Skip to main content
DNS Checker(beta)

What Is My IP Address?

Instantly detect your public IPv4 and IPv6 address with full geolocation map, ISP and ASN details, VPN/proxy/Tor detection, threat intelligence from 17 sources, WHOIS registration, and abuse contacts — all in one free check. No signup required.

My IP Address is

· Full details

Network Details

ISP
Amazon.com, Inc.
Organization
Amazon.com, Inc.
ASN
AS16509
RIR
RIPE NCC
Reverse DNS
N/A

Location

Country
🇺🇸United States (US)
Region
Ohio (OH)
City
Columbus
Postal Code
43215
Latitude
39.9587
Longitude
-82.9987
Accuracy
~20 km
Continent
North America (NA)

Timezone & Region

Timezone
America/New_York
Abbreviation
EDT
UTC Offset
GMT-04:00
Local Time
2026-05-27T07:39:27.324Z
Capital
Washington D.C.
Calling Code
+1
Currency
USD

Security Analysis

Datacenter IP — AWS

This IP address matches signatures of known privacy or hosting services.

Threat Score15/100 — Low Risk

Detected Services

AWS

About IP Detection

This analysis uses curated threat intelligence databases including Tor exit nodes, known proxy lists, cloud provider ranges, and VPN ASN data to identify privacy services.

WHOIS / Network Registration

Network Block

Network Name
IANA-BLOCK
Handle
0.0.0.0 - 255.255.255.255
IP Range
0.0.0.0 – 255.255.255.255
CIDR
0.0.0.0/0
RIR
APNIC
Status
active

Organization

Name
ID-NIC ADMINISTRATORS
ID
IA55-AP

Abuse Contact

Technical Contact

Phone
+62-21-52960634
Registered Aug 20, 2019
Last Updated Oct 23, 2018

Abuse Reporting & Contact Directory

If you are experiencing malicious activity from this IP address, use the contacts below to file an abuse report with the network operator. Include timestamps, log excerpts, and the IP address in your report.

ID-NIC ADMINISTRATORSIA55-AP

Abuse

DDoS attacks, hacking, port scanning, or any malicious activity originating from this IP address.

Technical

Routing issues, network outages, peering problems, or BGP misconfigurations.

When Should You Report This IP Address?

DDoS / DoS Attack

Your server is being flooded with traffic from this IP, causing outages or degraded performance.

Evidence to include: Firewall logs, bandwidth graphs, connection counts

Brute Force / Unauthorized Access

Repeated login attempts, SSH brute forcing, or attempts to exploit vulnerabilities on your systems.

Evidence to include: Auth logs, fail2ban logs, IDS/IPS alerts

Spam & Unsolicited Email

This IP is sending bulk unsolicited email or is listed on spam blocklists.

Evidence to include: Email headers, message samples, blocklist URLs

Phishing & Scam Sites

This IP hosts websites impersonating legitimate services to steal credentials or financial data.

Evidence to include: URLs, screenshots, domain registration details

Port Scanning & Reconnaissance

Systematic scanning of your network ports or enumeration of services, often a precursor to an attack.

Evidence to include: Firewall logs, IDS alerts, netflow data

Malware & Botnet C2

This IP is distributing malware, acting as a command-and-control server, or participating in a botnet.

Evidence to include: Malware samples, network captures, DNS logs

Copyright / DMCA Violation

This IP hosts or distributes copyrighted material without authorization.

Evidence to include: URLs to infringing content, proof of ownership

Child Exploitation (CSAM)

Report to law enforcement immediately. Contact NCMEC (USA) or your national hotline, then notify the ISP.

Evidence to include: Do not download or retain material — report URLs/IPs only

Tips for Filing an Effective Abuse Report

  • Always include the IP address, timestamps with timezone, and log excerpts showing the malicious activity.
  • Send reports from a professional email address — ISPs may deprioritize reports from free email providers.
  • For urgent threats (active attacks, CSAM), call the abuse phone number directly rather than waiting for an email response.
  • If you don't receive a response within 48 hours, escalate to the Regional Internet Registry (APNIC).
  • For child exploitation material, report to NCMEC CyberTipline (USA) or your national hotline first.

Your IP address is the first thing every website you visit sees. Here's what it is.

What Is an IP Address and Why Does It Matter?

An IP (Internet Protocol) address is a unique numerical label assigned to every device connected to a network, defined in RFC 791 for IPv4 and RFC 8200 for IPv6. It serves as the internet’s addressing system — without it, data packets cannot find their destination. Every website visited, every email sent, and every API call made requires the sender’s IP address to deliver the response.

Your public IP address is visible to every server you connect to. It reveals your approximate geographic location (typically city-level), your Internet Service Provider, and the network block your connection belongs to. DNS Checker detects your public IP and enriches it with data from MaxMind GeoLite2, all five Regional Internet Registries (ARIN, RIPE NCC, APNIC, LACNIC, AFRINIC), and 17 threat intelligence sources — providing a complete picture of what the internet sees when you connect.

What Does DNS Checker Show for Every IP Address?

Unlike basic IP checkers that only display your address, DNS Checker runs a full IP intelligence analysis in a single instant check. Every result includes all 10 categories below — for free, with no signup required. The underlying database processes ASN data and threat intelligence daily across 540,000+ IP blocks from all five Regional Internet Registries.

CategoryWhat DNS Checker ShowsBasic IP Checkers
IP detectionIPv4 + IPv6 dual-stack (simultaneous)IPv4 only
GeolocationInteractive map, city, region, postal, coordinates, accuracy radiusCountry or city name
Network detailsISP, organization, ASN, CIDR block, reverse DNS with PTR validationISP name only
VPN/proxy detection7-tier pipeline: VPN, proxy, Tor, datacenter, relay, iCloud Relay, WARPNot available
Threat intelligenceScore 0-100, 17 sources (Spamhaus, FireHOL, Emerging Threats)Not available
WHOIS/RDAPFull network registration, org details, registration datesNot available
Abuse contacts17 contact categories (abuse, technical, NOC, security, CSAM)Not available
TimezoneID, abbreviation, UTC offset, local time, DST statusUTC offset only
Region dataCountry, continent, capital, currency, calling code, EU statusCountry only
IP classificationResidential, business, datacenter, mobile, satellite, CDNNot available

How Does IP Geolocation Work?

IP geolocation maps numerical IP addresses to physical coordinates using databases maintained by providers like MaxMind, IP2Location, and the Regional Internet Registries. These databases correlate IP block allocations (which are public registry data) with geographic locations through a combination of network topology analysis, latency measurements, and user-submitted corrections.

Accuracy varies by connection type. Fixed broadband typically achieves 80% city-level accuracy and 95-99% country-level accuracy. Mobile networks are less precise because carriers route traffic through centralized gateways — a user in Portland may appear in Denver. VPN and satellite connections show the server or ground station location rather than the user’s actual position.

DNS Checker displays an accuracy radius on the interactive map to indicate confidence. A 10km radius means high confidence; a 200km radius suggests the location is an estimate. The geolocation data is sourced from MaxMind GeoLite2, updated weekly, and cross-referenced with RIR allocation records.

How to Check If Your VPN Is Actually Working

A VPN leak test is the most reliable way to verify your VPN connection. The process requires two checks: first, load this page without a VPN connected and note your real IP address, ISP name, and city. Then connect your VPN and reload. If the VPN is working, you should see the VPN server’s IP, the hosting provider’s name (not your ISP), and the server’s geographic location.

DNS Checker’s 7-tier detection pipeline goes further than a simple IP comparison. It checks for VPN, proxy, Tor, datacenter, and relay signatures using ASN analysis, reverse DNS patterns, known provider databases, and blocklist cross-referencing. A properly working VPN will trigger detection flags for “VPN” and “Datacenter” with the provider name listed.

If your real ISP name or home city still appears after connecting, your VPN has a leak. The three most common causes are WebRTC leaks (browser-level, fixable in settings), DNS leaks (DNS queries bypassing the tunnel), and IPv6 leaks (IPv6 traffic not routed through the VPN). Running DNS Checker’s dual-stack detection catches IPv6 leaks that single-stack tools miss.

IPv4 vs IPv6: Key Differences

PropertyIPv4 (RFC 791)IPv6 (RFC 8200)
Address size32 bits128 bits
Format192.0.2.12001:db8::1
Total addresses~4.3 billion3.4 x 1038
Pool statusExhausted (2011)Virtually unlimited
Header size20-60 bytes (variable)40 bytes (fixed)
IPsecOptionalMandatory support
NAT requiredYes (address conservation)No (end-to-end addressing)
Global adoption (2026)~55%~45%

VPN vs Proxy vs Tor: Privacy Comparison

FeatureVPNProxyTor
EncryptionFull tunnel (AES-256)None or HTTPS onlyMulti-layer (3 relays)
Speed impact10-30% slower5-15% slower70-90% slower
Anonymity levelModerateLowHigh
Cost$3-12/monthFree to $10/monthFree
Traffic scopeAll device trafficSingle applicationTor Browser only
DNS Checker detectionVPN + Datacenter flagsProxy flagTor flag + exit node ID

What Can Someone Do With Your IP Address?

An IP address alone provides limited but non-trivial information. Any website or service you connect to receives your IP as part of normal network communication. From it, they can determine your approximate city-level location, your ISP, and whether you are connecting from a residential, business, or datacenter network. This data is routinely used for content localization (showing local weather or language), fraud prevention (flagging logins from unexpected countries), and regulatory compliance (enforcing geo-restrictions).

However, an IP address cannot reveal your name, home address, email, phone number, or browsing history. A WHOIS lookup shows the network operator and registration details for an IP block, but only your ISP can link an IP to a subscriber identity, and this requires legal process in virtually all jurisdictions. The practical risks of IP exposure are modest for most users: targeted advertising, approximate location tracking, and in rare cases, DDoS attacks directed at a specific IP. Using a VPN eliminates all of these by substituting the VPN server’s IP for your own.

What If Someone Is Misusing Your IP Address?

Because this tool shows your own IP address, the abuse contacts displayed are the contacts responsible for your IP block — typically your ISP. This is useful if your IP has been compromised or is being used for malicious activity without your knowledge. Common scenarios include: a device on your network is infected with malware and sending spam or participating in a botnet; someone on a shared network (apartment complex, university, co-working space) is conducting abuse from the same public IP — use the reverse IP domain check to see all domains hosted on your IP; or your IP has been spoofed in packet headers to make attacks appear to originate from your address.

If DNS Checker shows a non-zero threat score for your IP, it means your address appears on one or more blocklists. This can cause email delivery failures, CAPTCHA challenges on websites, or service denials. Check which blocklists flagged your IP in the threat analysis section, then contact your ISP using the abuse contacts shown — they can investigate whether your IP was involved in malicious activity and request delisting.

If you are receiving unwanted traffic or attacks from a different IP address, use the IP Geolocation Lookup tool to investigate the attacker’s IP. That tool provides the same full analysis for any IP address and includes an abuse report generator — a structured template for filing reports with the attacker’s ISP, hosting provider, or the relevant Regional Internet Registry. The Blacklist Checker can also verify whether the attacking IP is already listed on DNSBL/RBL databases.

How Does DNS Checker Detect VPNs, Proxies, and Tor?

DNS Checker uses a 7-tier threat detection pipeline that combines multiple independent data sources to classify IP addresses. Tier 1 checks curated blocklists (Spamhaus DROP/EDROP, FireHOL Level 1, Emerging Threats). Tier 2 performs ASN ownership analysis against known VPN and hosting providers. Tier 3 cross-references datacenter IP ranges from AWS, Azure, GCP, DigitalOcean, and OVH. Tier 4 analyzes reverse DNS patterns for provider-identifiable PTR records. Tier 5 checks iCloud Private Relay and Cloudflare WARP ranges. Tier 6 queries the Tor Project’s exit node list. Tier 7 applies heuristic scoring across all signals.

The pipeline processes 540,000+ IP blocks from all five Regional Internet Registries and produces a threat score from 0 (clean residential) to 100 (confirmed malicious). Each IP is classified as residential, business, datacenter, mobile, satellite, or CDN. For detailed investigation of any IP address, use the companion IP Geolocation Lookup tool, which provides the same analysis for any IP with full WHOIS/RDAP registration data and a structured abuse contact directory across 17 categories.

Related IP and Network Tools

For developers

Score every visitor IP in one API call

The same data shown above is available as an IP risk scoring API: geolocation, ASN, VPN / proxy / Tor / datacenter detection, and a single recommendation.severity field that turns the whole lookup into one boolean. 1,000 free lookups per day, no credit card.

Get an API key

Built and maintained alongside this tool. Free, no signup required.

Frequently Asked Questions