IP Address Lookup

An IP address lookup combines several independent data sources to paint a useful picture of a public IPv4 or IPv6 address. Use it to look up an IP address, run an IP geolocation lookup, find the network behind an IP, and check reverse DNS for an IP during troubleshooting.

Geolocation places the IP near a city or region, while ASN, ISP, organization, and route/CIDR fields reveal which network operator routes it. The reverse-DNS hostname helps with server audits, log review, mail investigations, and provider escalation.

IP location is not a physical address and cannot identify a person by itself. VPNs, mobile carriers, cloud platforms, and recently reassigned ranges can make city-level results approximate, so treat network owner and ASN data as the stronger diagnostic signals.

Public DNS resolvers: 8.8.8.8 and 1.1.1.1

8.8.8.8 returns ASN AS15169 (Google) and the reverse DNS hostname dns.google; 1.1.1.1 returns AS13335 (Cloudflare) and one.one.one.one . Both are anycast addresses announced from many sites at once, so the single location in the result is a database entry and says nothing about which site answers your queries.

An IPv6 address: 2001:4860:4860::8888

Google Public DNS over IPv6 shows the IPv6 badge and the same AS15169. Enter IPv6 addresses in full or compressed form, without square brackets or a port number.

A private or documentation address: 192.168.1.10 or 203.0.113.10

Private, reserved and documentation ranges are not routed on the public internet, so the geolocation and ASN databases have no entry for them. Expect Unknown for location and organization, AS0 for the ASN and coordinates 0, 0.

• City, Region, Country, Continent, Timezone, Coordinates — from the MaxMind GeoLite2 City database. The map is centred on the coordinates, which mark the middle of an estimated area rather than a street address. When only country-level data exists, City and Region show Unknown.
• ASN, Organization, ISP — from the MaxMind GeoLite2 ASN database. Organization and ISP show the same registered network name. AS0 means no ASN record covers the address. See what an ASN is for background.
• Reverse DNS — the PTR record resolved when you run the lookup, or No PTR record when none is published. The address owner can put any name in a PTR record, so confirm it by resolving that hostname back with DNS Lookup and checking that the same IP comes back.
• Network block — the GeoLite2 ASN block that contains the address, for example 140.82.112.0/20 for 140.82.121.4 . It approximates the routed prefix, but the database can split or merge blocks differently from BGP announcements. The row is hidden when the address is not in the database.
• ASN profile and IP registration (RDAP) — the first button opens the network in ASN Lookup with its other blocks and peers. The second opens the registry record for the address on rdap.org, which forwards to the responsible regional internet registry; that record lists the allocated block, the holder and, where published, the abuse contact.
• Raw response — IP, hostname, ASN, organization, network block, city, country, coordinates and timezone as JSON for tickets or notes.

• Log and firewall review. An address hammering a login form resolves to a cloud provider's ASN rather than a residential ISP — often a sign that the traffic is automated. Open the ASN to see the provider's other ranges.
• Email header investigation. Look up the IPs in the Received: headers to see which network handed the message over and whether it has a meaningful PTR name. Whether that server was allowed to send for the domain is a job for the SPF Checker.
• Mail server setup. Before sending from a new server, confirm its IP has a reverse DNS name and that the name resolves back to the same address; many receiving servers check this.
• Checking where a site is hosted. Resolve the domain's A or AAAA record with DNS Lookup , then look up the address to see whether it sits on the expected CDN or hosting provider.

Everything is Unknown and the ASN is AS0

The input is probably a private or reserved address — 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 100.64.0.0/10 (carrier-grade NAT), 127.0.0.0/8, fe80::/10 or fc00::/7 — or a domain name. The tool does not resolve hostnames: get the A or AAAA record with DNS Lookup first and paste the IP.

The map points at the ocean off West Africa

That is latitude 0, longitude 0, which the tool uses when the database has no coordinates for the address.

The city is wrong or shows a capital

For many ranges the database only knows the country or region, and the coordinates fall back to a central point. Mobile carriers and VPN exits also concentrate users behind a few gateways.

Reverse DNS shows No PTR record

The owner of the address block has not published a PTR record. Only the provider that controls the block, usually your ISP or hosting company, can add one.

The organization is not the company I expected

The ASN shows the network that routes the address. A website hosted on a cloud platform or behind a CDN shows that provider, not the website owner.

• Geolocation is an estimate. VPNs, proxies and Tor show their exit location; mobile carriers often place many users behind carrier-grade NAT gateways; recently reassigned ranges can lag behind the database.
• IPv6 privacy addresses change frequently, but geolocation and ASN data are usually assigned per network prefix, so a changed address typically returns the same results.
• The tool does not classify addresses as VPN, proxy, datacenter or mobile, does not check blacklists or IP reputation, and does not ping the address or scan ports. An organization name that belongs to a hosting company is a hint, not a verdict.
• Registry details such as the allocation date and abuse mailbox are not shown on this page; use the IP registration (RDAP) button. The WHOIS Lookup tool on this site covers domain names.