What is my IP — and is my connection safe?
How does this check work, and what does the result tell you?
AdminKit reads your public IP, ISP/ASN and approximate location straight from this request. It also flags a likely CGNAT address and tells you whether the request arrived over IPv4 or IPv6, computed entirely from the request with nothing stored and no third-party geolocation database queried at any point.
Part of the IP & network cluster — more tools, guides and terms on ip & network.
Next step
See if this IP shows up on a mail blocklist, check which ports are open on it (with your consent), or confirm which DNS resolver your connection actually uses.
Keep this result
Copy a link to this check so you can share it or run it again later. Want a heads-up when this result changes? Talk to our team and we'll set it up for you.
How it works and limits
The address above comes straight from the connection this page is served over: the CF-Connecting-IP header (documented in
Cloudflare’s HTTP request headers reference)
and the network metadata (ASN, approximate location, protocol) Cloudflare attaches to the request. Nothing is looked up from a
third-party geolocation database and nothing about the request is stored — the response is served with
Cache-Control: no-store.
What the CGNAT hint means
If your result shows the shared-IP hint, it is based on one of two signals: your address falls in the
IANA Shared Address Space
(100.64.0.0/10, RFC 6598) reserved for carrier-grade NAT, or your network’s ASN organisation name
matches a short list of known mobile carriers. One reason carriers share addresses is that fresh IPv4 space has
run out: the RIPE NCC, the registry for Europe, the Middle East and parts of Central Asia, says on its
IPv4 run-out page that it exhausted its remaining IPv4 pool in November 2019. Both are best-effort hints, not certainties — a shared IP means other
customers on the same ISP or carrier can appear to share “your” address, which matters if a later check (such as a
blacklist or port scan) comes back positive: the result may belong to someone else on the same IP. See
what CGNAT is and why it confuses sites for the full picture, including why it can cause
unexplained CAPTCHAs or shared blacklist status.
How to read the results
- Your public IP right now — the address from this request’s
CF-Connecting-IPheader, with a line saying whether it is an IPv4 or an IPv6 address. It reads “Unavailable” if the header is missing. - Hint: this IP may be shared (CGNAT or a mobile carrier) — shown only when one of the two CGNAT signals above matches; no hint appears otherwise.
- Protocol — IPv4 or IPv6, the protocol your browser used to reach this page.
- Network (ASN) — the organisation that announces your IP block (usually your ISP, mobile carrier, VPN or hosting provider), followed by its AS number in brackets, or “Unknown”.
- Approximate location — city, region and country code from Cloudflare’s network data, or “Unknown”.
- Connection — the HTTP version and TLS version of this request, for example
HTTP/2 · TLSv1.3. - IPv6 check — whether this request arrived over IPv6, and what that means for reachability.
- Which DNS resolver am I using? — this page does not perform the per-request DNS lookup needed to answer that; the DNS resolver test explains how that check works.
Examples
| Your public IP | Network (ASN) | Protocol | CGNAT hint |
|---|---|---|---|
203.0.113.45 | Example Fiber (AS64500) | IPv4 | None — an ordinary public IPv4 address. |
100.72.15.9 | Example Broadband (AS64501) | IPv4 | Shown — the address is inside 100.64.0.0/10. |
198.51.100.20 | Example Mobile Networks (AS64502) | IPv4 | Shown — the network name contains “mobile”. |
2001:db8:85a3::7334 | Example Fiber (AS64500) | IPv6 | None — the IPv6 check panel confirms you connected over IPv6. |
2001:db8::1 | Example Wireless (AS64503) | IPv6 | Shown — the network-name check also applies to IPv6. |
Limits
- Location is approximate (city/region level at best) and comes from Cloudflare’s network data, not GPS.
- A dynamic IP can change at any time; this page only shows the address for the current request.
- This page cannot force a second, IPv6-only connection to check IPv6 reachability independently — see the IPv6 check panel above for why, and what it shows instead.
If your IP changes often and you want something watching it over time rather than a one-time check, see dynamic IP vs CGNAT vs static: what it means for long-term monitoring. Camera and router admin ports (Telnet, RTSP) are commonly exposed on home connections like this one — see Telnet and RTSP: why camera and router admin ports end up exposed. Reference: IP address, dynamic IP, NAT. See also how AdminKit’s IP lookup compares to whatismyipaddress.com and ipinfo.io, or the wider roundup of best free what-is-my-IP tools including ifconfig.co.
Frequently asked questions
Does checking my IP store anything?
No. The result is computed from the request and the response is served with Cache-Control: no-store; see /legal/privacy/.
Why does my IP look different from my router's IP?
Because of Network Address Translation (NAT): most ISPs share one public IP across your own devices, and some add Carrier-Grade NAT (CGNAT) on top, sharing one address across unrelated households too. RFC 6598 reserves a dedicated /10 block for this — 100.64.0.0/10, over 4 million addresses — describing it as "IPv4 address space designated for Service Provider use with the purpose of facilitating CGN deployment" (RFC 6598 §4); this tool flags that range as a CGNAT hint.
Why does my IP show a different city or country than where I actually am?
Location is derived from which network block your IP belongs to, not GPS — carriers and ISPs often register a whole address block to one regional hub, not each customer's actual city, so a mismatch is normal and not a sign anything is wrong.
Does this tool show my IPv6 address too?
It shows the one address this request arrived from. If your browser reached AdminKit over IPv6, that is your public IPv6 address and the Protocol field says IPv6; if it connected over IPv4, only the IPv4 address appears, even if your network also has IPv6 — the IPv6 check panel explains why this page cannot force a second, IPv6-only connection.
Does the CGNAT hint mean my IP is definitely shared?
No. The hint appears when your IPv4 address is inside 100.64.0.0/10 (the RFC 6598 shared address space) or when your network's ASN organisation name contains a word from a short list of mobile-carrier terms such as "mobile" or "wireless". Both are best-effort signals: a carrier can share addresses without matching either, and a network name can match without sharing yours.