IP lookup: owner, location, open ports and reputation
Enter an IPv4 or IPv6 address and DuckINT asks the regional internet registries (RDAP), routing data, exposure scanners and reputation lists at the same time. You see who the address is allocated to, where it is routed, which ports were seen open, whether it is a Tor exit node and whether it appears on blocklists.
What it shows
- Allocation: the network, organization and abuse contact from RDAP and RIPEstat.
- Country and autonomous system (ASN), and the reverse DNS (PTR) name.
- Open ports and known vulnerabilities seen by internet-wide scanners.
- Reputation: Tor exit status, blocklists, attack reports and threat-intelligence pulses.
Sources it checks
One search asks all of these at the same time. Each result names the one that returned it.
What to do with the result
- To report abuse, write to the abuse contact the registry lists for the network.
- Remember that an IP's location is the network's registered location, not a person's address.
- Check the dates on reputation results: addresses are reassigned, and old reports may be about someone else.
Questions
- Can an IP lookup show where a person lives?
- No. It shows the network an address belongs to and roughly where that network is registered or routed, usually a city or a provider's data centre.
- Are private addresses supported?
- Private and reserved addresses (such as 192.168.x.x) have no public records, so most sources skip them and say so.
- Is it free?
- Yes, within the Free plan's daily allowance; a search that finds nothing does not use it.