IP address lookup
Find out who owns an IP address, where it is registered and whether it has a bad reputation. Enter any IPv4 or IPv6 address for the owning network, country, registry record and our threat-intelligence verdict: the same evaluation behind our Threat Intelligence service.
What an IP address lookup tells you
Every public IP address belongs to a block that a regional internet registry handed to an organisation, and that organisation announces it to the rest of the internet under an autonomous system number (ASN). A lookup reads those records and adds what we know from watching traffic. For each address you get:
- Owner and network. The organisation and ASN that announce the address, such as a hosting provider, a mobile operator or a company network.
- Country and registry. Where the network is registered, the allocated range the address sits in, and the abuse contact to report it to.
- Reputation. Whether our threat intelligence currently flags the address, how severe it is, and how many public blocklists also carry it.
- Address facts. Reserved and private ranges (such as 10.0.0.0/8 or 192.168.0.0/16) with the RFC that defines them, plus the reverse DNS name and the decimal and hexadecimal forms.
Who owns this IP address?
The owner shown is the network that announces the address on the internet, taken from public routing data, and the registry record for the range. For a home or mobile connection that is the internet provider, not the person using it: an IP lookup cannot name an individual, and the country is where the network is registered, which is not always where the device is.
Checking an IP address's reputation
If an address shows up in your firewall log, a login alert or an email header, the reputation verdict tells you whether it is known for scanning, brute-force attempts, malware delivery or other abuse. A flagged address shows the verdict and the evidence behind it. You can also browse the IP addresses we currently flag as malicious. An address with no verdict is not proof that it is safe: it only means we have not seen it misbehave.
Common questions
Is this IP lookup free?
Yes. The address facts are free and unlimited, and the live check against our threat intelligence and the public registries is free for 5 addresses a day, with no account.
Does it work for IPv6?
Yes. Enter any IPv4 or IPv6 address in its usual written form; IPv6 addresses are shortened to their standard form, so each address has one page.
Can I look up a private address like 192.168.1.1?
You can. Private and reserved addresses are explained (what the range is for and which standard defines it), but they are never sent to outside services, because they only mean something inside your own network.
Can I check many addresses at once?
For bulk checks or automation, our Threat Intelligence service returns the same verdicts through an API.
Want the full picture and an API?
Our Threat Intelligence service returns real-time verdicts, fleet sightings and JSON for automation.