What Is My Public IP Address?
Inspect your live public IPv4 & IPv6 addresses, ASN/ISP ownership, reverse PTR & RDAP WHOIS records, WebRTC VPN leaks, HTTP headers, and subnet masks in one view.
Full-Stack IP Intelligence, WebRTC Leak Testing & BGP Network Diagnostics
Most IP lookup pages show one number, an approximate city name, and a wall of banner ads. This utility inspects both sides of your connection in parallel: it checks dual-stack IPv4 and IPv6 reachability from your browser, reads real edge request headers, verifies Reverse PTR and RDAP WHOIS allocations, probes WebRTC ICE candidates for VPN leaks, and calculates exact subnet bounds without logging your IP.
Network & Privacy Diagnostics Included
Dual-Stack IPv4 + IPv6 Detection
Simultaneously probes your public IPv4 egress address and checks whether your ISP or mobile carrier routes native IPv6 connectivity, alongside bit-level binary, hex, decimal integer, and ARPA representations.
Real Browser WebRTC Leak Probe
Runs a live RTCPeerConnection ICE candidate check against STUN directly in your browser to uncover whether WebRTC exposes your real ISP IPv4 or unmasked LAN addresses behind a VPN tunnel.
Live RDAP WHOIS & FCrDNS Verification
Queries Regional Internet Registry (ARIN, RIPE, APNIC, LACNIC, AFRINIC) RDAP records for any IPv4 or IPv6 address and cross-checks Forward-Confirmed Reverse DNS (PTR <-> A/AAAA).
HTTP Proxy Header & Timezone Cross-Check
Inspects incoming edge headers such as X-Forwarded-For, Via, and CF-Ray alongside your browser Intl timezone to spot silent transparent proxies or mismatched geolocation profiles.
How Websites Identify Your Network—and Where Privacy Leaks Actually Happen
When your browser loads a website, your operating system opens a TCP or QUIC socket from whichever public interface holds the default route. If your home router or cellular carrier runs dual-stack networking, Happy Eyeballs (RFC 8305) frequently races IPv6 ahead of IPv4, meaning different services can observe two completely distinct IP addresses for the same machine depending on whether their DNS includes AAAA records.
Turning on a VPN or corporate proxy only seals traffic routed inside the tunnel interface. Browser APIs such as WebRTC (Real-Time Communications) establish peer-to-peer UDP paths using ICE (Interactive Connectivity Establishment) and STUN servers—and on misconfigured browsers or split-tunnel setups, STUN packets occasionally bypass the VPN interface and reveal the true ISP-assigned address or raw local RFC 1918 LAN IP.
Servers and CDNs combine several independent signals beyond raw IP geolocation. Reverse DNS (PTR) paired with matching forward A or AAAA records—known as Forward-Confirmed Reverse DNS (FCrDNS)—tells spam filters and anti-bot firewalls whether an IP legitimately belongs to a mail server, cloud provider, or residential broadband pool. Regional Internet Registry RDAP records expose the exact BGP CIDR block, parent organization, and abuse desk managing that prefix.
Even when your egress IP matches the VPN exit country, discrepancies between your browser’s Intl timezone, Accept-Language header, and the IP’s registered timezone are routinely inspected by fraud engines. Checking all five layers together—dual-stack IPs, WebRTC ICE candidates, HTTP forwarding headers, RDAP ownership, and FCrDNS—gives engineers and privacy-conscious users complete visibility into how a remote server perceives their connection.
IPv4 & IPv6 Address Scopes and Reserved Ranges Reference
| Specification | Pattern / Benchmark | Why It Matters |
|---|---|---|
| RFC 1918 Private IPv4 | 10.0.0.0/8 · 172.16.0.0/12 · 192.168.0.0/16 | Non-routable LAN ranges reserved for internal routers, Wi-Fi networks, and VPCs. |
| RFC 6598 Carrier-Grade NAT | 100.64.0.0/10 | Shared address space used by ISPs and mobile carriers for CGNAT translation. |
| RFC 3927 Link-Local | 169.254.0.0/16 · fe80::/10 | Auto-configured link-local addresses when DHCP fails or for IPv6 neighbor discovery. |
| RFC 4193 Unique Local IPv6 | fc00::/7 (fd00::/8) | Private IPv6 analog to RFC 1918 for internal networks without global routing. |
| Loopback Addresses | 127.0.0.0/8 · ::1/128 | Localhost interface traffic that never leaves the host network stack. |
| Multicast & Documentation | 224.0.0.0/4 · 2001:db8::/32 | Reserved IPv4 multicast groups and non-routable IPv6 documentation ranges. |
Running a Full IP & Leak Check
Read Your Live Egress IPs
Upon opening the page, the tool automatically displays your active public IPv4 and IPv6 addresses, ISP/ASN number, and city-level region.
Audit VPN & WebRTC Leaks
Open the WebRTC & Leak Audit tab and run the ICE probe to verify whether your browser exposes an unmasked local or ISP address.
Lookup Any IPv4 / IPv6 or Domain DNS
Type any third-party IP (such as 1.1.1.1 or an access-log address) in the hero search bar or query A, AAAA, MX, TXT, and NS DNS records directly.
Calculate CIDR Ranges & Export
Use the interactive Subnet Calculator tab to split BGP prefixes into network, broadcast, and usable host bounds, then copy or export JSON/Markdown reports.
IP Address, WebRTC & Subnet FAQ
Helpful answers and practical tips for My IP & Network.
Why does my IPv4 address differ from my IPv6 address or city?
Many ISPs lease separate IPv4 CGNAT pools and native IPv6 /56 prefixes allocated from different regional hubs. If your connection supports both stacks, GeoIP databases may resolve your IPv6 block to a regional PoP while mapping your IPv4 address closer to your local exchange.
Does this tool store or log my public IP address?
No. Requests to our inspection endpoint use Cache-Control: no-store and compute geolocation, PTR, and RDAP lookups transiently in memory without writing IP addresses to any database or disk log.
What does a WebRTC leak mean if a candidate IP matches my VPN vs ISP?
If your WebRTC STUN probe shows only obfuscated mDNS `.local` hostnames or your exact VPN exit IP, your tunnel is sealing WebRTC traffic properly. If it reveals a different public IPv4 or unmasked home LAN IP, consider enabling browser WebRTC IP handling controls.
Why does my browser geolocation show a different city than my street address?
Public IP addresses belong to ISPs, not individual homes. GeoIP registries pinpoint the carrier’s regional POP, CGNAT gateway, or mobile LTE breakout node—typically accurate to metro area or region rather than exact street coordinates.
Can I look up suspicious IPs from server access logs here?
Yes. Enter any public or private IPv4 or IPv6 address in the hero search bar to query live RDAP allocation ownership, BGP CIDR block, abuse contact email, ASN, Reverse PTR, and Forward-Confirmed Reverse DNS.
What is Forward-Confirmed Reverse DNS (FCrDNS)?
FCrDNS verifies that looking up an IP address’s PTR hostname returns a domain that in turn resolves back (via A or AAAA record) to the exact same IP address—a standard authenticity check used by mail servers and API firewalls.