Follow the address.
Bring registration, geolocation, and reputation into one view.
Research an IP address
Submitting sends the address to pamelasec and the configured lookup providers: the appropriate regional registry, MaxMind, AbuseIPDB, and VirusTotal. This tool adds no saved search history or analytics. Provider retention policies apply.
Enter one address to begin.
Registration identifies the registered network holder, which may differ from the current user. Location is an estimate, not a precise device position. Missing reports or zero detections do not establish that an address is safe.
Check this IP with nmap
Run a TCP scan of ports 22, 80, and 443 with light service detection. This actively contacts the address and may take up to four minutes. Scan only systems you own or have permission to test.
Cloudflare verifies your browser before a scan can start. Changing the address clears displayed results; an already started scan may continue until it finishes or reaches its time limit.
Confirm permission to continue.
Four sources. Different perspectives.
Regional registry — registered organization and network range, routed through IANA’s registry directory to ARIN, RIPE NCC, APNIC, LACNIC, or AFRINIC.
MaxMind — estimated country, region, city, time zone, and accuracy radius when available. The result identifies whether GeoLite or GeoIP supplied the data.
AbuseIPDB — community abuse confidence, report count, and last report date for a 90-day reporting window.
VirusTotal — malicious and suspicious vendor assessments with the last analysis date. The lookup does not submit scans or abuse reports to VirusTotal. The optional nmap scan separately contacts the target when you choose to run it.