IP Address Inspector
Paste any IPv4 or IPv6 address. See its scope, normalized form, reverse-DNS pointer, integer forms, any embedded IPv4, and the MAC hidden in an EUI-64 address. Everything runs in your browser.
How IP address scopes work, and what each form means
Public vs special-purpose
Most addresses you will inspect are either globally routable (a real destination on the public internet) or reserved for a special purpose by the IETF. Special-purpose blocks include private networks, loopback, link-local, carrier-grade NAT, documentation ranges, and multicast. They are not reachable across the open internet, so seeing one where you expected a public address is itself a useful signal.
The reverse-DNS pointer
Every address has a matching name in the reverse tree. IPv4 uses in-addr.arpa with the octets reversed; IPv6 uses ip6.arpa with every hex nibble reversed. This is the name a PTR lookup queries to find the hostname an address claims.
Integer and hex forms
An IPv4 address is just a 32-bit number, so 192.0.2.1 is also 3221225985 and 0xC0000201. Shorteners, logs, and some malware use these alternate forms to disguise an address. IPv6 is a 128-bit number shown in the same way.
Embedded IPv4 and EUI-64
Several IPv6 mechanisms carry an IPv4 address inside them: IPv4-mapped (::ffff:a.b.c.d), 6to4 (2002::/16), Teredo (2001::/32), and NAT64 (64:ff9b::/96). Separately, an address whose interface identifier was built from a MAC using SLAAC contains ff:fe in the middle, and the original hardware MAC can be reconstructed by flipping one bit. That historically leaked a stable device identifier, which is why modern systems prefer privacy-stable random identifiers.
A note on trust
Classification here is structural: it reflects what the address is by its bits, not who currently controls it. For ownership, geolocation, or abuse history of a public address, you need a live lookup against routing and registry data.