IP Address Lookup
Both IPv4 & IPv6 are input searchable. GeoIP location is powered by the latest MaxMind database; reputation info references VirusTotal.
An IP address is the numeric label that identifies a device
on a network — an IPv4 address like 8.8.8.8, or an IPv6 address.
WHOIS is the public registry lookup that shows which network
block an address belongs to and who operates it; this tool combines that with
GeoIP location and reputation references in a single search.
GeoIP location is derived from network registration data, not GPS, so it is approximate — it can be off, especially for mobile carriers, VPNs/proxies, and recently reassigned address ranges. PTR (reverse DNS) often reveals the hosting provider or organization behind an address, which is useful context when judging whether traffic or an email is trustworthy. See About for more on how this data is sourced.
Frequently asked questions
What is an IP address?
A numeric label — an IPv4 address like 8.8.8.8, or an IPv6 address — assigned to a device so it can send and receive data on a network.
What is WHOIS?
A public directory service that shows which organization or ISP a network address block is registered to, and how to contact them.
Why is the GeoIP location sometimes wrong?
GeoIP maps addresses to locations using network registration and routing data, not GPS. It is usually reliable at the country level, but can be off at the city level — especially for mobile carriers, VPNs, and recently reassigned address ranges.
Why does PTR (reverse DNS) matter?
A valid, matching PTR record is one signal that mail servers and security tools use to judge whether traffic from an address is legitimate — a missing or mismatched PTR record is a common indicator used in spam and abuse filtering.
Is this lookup free, and is there a limit?
Yes, it is free with no sign-up. To check many addresses at once, use Multiple lookup instead of scripting requests against this page directly.