Community database of reported malicious IPs. Shows abuse reports, a confidence score, the ISP and the usage type.
- Website
- Freemium
TakesIP addressDomain
You have a ip address.
69 tools that take a ip address as input. Filter them further.
Community threat-intelligence exchange. Look up an IP, domain or file hash to see the reports and campaigns it appears in.
- Website
- Free
- Account
TakesIP addressDomainFile hash
Official registry lookup for IP ranges and networks in North America: who holds an address block and their contacts.
- Website
- Free
TakesIP addressCompany
Checks an IP address or domain against 100+ email spam blocklists at once.
- Website
- Freemium
TakesIP addressDomain
Community blocklist of IPs caught attacking servers (SSH, mail, web logins). Search an IP to see what it was reported for.
- Website
- Free
TakesIP address
Database of names, emails and IPs used by spam bots on forms and forums. Check whether an address is a known bot.
- Website
- Freemium
- Account
TakesUsernameEmail addressIP address
Webroot BrightCloud (now OpenText) reputation score and content category for a URL or IP.
- Website
- Free
TakesURLIP addressDomain
Free WHOIS, RDAP, DNS and IP lookups with name server history and certificate details, no sign-up.
- Website
- Freemium
TakesDomainIP address
Internet-wide scan data on hosts, services and certificates, for finding exposed assets and infrastructure linked to a target.
- Website
- Freemium
- Account
TakesIP addressDomain
Command-line tool that checks an IP against a dozen sources at once (geolocation, blocklists, Shodan, VirusTotal and more) and scores how malicious it looks.
- Command line
- Free
TakesIP address
Ranks networks (ASNs) by how much malicious activity they host over time, to judge how trustworthy an IP range is.
- Website
- Free
TakesIP address
Search engine for exposed internet assets. Shows open ports, vulnerabilities and a risk score for an IP or domain.
- Website
- Freemium
- Account
TakesIP addressDomain
IP geolocation lookups with location, ISP, connection type and a threat assessment, plus a free downloadable database.
- Website
- Freemium
TakesIP address
Open-source domain research toolkit: DNS, RDAP/WHOIS, passive subdomains, IP and ASN data, and mail security in one report.
- Website
- Free
TakesDomainIP address
Reverse IP, name server and mail server lookups: find other domains on the same infrastructure.
- Website
- Free
TakesDomainIP address
DNS enumeration script: standard records, zone transfer attempts, subdomain brute force, reverse lookups and cached-record snooping.
- Command line
- Free
- Active
TakesDomainIP address
Free one-page report on a domain or IP: WHOIS for both the domain and its network, DNS records and a traceroute.
- Website
- Free
TakesDomainIP address
Current WHOIS lookup for any domain. Historical WHOIS, hosting history and reverse lookups need a paid account.
- Website
- Freemium
TakesDomainIP address
Checks whether an IP address was running as a Tor relay on a given date, which tells you if traffic from it could have come from Tor users.
- Website
- Free
TakesIP address
Hundreds of public IP blocklists (malware, botnets, proxies, abuse) in one place. Search an IP to see every list it appears on.
- Website
- Free
TakesIP address
Checks whether an IP belongs to a VPN, proxy, Tor exit or bot network.
- Website
- Freemium
TakesIP address
Shows whether an IP is mass-scanning the internet or belongs to a known benign service, so you can separate targeted activity from background noise.
- Website
- Freemium
TakesIP address
Finds the hostnames of an IP address, or of a whole IP range at once, from reverse DNS records.
- Website
- Freemium
TakesIP address
Community honeypot network. Look up an IP to see what it attempted against the honeypots and when.
- Website
- Freemium
- Account
TakesIP address
Per-IP reports from a honeypot network: what it scanned for, which exploits it tried and its client fingerprints.
- Website
- Free
TakesIP address
Shows who owns an IP range or ASN, which networks it connects to, and the domains hosted on an IP.
- Website
- Free
TakesIP addressDomain
IBM's threat-intelligence lookup for IPs, URLs, domains and hashes, with risk scores and related campaigns.
- Website
- Freemium
- Account
TakesIP addressDomainURLFile hash
Geolocates an IP address and shows its city, ISP, ASN and time zone on a map.
- Website
- Freemium
TakesIP address
Unlimited free reverse DNS, subdomain and reverse CNAME lookups from The Hacker's Choice, with a JSON API.
- Website
- Free
TakesIP addressDomain
IP geolocation with ISP, ASN, usage type and detection of VPNs, proxies and Tor exits.
- Website
- Freemium
TakesIP address
Looks up an IP address in several geolocation databases side by side, so you can see where they disagree.
- Website
- Free
TakesIP address
Maps an IP address to the network (ASN) and organisation that announces it. Free database and API.
- Website
- Free
TakesIP address
Checks an IP against dozens of blocklists and bundles related tools: WHOIS, reverse DNS and ping.
- Website
- Freemium
TakesIP address
Checks IPs, domains, emails and crypto wallets against many threat feeds and gives a reputation verdict.
- Website
- Freemium
TakesIP addressDomainEmail addressCrypto address
Graph-based link analysis. Run "transforms" on an entity (a domain, email or person) and see the connections drawn as a graph.
- Desktop app
- Freemium
- Account
TakesDomainEmail addressPerson's nameCompanyIP addressUsernamePhone number
Threat intelligence search aggregating 100+ sources, with a risk verdict for IPs, domains, URLs and file hashes.
- Website
- Freemium
- Account
TakesIP addressDomainURLFile hash
Malware sandbox that detonates files and URLs, and lets you search past public reports by IP, domain or hash.
- Website
- Freemium
TakesDocument / fileURLFile hashIP addressDomain
Extremely fast port scanner that can sweep large IP ranges in minutes.
- Command line
- Free
- Active
TakesIP address
The most widely used IP geolocation database. The website demo returns location, ISP and network type for an IP.
- Website
- Free
TakesIP address
Scans files, hashes, URLs and IPs with 20+ antivirus engines and a sandbox, and shows the verdict from each.
- Website
- Freemium
TakesFile hashDocument / fileURLIP address
Free passive DNS: which IPs a domain has pointed to over time and which domains used an IP.
- Website
- Free
TakesDomainIP address
Checks an IP or domain against hundreds of DNS blocklists and allowlists at once.
- Website
- Freemium
TakesIP addressDomain
Checks a domain's mail setup (MX, SPF, DKIM, DMARC) and whether a mail server's IP is on spam blocklists.
- Website
- Free
TakesDomainIP address
Internet scan search engine: open ports, web responses, certificates, DNS and WHOIS for IPs and domains.
- Website
- Freemium
- Account
TakesDomainIP address
The standard network scanner: finds live hosts, open ports, running services and their versions, and the operating system.
- Command line
- Free
- Active
TakesDomainIP address
Scans the open ports of an IP or host from a remote server, so the scan does not come from your own connection.
- Website
- Free
- Active
TakesIP address
Search engine of internet scan and threat data: exposed services, vulnerabilities and leaks tied to an IP or domain.
- Website
- Freemium
- Account
TakesDomainIP address
Directory of networks and where they connect: which data centres and internet exchanges an organisation is present in.
- Website
- Free
TakesCompanyIP address
Database of phishing URLs seen in the wild. Search a domain or IP to see phishing pages hosted on it.
- Website
- Free
TakesDomainIP addressURL
Community honeypot project; search an IP to see if it harvested emails, sent spam or attacked web forms.
- Website
- Free
TakesIP address
Threat-intelligence lookups for IPs, domains and URLs, combining OSINT feeds with risk scores and related indicators.
- Website
- Freemium
- Account
TakesDomainIP addressURL
Maps how a domain or IP connects to others: shared name servers, mail servers, reverse DNS and network ranges.
- Website
- Free
TakesDomainIP address
SANS Internet Storm Center: look up an IP to see how often it has attacked the sensors of thousands of volunteers, and on which ports.
- Website
- Free
TakesIP address
Current and historical DNS records, WHOIS data and subdomains for a domain. The history shows where a site was hosted before.
- Website
- Freemium
- Account
TakesDomainIP address
Search engine for internet-connected devices. Shows the open ports, service banners and known vulnerabilities for an IP or search.
- Website
- Freemium
- Account
TakesIP addressDomain
Checks whether an IP or domain is on Spamhaus blocklists and why (spam, botnet, compromised host).
- Website
- Freemium
TakesIP addressDomain
Automates OSINT collection with 200+ modules. Give it a domain, IP, email, name or username and explore the results in a web UI.
- Command line
- Free
- Active
TakesDomainIP addressEmail addressPerson's nameUsernamePhone number
All-in-one lookup for domains, IPs, emails and phone numbers, bundling WHOIS, DNS, reputation and breach checks.
- Website
- Free
TakesUsernameEmail addressPhone numberDomainIP address
Maps IPs to their network, owning organisation and country, one at a time or in bulk.
- Website
- Free
TakesIP address
Free US reverse lookup by email, phone, name, address or IP.
- Website
- Free
TakesEmail addressPhone numberPerson's nameIP address
abuse.ch's database of URLs used to spread malware, with the payloads they delivered and when they were active.
- Website
- Free
TakesURLDomainIP addressFile hash
Loads a URL in a sandboxed browser and records every request, redirect, screenshot and technology the page uses.
- Website
- Freemium
- Active
TakesURLDomainIP address
Locates an IP address or domain on a map with its provider and network owner.
- Website
- Free
TakesDomainIP address
Free search of current and historical DNS, including which domains pointed to an IP and when.
- Website
- Freemium
TakesDomainIP address
Dozens of free DNS tools, notably reverse IP (other sites on a server) and reverse WHOIS (other domains owned by the same person).
- Website
- Free
TakesDomainIP addressEmail addressPerson's name
Scans files, URLs, domains, IPs and hashes with 70+ security engines and shows how they relate to one another.
- Website
- Freemium
TakesFile hashURLDomainIP addressDocument / file
IP and domain intelligence: hosting, network owner, related domains and risk indicators.
- Website
- Freemium
TakesDomainIP address
WHOIS and RDAP lookup for domains and IPs, plus DNS records and the history of name server changes.
- Website
- Free
TakesDomainIP address
Simple network tools, best known for reverse IP lookup (other sites on the same server) and open-port checks.
- Website
- Free
TakesIP addressDomain