IP Tools

DNS & IP Tools provide tactical intelligence to the Security Operation Center (SOC) and Penetration Testers. Use these tools to map the attack surface of a target, identify security weaknesses, and streamline incident response. Quickly collect data on IP Addresses, Networks, Web applications and DNS records.

These information gathering tools serve as tactical reconnaissance tools. Quickly gather relevant information and pivot into deeper enumeration using port scanners, web page analysis and other more aggressive tools.

Automation & Integration: All tools are accessible via the web forms below or through our easy to use API, third party integrations (Splunk, Maltego etc), and the official Chrome extension.

API Documentation Limits & Quotas Chrome Ext FAQ

IP and Network Tools

All tools available via web form and API. No sign-up required for free access.
Click a tool name for detailed notes and example results.

Network tests

MTR Traceroute

Trace path hop-by-hop with latency. Network path analysis and latency troubleshooting.

api.hackertarget.com/mtr/?q={target}

Test Ping

Round-trip time and packet loss. Connectivity testing and availability checks.

api.hackertarget.com/ping/?q={target}

DNS

DNS Lookup

Resolve Standard Records for a Domain (A, MX, NS, TXT). Initial reconnaissance and domain analysis.

api.hackertarget.com/dnslookup/?q={target}

Reverse DNS

Reverse lookup an IP or IP range. Infrastructure correlation and threat actor profiling.

api.hackertarget.com/reversedns/?q={target}

Host Search

Discover subdomains and A records. Subdomain enumeration and attack surface mapping.

api.hackertarget.com/hostsearch/?q={target}

Zone Transfer

Test for DNS AXFR leaks. Identify DNS misconfigurations and data exposure.

api.hackertarget.com/zonetransfer/?q={target}

Whois Lookup

Registrant and ASN details. Ownership identification and domain history.

api.hackertarget.com/whois/?q={target}

IP Address

IP Geolocation

Country, City and ISP data. Geographic attribution and infrastructure mapping.

api.hackertarget.com/geoip/?q={target}

Reverse IP

Find hostnames on the same IP. Find domains sharing the same hosting infrastructure.

api.hackertarget.com/reverseiplookup/?q={target}

TCP Port Scan

Scan common TCP ports. Attack surface enumeration and firewall analysis.

api.hackertarget.com/nmap/?q={target}

UDP Port Scan

Scan common UDP ports. UDP service discovery and exposure analysis.

api.hackertarget.com/nmap/?q={target}&udp=1

Subnet Lookup

Calculate network ranges and CIDR. Network range calculation and CIDR analysis.

api.hackertarget.com/subnetcalc/?q={target}

AS Lookup

ASN, Owner, and IP range lookup. Autonomous system identification and BGP analysis.

api.hackertarget.com/aslookup/?q={target}

Banner Search

Service version fingerprinting. Service fingerprinting and version detection.

api.hackertarget.com/bannerlookup/?q={target}

Web Tools

HTTP Headers

Server and security header audit. Web application fingerprinting and security header audit.

api.hackertarget.com/httpheaders/?q={target}

Page Links

Extract all links from a URL. Link discovery and web crawl preparation.

api.hackertarget.com/pagelinks/?q={target}

IP Tools API Documentation

The HackerTarget API streamlines access to network intelligence for security evaluation. All tools listed in the table above are accessible using your client of choice such as curl, a web browser or a scripting language (php, python).

Quick Start (No Auth)

Free access requires no sign-up or API key. Simply append the target IP or hostname to the q= parameter.

• Output Formats: Plain Text (Default) or JSON (selected endpoints).
• Clients: Compatible with curl, python, php, or any standard HTTP client.

Member Authentication

Members get full access to the API endpoints. Find your API key in the user dashboard. Access with the API key must use HTTPS.
Authentication can be handled via two methods:

1. Query Parameter:
   Append the key directly to the URL string using the &apikey= parameter:
   https://api.hackertarget.com/dnslookup/?q=example.com&apikey=YOUR_KEY


2. HTTP Header:
   Pass the key in the request header using X-API-Key:
   X-API-Key: YOUR_KEY

Example requests

Use these standard curl patterns to integrate the tools into your workflow:

curl "https://api.hackertarget.com/dnslookup/?q=hackertarget.com&apikey=plmoknijbuhvygvtrgedsfghhhhkjhkhfsk"

curl -H "X-API-Key: zzzzzzaaaaaaaa" "https://api.hackertarget.com/whois/?q=hackertarget.com"

test@thematrix:~$ curl -i https://api.hackertarget.com/geoip/?q=1.1.1.1
HTTP/2 200
server: nginx
date: Thu, 19 Feb 2026 01:17:26 GMT
content-type: text/plain; charset=utf-8
content-length: 78
x-api-quota: 51
x-api-count: 8 
x-api-boost: 100 000
access-control-allow-origin:*

IP Address: 1.1.1.1
Country: Australia
Latitude: -33.494
Longitude: 143.2104

Service Limits & Quota Monitoring

The current users API quota and usage can both be monitored by examining the HTTP Headers of the response from the API endpoint. The curl -i command will display the HTTP Headers as part of the output. The x-api-quota reports on the current users API quota and the x-api-count shows the current API usage count for the day.

To ensure reliability and prevent abuse, the following constraints apply to all API requests.

hackertarget.com/ip-tools/

Chrome Extension for Fast Access to IP Tools

Instant intelligence, without leaving your tab.

DNS, Whois, IP Geolocation, Port Scan and more. One click away directly in Chrome.

Download from Chrome Store