IP Lookup
Enter a hostname or an IPv4 or IPv6 address. The tool shows who the address block is registered to, according to the regional internet registry responsible for it.
- Utilities
- Live check
- Free, no sign-up
- Results are not published
Run IP Lookup
At a glance
- What it checks
- Find the IP addresses behind a host and the network registration data published by the regional registry.
- Data source
- Regional internet registry RDAP data (ARIN, RIPE NCC, APNIC, LACNIC, AFRINIC).
- Freshness
- Live check; results are cached for up to 6 hours
- Limits
- The country is the registry record’s country, not a physical server location. Methodology
- Cost
- Free, no account needed
Understanding the result
Where the data comes from
IP address space is handed out by five regional internet registries (RIRs): AFRINIC, APNIC, ARIN, LACNIC and RIPE NCC. Each publishes registration data for the blocks it manages through RDAP. The tool uses IANA's IPv4 and IPv6 bootstrap files to find the right registry for an address, then asks that registry's RDAP service.
When you enter a hostname, the tool first resolves its A and AAAA records through public DNS-over-HTTPS resolvers and looks up the first four addresses. When you enter an IP address, only that address is looked up.
What the result shows
For each address you get:
- Network name and handle: the identifier the registry uses for the block, such as
EXAMPLE-NET-1. - Range: the start and end address, and the CIDR prefix when the registry provides it, for example
198.51.100.0/24. - Allocation type: how the block was assigned, as described by the registry.
- Organization: the registrant of the network, when published.
- Country: the country recorded in the registration.
- Abuse contact: the email address for reporting spam, attacks or other abuse from the network.
- Registry: which RIR answered.
Findings summarize the number of addresses, how many are IPv6 and whether any are private or reserved. A private address is INFO when you entered it directly and a WARNING when a public hostname resolves to it, since visitors on the internet cannot reach it.
This is not geolocation
The country shown is the country in the registry record, which is usually where the organization holding the block is based. It is not a measurement of where the server physically sits or where a user is. A global cloud provider or CDN may register its space in one country and use it on every continent. DomainDNSCheck does not use commercial geolocation databases and does not guess city-level locations.
Similarly, the organization is the holder of the address block, which is often a hosting provider or ISP rather than the operator of the website at that address.
Practical uses
Use this lookup to find out which hosting provider or network serves a site, to find the right abuse contact for an attacking address, or to confirm that a domain's records point to the provider you expect after a migration. For the hostname assigned to an address, use Reverse DNS. For the records behind a domain, use the DNS Lookup. Documentation ranges such as 192.0.2.0/24 and 2001:db8::/32 are reserved and have no owner to look up.
Frequently asked questions
Why does the country not match where the website is hosted?
The registry country belongs to the registration record, not to the server's location. Large networks often use addresses registered in one country around the world.
Why are only some addresses of my domain shown?
The tool looks up at most four addresses per hostname to keep lookups fast and respectful of registry rate limits. The total number of addresses found is still reported.
Some fields are empty. Why?
Registries publish different levels of detail, and some redact contact information. If the registry could not be reached, the result is marked partial.
Can I find out who is behind an IP address?
You can find the network that holds it and its abuse contact. Identifying an individual user of an address is only possible for the network operator, typically in response to a lawful request.