Whois & RDAP Lookup
V.PS Cloud KVM VPS for developers KVM VPS · 11 PoPs · 99.9% SLA Simple VPS, premium network · Pick a PoP, deploy in seconds 11 PoPs · APAC, Europe, North America Tier 1 upstreams Premium network · Low-latency routes Free 24×7 support €6.95/mo Deploy a serverDeploy64.62.156.108
IP Geolocation RDAPIP Range64.62.156.0 - 64.62.156.255
HandleNET-64-62-156-0-1
NameHURRICANE-CE2897-4295868A
TypeALLOCATION
HolderThe Shadowserver Foundation, Inc.
Registered2025-04-21 20:50 UTC
Updated2025-04-21 20:50 UTC
RegistrantThe Shadowserver Foundation, Inc.
Address4695 Chabot Dr. Suite 200, Pleasanton, CA, 94588, United States
Admin ContactNOC
OrganizationThe Shadowserver Foundation
Email[email protected]
Phone+1-408-740-7420
Address4695 Chabot Dr. Suite 200, Pleasanton, CA, 94588, United States
Tech ContactNOC
OrganizationThe Shadowserver Foundation
Email[email protected]
Phone+1-408-740-7420
Address4695 Chabot Dr. Suite 200, Pleasanton, CA, 94588, United States
Abuse Contact[email protected]
Abuse Phone+1-408-740-7420
Statusactive
Registry RDAPhttps://rdap.arin.net
Raw WHOIS response
# # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/resources/registry/whois/tou/ # # If you see inaccuracies in the results, please report at # https://www.arin.net/resources/registry/whois/inaccuracy_reporting/ # # Copyright 1997-2026, American Registry for Internet Numbers, Ltd. # # start NetRange: 64.62.128.0 - 64.62.255.255 CIDR: 64.62.128.0/17 NetName: HURRICANE-4 NetHandle: NET-64-62-128-0-1 Parent: NET64 (NET-64-0-0-0-0) NetType: Direct Allocation OriginAS: Organization: Hurricane Electric LLC (HURC) RegDate: 2002-08-27 Updated: 2012-02-24 Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE Ref: https://rdap.arin.net/registry/ip/64.62.128.0 OrgName: Hurricane Electric LLC OrgId: HURC Address: 760 Mission Court City: Fremont StateProv: CA PostalCode: 94539 Country: US RegDate: Updated: 2024-11-25 Ref: https://rdap.arin.net/registry/entity/HURC ReferralServer: rwhois://rwhois.he.net:4321 OrgAbuseHandle: ABUSE1036-ARIN OrgAbuseName: Abuse Department OrgAbusePhone: +1-510-580-4100 OrgAbuseEmail: [email protected] OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1036-ARIN OrgTechHandle: ZH17-ARIN OrgTechName: Hurricane Electric OrgTechPhone: +1-510-580-4100 OrgTechEmail: [email protected] OrgTechRef: https://rdap.arin.net/registry/entity/ZH17-ARIN RNOCHandle: ZH17-ARIN RNOCName: Hurricane Electric RNOCPhone: +1-510-580-4100 RNOCEmail: [email protected] RNOCRef: https://rdap.arin.net/registry/entity/ZH17-ARIN RTechHandle: ZH17-ARIN RTechName: Hurricane Electric RTechPhone: +1-510-580-4100 RTechEmail: [email protected] RTechRef: https://rdap.arin.net/registry/entity/ZH17-ARIN RAbuseHandle: ABUSE1036-ARIN RAbuseName: Abuse Department RAbusePhone: +1-510-580-4100 RAbuseEmail: [email protected] RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1036-ARIN # end # start NetRange: 64.62.156.0 - 64.62.156.255 CIDR: 64.62.156.0/24 NetName: HURRICANE-CE2897-4295868A NetHandle: NET-64-62-156-0-1 Parent: HURRICANE-4 (NET-64-62-128-0-1) NetType: Reallocated OriginAS: Organization: The Shadowserver Foundation, Inc. (SF-1051) RegDate: 2025-04-21 Updated: 2025-04-21 Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE Ref: https://rdap.arin.net/registry/ip/64.62.156.0 OrgName: The Shadowserver Foundation, Inc. OrgId: SF-1051 Address: 4695 Chabot Dr. Suite 200 City: Pleasanton StateProv: CA PostalCode: 94588 Country: US RegDate: 2023-03-07 Updated: 2025-04-23 Ref: https://rdap.arin.net/registry/entity/SF-1051 OrgAbuseHandle: ABUSE9292-ARIN OrgAbuseName: Abuse OrgAbusePhone: +1-408-740-7420 OrgAbuseEmail: [email protected] OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE9292-ARIN OrgTechHandle: NOC33598-ARIN OrgTechName: NOC OrgTechPhone: +1-408-740-7420 OrgTechEmail: [email protected] OrgTechRef: https://rdap.arin.net/registry/entity/NOC33598-ARIN OrgNOCHandle: NOC33598-ARIN OrgNOCName: NOC OrgNOCPhone: +1-408-740-7420 OrgNOCEmail: [email protected] OrgNOCRef: https://rdap.arin.net/registry/entity/NOC33598-ARIN # end # # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/resources/registry/whois/tou/ # # If you see inaccuracies in the results, please report at # https://www.arin.net/resources/registry/whois/inaccuracy_reporting/ # # Copyright 1997-2026, American Registry for Internet Numbers, Ltd. # %rwhois V-1.5:0012b7:00 concierge.he.net (HE-RWHOISd v:dd31ac8) network:ID;I:NET-64.62.156.0/24 network:Auth-Area:nets network:Class-Name:network network:Network-Name;I:NET-64.62.156.0/24 network:Parent;I:NET-64.62.128.0/17 network:IP-Network:64.62.156.0/24 network:Org-Contact;I:POC-CE-2897 network:Tech-Contact;I:POC-HE-NOC network:Abuse-Contact;I:POC-HE-ABUSE network:NOC-Contact;I:POC-HE-NOC network:Created:20240327163014000 network:Updated:20240327163014000 contact:ID;I:POC-CE-2897 contact:Auth-Area:contacts contact:Class-Name:contact contact:Name:Richard Perlotto contact:Company:The Shadow Server Foundation contact:Street-Address:4695 Chabot Dr. Suite 200 contact:City:Pleasanton contact:Province:CA contact:Postal-Code:94588 contact:Country-Code:US contact:Phone:- contact:E-Mail:- contact:Created:20180817203001000 contact:Updated:20220114163002000 contact:ID;I:POC-HE-NOC contact:Auth-Area:contacts contact:Class-Name:contact contact:Name:Network Operations Center contact:Company:Hurricane Electric contact:Street-Address:760 Mission Ct contact:City:Fremont contact:Province:CA contact:Postal-Code:94539 contact:Country-Code:US contact:Phone:+1-510-580-4100 contact:E-Mail:[email protected] contact:Created:20100901200738000 contact:Updated:20100901200738000 contact:ID;I:POC-HE-ABUSE contact:Auth-Area:contacts contact:Class-Name:contact contact:Name:Abuse Department contact:Company:Hurricane Electric contact:Street-Address:760 Mission Ct contact:City:Fremont contact:Province:CA contact:Postal-Code:94539 contact:Country-Code:US contact:Phone:+1-510-580-4100 contact:E-Mail:[email protected] contact:Created:20100901200738000 contact:Updated:20100901200738000 contact:Comment:For email abuse (spam) only %ok % Query time: 1196 msec % WHEN: Sun Sep 20 12:36:57 UTC 2026
Raw RDAP JSON (registry) https://rdap.arin.net
{
"arin_originas0_originautnums": [],
"cidr0_cidrs": [
{
"length": 24,
"v4prefix": "64.62.156.0"
}
],
"endAddress": "64.62.156.255",
"entities": [
{
"entities": [
{
"events": [
{
"eventAction": "last changed",
"eventDate": "2026-04-21T12:10:10-04:00"
},
{
"eventAction": "registration",
"eventDate": "2025-04-21T16:16:51-04:00"
}
],
"handle": "ABUSE9292-ARIN",
"links": [
{
"href": "https://rdap.arin.net/registry/entity/ABUSE9292-ARIN",
"rel": "self",
"type": "application/rdap+json",
"value": "https://rdap.arin.net/registry/ip/64.62.156.108"
},
{
"href": "https://whois.arin.net/rest/poc/ABUSE9292-ARIN",
"rel": "alternate",
"type": "application/xml",
"value": "https://rdap.arin.net/registry/ip/64.62.156.108"
}
],
"objectClassName": "entity",
"port43": "whois.arin.net",
"roles": [
"abuse"
],
"status": [
"validated"
],
"vcardArray": [
"vcard",
[
[
"version",
{},
"text",
"4.0"
],
[
"adr",
{
"label": "4695 Chabot Dr. Suite 200\nPleasanton\nCA\n94588\nUnited States"
},
"text",
[
"",
"",
"",
"",
"",
"",
""
]
],
[
"fn",
{},
"text",
"Abuse"
],
[
"org",
{},
"text",
"The Shadowserver Foundation"
],
[
"kind",
{},
"text",
"group"
],
[
"email",
{},
"text",
"[email protected]"
],
[
"tel",
{
"type": [
"work",
"voice"
]
},
"text",
"+1-408-740-7420"
]
]
]
},
{
"events": [
{
"eventAction": "last changed",
"eventDate": "2026-04-23T10:24:48-04:00"
},
{
"eventAction": "registration",
"eventDate": "2023-03-07T14:49:07-05:00"
}
],
"handle": "NOC33598-ARIN",
"links": [
{
"href": "https://rdap.arin.net/registry/entity/NOC33598-ARIN",
"rel": "self",
"type": "application/rdap+json",
"value": "https://rdap.arin.net/registry/ip/64.62.156.108"
},
{
"href": "https://whois.arin.net/rest/poc/NOC33598-ARIN",
"rel": "alternate",
"type": "application/xml",
"value": "https://rdap.arin.net/registry/ip/64.62.156.108"
}
],
"objectClassName": "entity",
"port43": "whois.arin.net",
"roles": [
"technical",
"noc",
"administrative"
],
"status": [
"validated"
],
"vcardArray": [
"vcard",
[
[
"version",
{},
"text",
"4.0"
],
[
"adr",
{
"label": "4695 Chabot Dr. Suite 200\nPleasanton\nCA\n94588\nUnited States"
},
"text",
[
"",
"",
"",
"",
"",
"",
""
]
],
[
"fn",
{},
"text",
"NOC"
],
[
"org",
{},
"text",
"The Shadowserver Foundation"
],
[
"kind",
{},
"text",
"group"
],
[
"email",
{},
"text",
"[email protected]"
],
[
"tel",
{
"type": [
"work",
"voice"
]
},
"text",
"+1-408-740-7420"
]
]
]
}
],
"events": [
{
"eventAction": "last changed",
"eventDate": "2025-04-23T11:35:53-04:00"
},
{
"eventAction": "registration",
"eventDate": "2023-03-07T14:59:51-05:00"
}
],
"handle": "SF-1051",
"links": [
{
"href": "https://rdap.arin.net/registry/entity/SF-1051",
"rel": "self",
"type": "application/rdap+json",
"value": "https://rdap.arin.net/registry/ip/64.62.156.108"
},
{
"href": "https://whois.arin.net/rest/org/SF-1051",
"rel": "alternate",
"type": "application/xml",
"value": "https://rdap.arin.net/registry/ip/64.62.156.108"
}
],
"objectClassName": "entity",
"port43": "whois.arin.net",
"roles": [
"registrant"
],
"vcardArray": [
"vcard",
[
[
"version",
{},
"text",
"4.0"
],
[
"fn",
{},
"text",
"The Shadowserver Foundation, Inc."
],
[
"adr",
{
"label": "4695 Chabot Dr. Suite 200\nPleasanton\nCA\n94588\nUnited States"
},
"text",
[
"",
"",
"",
"",
"",
"",
""
]
],
[
"kind",
{},
"text",
"org"
]
]
]
}
],
"events": [
{
"eventAction": "last changed",
"eventDate": "2025-04-21T16:50:40-04:00"
},
{
"eventAction": "registration",
"eventDate": "2025-04-21T16:50:40-04:00"
}
],
"handle": "NET-64-62-156-0-1",
"ipVersion": "v4",
"links": [
{
"href": "https://rdap.arin.net/registry/ip/64.62.156.0",
"rel": "self",
"type": "application/rdap+json",
"value": "https://rdap.arin.net/registry/ip/64.62.156.108"
},
{
"href": "https://whois.arin.net/rest/net/NET-64-62-156-0-1",
"rel": "alternate",
"type": "application/xml",
"value": "https://rdap.arin.net/registry/ip/64.62.156.108"
},
{
"href": "https://rdap.arin.net/registry/ip/64.62.128.0/17",
"rel": "up",
"type": "application/rdap+json",
"value": "https://rdap.arin.net/registry/ip/64.62.156.108"
}
],
"name": "HURRICANE-CE2897-4295868A",
"notices": [
{
"description": [
"By using the ARIN RDAP/Whois service, you are agreeing to the RDAP/Whois Terms of Use"
],
"links": [
{
"href": "https://www.arin.net/resources/registry/whois/tou/",
"rel": "terms-of-service",
"type": "text/html",
"value": "https://rdap.arin.net/registry/ip/64.62.156.108"
}
],
"title": "Terms of Service"
},
{
"description": [
"If you see inaccuracies in the results, please visit: "
],
"links": [
{
"href": "https://www.arin.net/resources/registry/whois/inaccuracy_reporting/",
"rel": "inaccuracy-report",
"type": "text/html",
"value": "https://rdap.arin.net/registry/ip/64.62.156.108"
}
],
"title": "Whois Inaccuracy Reporting"
},
{
"description": [
"Copyright 1997-2026, American Registry for Internet Numbers, Ltd."
],
"title": "Copyright Notice"
}
],
"objectClassName": "ip network",
"parentHandle": "NET-64-62-128-0-1",
"port43": "whois.arin.net",
"rdapConformance": [
"nro_rdap_profile_0",
"rdap_level_0",
"cidr0",
"arin_originas0"
],
"remarks": [
{
"description": [
"ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE"
],
"title": "Registration Comments"
}
],
"startAddress": "64.62.156.0",
"status": [
"active"
],
"type": "ALLOCATION"
}Frequently asked questions
What is WHOIS?
WHOIS is a public directory that answers "who is responsible for this?" for domains, IP ranges and ASNs. It lists registration dates, the registrar, nameservers and contacts.
What is RDAP, and how does it differ?
RDAP is the modern replacement for WHOIS. It returns the same records in a structured, consistent format. We query RDAP first and fall back to classic WHOIS text when a registry has not adopted it yet.
What is the difference between a registrar and a registrant?
The registrar is the company you register and manage a domain through, such as xTom or GoDaddy. The registrant is the person or organization that actually holds the domain.
What are nameservers?
Nameservers answer DNS questions for a domain and decide which IP addresses the name resolves to. They also show which DNS provider the domain uses.
What is DNSSEC?
DNSSEC adds cryptographic signatures to DNS answers so they cannot be quietly altered in transit. "Signed" means the domain has it enabled, "unsigned" means it does not.
Why is the contact information redacted?
Privacy laws such as GDPR require registrars to hide most personal details in public records. The abuse contact is usually still shown, so a domain or network can be reported when something goes wrong.