IP Address Lookup

You are reading a log file and you see 203.0.113.42. Where is it coming from? Is it a cloud provider, a residential ISP, or a VPN exit node? Paste the address and find out.

Enter an IPv4 or IPv6 address. Get geolocation, network ownership, and timezone.

What you get

• Geolocation -- country, region, city, approximate coordinates. Accuracy is solid at country level (95%+), looser at city level (50-80%). Do not use this to pinpoint a building.
• Reverse DNS -- the hostname associated with the address. Often generic for cloud addresses (ec2-...amazonaws.com), but sometimes it tells you exactly what service you are hitting.
• Autonomous System -- the organization that owns the IP block. AS15169 is Google, AS16509 is Amazon, AS13335 is Cloudflare. This is the most reliable signal for identifying who is behind an address.
• Timezone -- local timezone and current UTC offset for the geolocated region.

IPv4 vs IPv6

Both work. IPv6 addresses can be in shorthand (2001:4860::8888) -- the tool expands them automatically. Private ranges (10.x, 192.168.x, 172.16-31.x) get flagged since they are not routable on the public internet.

Practical uses

• Abuse investigation -- a spammer hit your contact form. Look up the IP, check the AS, file the abuse report with the right provider.
• Geo-restriction testing -- verify your content is being served to the right region by checking what a proxy IP resolves to.
• Log triage -- scanning logs for suspicious traffic. A request from an unexpected country at 3 AM is worth a second look.
• VPN detection -- if a "residential" IP belongs to a known hosting AS, it is probably a VPN or proxy.

Gotcha

Geolocation points to the carrier regional hub, not the user actual location. A "New York" result might mean the user is in rural Pennsylvania. Use it for broad signals, not precise targeting.