DNS & IP Tools provide tactical intelligence to the Security Operation Center (SOC) and Penetration Testers. Use these tools to map the attack surface of a target, identify security weaknesses, and streamline incident response. Quickly collect data on IP Addresses, Networks, Web applications and DNS records.

These information gathering tools serve as tactical reconnaissance tools. Quickly gather relevant information and pivot into deeper enumeration using port scanners, web page analysis and other more aggressive tools.

Automation & Integration: All tools are accessible via the web forms below or through our easy to use API, third party integrations (Splunk, Maltego etc), and the official Chrome extension.

API Documentation API Credits Chrome Ext FAQ

IP and Network Tools

All tools available via web form and API. No sign-up required for free access.
Click a tool name for detailed notes and example results.

Network tests

MTR Traceroute
Trace path hop-by-hop with latency. Network path analysis and latency troubleshooting.
api.hackertarget.com/mtr/?q={target}
Test Ping
Round-trip time and packet loss. Connectivity testing and availability checks.
api.hackertarget.com/ping/?q={target}

DNS

DNS Lookup
Resolve Standard Records for a Domain (A, MX, NS, TXT). Initial reconnaissance and domain analysis.
api.hackertarget.com/dnslookup/?q={target}
Reverse DNS
Reverse lookup an IP or IP range. Infrastructure correlation and threat actor profiling.
api.hackertarget.com/reversedns/?q={target}
Host Search
Discover subdomains and A records. Subdomain enumeration and attack surface mapping.
api.hackertarget.com/hostsearch/?q={target}
Zone Transfer
Test for DNS AXFR leaks. Identify DNS misconfigurations and data exposure.
api.hackertarget.com/zonetransfer/?q={target}
Whois Lookup
Registrant and ASN details. Ownership identification and domain history.
api.hackertarget.com/whois/?q={target}

IP Address

IP Geolocation
Country, City and ISP data. Geographic attribution and infrastructure mapping.
api.hackertarget.com/geoip/?q={target}
Reverse IP
Find hostnames on the same IP. Find domains sharing the same hosting infrastructure.
api.hackertarget.com/reverseiplookup/?q={target}
TCP Port Scan
Scan common TCP ports. Attack surface enumeration and firewall analysis.
api.hackertarget.com/nmap/?q={target}
UDP Port Scan
Scan common UDP ports. UDP service discovery and exposure analysis.
api.hackertarget.com/nmap/?q={target}&udp=1
Subnet Lookup
Calculate network ranges and CIDR. Network range calculation and CIDR analysis.
api.hackertarget.com/subnetcalc/?q={target}
AS Lookup
ASN, Owner, and IP range lookup. Autonomous system identification and BGP analysis.
api.hackertarget.com/aslookup/?q={target}
Banner Search
Service version fingerprinting. Service fingerprinting and version detection.
api.hackertarget.com/bannerlookup/?q={target}

Web Tools

HTTP Headers
Server and security header audit. Web application fingerprinting and security header audit.
api.hackertarget.com/httpheaders/?q={target}
Page Links
Extract all links from a URL. Link discovery and web crawl preparation.
api.hackertarget.com/pagelinks/?q={target}

Many of these tools are passive, meaning no packets are sent directly to the target IP ranges. For tools that do generate traffic, scanning from our infrastructure provides an abstraction layer between your own IP range and the target. This is particularly useful for investigations or Red Team operations where non-attribution is a priority.

To ensure service availability and minimize abuse, the following limits apply to the Free tier:

  • Web Access: Ad-hoc queries via the individual tool forms.
  • API Access: Rate-limited automation for rapid reconnaissance.
  • Quotas: Free users are limited a maximum of 50 API calls per day (depending on the tool).

Automate reconnaissance with Domain Profiler

Run all of these tools against a target domain in a single pass. Domain Profiler chains DNS, Whois, reverse IP, port scanning and more into one automated report.
Useful when you need a full picture of an organisation's Internet-facing infrastructure quickly.

View Domain Profiler

IP Tools API Documentation

The HackerTarget API streamlines access to network intelligence for security evaluation. All tools listed in the table above are accessible using your client of choice such as curl, a web browser or a scripting language (php, python).

Quick Start (No Auth)

Free access requires no sign-up or API key. Simply append the target IP or hostname to the q= parameter.

  • Output Formats: Plain Text (Default) or JSON (selected endpoints).
  • Clients: Compatible with curl, python, php, or any standard HTTP client.

Member Authentication

Members get full access to the API endpoints. Find your API key in the user dashboard. Access with the API key must use HTTPS.
Authentication can be handled via two methods:

  1. Query Parameter:
    Append the key directly to the URL string using the &apikey= parameter:
    https://api.hackertarget.com/dnslookup/?q=example.com&apikey=YOUR_KEY

  2. HTTP Header:
    Pass the key in the request header using X-API-Key:
    X-API-Key: YOUR_KEY

Example requests

Use these standard curl patterns to integrate the tools into your workflow:

curl "https://api.hackertarget.com/dnslookup/?q=hackertarget.com&apikey=plmoknijbuhvygvtrgedsfghhhhkjhkhfsk"
curl -H "X-API-Key: zzzzzzaaaaaaaa" "https://api.hackertarget.com/whois/?q=hackertarget.com"

Example: Examining Headers

test@thematrix:~$ curl -i https://api.hackertarget.com/geoip/?q=1.1.1.1
HTTP/2 200
server: nginx
date: Thu, 19 Feb 2026 01:17:26 GMT
content-type: text/plain; charset=utf-8
content-length: 78
x-api-quota: 51
x-api-count: 8 
x-api-boost: 100 000
access-control-allow-origin:*

IP Address: 1.1.1.1
Country: Australia
Latitude: -33.494
Longitude: 143.2104

How to Monitor usage and get more Credits

Your API quota and usage can both be monitored by examining the HTTP Headers of the response from the API endpoint.

curl -i command will display the HTTP Headers as part of the output.
x-api-quota reports on the current users API quota
x-api-count shows the current API usage count for the day.

To ensure reliability and prevent abuse, the following constraints apply to all API requests.

Rate Limits
  • Free daily cap:50 calls per day
  • Rate limit: 2 req/s — breach returns HTTP 429
  • Caching: Some endpoints — see ToS
Purchase API Credits
Credits activate automatically once your daily quota is exhausted. Membership allowance always applies first.

Credit boosts

Addon Available to all members

100,000 credits

$0.0025/credit

$250

Best value

1,000,000 credits

$0.00125/credit

$1,250

Contact Sales to Order