nicetool.dev logo

IP Lookup

Enter an IPv4 or IPv6 address. Your own address is filled in to start with.

Try:

What does an IP lookup show?

Every public IP address belongs to a network block that a regional registry (ARIN, RIPE NCC, APNIC, LACNIC or AFRINIC) assigned to an organization, usually an ISP, a hosting company or a large enterprise. That organization announces the block on the internet under its Autonomous System Number (ASN). An IP lookup combines this registration and routing data with a geolocation database to estimate where the address is used: country, region, city and time zone. It is how security teams triage suspicious traffic, how sites pick a default language, and how developers check where their servers and CDN edges really are.

Features

  • • Works with IPv4 and IPv6, including compressed and IPv4-mapped forms
  • • Country, continent, region, city, postal code, coordinates and accuracy radius
  • • ASN, ISP or organization and the exact network block (CIDR)
  • • Time zone with the current local time at that location
  • • Recognizes private, CGNAT, loopback, link-local, documentation and multicast ranges

Local database

Lookups run against a GeoLite2 database stored on our own server. The addresses you check are not sent to any third-party API and are not logged.

No third-party API calls.

How to use the IP Lookup

  1. 1

    Type or paste an IPv4 address such as 8.8.8.8 or an IPv6 address such as 2001:4860:4860::8888. Brackets and zone ids like %eth0 are accepted.

  2. 2

    Press Enter or Look up. The address is normalized (IPv6 is shown in its short RFC 5952 form) and added to the page URL so you can share the result.

  3. 3

    Read the network section first: address type, network block, ASN and organization tell you who operates the address.

  4. 4

    Then check the location fields and accuracy radius. A radius of 1000 km means the database only knows the country, not the city.

Practical examples

Investigating a suspicious login

Paste the IP from a security alert: an ASN belonging to a hosting provider or a country your users never log in from is a strong signal of a bot or a stolen password.

Reading server logs

Look up the top IPs from an Nginx or Apache access log to see whether heavy traffic comes from real visitors, a search engine crawler or a cloud provider.

Checking a CDN or cloud region

Resolve your domain, then look up the IP to confirm your users reach the edge or region you expect, for example a Singapore node for Southeast Asian visitors.

Spotting private addresses

An address like 10.0.4.12, 100.64.1.1 or fd00::1 is flagged as private, CGNAT or unique local, which explains why it has no public location.

Frequently asked questions

How accurate is IP geolocation?+

Country is usually right (around 99%), the region often, the city much less. The accuracy radius shows how confident the database is. Mobile networks, VPNs and satellite links are the least precise.

What is an ASN?+

An Autonomous System Number identifies a network that routes its own IP blocks on the internet, such as AS15169 for Google or AS13335 for Cloudflare. All addresses announced by the same ASN belong to one operator.

Why do the country and registered country differ?+

The country is where the address is used, the registered country is where the block was allocated. They differ for multinational companies, mobile roaming and some cloud providers.

Is this the same as a WHOIS lookup?+

Not exactly. WHOIS returns the registry record (owner, abuse contact, allocation date). This tool returns routing and geolocation data from GeoLite2, which is better for location and ASN.