Use this workflow when reviewing an IP address from logs, sign-ins, abuse reports, firewall events, email headers, or analytics data.
Enter a domain, URL, IP address, email address, or text value once. Workflow links will carry it to compatible tools.
/ip-whois-lookup
Find allocation, network range, registry, organization, and country signals.
Look up public IP allocation and network registration data for IPv4 and IPv6 addresses.
/reverse-dns
Check PTR records and whether they point to a meaningful hostname.
Inspect PTR records and forward-confirmed reverse DNS for an IP address.
/ip-to-asn
Identify the autonomous system and network owner behind the address.
Map an IPv4 or IPv6 address to its autonomous system number (ASN) and owner.
/dnsbl
Check common DNS-based blocklists used in email and abuse triage.
Check a public IPv4 address or mail server hostname against common DNS-based email blocklists.
/proxy-check
Review proxy, VPN, and anonymizer indicators.
Check if an IP address is using a proxy. detect proxies, VPNs, and anonymizing services.
/tor-checker
Check Tor exit-list and supporting local datasets where available.
Check a public IP against Tor Project exit lists and local IP2Proxy proxy intelligence data.
Run the first tool, review the result, then continue only when the next check answers a useful follow-up question. Not every situation needs every tool in the workflow.
Tell us if something is confusing, broken, incorrect, or missing. Feedback helps us improve the tools and workflows people use every day.
