Find the geographic location, ISP, network details, and security status of any IPv4 or IPv6 address. Enter an IP below or let the tool auto-detect yours.
Your IPv4 Address
Datacenter IP — AWS
This IP address matches signatures of known privacy or hosting services.
Detected Services
About IP Detection
This analysis uses curated threat intelligence databases including Tor exit nodes, known proxy lists, cloud provider ranges, and VPN ASN data to identify privacy services.If you are experiencing malicious activity from this IP address, use the contacts below to file an abuse report with the network operator. Include timestamps, log excerpts, and the IP address in your report.
IA55-APDDoS attacks, hacking, port scanning, or any malicious activity originating from this IP address.
Routing issues, network outages, peering problems, or BGP misconfigurations.
Your server is being flooded with traffic from this IP, causing outages or degraded performance.
Evidence to include: Firewall logs, bandwidth graphs, connection counts
Repeated login attempts, SSH brute forcing, or attempts to exploit vulnerabilities on your systems.
Evidence to include: Auth logs, fail2ban logs, IDS/IPS alerts
This IP is sending bulk unsolicited email or is listed on spam blocklists.
Evidence to include: Email headers, message samples, blocklist URLs
This IP hosts websites impersonating legitimate services to steal credentials or financial data.
Evidence to include: URLs, screenshots, domain registration details
Systematic scanning of your network ports or enumeration of services, often a precursor to an attack.
Evidence to include: Firewall logs, IDS alerts, netflow data
This IP is distributing malware, acting as a command-and-control server, or participating in a botnet.
Evidence to include: Malware samples, network captures, DNS logs
This IP hosts or distributes copyrighted material without authorization.
Evidence to include: URLs to infringing content, proof of ownership
Report to law enforcement immediately. Contact NCMEC (USA) or your national hotline, then notify the ISP.
Evidence to include: Do not download or retain material — report URLs/IPs only
Tips for Filing an Effective Abuse Report
IP geolocation is the process of mapping an Internet Protocol (IP) address to a real-world geographic location. Every device connected to the internet is assigned at least one IP address, and these addresses are allocated in hierarchical blocks by five Regional Internet Registries (RIRs): ARIN (North America), RIPE NCC (Europe/Middle East), APNIC (Asia-Pacific), LACNIC (Latin America), and AFRINIC (Africa).
Geolocation databases are built by cross-referencing RIR allocation records, BGP routing tables, ISP registration data, and network probing signals. When you look up an IP address, the tool matches it against these databases to estimate the country, region, city, and approximate coordinates where the IP is deployed.
This tool uses industry-leading geolocation databases for location and Autonomous System (ASN) resolution, combined with curated threat intelligence feeds for security analysis. Results include geographic coordinates, timezone, ISP and organization details, reverse DNS, and a comprehensive security assessment covering VPN, proxy, Tor, datacenter, and relay detection.
An IP location lookup resolves an IP address to its associated geographic and network metadata in three stages:
The entire lookup completes in milliseconds. When you visit this page, your IP is automatically detected from the request headers and resolved server-side, so results appear instantly without any client-side delay.
IP geolocation accuracy varies significantly by the level of detail you need. Based on industry benchmarks and independent audits:
99%
Country-Level
Highly reliable for country identification
55-80%
Region / State
Varies by ISP and country
50-75%
City-Level
Approximate, not street-level
IP geolocation cannot pinpoint a street address. The coordinates returned represent the approximate center of the network area where the IP is deployed, typically the ISP's point-of-presence (PoP) or regional gateway. The accuracy radius field shown in results indicates the estimated margin.
Several factors reduce accuracy: VPNs and proxies show the exit server location instead of the user's actual location. Mobile carriers use NAT gateways that serve entire metro areas from a single IP pool. Satellite internet (e.g., Starlink) may route through distant ground stations. Corporate networks often show headquarters location regardless of where employees connect from.
A comprehensive IP lookup reveals four categories of information:
Country, region/state, city, postal code, latitude/longitude coordinates, accuracy radius, and continent. Also includes country metadata like capital city, calling code, currency, and EU membership.
ISP name, organization, Autonomous System Number (ASN), network CIDR range, Regional Internet Registry (RIR), and reverse DNS hostname with forward-confirmation validation.
IANA timezone identifier, abbreviation, UTC offset, daylight saving time status, and local time at the IP's location.
VPN, proxy, Tor exit node, datacenter/cloud, and privacy relay detection. Threat score (0-100), connection type classification (residential, business, datacenter), and detected service names.
Click any detected IP address to view its dedicated analysis page with full details, an interactive map, and structured data optimized for reference and sharing.
The internet currently operates on two versions of the Internet Protocol running simultaneously:
Uses 32-bit addresses written in dotted-decimal notation (e.g., 192.0.2.1). Provides approximately 4.3 billion unique addresses.
IPv4 address exhaustion was officially reached in 2011 when IANA allocated the last blocks. Most residential ISPs still assign IPv4 addresses, often using NAT (Network Address Translation) to share a single public IP among multiple devices.
Uses 128-bit addresses written in hexadecimal groups (e.g., 2001:db8::1). Provides approximately 3.4 × 1038 unique addresses.
IPv6 adoption is growing steadily, with major ISPs and mobile carriers enabling it by default. This tool fully supports IPv6 lookup and displays addresses in both expanded and compressed (RFC 5952) notation.
This tool automatically identifies whether an address is IPv4 or IPv6 and provides appropriate formatting. On the What's My IP Address page, both your IPv4 and IPv6 addresses are detected when available.
Not all IP addresses are visible on the public internet. Public IP addresses are globally routable and assigned by ISPs to identify devices or networks on the internet. These are the addresses you can look up with this tool.
Private IP addresses are reserved for internal use within local networks (RFC 1918) and are not routable on the public internet. Common private ranges include 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16. Your router uses NAT to translate between your private LAN addresses and your single public IP.
Bogon addresses are IP ranges that should never appear in internet routing tables — either because they are reserved by IANA for special purposes or because they have not yet been allocated to any RIR. If you look up a bogon address, the security analysis will flag it accordingly.
If an IP lookup reveals more about your location than you are comfortable with, there are several methods to mask your public IP address:
The security analysis section of every lookup result indicates whether any of these methods are detected on the IP being examined.
Understanding how results are generated helps you interpret them accurately. This tool draws on multiple data categories, each refreshed on independent schedules:
All lookups are processed entirely on our own infrastructure — IP addresses you search are never shared with third-party services. For DNS-related diagnostics, see the DNS Inspector for record lookups or the DNS Propagation Checker to verify record changes across global nameservers.
Verify where your traffic is originating from, confirm VPN connections are working, or identify unexpected routing through distant gateways. Compare results with DNS records to diagnose connectivity issues.
Investigate suspicious IPs appearing in access logs, firewall alerts, or email headers. The threat score and VPN/proxy detection help assess whether traffic sources are legitimate.
Verify geographic restrictions for licensing and regulatory compliance. Identify whether visitors are accessing content from permitted regions or using anonymization tools to bypass geo-restrictions.
Confirm where your servers are located from the public internet's perspective. Validate reverse DNS configuration and verify ASN/ISP allocations match expected hosting providers.