IP addresses & networks
Change research topic
- APNIC WhoisFreeOfficial registry for IP addresses and AS numbers in the Asia-Pacific region, complemented by WhoWas historical records.
- ArgusFreeLocal Python toolkit for domain, network and website research through a shared command line.
- ARIN Whois/RDAPFreeOfficial registry access for IP networks, AS numbers, organisations and network contacts.
- asnFreeLocally installable tool for IP, ASN and BGP research, with traceroute, JSON output and its own API server.
- asnmapFreeA local tool and Go library for finding network ranges from an ASN, IP address, domain or organisation name.
- CensysFreemiumSearch platform for internet services, IP addresses, domains and publicly observed TLS certificates.
- CentralOpsFreemiumOnline tools for WHOIS and DNS data, domain research and technical email checks.
- crt.shFreePublic search of Certificate Transparency logs by domains, organisations and certificates.
- DataSploitFreeLocal Python framework that combines source queries for domains, email addresses, IP addresses and usernames.
- DeHashedFreemiumSearches collected data breaches by email address, username and other attributes.
- DNSdumpsterFreemiumFinds subdomains, DNS records and associated infrastructure from collected internet data.
- DNSReconFreeLocally installable DNS reconnaissance with Python, export features and an optional self-hosted REST API service.
- DomainIQFreemiumDomain and IP research with WHOIS and DNS history, reverse search, monitoring, an API and its own MCP.
- DomainToolsPrice on requestDomain research with historical registration data, passive DNS, infrastructure connections and risk assessments.
- DomainTools Whois LookupFreeShows WHOIS data, registrars, registration dates and technical details for domains or IP addresses.
- flowsintFreeA self-hosted OSINT platform for research workflows and graph visualisation of connections.
OPSEC caution
Extension modules send queries from your own installation to websites and external services. According to the documentation, extensive queries may cause the infrastructure used to be flagged or blocked.
- harpoonFreeA command-line tool for OSINT and threat intelligence. Combines queries to numerous external data sources.
- IBM X-Force ExchangeFreemiumResearches threat information about IP addresses, URLs, domains, malware and vulnerabilities and groups it into collections.
OPSEC caution
In the X-Force community, the information in your user profile is accessible to other participants.
- IntelOwlFreeSelf-hosted analysis platform that examines IP addresses, domains, URLs, file hashes and documents using multiple services.
- IPinfoFreemiumAssociates IP addresses with networks and regions and, depending on the plan, provides indicators of VPN, proxy, Tor and hosting use.
- iprangesFreeFree IP range lists for cloud providers, search engines and other services. Available as text files.
- IPVoidFreeFree web tools for IP reputation, WHOIS and IP geolocation.
- IRBIS (ESPY)PaidWeb portal and API for people research, contact verification and connecting digital traces.
- Leak-LookupFreemiumA data breach search service with a free preview, paid access to individual searches and a separate API.
- MasscanFreeLocally installable port scanner for IPv4 and IPv6 addresses. Finds open ports and can capture basic service banners.
OPSEC caution
During active scans, the target infrastructure receives the source IP address used. The project documentation describes how scanned services can log these accesses and block the address.
- mitakaFreeA browser extension for quick OSINT and threat intelligence queries from the context menu.
OPSEC caution
Scan requests to HybridAnalysis, urlscan.io and VirusTotal use your own API keys stored in Mitaka.
- Mr.HolmesFreeLocal research suite for usernames, domains, telephone numbers and email addresses, with graphs and maps.
- MxToolboxFreeOnline tools for email headers, DNS data, mail servers and blacklist entries.
- NexusXplore (OSINT Combine)PaidOSINT platform for searching, connecting and monitoring data from the open web, deep web and darknet.
- Open Threat Exchange (OTX)FreeCollects and links threat information about IP addresses, domains, URLs and files from an open security community.
OPSEC caution
Posts and other activities in the OTX community are associated with your username.
- OpenCTI Community EditionFreeSelf-hosted platform for collecting, linking and searching your own cyber threat intelligence.
- OSINT IndustriesPaidFinds online accounts, digital traces and data breach references matching contact details.
- Pentest-Tools.comFreemiumPlatform for subdomain and infrastructure research, authorised vulnerability scans and penetration tests.
- PulsediveFreemiumThreat data for domains, IP addresses and URLs, with sources, risk indicators, history and an API.
OPSEC caution
Comments, edits and submissions display your username. This association remains even after the account is deleted.
- RobtexFreemiumDNS, IP and network research with historical connections, WHOIS, an API and MCP.
- ShodanFreemiumSearch engine for publicly accessible devices and services, with IP addresses, open ports and technical service data.
- sn0intFreeA local OSINT framework with installable modules for infrastructure, accounts, email addresses and telephone numbers.
OPSEC caution
The modules for detecting HTTP and HTTPS services access the systems found directly.
- uncoverFreeLocally installable tool for host searches across multiple internet search services. Returns IP addresses, ports and hostnames.
- urlscan.ioFreemiumAnalyses web pages in a browser sandbox and searches stored scans by technical characteristics.
- UserSearchFreemiumOSINT platform for people, contact details, images, companies and infrastructure, with 18 search types and an AI assistant.
- ViewDNS.infoFreemiumDNS and domain tools with IP history, reverse WHOIS, an API and its own MCP for AI agents.
- VirusTotalFreemiumSecurity reports and infrastructure relationships for files, hashes, URLs, domains and IP addresses.
- WhatIsMyIPAddress IP LookupFreeFree web lookup for the network operator, hostname, ASN and approximate location of an IP address.
- WHO.ISFreemiumWHOIS, RDAP and DNS lookups with domain history, website monitoring, an API and MCP.
- X-osintFreeLocal OSINT menu for telephone, email, IP and vehicle queries, as well as file metadata.
- YouGetSignalFreeFree network tools with reverse IP search for other domains on the same IP address.