What an IP address is and why someone might want yours
An IP address is a number that identifies your device on the internet, like a mailing address for your computer. It looks like four numbers separated by dots: 192.168.1.1. Every time you visit a website, send an email, or use an app that connects to the internet, your IP address travels along with that data so the other computer knows where to send the response back.
Finding someone's IP address is technically possible in several ways, but the reason matters. If you're trying to troubleshoot a network problem on your own devices, or you're a website owner looking at your server logs, that's one thing. If you're trying to track someone down, identify them, or locate them without their knowledge, you're entering territory that's both legally risky and ethically murky.
The gap between "I can do this" and "I should do this" is wider here than in most tech questions. This guide explains how IP addresses can be found, what the limits actually are, and why the movies get it wrong.
Key Takeaways
- An IP address is a number assigned to your device on the internet, but it usually identifies a location or internet service provider, not a specific person.
- Website owners and email administrators can see the IP addresses of people who visit their sites or send them messages, but this information is limited and often shared among many users.
- Finding someone's IP address without their cooperation usually requires either their voluntary participation (like visiting a website you control) or access to systems you don't own, which may be illegal.
- Even if you find an IP address, converting it to a name and physical location requires cooperation from the internet service provider, which typically only happens with a court order.
- VPNs, proxies, and other privacy tools specifically exist to hide IP addresses, so someone using them cannot be reliably located this way.
How website owners see visitor IP addresses
If you run a website, you can see the IP address of everyone who visits it. This information appears in your server logs — a record of every request made to your site. Your web hosting provider usually gives you access to these logs through a control panel, and they show the IP, the time of the visit, what page was viewed, and what device or browser was used.
This is how a website owner could theoretically find your IP address: you visit their site, and they look at the logs. But there's a catch. That IP address belongs to your internet service provider, not to you personally. If you're on a home network, it might identify your house or apartment building. If you're on a corporate network, it identifies the company. If you're on public WiFi, it identifies the coffee shop or library. Multiple people often share the same IP address.
Website owners cannot see your name, address, or phone number from your IP address alone. They see a number. Converting that number into a person requires additional steps that are usually not available to them.
How email senders can see IP addresses
Every email you send carries hidden information in its headers — metadata that shows the path the email took to reach its destination. This includes the IP address of the computer or mail server that sent it. If you receive an email and want to see where it came from, you can view the full headers in Gmail, Outlook, or most other email clients.
The process varies by email provider. In Gmail, open the email, click the three dots in the top right, and select "Show original." You'll see a block of text that includes lines starting with "Received:" — these show each server the email passed through, and the first one usually contains the sender's IP address.
Again, this is a number, not a name. And if the sender used a mail service like Gmail or Outlook, the IP address you see might belong to Google or Microsoft's servers, not the actual sender. If they used a VPN or proxy, the IP address won't lead anywhere useful.
Why finding an IP address is not the same as finding a person
Movies and TV shows often show hackers typing a few commands and when ready learning someone's home address from their IP. This is fiction. In reality, the gap between an IP address and a person's identity is large and usually requires legal authority to cross.
An IP address points to an internet service provider — Comcast, Verizon, AT&T, or a smaller regional provider. That company has records of which customer was assigned that IP address at a particular time. But they don't give out that information to random people who ask. They give it out to law enforcement with a subpoena or court order, and sometimes to copyright holders with a DMCA notice, but the process is slow and requires paperwork.
Even when you do get a name and address from an ISP, you're getting the account holder's information, not necessarily the person who actually used the internet at that moment. That could be a family member, a roommate, a guest, or someone who hacked the WiFi password.
Tools that hide IP addresses and why they work
A VPN (virtual private network) is software that routes your internet traffic through a server in another location, so websites see the VPN server's IP address instead of yours. A proxy works similarly — it sits between you and the website and masks your real IP. The Tor browser is a more extreme version that bounces your traffic through multiple servers specifically designed to hide your origin.
If someone is using any of these tools, finding their IP address is pointless. You'll find the VPN provider's IP, not theirs. And VPN providers typically don't keep logs of which customer used which IP at which time, or they keep them for a very short period. Even law enforcement often cannot trace through a VPN without the provider's cooperation, and many VPN companies are based in countries where they have no legal obligation to cooperate.
This is why IP-based tracking is unreliable for anyone who knows to use these tools. And increasingly, many people do.
Legal and ethical boundaries you should know
Accessing someone's IP address without their knowledge or consent may violate computer fraud and abuse laws, depending on how you do it. If you trick someone into visiting a website to capture their IP, or if you use malware or hacking to get it, you could face criminal charges. Even if you don't face charges, you could be sued in civil court.
The ethical line is simpler: if someone hasn't consented to you tracking them, you shouldn't do it. This applies whether you're trying to catch someone harassing you online, investigating a cheating partner, or tracking down someone who owes you money. There are legal ways to handle those situations — reporting harassment to the platform, hiring a licensed investigator, or going through small claims court — that don't involve secretly tracking someone's internet activity.
If you have a legitimate reason to know someone's identity — they harassed you, committed fraud against you, or violated your intellectual property — contact law enforcement or a lawyer. They can pursue legal channels that actually work and that don't put you at legal risk.
What you can actually do if someone is harassing you online
If someone is harassing you through email, social media, or a website, the platform itself is usually your best resource. Report the account to the service — Twitter, Facebook, Instagram, Discord, Reddit, or wherever the harassment is happening. These platforms have abuse teams that can investigate and take action.
If the harassment is severe or threatening, report it to law enforcement. In the United States, the FBI's Internet Crime Complaint Center (IC3) takes reports of online harassment and fraud. Local police can also file reports, though they may refer you to the FBI or state authorities depending on the nature of the crime.
If you need to identify someone for a lawsuit or insurance claim, hire a licensed private investigator. They have legal tools and training that you don't, and they operate within the law. The cost varies, but it's usually more affordable than the legal liability you'd face if you tried to track someone yourself and got caught.
Frequently Asked Questions
Can I find someone's IP address from their Instagram or TikTok account?
Not directly. The platform sees their IP address, but you don't have access to that information. You would need Instagram or TikTok to give it to you, which they only do with a court order. If someone is harassing you on these platforms, report them to the service instead — that's faster and more effective than trying to find their IP.
What if someone is cyberbullying me — can I find their IP to report them?
You don't need their IP address to report cyberbullying. Report the account and the specific messages to the platform where it's happening. Include screenshots. The platform's abuse team can investigate without you needing to identify the person. If the bullying is severe or includes threats, report it to law enforcement, who have legal authority to request the person's information from the platform.
If I run a website and someone visits it, can I find out who they are from their IP?
You can see their IP address in your server logs, but you cannot convert that to a name or address without the internet service provider's cooperation. You can use a free IP lookup tool to see what city or region the IP is registered to, but this is often inaccurate and won't give you a person's identity. If you need to identify someone for a legitimate reason, contact a lawyer about your legal options.
Does a VPN completely hide my IP address?
A VPN hides your real IP address from websites and services you visit — they see the VPN server's IP instead. But your internet service provider can still see that you're using a VPN, and the VPN provider itself knows your real IP. If the VPN provider keeps logs and is served with a court order, law enforcement could potentially trace activity back to you. No tool is perfect, but VPNs are effective against casual tracking.
Is it illegal to find someone's IP address?
Finding an IP address itself isn't illegal. But the method matters. If you trick someone into visiting a website to capture their IP, or if you hack into a system to get it, you could face criminal charges under computer fraud laws. If you're trying to track someone without their knowledge, you could also face civil liability. When in doubt, talk to a lawyer before taking action.