IP address lookup

Look up an IP address, in one report see the full network analysis

Location, provider, blocklists, VPN and proxy detection, ports and WHOIS record. The DNS report and email security are in the same place too.

Try:
No sign-up needed 24 blocklists scanned curl and JSON API
Tools

Six tools, one report

No need to visit separate sites. Every lookup runs in the same report engine; go straight to the section you need or view the whole report.

More

DNS, email and network tools

How it works

A full report in four steps

We ask the source itself, not stale cached answers.

01

Enter the address

IP address, domain name or AS number. The input type is detected automatically.

02

Sources are queried

Authoritative DNS servers, RIPEstat, RDAP, 24 blocklists and open resolvers.

03

Sections fill in

Each section is computed independently and appears on the page as soon as it is ready.

04

Use the result

Score, fix suggestions, JSON output, curl and a printable report.

IP report

All tools are sections of one report

You do not need one site for location, another for blocklists and a third for ports. It all comes together in one report with a single trust score.

  • Location and provider: map, uncertainty radius, ASN and reverse DNS
  • Anonymity and risk: VPN, proxy, Tor, data center and mobile line
  • Blocklist: 24 DNSBLs, with removal links
  • Ports and WHOIS: 12 common ports, RDAP record and traceroute
Sample view
Terminal and API

No browser needed

With curl, get just your IP address or a colored summary. Plug the JSON output and an API key into your own tools.

Recent lookups

Popular domains

SSS

Frequently asked questions

What does the DNS report check?

From the authoritative nameserver: A, AAAA, CNAME, MX, NS, SOA, TXT and CAA records; the SPF include chain and 10-lookup limit; DKIM, DMARC, MTA-STS and BIMI; the DNSSEC chain of trust; nameserver count, ASN diversity and SOA serial consistency; MX target resolution and PTR records; the SSL certificate and security headers; and propagation across 12 public resolvers.

What is in the IP report?

Location (map and uncertainty), ISP and ASN, reverse DNS, RDAP registration data, a scan of 24 blocklists (DNSBL), Tor and data-center detection, and a 0–100 trust score. Port scanning is only performed for your own IP address.

Do results come from a cache?

No. DNS records are queried directly from the domain's authoritative server; public resolver caches are only used in the propagation section, for comparison. Section results are kept for 60 seconds to reduce load.

Is it free?

Reports are free without signing up. With an account you also get an API key, domain and IP monitoring (email alerts) and bulk lookup; limits depend on your account's plan.

How do I use it from the terminal?

curl ipsorgu.net/dns/ornek.com/ prints a colored summary; ?format=json returns the full report as JSON. curl ipsorgu.net returns only your IP address.