IP Address Lookup
Find the geographic location, ISP, network details, and security status of any IPv4 or IPv6 address. Enter an IP below or let the tool auto-detect yours.
Your IPv4 Address
Network Details
- ISP
- Amazon.com, Inc.
- Organization
- Amazon.com, Inc.
- ASN
- AS16509
- RIR
- RIPE NCC
- Reverse DNS
- N/A
Location
- Country
- 🇺🇸United States (US)
- Region
- Ohio (OH)
- City
- Columbus
- Postal Code
- 43215
- Latitude
- 39.9587
- Longitude
- -82.9987
- Accuracy
- ~20 km
- Continent
- North America (NA)
Timezone & Region
- Timezone
- America/New_York
- Abbreviation
- EDT
- UTC Offset
- GMT-04:00
- Local Time
- 2026-05-27T06:36:47.461Z
- Capital
- Washington D.C.
- Calling Code
- +1
- Currency
- USD
Security Analysis
Datacenter IP — AWS
This IP address matches signatures of known privacy or hosting services.
Detected Services
About IP Detection
This analysis uses curated threat intelligence databases including Tor exit nodes, known proxy lists, cloud provider ranges, and VPN ASN data to identify privacy services.WHOIS / Network Registration
Network Block
- Network Name
- IANA-BLOCK
- Handle
- 0.0.0.0 - 255.255.255.255
- IP Range
- 0.0.0.0 – 255.255.255.255
- CIDR
- 0.0.0.0/0
- RIR
- APNIC
- Status
- active
Organization
- Name
- ID-NIC ADMINISTRATORS
- ID
- IA55-AP
Abuse Contact
- [email protected]
Technical Contact
- [email protected]
- Phone
- +62-21-52960634
Abuse Reporting & Contact Directory
If you are experiencing malicious activity from this IP address, use the contacts below to file an abuse report with the network operator. Include timestamps, log excerpts, and the IP address in your report.
IA55-APAbuse
DDoS attacks, hacking, port scanning, or any malicious activity originating from this IP address.
Technical
Routing issues, network outages, peering problems, or BGP misconfigurations.
When Should You Report This IP Address?
Your server is being flooded with traffic from this IP, causing outages or degraded performance.
Evidence to include: Firewall logs, bandwidth graphs, connection counts
Repeated login attempts, SSH brute forcing, or attempts to exploit vulnerabilities on your systems.
Evidence to include: Auth logs, fail2ban logs, IDS/IPS alerts
This IP is sending bulk unsolicited email or is listed on spam blocklists.
Evidence to include: Email headers, message samples, blocklist URLs
This IP hosts websites impersonating legitimate services to steal credentials or financial data.
Evidence to include: URLs, screenshots, domain registration details
Systematic scanning of your network ports or enumeration of services, often a precursor to an attack.
Evidence to include: Firewall logs, IDS alerts, netflow data
This IP is distributing malware, acting as a command-and-control server, or participating in a botnet.
Evidence to include: Malware samples, network captures, DNS logs
This IP hosts or distributes copyrighted material without authorization.
Evidence to include: URLs to infringing content, proof of ownership
Report to law enforcement immediately. Contact NCMEC (USA) or your national hotline, then notify the ISP.
Evidence to include: Do not download or retain material — report URLs/IPs only
Tips for Filing an Effective Abuse Report
- Always include the IP address, timestamps with timezone, and log excerpts showing the malicious activity.
- Send reports from a professional email address — ISPs may deprioritize reports from free email providers.
- For urgent threats (active attacks, CSAM), call the abuse phone number directly rather than waiting for an email response.
- If you don't receive a response within 48 hours, escalate to the Regional Internet Registry (APNIC).
- For child exploitation material, report to NCMEC CyberTipline (USA) or your national hotline first.
“Every IP address has a story: who owns it, where it is, and what it's been up to.”
Written by Ishan Karunaratne · Last reviewed:
What Is IP Geolocation?
IP geolocation is the process of mapping an Internet Protocol (IP) address to a real-world geographic location. Every device connected to the internet is assigned at least one IP address, and these addresses are allocated in hierarchical blocks by five Regional Internet Registries (RIRs): ARIN (North America), RIPE NCC (Europe/Middle East), APNIC (Asia-Pacific), LACNIC (Latin America), and AFRINIC (Africa).
Geolocation databases are built by cross-referencing RIR allocation records, BGP routing tables, ISP registration data, and network probing signals. When you look up an IP address, the tool matches it against these databases to estimate the country, region, city, and approximate coordinates where the IP is deployed.
This tool uses industry-leading geolocation databases for location and Autonomous System (ASN) resolution, combined with curated threat intelligence feeds for security analysis. Results include geographic coordinates, timezone, ISP and organization details, reverse DNS, and a comprehensive security assessment covering VPN, proxy, Tor, datacenter, and relay detection.
How Does IP Location Lookup Work?
An IP location lookup resolves an IP address to its associated geographic and network metadata in three stages:
- Address Resolution — The IP address is parsed and validated as either IPv4 (32-bit dotted-decimal) or IPv6 (128-bit hexadecimal). The address is then matched against the geolocation database to identify the allocated network block (CIDR range).
- Geolocation Mapping — The network block is mapped to geographic coordinates, administrative regions, timezone, and ISP/organization data. This is derived from RIR records, ISP data, and supplementary sources including BGP routing analysis.
- Security Analysis — The IP is checked against threat intelligence feeds including known VPN provider ranges, Tor exit node lists, public proxy databases, major cloud provider CIDR blocks, and privacy relay address lists. A threat score is computed based on how many indicators are present.
The entire lookup completes in milliseconds. When you visit this page, your IP is automatically detected from the request headers and resolved server-side, so results appear instantly without any client-side delay.
How Accurate Is IP Geolocation?
IP geolocation accuracy varies significantly by the level of detail you need. Based on industry benchmarks and independent audits:
99%
Country-Level
Highly reliable for country identification
55-80%
Region / State
Varies by ISP and country
50-75%
City-Level
Approximate, not street-level
IP geolocation cannot pinpoint a street address. The coordinates returned represent the approximate center of the network area where the IP is deployed, typically the ISP's point-of-presence (PoP) or regional gateway. The accuracy radius field shown in results indicates the estimated margin.
Several factors reduce accuracy: VPNs and proxies show the exit server location instead of the user's actual location. Mobile carriers use NAT gateways that serve entire metro areas from a single IP pool. Satellite internet (e.g., Starlink) may route through distant ground stations. Corporate networks often show headquarters location regardless of where employees connect from.
What Information Can You Get from an IP Address?
A comprehensive IP lookup reveals four categories of information:
Geographic Location
Country, region/state, city, postal code, latitude/longitude coordinates, accuracy radius, and continent. Also includes country metadata like capital city, calling code, currency, and EU membership.
Network Intelligence
ISP name, organization, Autonomous System Number (ASN), network CIDR range, Regional Internet Registry (RIR), and reverse DNS hostname with forward-confirmation validation.
Timezone & Region
IANA timezone identifier, abbreviation, UTC offset, daylight saving time status, and local time at the IP's location.
Security Analysis
VPN, proxy, Tor exit node, datacenter/cloud, and privacy relay detection. Threat score (0-100), connection type classification (residential, business, datacenter), and detected service names.
Click any detected IP address to view its dedicated analysis page with full details, an interactive map, and structured data optimized for reference and sharing.
What Is the Difference Between IPv4 and IPv6?
The internet currently operates on two versions of the Internet Protocol running simultaneously:
IPv4 (Internet Protocol version 4)
Uses 32-bit addresses written in dotted-decimal notation (e.g., 192.0.2.1). Provides approximately 4.3 billion unique addresses.
IPv4 address exhaustion was officially reached in 2011 when IANA allocated the last blocks. Most residential ISPs still assign IPv4 addresses, often using NAT (Network Address Translation) to share a single public IP among multiple devices.
IPv6 (Internet Protocol version 6)
Uses 128-bit addresses written in hexadecimal groups (e.g., 2001:db8::1). Provides approximately 3.4 × 1038 unique addresses.
IPv6 adoption is growing steadily, with major ISPs and mobile carriers enabling it by default. This tool fully supports IPv6 lookup and displays addresses in both expanded and compressed (RFC 5952) notation.
This tool automatically identifies whether an address is IPv4 or IPv6 and provides appropriate formatting. On the What's My IP Address page, both your IPv4 and IPv6 addresses are detected when available.
What Is the Difference Between Public and Private IP Addresses?
Not all IP addresses are visible on the public internet. Public IP addresses are globally routable and assigned by ISPs to identify devices or networks on the internet. These are the addresses you can look up with this tool.
Private IP addresses are reserved for internal use within local networks (RFC 1918) and are not routable on the public internet. Common private ranges include 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16. Your router uses NAT to translate between your private LAN addresses and your single public IP.
Bogon addresses are IP ranges that should never appear in internet routing tables — either because they are reserved by IANA for special purposes or because they have not yet been allocated to any RIR. If you look up a bogon address, the security analysis will flag it accordingly.
How Can You Hide Your IP Address and Location?
If an IP lookup reveals more about your location than you are comfortable with, there are several methods to mask your public IP address:
- •VPN (Virtual Private Network) — Encrypts your traffic and routes it through a remote server, replacing your IP with the server's IP. The fastest option for everyday privacy. This tool detects known VPN provider IP ranges.
- •Proxy Server — An intermediary that forwards your requests. Simpler than a VPN but typically does not encrypt traffic. HTTP and SOCKS proxies are the most common types.
- •Tor Network — Routes traffic through multiple encrypted relays for strong anonymity. Slower than a VPN but significantly harder to trace. Exit nodes are publicly listed and detected by this tool.
- •Privacy Relays — Built into some browsers and operating systems, privacy relays route traffic through two separate relays so that neither your ISP nor the destination website can see both your identity and browsing activity simultaneously.
The security analysis section of every lookup result indicates whether any of these methods are detected on the IP being examined.
What Data Sources Power This IP Location Tool?
Understanding how results are generated helps you interpret them accurately. This tool draws on multiple data categories, each refreshed on independent schedules:
- •Geolocation & ASN Databases — Industry-standard databases that map IP ranges to geographic locations, ISPs, and Autonomous System Numbers. Refreshed weekly.
- •Tor Exit Node Lists — Official lists of known Tor network exit relays. Updated hourly.
- •Cloud Provider CIDR Ranges — Published IP ranges from major cloud and hosting providers. Updated every 6 hours.
- •VPN & Proxy Intelligence — Curated lists of known VPN provider and proxy IP ranges. Refreshed daily.
- •Privacy Relay Addresses — Published address lists from privacy relay services. Refreshed daily.
All lookups are processed entirely on our own infrastructure — IP addresses you search are never shared with third-party services. For DNS-related diagnostics, see the DNS Inspector for record lookups or the DNS Propagation Checker to verify record changes across global nameservers. To see which domains share an IP address, use the reverse IP lookup tool.
What Are Common Use Cases for IP Location Lookup?
Network Troubleshooting
Verify where your traffic is originating from, confirm VPN connections are working, or identify unexpected routing through distant gateways. Compare results with DNS records to diagnose connectivity issues.
Security Investigation
Investigate suspicious IPs appearing in access logs, firewall alerts, or email headers. The threat score and VPN/proxy detection help assess whether traffic sources are legitimate.
Content Compliance
Verify geographic restrictions for licensing and regulatory compliance. Identify whether visitors are accessing content from permitted regions or using anonymization tools to bypass geo-restrictions.
Server Administration
Confirm where your servers are located from the public internet's perspective. Validate reverse DNS configuration and verify ASN/ISP allocations match expected hosting providers.
For developers
Build VPN, proxy, and Tor detection into your app
The threat score, geolocation, and ASN data on this page comes from the same service that powers the IP reputation API — a developer-friendly REST endpoint with sub-100ms p50 latency from US edges. Every detection ships with detection_sources[] so the logic is replayable in your own logs.
Related tools you might need
Built and maintained alongside this tool. Free, no signup required.