Why IP can be accessed but the domain cannot be opened

You might wonder why you can reach a website when you use its numbers but not when you type its name. This problem often confuses people. Sometimes, IP can be accessed, but the domain name will not load. The reasons usually involve DNS errors, strict firewall rules, or mistakes in server settings. You do not need to feel stuck. Most solutions for this issue are simple and easy to try.
DNS Issues and Why IP Can Be Accessed
DNS Resolution Process
When you type a website name into your browser, your device does not know the IP address right away. It needs help from the Domain Name System (DNS). DNS works like a phone book for the internet. Here is how the process usually works:
-
You enter a website address in your browser. The browser changes it into a Fully Qualified Domain Name (FQDN).
-
Your browser asks a resolver to find the IP address for that FQDN.
-
The resolver checks with a root name server to find out which Top-Level Domain (TLD) server to ask next.
-
The resolver contacts the TLD name server to get the address of the main server.
-
The resolver asks the main server for the website’s IP address.
-
The resolver gives the IP address to your browser, and you can visit the website.
If any step fails, you may find that only the IP can be accessed, but the name does not work.
Common DNS Errors
DNS problems can stop you from reaching a website by its name, even though the IP can be accessed. Many network studies show that these issues are common:
|
Common DNS Issues |
Description |
|---|---|
|
DNS Cache Not Updated |
Old results may block new changes from working. |
|
Improper TTL Value |
Long TTLs slow down updates to the records. |
|
Record Configuration Errors |
Wrong IPs or mistakes in records cause failures. |
|
Incomplete Domain Name Registration |
Unregistered domains cannot be reached. |
|
DNS Service Provider Issues |
Server downtime or sync delays block correct results. |
|
Global Synchronization Delay |
Changes take time to reach all parts of the world. |
|
Network or Local Environment Issues |
Local settings or cache can stop domain access. |
DNS Cache and Propagation
DNS changes do not always work right away. Sometimes, you must wait for updates to spread across the internet. This is called DNS propagation. The time it takes can vary:
|
Duration |
Description |
|---|---|
|
A few minutes |
Some updates happen quickly. |
|
24 to 48 hours |
Full updates may take up to two days. |
If you see that the IP can be accessed but the domain does not open, you may need to wait for changes to finish spreading. You can also try clearing your device’s DNS cache to help speed up the process.
Domain and Server Configuration Problems
Domain Settings Errors
You can have trouble if your settings are wrong. These mistakes can stop you from opening a website by its domain name. You might still reach the site using the IP. Most problems happen because of errors in records or slow updates. Here are some common reasons:
|
Common Causes of DNS Domain Name Resolution Errors |
Description |
|---|---|
|
Incorrect A record |
The IP address is typed wrong or points to a server that does not exist. |
|
CNAME Configuration Conflict |
Wrong alias settings can make loops or cause problems with the domain name. |
|
Missed MX Records |
Bad email settings can make emails not work. |
|
Improper TTL |
If it is too long, updates are slow. If it is too short, there are too many checks. |
|
DNS Service Provider Anomalies |
Your DNS provider might be having problems. |
|
Resolution not taking effect |
Changes need more time to start working. |
|
Zone transfer error |
There are problems when DNS servers try to match each other. |
Web Server Virtual Host Issues
Web servers use virtual hosts to run many domains on one IP. If you set up your virtual host the wrong way, it will not work. You might get to the site with the IP, but not with the domain name. For example, if you forget to add yours to the server’s list, the server will not know what to do. You should look at your web server settings.
Expired or Suspended Domains
Domains must stay active to work. If your domain expires or gets suspended, you cannot open it in your browser. The IP might still work because the server is running. But the name does not point to the server anymore. You should check the status with your registrar. Renew your domain before it expires so your site does not go down. If yours is suspended, talk to your provider to fix it.
Network and Firewall Restrictions
Firewall and ISP Blocking
You may find that a firewall or your Internet Service Provider (ISP) blocks access to a website by its domain name. This can happen for many reasons. Some firewalls use rules that look for names in web requests. They block certain ones to protect users or follow company policies. ISPs sometimes block domains to follow local laws or prevent harmful content. When this happens, you might notice that the IP can be accessed, but the domain does not open. This is because the firewall or ISP checks the domain name, not the IP address.
ICMP vs. HTTP Access
You might try to test a connection by using the “ping” command. This command sends a small packet to the server using the ICMP protocol. If you get a reply, it means your device can reach the server. However, this does not mean you can open the website in your browser. Web browsers use HTTP or HTTPS protocols, which work differently. Firewalls can block HTTP or HTTPS traffic while still allowing ICMP packets. So, you may ping a server and get a response, but the website still does not load.
-
Ping (ICMP): Checks if the server is reachable.
-
Web Browser (HTTP/HTTPS): Loads the website content.
Domain vs. IP Traffic Rules
Network devices use different rules for domain-based and IP-based requests. You can see the main differences in the table below:
|
Feature |
Services (IP-based) |
Routes (Domain-based) |
|---|---|---|
|
OSI Layer |
Layer 4 |
Layer 7 |
|
Identifier |
Uses IP addresses and ports |
Uses domain names and paths |
|
Functionality |
Abstracts application back-ends |
Manages API objects and aggregates services |
|
Protocol Support |
Supports TCP and UDP |
Supports only HTTP, HTTPS, and HTTP2 |
|
IP Address Sharing |
Needs unique IP addresses for each service |
Can share the same IP across multiple domains |
|
Traffic Routing |
Routes based on IP and port |
Forwards requests based on domain and path |
You may notice that domain-based traffic rules work at a higher layer and use the names to decide where to send data. IP-based rules use only the address and port. This means a network can block one and allow the other. If you run into problems, check both types of rules in your firewall or router.
Troubleshooting When IP Can Be Accessed
If you see that IP can be accessed but the domain does not open, you can fix it step by step. You do not need special skills to start. You can use easy tools and methods to find the problem.
Check DNS Records
Start by checking your DNS records. This helps you see if your domain goes to the right IP address. You can use command-line tools or websites to compare results.
-
DNS record checks show if your domain has DNS pollution. You can spot this by comparing local and public servers.
-
Tools like
nslookupordiglet you check public servers. You can use Google’s 8.8.8.8 or Cloudflare’s 1.1.1.1. -
If you see different results, you may have tampering or mistakes.
-
Online testing sites make it easy to compare results and find problems.
Recommended steps for DNS diagnosis:
-
Use
nslookupordigto check DNS from your device. -
Ask several public servers to spot differences.
-
Try online tools to compare local and main results.
Flush DNS Cache
Sometimes, your device keeps old DNS info. This cache can stop you from reaching the domain even though IP can be accessed. Flushing the DNS cache makes your device get new data.
How to flush DNS cache:
|
Operating System |
Command to Flush DNS Cache |
|---|---|
|
Windows |
|
|
Mac |
|
|
Mac (alternate) |
|
Open your terminal or command prompt and type the command for your system. This helps your device get the latest DNS info.
Verify Domain and Server Settings
Check your server settings. Wrong settings can block domain access while IP can be accessed.
-
Make sure your records are correct. Check that A records and MX records point to the right places.
-
Check your status. Make sure yours is active and not expired or suspended.
-
Refresh your local cache if you think there are caching issues.
-
Use
nslookupto check DNS. Usecurl ifconfig.meto check your server’s public IP address.
Checklist for domain and server verification:
-
Confirm the registration and renewal.
-
Review the records for accuracy.
-
Check server settings, including virtual host settings.
-
Make sure your domain is in the server’s virtual host file.
Review Firewall and Network Rules
Firewalls and network devices can block the traffic but allow IP can be accessed. You should check your firewall and router settings.
-
Look for rules that block the names or certain URLs.
-
Check for filters that block HTTP or HTTPS traffic.
-
Make sure your network does not block your domain because of policy or security.
Tools for diagnosing network issues:
-
Use
nslookupanddigto test DNS. -
Check records for correct setup.
-
Clear local caches to remove old info.
Quick Troubleshooting Table
|
Step |
Tool/Command |
Purpose |
|---|---|---|
|
Check DNS records |
|
Find DNS errors |
|
Flush DNS cache |
OS-specific command |
Remove old DNS info |
|
Verify status |
Registrar dashboard |
Make sure domain is active |
|
Review server settings |
Virtual host config |
Make sure domain is listed |
|
Test network rules |
Firewall/router interface |
Find domain-based blocks |

