About network abuse


What does it mean when a standard Whois search shows the resources are registered to APNIC? Is APNIC responsible for the network abuse?

Most whois databases may reflect ‘APNIC’ in their whois registrations; this is generally because the address space in question was delegated by APNIC to an organization within the Asia Pacific region.

Therefore, if you are investigating any network abuse activities, such as spamming or hacking, you can query the APNIC Whois Database to identify the contact details for the organization/network responsible, allowing you to contact them directly and request further assistance.

For more details, see what services APNIC provides.

What is the APNIC Whois Database?

The APNIC Whois Database is an official public record that contains information about organizations that hold IP addresses and AS numbers in the Asia Pacific. Contact details such as phone numbers and email addresses for the personnel managing networks or using the IP addresses or AS numbers are also registered.

For more details, see what other information is in the APNIC Whois Database.

How do I use the APNIC Whois Database to obtain network contact details?

You can use the APNIC Whois Database to obtain the registration details for IP addresses delegated by APNIC. If those IP addresses have been further assigned to other networks, you may also see the registration details of these assignments.

Reporting abuse and spam

Learn about how to search the APNIC Whois Database.
For a complete guide to using the APNIC Whois Database, please refer to the Quick Beginner’s Guide.

Who is responsible for ensuring the accuracy of contact details in the APNIC Whois Database?

When IP addresses or AS numbers are delegated to networks, APNIC requires valid and correct contact details for registration.

The networks that receive the IP addresses or AS numbers from APNIC are responsible for maintaining the accuracy of their registrations, which they create for their customers or network infrastructure in the APNIC Whois Database.

Registered contact details in the APNIC Whois Database are outdated? How APNIC can help.

If the contact information you obtain from the Whois Database is no longer valid, you can report it by using the invalid contact form.

Once completed, these reports will be sent to the APNIC Helpdesk team to directly engage with the APNIC Member responsible for the Internet resources in question.

We will notify them of the invalid contact report and request that they update their Whois Database registration details in accordance with relevant APNIC policy criteria.

Please note: if the Internet resources are historical and not managed under an APNIC account, APNIC may not beĀ  able to update the invalid Whois Database registration details. In such cases, we recommend that you contact the organization announcing or providing transit for the IP address.

What do I do if I am not able to get the cooperation of the network contacts or my emails are ignored?

You are advised to use all means of communication available to you to contact the network responsible. Depending on the circumstances of the abuse, you may also contact law enforcement agencies either in your jurisdiction or the jurisdiction where the problem originates. You may also contact CSIRTs/CERTs (Computer Security Incident Response Teams / Computer Emergency Response Teams) in your economy for advice on dealing with network abuse activities.

A list of national CSIRTs/CERTs is also available.

Can APNIC investigate my complaint and disconnect the networks involved in the network abuse activities?

APNIC is an RIR (Regional Internet address Registry), and has no technical ability to ‘suspend’ any Internet service, no mandate to withdraw address registrations, no investigative powers, nor any authority to take action as an enforcement agency. We are in the same position as any other IP address or DNS registry worldwide.

Does APNIC have a role in preventing network abuse?

APNIC has a role in educating network operators in the Asia Pacific community. APNIC conducts training courses relating to addressing policy around the Asia Pacific region. As a component of those courses, we do seek to raise awareness of the need for responsible network management.

Important Change

APNIC implemented mandatory IRT references on 8 November 2010. This means an IRT object reference will be mandatory when any ‘inetnum‘, ‘inet6num‘ and ‘aut-num‘objects are updated or created in the APNIC Whois Database. Find out more…