IP address lookup
Find out who an IP address belongs to. We ask the official internet registries (RDAP) and reverse DNS, and explain the answer in plain language.
Results for 185.220.101.1
Note: This address belongs to Artikel10 e.V. in Germany. Its reverse DNS name is berlin01.tor-exit.artikel10.org.
Network type Tor exit node What we checked
Key facts
| IP address | 185.220.101.1 IPv4 · defanged 185[.]220[.]101[.]1 |
|---|---|
| PTR record | berlin01.tor-exit.artikel10.org |
| Owner / ISP | Artikel10 e.V. |
| CIDR | 185.220.101.0/27 |
| Location | Germany (DE) where the network is registered (an estimate) |
| Registry | RIPE NCC |
| Abuse contact |
Network
| Network name | ARTIKEL10 |
|---|---|
| Handle | 185.220.101.0 - 185.220.101.31 |
| CIDR | 185.220.101.0/27 |
| Range | 185.220.101.0 - 185.220.101.31 |
| Country | Germany (DE) |
Owner
| Organization | Artikel10 e.V. |
|---|---|
| Abuse contact |
Registration
| Registered | 2021-08-19 |
|---|---|
| Last changed | 2025-06-18 |
| Registry | RIPE NCC |
Reverse DNS
| PTR record | berlin01.tor-exit.artikel10.org |
|---|
Check it elsewhere
These services have their own data and terms. We only link to them: the address is sent to them only if you click.
What this means and where the data comes from
What the findings mean
PTR record
Abuse contact
CIDR
Country
Where the data comes from
- Source: RDAP (RIPE NCC)
- Source: reverse DNS (Cloudflare DNS)
Fetched 2026-11-14 01:01 UTC. Results are cached for up to 24 hours.
The same data as JSON: /json/185.220.101.1
What this tool does
RDAP (Registration Data Access Protocol) is the modern replacement for WHOIS. Every public IP address is assigned by one of five regional registries: ARIN (North America), RIPE NCC (Europe, Middle East), APNIC (Asia-Pacific), LACNIC (Latin America) and AFRINIC (Africa). We ask rdap.org, which forwards the question to the right registry.
Reverse DNS (a PTR record) is a name the network owner can attach to an address, like dns.google for 8.8.8.8. Home connections often have generic names that reveal the internet provider and sometimes the region.
The owner shown is the organization the address block is registered to. That is usually an internet provider, a hosting company or a large business, not the individual person using the address.
How to read the results
- Summary: one sentence naming the organization the address block is registered to, the country of registration, and the reverse DNS name if there is one.
- Network: the registry's name and handle for the block, and its size as a CIDR range. 8.8.8.0/24, for example, means the 256 addresses from 8.8.8.0 to 8.8.8.255. The country here is where the block is registered, which can differ from where it is used.
- Owner and abuse contact: the organization, and the email address the registry lists for abuse reports. To report spam or attacks from an address, write to that contact, not to iplover.
- Registration: when the block was registered and last changed, and which of the five regional registries holds the record.
Frequently asked questions
Can this tool tell me who is using an IP address?
No. It shows the organization the address block is registered to, usually an internet provider or a hosting company. Only that provider knows which customer used an address at a given moment, and it normally shares that only with the police or in response to a court order.
Why is there no reverse DNS name?
Reverse DNS is optional. The owner of the network decides whether to publish a name for each address, and many do not, especially for home and mobile connections.
Why can't I look up 192.168.1.1 or 10.0.0.1?
These are private addresses reserved for local networks. Millions of networks use the same ones, so no registry records an owner for them.
How do I report abuse coming from an IP address?
Write to the abuse contact shown in the Owner section. Include the address, the exact time with its time zone, and evidence such as log lines or message headers. Services like AbuseIPDB, linked on this page, also collect reports.
Why does the country differ from the location on the homepage?
The country here is where the organization registered the block. Location databases try to estimate where an address is actually used. For large providers and cloud networks the two often differ.