{"uid":"cap_2XcrUfq2D1wF2Ckqs0ePY","slug":"ip-whois-via-rdap-9060860d","name":"IP WHOIS via RDAP","description":"IP WHOIS via RDAP: the registered netblock for an address with its name, handle, allocation type, country, start and end addresses and the owning organization, from the authoritative regional registry. Ownership research and abuse contacts. $0.01 per IP.","url":"https://intel.rallylive.ca/ip/rdap","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_zxeAKD_Qlapl7p7a1_26A","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Looks up the registered netblock for an IP address via RDAP, returning ownership details, allocation type, country, address range, and organization from the authoritative regional registry.","exampleAgentPrompt":"Who owns the IP address 203.0.113.42? I need the registered netblock name, owning organization, country, allocation type, and abuse contact from the authoritative registry.","exampleUseCases":[{"title":"Abuse report contact lookup","prompt":"I need to report abusive traffic coming from 198.51.100.77 — can you find the abuse contact and owning organization for that IP so I know who to email?"},{"title":"Network ownership investigation","prompt":"Can you tell me which company or ISP owns the IP block that 45.33.32.156 falls in, including the netblock range and what regional registry it's registered under?"},{"title":"IP attribution for security incident","prompt":"We had a suspicious login attempt from 91.108.4.1 — look up who that IP is registered to, what country the allocation is in, and what type of allocation it is so I can assess the risk."}],"resultDescription":"Returns the registered netblock details for the queried IP address: netblock name, handle, allocation type (e.g. DIRECT ALLOCATION, ASSIGNED), country of registration, start and end addresses of the block, and the owning organization — all sourced from the authoritative regional internet registry via RDAP.","failureModes":["IP address not found or not yet allocated — registry returns no matching record","Malformed or invalid IP address input — request fails with a validation error","RDAP registry temporarily unavailable — upstream timeout or error returned","Private or reserved IP ranges (RFC 1918, loopback) may return no useful registry data","Rate limiting if many requests are made in rapid succession"],"whenToPreferThis":"Choose this endpoint when you need authoritative, registry-sourced IP ownership data including the exact netblock, organization, allocation type, and abuse contacts. Prefer it over reverse DNS or geo-IP lookups when the goal is ownership research, abuse reporting, or compliance verification rather than geographic location or hostname resolution. It is particularly useful for cybersecurity incident response, network attribution, and identifying the responsible organization for abuse complaints.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T13:12:44.484Z","isFirstParty":false}