IP Address Lookup

Found an IP address in a log, email header or firewall alert? See who it belongs to, which network and country it's in, its reverse DNS name, and whether it's a hosting or VPN provider. Paste up to 25 at once.

What the results mean

  • Owner and network (ASN): the organisation that announces the address on the internet, usually an internet provider, hosting company or large business. It's rarely the person using it.
  • Country is where the address block is registered, which is usually but not always where it's used. Mobile, VPN and satellite addresses can appear in another city or country.
  • Reverse DNS is the name the owner gave the address. It often hints at the type of connection or the server's purpose.
  • Hosting network means a data centre or cloud provider. Logins from these are often VPNs, bots or attackers rather than real people.

Investigating an address

  • See if it's on spam blocklists with the Blacklist Checker, or trace the route to it with Traceroute.
  • To report abuse, contact the network owner's abuse address (shown in a WHOIS lookup of the IP at the registry, such as RIPE for Europe).
  • An IP address alone can't identify a person. Only the internet provider can link it to a customer, and only for the police or under a court order.