Skip to content
AdminKit
Free tool Updated

What is my IP — and is my connection safe?

How does this check work, and what does the result tell you?

AdminKit reads your public IP, ISP/ASN and approximate location straight from this request. It also flags CGNAT and shows which DNS resolver you are using, computed entirely from the request with nothing stored and no third-party geolocation database queried at any point.

Part of the IP & network cluster — more tools, guides and terms on ip & network.

Next step

See if this IP shows up on a mail blocklist, check which ports are open on it (with your consent), or confirm which DNS resolver your connection actually uses.

Keep this result

Copy a link to this check so you can share it or run it again later. Want a heads-up when this result changes? Talk to our team and we'll set it up for you.

How it works and limits

The address above comes straight from the connection this page is served over: the CF-Connecting-IP header and the network metadata (ASN, approximate location, protocol) Cloudflare attaches to the request. Nothing is looked up from a third-party geolocation database and nothing about the request is stored — the response is served with Cache-Control: no-store.

What the CGNAT hint means

If your result shows the shared-IP hint, it is based on one of two signals: your address falls in the IANA Shared Address Space (100.64.0.0/10, RFC 6598) reserved for carrier-grade NAT, or your network’s ASN organisation name matches a short list of known mobile carriers. Both are best-effort hints, not certainties — a shared IP means other customers on the same ISP or carrier can appear to share “your” address, which matters if a later check (such as a blacklist or port scan) comes back positive: the result may belong to someone else on the same IP. See what CGNAT is and why it confuses sites for the full picture, including why it can cause unexplained CAPTCHAs or shared blacklist status.

Limits

  • Location is approximate (city/region level at best) and comes from Cloudflare’s network data, not GPS.
  • A dynamic IP can change at any time; this page only shows the address for the current request.
  • This page cannot force a second, IPv6-only connection to check IPv6 reachability independently — see the IPv6 check panel above for why, and what it shows instead.

If your IP changes often and you want something watching it over time rather than a one-time check, see dynamic IP vs CGNAT vs static: what it means for long-term monitoring. Camera and router admin ports (Telnet, RTSP) are commonly exposed on home connections like this one — see Telnet and RTSP: why camera and router admin ports end up exposed. Reference: IP address, dynamic IP, NAT. See also how AdminKit’s IP lookup compares to whatismyipaddress.com and ipinfo.io, or the wider roundup of best free what-is-my-IP tools including ifconfig.co.

Frequently asked questions

Does checking my IP store anything?

No. The result is computed from the request and the response is served with Cache-Control: no-store; see /legal/privacy/.

Why does my IP look different from my router's IP?

Because of Network Address Translation (NAT): most ISPs share one public IP across your own devices, and some add Carrier-Grade NAT (CGNAT) on top, sharing one address across unrelated households too. RFC 6598 reserves a dedicated /10 block for this — 100.64.0.0/10, over 4 million addresses — describing it as "IPv4 address space designated for Service Provider use with the purpose of facilitating CGN deployment" (RFC 6598 §4); this tool flags that range as a CGNAT hint.

Why does my IP show a different city or country than where I actually am?

Location is derived from which network block your IP belongs to, not GPS — carriers and ISPs often register a whole address block to one regional hub, not each customer's actual city, so a mismatch is normal and not a sign anything is wrong.

Does this tool show my IPv6 address too?

If your current connection has IPv6 enabled, yes — both addresses are read from the same request. If your network is IPv4-only, no IPv6 address appears because this connection does not have one to show.