111",
    "display": "2606:4700:4700::1111",
    "input": "2606:4700:4700::1111",
    "ip": {
      "version": 6,
      "address": "2606:4700:4700::1111",
      "prefixLength": 128,
      "isCidr": false,
      "canonical": "2606:4700:4700::1111"
    },
    "notices": []
  },
  "status": "found",
  "source": "rdap",
  "ip": {
    "objectClassName": "ip network",
    "cidrs": [
      "2606:4700::/32"
    ],
    "status": [
      "active"
    ],
    "events": {
      "all": [
        {
          "action": "last changed",
          "raw": "2024-09-04T07:55:39-04:00",
          "date": "2024-09-04T11:55:39.000Z"
        },
        {
          "action": "registration",
          "raw": "2011-11-01T15:59:58-04:00",
          "date": "2011-11-01T19:59:58.000Z"
        }
      ],
      "registration": {
        "action": "registration",
        "raw": "2011-11-01T15:59:58-04:00",
        "date": "2011-11-01T19:59:58.000Z"
      },
      "lastChanged": {
        "action": "last changed",
        "raw": "2024-09-04T07:55:39-04:00",
        "date": "2024-09-04T11:55:39.000Z"
      }
    },
    "contacts": [
      {
        "roles": [
          "abuse"
        ],
        "emails": [
          "[email protected]"
        ],
        "phones": [
          {
            "number": "+1-650-319-8930",
            "kind": "voice"
          }
        ],
        "contactUris": [],
        "urls": [],
        "publicIds": [],
        "isRedacted": false,
        "redactedFields": [],
        "links": [
          {
            "href": "https://rdap.arin.net/registry/entity/ABUSE2916-ARIN",
            "host": "rdap.arin.net",
            "rel": "self",
            "type": "application/rdap+json"
          },
          {
            "href": "https://whois.arin.net/rest/poc/ABUSE2916-ARIN",
            "host": "whois.arin.net",
            "rel": "alternate",
            "type": "application/xml"
          }
        ],
        "events": [
          {
            "action": "last changed",
            "raw": "2024-09-04T13:14:53-04:00",
            "date": "2024-09-04T17:14:53.000Z"
          },
          {
            "action": "registration",
            "raw": "2011-02-14T19:00:47-05:00",
            "date": "2011-02-15T00:00:47.000Z"
          }
        ],
        "status": [],
        "remarks": [
          {
            "description": [
              "All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse"
            ],
            "links": [],
            "title": "Registration Comments"
          },
          {
            "description": [
              "ARIN has attempted to validate the data for this POC, but has received no response from the POC since 2025-09-04"
            ],
            "links": [],
            "title": "Unvalidated POC"
          }
        ],
        "handle": "ABUSE2916-ARIN",
        "name": "Abuse",
        "org": "Cloudflare, Inc.",
        "kind": "group",
        "address": {
          "lines": [
            "101 Townsend Street",
            "San Francisco",
            "CA",
            "94107",
            "United States"
          ],
          "label": "101 Townsend Street\nSan Francisco\nCA\n94107\nUnited States"
        },
        "entities": []
      },
      {
        "roles": [
          "registrant"
        ],
        "emails": [],
        "phones": [],
        "contactUris": [],
        "urls": [],
        "publicIds": [],
        "isRedacted": false,
        "redactedFields": [],
        "links": [
          {
            "href": "https://rdap.arin.net/registry/entity/CLOUD14",
            "host": "rdap.arin.net",
            "rel": "self",
            "type": "application/rdap+json"
          },
          {
            "href": "https://whois.arin.net/rest/org/CLOUD14",
            "host": "whois.arin.net",
            "rel": "alternate",
            "type": "application/xml"
          }
        ],
        "events": [
          {
            "action": "last changed",
            "raw": "2024-11-25T11:09:46-05:00",
            "date": "2024-11-25T16:09:46.000Z"
          },
          {
            "action": "registration",
            "raw": "2010-07-09T14:10:42-04:00",
            "date": "2010-07-09T18:10:42.000Z"
          }
        ],
        "status": [],
        "remarks": [],
        "handle": "CLOUD14",
        "name": "Cloudflare, Inc.",
        "kind": "org",
        "address": {
          "lines": [
            "101 Townsend Street",
            "San Francisco",
            "CA",
            "94107",
            "United States"
          ],
          "label": "101 Townsend Street\nSan Francisco\nCA\n94107\nUnited States"
        },
        "entities": []
      },
      {
        "roles": [
          "noc",
          "routing"
        ],
        "emails": [
          "[email protected]"
        ],
        "phones": [
          {
            "number": "+1-650-319-8930",
            "kind": "voice"
          }
        ],
        "contactUris": [],
        "urls": [],
        "publicIds": [],
        "isRedacted": false,
        "redactedFields": [],
        "links": [
          {
            "href": "https://rdap.arin.net/registry/entity/CLOUD146-ARIN",
            "host": "rdap.arin.net",
            "rel": "self",
            "type": "application/rdap+json"
          },
          {
            "href": "https://whois.arin.net/rest/poc/CLOUD146-ARIN",
            "host": "whois.arin.net",
            "rel": "alternate",
            "type": "application/xml"
          }
        ],
        "events": [
          {
            "action": "last changed",
            "raw": "2026-08-23T22:28:37-04:00",
            "date": "2026-08-24T02:28:37.000Z"
          },
          {
            "action": "registration",
            "raw": "2021-07-01T14:10:58-04:00",
            "date": "2021-07-01T18:10:58.000Z"
          }
        ],
        "status": [
          "validated"
        ],
        "remarks": [],
        "handle": "CLOUD146-ARIN",
        "name": "Cloudflare-NOC",
        "org": "Cloudflare, Inc",
        "kind": "group",
        "address": {
          "lines": [
            "101 Townsend St",
            "San Francsico",
            "CA",
            "94107",
            "United States"
          ],
          "label": "101 Townsend St\nSan Francsico\nCA\n94107\nUnited States"
        },
        "entities": []
      },
      {
        "roles": [
          "administrative",
          "technical"
        ],
        "emails": [
          "[email protected]"
        ],
        "phones": [
          {
            "number": "+1-650-319-8930",
            "kind": "voice"
          }
        ],
        "contactUris": [],
        "urls": [],
        "publicIds": [],
        "isRedacted": false,
        "redactedFields": [],
        "links": [
          {
            "href": "https://rdap.arin.net/registry/entity/ADMIN2521-ARIN",
            "host": "rdap.arin.net",
            "rel": "self",
            "type": "application/rdap+json"
          },
          {
            "href": "https://whois.arin.net/rest/poc/ADMIN2521-ARIN",
            "host": "whois.arin.net",
            "rel": "alternate",
            "type": "application/xml"
          }
        ],
        "events": [
          {
            "action": "last changed",
            "raw": "2026-06-12T04:48:05-04:00",
            "date": "2026-06-12T08:48:05.000Z"
          },
          {
            "action": "registration",
            "raw": "2011-04-19T16:11:36-04:00",
            "date": "2011-04-19T20:11:36.000Z"
          }
        ],
        "status": [
          "validated"
        ],
        "remarks": [
          {
            "description": [
              "All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse"
            ],
            "links": [],
            "title": "Registration Comments"
          }
        ],
        "handle": "ADMIN2521-ARIN",
        "name": "Admin",
        "org": "Cloudflare, Inc.",
        "kind": "group",
        "address": {
          "lines": [
            "101 Townsend Street",
            "San Francisco",
            "CA",
            "94107",
            "United States"
          ],
          "label": "101 Townsend Street\nSan Francisco\nCA\n94107\nUnited States"
        },
        "entities": []
      },
      {
        "roles": [
          "noc"
        ],
        "emails": [
          "[email protected]"
        ],
        "phones": [
          {
            "number": "+1-650-319-8930",
            "kind": "voice"
          }
        ],
        "contactUris": [],
        "urls": [],
        "publicIds": [],
        "isRedacted": false,
        "redactedFields": [],
        "links": [
          {
            "href": "https://rdap.arin.net/registry/entity/NOC11962-ARIN",
            "host": "rdap.arin.net",
            "rel": "self",
            "type": "application/rdap+json"
          },
          {
            "href": "https://whois.arin.net/rest/poc/NOC11962-ARIN",
            "host": "whois.arin.net",
            "rel": "alternate",
            "type": "application/xml"
          }
        ],
        "events": [
          {
            "action": "last changed",
            "raw": "2026-04-30T05:15:18-04:00",
            "date": "2026-04-30T09:15:18.000Z"
          },
          {
            "action": "registration",
            "raw": "2011-04-19T16:25:31-04:00",
            "date": "2011-04-19T20:25:31.000Z"
          }
        ],
        "status": [
          "validated"
        ],
        "remarks": [
          {
            "description": [
              "All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse"
            ],
            "links": [],
            "title": "Registration Comments"
          }
        ],
        "handle": "NOC11962-ARIN",
        "name": "NOC",
        "org": "Cloudflare, Inc.",
        "kind": "group",
        "address": {
          "lines": [
            "101 Townsend Street",
            "San Francisco",
            "CA",
            "94107",
            "United States"
          ],
          "label": "101 Townsend Street\nSan Francisco\nCA\n94107\nUnited States"
        },
        "entities": []
      }
    ],
    "originAutnums": [],
    "notices": [
      {
        "description": [
          "By using the ARIN RDAP/Whois service, you are agreeing to the RDAP/Whois Terms of Use"
        ],
        "links": [
          {
            "href": "https://www.arin.net/resources/registry/whois/tou/",
            "host": "www.arin.net",
            "rel": "terms-of-service",
            "type": "text/html"
          }
        ],
        "title": "Terms of Service"
      },
      {
        "description": [
          "If you see inaccuracies in the results, please visit:"
        ],
        "links": [
          {
            "href": "https://www.arin.net/resources/registry/whois/inaccuracy_reporting/",
            "host": "www.arin.net",
            "rel": "inaccuracy-report",
            "type": "text/html"
          }
        ],
        "title": "Whois Inaccuracy Reporting"
      },
      {
        "description": [
          "Copyright 1997-2026, American Registry for Internet Numbers, Ltd."
        ],
        "links": [],
        "title": "Copyright Notice"
      }
    ],
    "remarks": [
      {
        "description": [
          "All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse",
          "Geofeed: https://api.cloudflare.com/local-ip-ranges.csv"
        ],
        "links": [],
        "title": "Registration Comments"
      }
    ],
    "links": [
      {
        "href": "https://rdap.arin.net/registry/ip/2606:4700::",
        "host": "rdap.arin.net",
        "rel": "self",
        "type": "application/rdap+json"
      },
      {
        "href": "https://whois.arin.net/rest/net/NET6-2606-4700-1",
        "host": "whois.arin.net",
        "rel": "alternate",
        "type": "application/xml"
      }
    ],
    "conformance": [
      "nro_rdap_profile_0",
      "rdap_level_0",
      "cidr0",
      "arin_originas0"
    ],
    "handle": "NET6-2606-4700-1",
    "startAddress": "2606:4700::",
    "endAddress": "2606:4700:ffff:ffff:ffff:ffff:ffff:ffff",
    "ipVersion": "v6",
    "name": "CLOUDFLARENET",
    "type": "Direct allocation",
    "parentHandle": "NET6-2600-1",
    "abuse": {
      "email": "[email protected]",
      "phone": "+1-650-319-8930",
      "name": "Abuse"
    },
    "rir": "ARIN",
    "port43": "whois.arin.net"
  },
  "provenance": {
    "bootstrap": {
      "kind": "ipv6",
      "entry": "2600::/12",
      "source": "iana",
      "publication": "2024-11-01T22:00:01Z"
    },
    "queryUrl": "https://rdap.arin.net/registry/ip/2606:4700:4700::1111",
    "serverUrl": "https://rdap.arin.net/registry/",
    "finalUrl": "https://rdap.arin.net/registry/ip/2606:4700:4700::1111",
    "trace": [
      {
        "step": "input",
        "label": "Query: ip 2606:4700:4700::1111",
        "ms": 0
      },
      {
        "step": "bootstrap",
        "label": "IANA bootstrap (ipv6.json)",
        "host": "rdap.arin.net",
        "status": "MATCH",
        "ms": 0,
        "note": "2600::/12 → https://rdap.arin.net/registry/"
      },
      {
        "step": "rir",
        "label": "ARIN (RDAP)",
        "url": "https://rdap.arin.net/registry/ip/2606:4700:4700::1111",
        "host": "rdap.arin.net",
        "status": 200,
        "ms": 580
      }
    ],
    "totalMs": 582,
    "fetchedAt": "2026-11-15T18:24:25.042Z",
    "cache": "miss"
  }
}

Next step

IP lookupWhere is it, and which network runs it?
Check 2606:4700:4700::1111 in IP lookup
Ping from many placesDoes the address answer?
Check 2606:4700:4700::1111 in Ping from many places
ASN lookupWhich network announces the block?
Open in ASN lookup

What an IPv6 WHOIS lookup shows

An IPv6 WHOIS lookup shows which organisation holds an IPv6 address and which block it sits in. The five regional internet registries (RIRs) hand out IPv6 space just as they do IPv4, and every handout is recorded in a public database. The difference is size. IPv6 blocks are written as prefixes, such as 2606:4700::/32, where the number after the slash says how many leading bits are fixed.

A lookup finds the registry record that covers your address and reports its holder, prefix, status, country, dates and contacts. Because IPv6 prefixes are huge, the answer is usually an internet service provider (ISP) or hosting company holding a whole /32 or larger, with a smaller assignment shown when one exists. If you paste a special address, such as a link-local one (it only works on your own network segment), the page names the range and explains it instead of looking for an owner.

How to use it

Paste the address or prefixAny notation works: 2606:4700:4700::1111, the long form with all eight groups, a prefix such as 2606:4700::/32, or an address inside brackets or a URL.
Read the prefix and its lengthThe number after the slash is the size. A /32 is typically an ISP allocation, a /48 a site and a /64 a single subnet.
Send reports to the abuse contactThe abuse contact on the record belongs to the prefix holder. For spam or attacks, send your evidence there, with timestamps in UTC.

What kind of IPv6 address is it?

Only ordinary public addresses have a registered holder. Find the row that matches the start of your address. When two rows match, the more specific one wins, so 2001:db8::1 counts as a documentation address even though it also sits inside 2000::/3.

Prefix	Type	Notes
`2000::/3`	Global unicast	Ordinary public addresses. These have a registered holder.
`fc00::/7`	Unique local (ULA)	Private networks, like IPv4's `10.0.0.0/8`. No public owner.
`fe80::/10`	Link-local	Works only on the local link. Never routed or registered.
`2001:db8::/32`	Documentation	Reserved for examples (RFC 3849). `3fff::/20` was added in RFC 9637.
`2002::/16`	6to4	Carries an IPv4 address inside. Deprecated (RFC 7526).
`2001::/32`	Teredo	Tunnels IPv6 through an IPv4 router that shares one address among many devices (NAT), with a server and a client IPv4 address inside.
`64:ff9b::/96`	NAT64	Lets IPv6-only hosts reach IPv4 servers (RFC 6052).
`::ffff:0:0/96`	IPv4-mapped	How software that speaks both IPv4 and IPv6 shows an IPv4 client, for example `::ffff:203.0.113.5`.

An IPv4-mapped address is a special case. LookupOwl unwraps it and looks up the IPv4 address inside instead. For the other embedded forms, the IPv6 to IPv4 converter pulls the IPv4 address out.

Things that trip people up

The ending of your address can follow your device. Some addresses are built from the network card's MAC address (this is called EUI-64, and you can spot it by ff:fe in the middle), so the same ending can follow a device between networks. Modern systems use random temporary addresses (RFC 8981) for outgoing connections.
The holder shows a /32, but your ISP gave you a /56. The registry lists only the ISP's allocation. What the ISP hands to each customer is internal.
More than one prefix seems to match. The most specific registration is shown, and larger parent blocks appear for context.
A link-local or ULA address shows no owner. These are not public and have no registry record, so the page explains the range instead.
The same address looks different. 2001:db8::1 and 2001:0db8:0000:0000:0000:0000:0000:0001 are one address. The IPv6 compress tool shows the recommended short form.

How the lookup works

LookupOwl first rewrites your address in its standard form. It then checks the IANA IPv6 bootstrap file, the public list of which registry holds which block, to find the right regional registry. We ask that registry's RDAP server (the modern, structured replacement for WHOIS) for the covering ip network object, and we follow redirects between registries. If a registry does not answer, you get an error with a retry hint rather than guessed data. The name of a special range comes from the IANA special-purpose address registry and is worked out on our side, with no network request.

Shell

# The same query from a terminal
curl -sL https://rdap.org/ip/2606:4700:4700::1111 | jq '{name, startAddress, endAddress, country}'

# Classic WHOIS
whois 2606:4700:4700::1111

Standards

RFC 4291: the IPv6 addressing architecture. RFC 5952: the recommended way to write an address as text.
RFC 6177: guidance on handing out /48 to /64 assignments to end sites.
RFC 9083, RFC 9082, RFC 9224: the RDAP object, query and bootstrap that serve the lookup.
RFC 4193, RFC 3849, RFC 9637, RFC 4380, RFC 6052: the unique local, documentation, Teredo and NAT64 ranges. RFC 7526: why 6to4 is deprecated.
RFC 8981: the temporary addresses that devices use for outgoing connections.

Questions people ask

Who owns an IPv6 address?

The organisation that holds the covering prefix in a registry owns it, usually an ISP, hosting provider or large company. Paste the address above to see the holder, the prefix, the country and the abuse contact. The registry cannot tell you which customer is using the address. Only the provider knows that.

Does my IPv6 address reveal my identity?

It does not reveal your name, but it does show which network you are on. The first part of the address points to your ISP and, with some ISPs, to your own connection. Many devices also rotate through temporary addresses (RFC 8981), which change regularly to make long-term tracking harder.

What is the difference between a /32, /48 and /64?

They are prefix lengths, and a longer number means a smaller block. A /64 is one subnet, a /48 holds 65,536 /64 subnets and a /32 holds 65,536 /48 sites. ISPs usually receive a /32 or larger, sites a /48 and a single local network a /64. Home connections often get something between a /48 and a /64.

How can I tell if an IPv6 address is public or private?

Look at the start. Public addresses begin with 2 or 3 (the 2000::/3 block), apart from a few reserved ranges inside it, such as 2001:db8::/32 for examples. Addresses beginning fc or fd are unique local, the IPv6 version of private addresses, and fe80 is link-local. Only public ones have a registered owner, so the others get an explanation of the range instead.

Can I find the IPv4 address behind an IPv6 one?

Only when the IPv6 address has one built in. IPv4-mapped, NAT64, 6to4 and Teredo addresses carry an IPv4 address inside, and the converter can pull it out. A native IPv6 address has no IPv4 address hidden in it, and a device that has both usually has two unrelated addresses.

Why doesn't the country match where the device is?

Because the country is the one the holder gave the registry, not where the device is. Companies often register blocks at their head office and then use them in data centres, VPNs and tunnels around the world. IP geolocation databases estimate position from other signals, and they can disagree with the registry.

How do I check an IPv4 address?

Paste it above, because the same lookup handles IPv4 and IPv6. The IP WHOIS lookup page is written for IPv4 and goes into more detail. Either way you get the holder, range, country and abuse contact. Private ranges such as 192.168.0.0/16 have no public owner, so you get an explanation instead. An IPv4 address has four numbers separated by dots, and an IPv6 address has colons.

Use it from AI, the API or the command line

Every LookupOwl tool is also a free API and an MCP tool, with no key and no account. This one is ip_whois. Please be kind to the rate limits.

curl

curl "https://lookupowl.com/api/v1/tools/ip-whois?q=8.8.8.8"

MCP

claude mcp add --transport http lookupowl https://lookupowl.com/mcp

Description for AI agents · OpenAPI · llms.txt

Domain

DNS

Email

Network

IP and subnets

Web

Security

Make and convert

IPv6 WHOIS lookup

Results for 2606:4700:4700::1111

Cloudflare, Inc. runs this network

Key facts

Abuse contact

Registrant

Network operations, routing

Administrative contact, Technical contact

Network operations

Next step

What an IPv6 WHOIS lookup shows

How to use it

What kind of IPv6 address is it?

Things that trip people up

How the lookup works

Standards

Questions people ask

Use it from AI, the API or the command line

Cloudflare, Inc. runs this network

Key facts

Abuse contact

Registrant

Network operations, routing

Administrative contact, Technical contact

Network operations

Next step

What an IPv6 WHOIS lookup shows

How to use it

What kind of IPv6 address is it?

Things that trip people up

How the lookup works

Standards

Questions people ask

Use it from AI, the API or the command line

You might also need