What your IP address reveals, and what it does not

Your IP address tells a website your provider and roughly where you are. It does not tell them who you are or where you live. Here is exactly where the line sits.

Updated 25 sept 20263 min read

Shown in English

This guide has not been translated into your language yet, so you are reading the English original. The rest of the site stays in the language you chose.

Before you run anything

These guides are reference material, not instructions for your particular network. Run commands only against networks you own or have explicit permission to examine — in many countries probing a network you are not authorised to touch is a criminal offence regardless of intent. Everything here is provided without warranty: you are responsible for what you run and for its effect on your systems.

Every site you visit sees your IP address. That is not a leak; it is how the reply finds its way back to you. The useful question is what someone can actually learn from it, and the honest answer is: less than the worst warnings suggest, and more than nothing.

What it does reveal

Your internet provider. Address blocks are registered to organisations, and the registries are public. Anyone can see that an address belongs to a particular ISP, mobile carrier, university, company or cloud provider. The IP lookup tool shows exactly this.

A rough location. Geolocation databases map address blocks to places. They are usually right about the country, often right about the region, and frequently wrong about the city — sometimes by a hundred kilometres, because the database records where the provider’s equipment is rather than where you are. Mobile connections are the least precise of all.

The kind of connection. Whether the address belongs to a home broadband provider, a mobile network, a data centre or a known VPN service. Sites use this to decide how suspicious to be: a login from a data-centre address looks different from one on home broadband. The cloud IP check shows whether an address sits in a cloud provider’s published ranges.

That you share it. Everyone in your home, and on many mobile and some broadband networks everyone on the same carrier-grade NAT, appears as the same address. This is why a site sometimes asks you to prove you are human for no reason you can see.

What it does not reveal

Your name. Nothing in an IP address, or in any public database about it, identifies a person.

Your street address. No public database maps addresses to homes. A location that looks precise on a map is the centre of an area, not a house.

What is on your device, or what you browse elsewhere. An address is a delivery label, not a window.

The one party that can connect an address to a subscriber is your provider, which knows which customer held which address at which moment. It does not publish that. It discloses it under legal process — a court order or equivalent — which is how copyright complaints and police investigations reach a person.

Who sees it

Every website and service you connect to, and the content-delivery networks in front of them.
Other people in peer-to-peer systems: torrent swarms, some multiplayer games, and video calls that connect directly between participants.
Recipients of your email, sometimes. Most webmail services leave your address out of the message headers; some desktop mail setups include it.

What someone could do with it

Realistically, the list is short:

Estimate your region. See above for how rough that estimate is.
Send unsolicited traffic at it. Automated scanners probe every address on the internet constantly; yours included, whether or not anyone knows it. A home router drops that traffic unless you have opened a port.
Flood your connection. It happens, mostly to people who streamed or gamed competitively and annoyed someone. Restarting the router usually brings a new address with most residential providers.
Report it to your provider as the source of abuse.

What they cannot do is “hack you” from the address alone. That requires a service on your network that is exposed and vulnerable, which is a problem worth fixing whether or not anyone has your address.

If you want to keep it private

A VPN replaces your address with the VPN’s for the sites you visit. It moves trust from your provider to the VPN company rather than removing it; pick one whose business model you understand.
Keep your router’s firmware updated and do not open ports you are not using. This matters more than hiding the address.
Restart the router if a residential address is being targeted; most providers hand out a new one.

The top of the home page shows exactly what every site sees when you connect, and nothing more — which is a good calibration for all of the above.

All guides