IP Lookup — Find location, ISP, ASN, reverse DNS, and security details for any IPv4 or IPv6 address.

Enter any public IPv4 or IPv6 address to retrieve ownership, routing, geolocation, reverse DNS, and security intelligence associated with that IP.

IP intelligence is useful for debugging, investigations, security analysis, infrastructure verification, and abuse detection.

A single IP address can reveal routing, ownership, infrastructure type, and approximate geographic information through multiple independent datasets.

• Stage 1 — Validate the IP The address is normalized and validated as either IPv4 or IPv6, including checks for private, reserved, multicast, and special-use ranges.
• Stage 2 — Identify ASN and ISP The IP is matched against global BGP routing tables to identify the ASN, announcing network, ISP, and organization that owns the address block.
• Stage 3 — Geolocate the IP Geolocation databases map the IP block to an approximate physical region including country, state, city, coordinates, and timezone.
• Stage 4 — Run security checks Threat-intelligence feeds are queried to determine whether the IP belongs to a VPN exit node, proxy, Tor relay, hosting provider, or suspicious infrastructure.
• Stage 5 — Resolve reverse DNS PTR records are queried through reverse DNS zones to identify associated hostnames and infrastructure naming patterns.

Modern internet infrastructure supports both IPv4 and IPv6 simultaneously, and IP Lookup works with either protocol.

• IPv4 — the legacy internet protocol IPv4 uses 32-bit addresses written as four decimal octets, such as 8.8.8.8. The address space is effectively exhausted, leading to widespread use of NAT and CGNAT.
• IPv6 — the modern replacement IPv6 uses 128-bit hexadecimal addresses such as 2606:4700:4700::1111, providing effectively unlimited address capacity.
• Dual-stack networks Most modern devices and ISPs support both IPv4 and IPv6 simultaneously, with the operating system choosing the best protocol per connection.
• Why lookup results differ Different services may see different IPs depending on whether the connection used IPv4 or IPv6 routing.

IP addresses are divided into globally routable public ranges and internal private ranges used within local networks.

• Public IP addresses Public IPs are globally routable and uniquely identifiable across the internet. They are assigned by ISPs, cloud providers, and network operators.
• Private IP ranges RFC 1918 private ranges include 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16. These addresses are not routable on the public internet.
• Carrier-grade NAT (CGNAT) Many mobile and residential ISPs share a single public IPv4 address across multiple customers using CGNAT infrastructure.
• Reserved and special-use ranges Loopback, multicast, documentation, benchmarking, and experimental address ranges are reserved for special networking purposes.

Security classification helps determine whether an IP behaves like a normal residential user or automated infrastructure.

• VPN detection Detect whether the IP belongs to a commercial VPN provider such as NordVPN, Mullvad, ProtonVPN, Surfshark, or ExpressVPN.
• Proxy detection Identify HTTP, SOCKS, transparent, and anonymous proxies using reputation feeds and behavioral indicators.
• Tor exit relay detection Match the IP against the Tor Project's published exit relay list.
• Hosting provider detection Determine whether the IP belongs to AWS, Google Cloud, Azure, DigitalOcean, OVH, Hetzner, or other datacenter infrastructure.
• Anonymous infrastructure scoring Combine VPN, proxy, Tor, and hosting signals into a broader anonymity classification.

The same lookup data is available through a JSON API for integrations, automation, security workflows, and analytics systems.

const res = await fetch(
  'https://api.domainscan.in/v1/ip/lookup?ip=8.8.8.8'
);

const data = await res.json();

console.log(data.ip);
console.log(data.location.country.name);
console.log(data.isp.organization);
console.log(data.security.isVPN);
console.log(data.reverseDNS.hostname);

{
  "ip": "string",
  "version": "IPv4 | IPv6",
  "private": "boolean",
  "network": "CIDR block",

  "location": {
    "continent": "string",
    "country": {
      "code": "ISO 3166",
      "name": "string"
    },
    "state": "string",
    "city": "string",
    "postalCode": "string",
    "latitude": "number",
    "longitude": "number",
    "accuracyRadius": "number",
    "timeZone": "IANA timezone"
  },

  "isp": {
    "isp": "string",
    "organization": "string",
    "asn": {
      "number": "integer",
      "organization": "string"
    },
    "type": "ISP | Hosting | CDN"
  },

  "reverseDNS": {
    "hostname": "string"
  },

  "security": {
    "isAnonymous": "boolean",
    "isVPN": "boolean",
    "isProxy": "boolean",
    "isTorExitNode": "boolean",
    "isHostingProvider": "boolean"
  }
}

• How accurate is IP geolocation? Country-level geolocation is typically very accurate. City-level accuracy varies depending on the ISP, mobile carrier, VPN usage, and underlying geolocation database quality.
• Can an IP reveal someone's exact address? No. Public IP addresses generally resolve only to approximate geographic regions or ISP infrastructure locations.
• Why does an IP show a different country? VPNs, mobile carriers, CGNAT systems, cloud infrastructure, and Anycast routing can cause traffic to appear from different geographic regions.
• What is reverse DNS? Reverse DNS maps an IP address back to a hostname using PTR records stored under in-addr.arpa or ip6.arpa DNS zones.
• Why does an IP belong to AWS or Cloudflare? Many applications, VPNs, bots, APIs, and websites operate behind cloud infrastructure or CDN providers instead of residential ISPs.
• What is an ASN? An Autonomous System Number (ASN) identifies a network operator participating in global internet routing through BGP.
• What does 'hosting provider detected' mean? It means the IP belongs to cloud or datacenter infrastructure rather than a residential ISP network.
• Does IP Lookup support IPv6? Yes. Both IPv4 and IPv6 addresses are fully supported.