IP Analyzer
Geolocation, ISP, reputation, open ports, and reverse DNS for any IP address.
IP Analyzer
Geolocation, reputation, open ports, and domains on any IP.
What is an IP address?
An IP (Internet Protocol) address is a numerical label assigned to every device connected to a network. It serves two functions: identifying the host (or network interface) and providing the location address for routing traffic across the internet. Every web request you make reveals your IP address to the server you're connecting to.
IP addresses are allocated by the Internet Assigned Numbers Authority (IANA) and distributed to Regional Internet Registries (RIRs) like ARIN (North America), RIPE NCC (Europe), and APNIC (Asia-Pacific), which in turn allocate them to ISPs and organizations.
IPv4 vs IPv6 — the difference
32-bit address. Roughly 4.3 billion possible addresses. Written as four octets: 192.168.1.1. Exhausted globally since 2011. Still the dominant version in use today, managed via NAT.
128-bit address. 340 undecillion possible addresses — effectively unlimited. Written in hexadecimal: 2001:0db8:85a3::8a2e:0370:7334. Designed to replace IPv4 but adoption remains partial.
How does IP geolocation work?
IP geolocation works by mapping IP address ranges to geographic locations based on registration data from RIRs, BGP routing information, and supplementary data gathered through user opt-in, Wi-Fi triangulation, and manual corrections. It is not GPS — it has significant limitations:
- Accuracy is typically city-level for broadband connections, but can be off by hundreds of kilometers for mobile or satellite IPs.
- VPNs, proxies, and Tor exit nodes show the location of the server, not the user.
- Large organizations may appear to be at their corporate HQ location even if users are worldwide.
- IPv6 geolocation is often less accurate than IPv4 due to less historical data.
What IP information reveals about you
Every website you visit receives your IP address automatically — it's required for routing. From that IP, sites can infer:
- Approximate geographic location (typically city/region level)
- Your Internet Service Provider (ISP) and sometimes your organization
- Whether you're using a VPN, datacenter, or Tor exit node (via reputation databases)
- Your ASN (Autonomous System Number), which identifies the network operator
This is why IP address privacy matters. Tools like VPNs, Tor, and privacy-respecting DNS resolvers help limit what can be inferred from your IP.
Using IP analysis in security work
- Identify the owner and location of a suspicious IP seen in server logs or a phishing email header.
- Check if an IP is listed in threat intelligence blocklists (spam, malware C2, proxies).
- Verify whether a connection is coming from a known hosting provider or residential IP range.
- During incident response: quickly profile IPs seen in authentication logs or firewall alerts.