IP address lookup
Find the country, network, owner and hostname of any IPv4 or IPv6 address. Lookups are never logged or stored.
Try:
How it works
What an IP lookup tells you
Every public IP address on the internet is part of a block that a regional internet registry has handed out to an organisation, usually an internet provider, a hosting company or a large business. An IP lookup combines three sources to tell you as much as possible about the address:
- Geolocation data estimates the country the address is used in, based on routing and registration data collected by DB-IP.
- Registry data (RDAP) comes straight from the registry responsible for the address: RIPE NCC for Europe, ARIN for North America, APNIC for Asia-Pacific, LACNIC for Latin America and AFRINIC for Africa. It shows who the block is registered to and how to report abuse.
- Reverse DNS asks the address's own network what hostname, if any, it has given the address.
What a lookup can't tell you
An IP lookup identifies networks, not people. It will tell you that an address belongs to a particular internet provider in Germany, but not which of its customers used it, or where they live. Many customers can also share one address through carrier-grade NAT, and addresses are reassigned all the time.
Common reasons to look up an IP address
- Checking where suspicious logins, comments or form submissions came from.
- Finding the right abuse contact to report spam, scanning or attacks.
- Troubleshooting email delivery, firewalls and network routing.
- Checking whether a VPN or proxy is doing its job: see your own IP address.
Frequently asked questions
What information does an IP lookup show?
For a public IP address, IPLookr shows the country it is used in, the network (autonomous system) that announces it, the organisation it is registered to, the address block it belongs to, its reverse DNS hostname and the contact for reporting abuse. It never shows who was using the address at a given moment.
How accurate is IP geolocation?
Country-level results are right for the vast majority of addresses. City-level guesses are less reliable, especially for mobile networks, VPNs and large companies that route traffic through one location. Treat any IP location as an estimate.
What is the difference between RDAP and WHOIS?
Both answer the question "who is this address registered to?". WHOIS is the older, plain-text protocol. RDAP is its modern replacement, run by the same regional internet registries, with structured data, secure HTTPS connections and better handling of international text. IPLookr uses RDAP.
Why can't I look up 192.168.1.1?
Addresses like 192.168.x.x, 10.x.x.x and 172.16–31.x.x are private. Millions of networks use the same ones internally, so they have no owner or location to look up. IPLookr tells you what kind of address it is instead.
What is an ASN?
An autonomous system number identifies a network that decides its own routing on the internet, such as an internet provider, a cloud platform or a large company. Knowing the ASN tells you which network an address belongs to, even when the registered owner is a reseller.
What is reverse DNS?
Normal DNS turns a name like example.com into an IP address. Reverse DNS goes the other way and turns an IP address into a hostname, if the network owner has set one up. Hostnames often hint at the provider or the kind of connection.
How do I report abuse from an IP address?
Look up the address and send your report to the abuse contact shown in the registration details. Include the exact date, time and time zone, what happened and any logs. The network owner is the only one who can identify the customer behind the address.
Are my lookups stored?
No. The address you enter is sent to our server, checked and forgotten. It is not logged or saved, and it is kept out of URLs sent to the server so it doesn't end up in access logs either.