OSINT Tools for IP and MAC Addresses
Geolocate an IP address, identify exposed services, analyze reputation and trace network infrastructure. These tools are essential for cybersecurity investigations and threat intelligence.
64 tools · Version française
- AbuseIPDBalso written Abuse IPDBCommunity-powered IP reputation database with 3M+ malicious IP reports. Check any IP for abuse history, report malicious activity, and integrate via API for real-time threat blocking.freemium
- BGP Malicious Content RankingPlatform ranking ASNs and BGP prefixes by malicious content and security threats.free
- BGP.toolsalso written BGPLive view of internet routing: autonomous systems, prefixes announced, peering relationships and upstream providers. Shows who actually carries a network's traffic.free
- BGPmapalso written BG PmapVisualises the routing paths between autonomous systems. Shows which operators a network's traffic actually crosses.free
- BinaryEdge (R)also written BinaryEdge, Binary EdgeCommercial security research platform with internet-wide scanning and module-based detection.paid
- Bing IP Search (D)also written Bing IP SearchBing search operator for finding domains and subdomains hosted on a specific IP address.free
- Blocklist.dealso written Blocklist deCommunity-contributed blocklist of IP addresses involved in attacks and malicious activity.free
- checkip (T)also written checkipCommand-line utility for checking local machine IP address and network connectivity.free
- CloudFail (T)also written CloudFail, Cloud FailTool for finding origin IPs of Cloudflare-protected websites through enumeration techniques.free
- Cloudflare Radaralso written CloudflareRadarInternet traffic observatory: outages by country, attack trends, protocol adoption and routing anomalies, drawn from one of the largest networks in the world.free
- CloudFlare Watchalso written Cloud Flare Watch, CloudFlareWatchTool for identifying and analyzing websites protected by Cloudflare's CDN and security services.free
- DB-IPalso written DB IPLightweight IP geolocation API covering 46M+ IPv4/IPv6 blocks with city-level accuracy.freemium
- DShield APIalso written D Shield API, DShieldAPIAPI and database of security events and IPs involved in attacks monitored by SANS.free
- ExoneraToralso written Exonera TorTool for checking if an IP address belonged to Tor at a specific date.free
- FireHOL IP Lists also written FireHOL IP Lists, Fire HOL IP ListsCollection of firewall-friendly IP lists for blocking malicious and spam sources.free
- FocsecTells whether an address belongs to a VPN, a proxy, a Tor relay or a hosting provider. Separates a real visitor from a masked one.freemium
- FOFAChinese internet asset search engine similar to Shodan, indexing IP devices, services, and web apps with over 2 billion assets — particularly strong on Chinese and Asian infrastructure.freemium
- Geo-Recon (T)also written Geo-Recon, Geo ReconCommand-line IP geolocation tool using multiple APIs. Quickly resolves geolocation data for IP addresses and domains from the terminal.free
- GrabifyURL shortener service that logs IP addresses and device information of link clickers.free
- Hacker Target - Reverse DNSalso written Hacker Target Reverse DNSReverse DNS lookup tool and API finding domain names associated with IP addresses.freemium
- Hurricane Electric BGP ToolkitBGP and network routing analysis tools including AS to prefix lookup and BGP prefix information.free
- Info Sniperalso written InfoSniperMulti-field reverse OSINT tool for IP, email, phone lookups with social media enumeration.freemium
- Internet Census SearchSearch interface for the Shodan-like internet census data and open services.free
- IP FingerprintsReverse IP lookup service identifying all domains hosted on a given IP address.free
- IP Fingerprints - Reverse IP Lookupalso written IP Fingerprints Reverse IP LookupFind all domains hosted on a shared IP address through reverse IP lookup.free
- IP Location FinderWeb-based tool for IP geolocation with maps and detailed location information.free
- IP Location.ioalso written IP LocationAggregates several geolocation databases for one address and shows where they disagree. That disagreement is itself the useful signal.freemium
- IP LoggerIP logging and URL shortening service tracking visitor IP, location, and browser data.free
- IP to ASN DBDatabase and API service for looking up which ASN owns a given IP address.free
- IP VoidIP reputation and threat intelligence service analyzing blacklist status and security risks.freemium
- IP.THC.ORGalso written IP.THCMinimal service returning the public address and its technical context, with no page weight and no tracking.free
- IP2Locationalso written IP2 LocationComprehensive IP geolocation database and API. Identify country, region, city, ISP, domain, time zone, connection speed, IDD code, area code, weather station, mobile info and more.freemium
- IP2Location.comalso written IP2 Location.com, IP2LocationCommercial IP geolocation service with free demo and database. Provides location, proxy detection, and network data.freemium
- ipapi.coalso written ipapiClean IP geolocation API: country, city, ISP, timezone, currency, calling code. 1 000 free req/day.freemium
- IPGeolocationalso written IP GeolocationIP geolocation API and lookup tool. Get country, region, city, timezone, currency, organization and security data for any IP address. Free tier available with bulk lookup support.freemium
- IPinfoalso written I PinfoComprehensive IP address data API and lookup tool. Provides geolocation, ASN, organization, carrier, abuse contact and privacy detection for any IP address.freemium
- IPQualityScorealso written IP Quality ScoreIP address fraud scoring and device fingerprinting service. Detects VPNs, proxies, Tor, bots, and high-risk IPs with 99.9% accuracy. Includes email validation and phone reputation APIs.freemium
- IPv4 CIDR Reportalso written I Pv4 CIDR ReportTool for analyzing IPv4 CIDR blocks and finding contained IP addresses and subnets.free
- IPv4/IPv6 lists by country codealso written I Pv4/I Pv6 lists by country codeDatabase of IPv4 and IPv6 address ranges organized by country for geographic IP filtering.free
- IPv6 CIDR Reportalso written I Pv6 CIDR ReportCIDR block analysis tool for IPv6 address ranges and subnet enumeration.free
- ISP.Toolsalso written ISPNetwork diagnostics from several vantage points: DNS, traceroute, port checks and propagation, useful for telling a local block from a real outage.free
- Masscan (T)also written MasscanUltra-fast TCP port scanner designed for scanning large IP ranges and entire networks.free
- MaxMind Demoalso written Max Mind Demo, MaxMindDemoWeb-based IP geolocation demo with location, ASN, and network data from MaxMind's GeoIP database.free
- MyIPNeighborsalso written My IP NeighborsReverse IP lookup tool for discovering all domains and subdomains on an IP address.free
- Netlas.ioalso written NetlasComprehensive internet scanning platform with OSINT, DNS, and WHOIS data. Free tier: 50 requests/day.freemium
- NetworkMineralso written Network MinerPassive network forensics tool for extracting files and data from network traffic captures.free
- Nmap (T)also written NmapOpen-source network mapping and port scanning tool with OS detection and service version identification.free
- Nrich (T)also written NrichShodan's command-line tool for bulk IP address enrichment. Quickly queries Shodan data for a list of IPs to identify open ports, vulnerabilities and services at scale.free
- Online Port scannerWeb-based port scanner checking open ports on target IP addresses without installation.free
- OnypheCyber defense search engine with internet scanning, threat intelligence, and attack surface management.freemium
- OpenCellid: Database of Cell Towersalso written Open Cellid: Database of Cell TowersOpen database of cellular tower locations and coverage for mobile network geolocation.free
- PeeringDBalso written Peering DBDatabase of internet exchange points, member networks, and AS relationships for network mapping.free
- Project Honey PotGlobal honeypot network collecting spam and attack data with IP reputation service.freemium
- ScamalyticsIP risk scoring and fraud prevention platform that detects VPNs, proxies, Tor nodes, and high-fraud-risk IPs using a network of 100M+ monthly IP observations.freemium
- Scanless (T)also written ScanlessCommand-line tool for port scanning without leaving traces on target using third-party services.free
- Scans.ioalso written ScansArchive of internet-wide scan data including censys scans and other reconnaissance data.free
- SpurIP enrichment platform detecting VPNs, residential proxies, data centers, Tor exits, and anonymization infrastructure. Identifies ~60M suspect IPs daily across 1,000+ VPN/proxy services.freemium
- TCP/IP Utils - Domain Neighborsalso written TCP/IP Utils Domain NeighborsFind all domains on the same IP and subdomain information via reverse IP lookups.free
- Team Cymru IP to ASNIP to ASN mapping tool providing autonomous system ownership and prefix information.free
- Traceroute Visualizeralso written TracerouteVisualizerPlots a traceroute on a map, hop by hop, showing the countries and operators a connection actually passes through.free
- Uncover (T)also written UncoverQuickly discover exposed hosts via Shodan, Fofa, Censys, Hunter, and others from one command.free
- utraceIP geolocation and reverse DNS lookup tool with network traceroute visualization.free
- WiGLE: Wireless Network Mappingalso written Wi GLE: Wireless Network MappingGlobal database of wireless networks (WiFi, Bluetooth, cellular) with mapping and signal strength data.freemium
- WiresharkOpen-source network packet analyzer for deep packet inspection and network troubleshooting.free
Frequently asked
- How to geolocate an IP address?
- Tools like ipinfo.io or MaxMind GeoIP provide country, region, city, ASN and organization of an IP.
- How to see services exposed on an IP?
- Shodan and Censys continuously scan the internet and index all open ports and detected services.