My IP Tools

IP Tools runs 13 different lookups against any IP address, hostname, or URL. Enter a target and each tool queries a different data source: DNS records, geolocation databases, whois registries, network diagnostics, and more.

If you enter a hostname or URL, it's resolved to an IP address first via DNS. That resolved IP becomes the target for all subsequent lookups.

Results are organized across four tabs:

• Lookup: GeoIP location, reverse DNS, DNS records, and MX/SMTP records
• Whois: Domain/IP registration and ARIN netblock data
• Security: Port scan, SSL certificate, security headers, HTTP headers, blacklist status
• Network: Ping, traceroute

Note: Target history is stored locally on your machine. I do not log your queries.

A few controls let you tailor how My IP Tools queries:

• Tune (sliders icon in the search row) — adjust ipv4 vs ipv6 preference, traceroute probes and timeout, ping count and interval, or pick a port-scan mode (Common, Web, DB, Mail, or a custom port list).
• History — recent targets pin to a horizontal strip below the search; click one to re-query. (stored locally)
• API Server — choose where ping and traceroute run from.

Forward DNS translates human-readable domain names into IP addresses. Each record type serves a different purpose:

• A: IPv4 address
• AAAA: IPv6 address
• CNAME: Alias pointing to another domain
• MX: Mail server with priority
• NS: Authoritative nameservers
• TXT: Verification, SPF, DKIM, and other metadata

Reverse DNS (PTR records) maps an IP address back to a hostname. Mail servers use reverse DNS for spam filtering, logging systems use it for readability, and it serves as a basic trust signal for network services.

Misconfigured DNS is the #1 cause of "site down" that isn't actually down.

GeoIP is based on database mapping of IP allocation blocks, not GPS or device location. Accuracy varies: country-level is ~99% accurate, but city-level drops to ~70–80% and can miss for VPNs, proxies, and mobile carriers.

Results are plotted on an interactive SVG world map with country boundary lines, a pulsing location marker, and radial highlight glows for the country and region. The map auto-zooms to the location.

The ASN (Autonomous System Number) identifies the network operator. It's useful for understanding routing topology, identifying hosting providers, and correlating traffic patterns.

GeoIP drives CDN routing decisions, regulatory compliance (GDPR), fraud detection, and network topology analysis.

Whois queries the public registration database for domains and IP blocks. Five Regional Internet Registries manage global IP allocation:

• ARIN: North America
• RIPE NCC: Europe, Middle East, Central Asia
• APNIC: Asia-Pacific
• AFRINIC: Africa
• LACNIC: Latin America, Caribbean

Whois reveals the registrant organization, nameservers, creation and expiration dates, and abuse contacts. The ARIN lookup specifically returns netblock ownership, CIDR allocation, and point-of-contact (POC) records.

Essential for incident response, abuse reporting, and understanding IP ownership and delegation.

Port scanning probes common TCP ports to identify running services. Open ports are the attack surface, and each one is a potential entry point:

• 22 SSH   25 SMTP   80 HTTP   443 HTTPS   3306 MySQL   5432 PostgreSQL

Port scanning requires authorization. Scanning your own IP is seamless – your authorization is pre-loaded, so you never see a prompt. Scanning someone else's IP asks the target's owner to verify they control it: IP Tools shows a short URL they can open from the target machine to receive a 5-character code, which you paste back. The code is then remembered for that IP so you don't have to repeat it.

SSL/TLS certificates verify the chain of trust from server certificate through intermediates to the root CA. The tool checks expiration, Subject Alternative Names (SANs), and protocol version.

Security headers are HTTP response headers that add layers of defense:

• Content-Security-Policy: XSS prevention
• X-Frame-Options: Clickjacking protection
• Strict-Transport-Security: Forces HTTPS (HSTS)
• X-Content-Type-Options: Prevents MIME sniffing

Blacklist (DNSBL) checks IP reputation across multiple DNS-based blocklists. Being listed means mail from that IP may be silently rejected.

Essential for vulnerability assessment, compliance verification, and email deliverability.

Ping sends ICMP echo requests and measures round-trip time (RTT), the most basic connectivity test. Low RTT means a fast path; high or variable RTT suggests congestion or routing issues.

Traceroute maps each hop between the server and the target, revealing the network path, transit providers, and where latency increases:

HTTP Headers reveal the metadata exchanged between browser and server: caching policy, server software, security configuration, compression, and content negotiation.

Use these tools to diagnose latency, identify routing issues, and understand server configuration.

• Enter an IP address directly for the most complete results. Hostnames require DNS resolution first.
• Private/RFC 1918 IPs (10.x, 172.16–31.x, 192.168.x) won't return external tool results.
• Some tools (traceroute, port scanning, blacklist) are inherently slow. Watch the console output for progressive detail.