ipinfo CLI
ipinfo CLI ipinfo CLI is the snappy terminal companion for geolocating IPs, pulling ISP details, ASN, and abuse contacts in a single command without browser tabs cluttering your flow. Curl your target IP for JSON output, pipe it to jq for custom views, or script bulk lookups for recon runs. Free for basics with generous limits, it's the lightweight lookup engine for solo hackers mapping footprints fast.
Explore →whois
whois whois is the classic CLI query beast that digs into IP registries for owner info, netblocks, and abuse reports, baked into most systems for zero-setup intel gathering. Run it on an IP to unveil org contacts and creation dates, chaining with scripts for automated sweeps of suspicious traffic. Free and foundational, it's the unpretentious digger for pentesters chasing attribution trails.
Explore →nslookup
nslookup nslookup is the built-in DNS sleuth for reverse lookups on IPs, resolving PTR records to hostnames or querying custom servers for geohints without extra installs. Type it in your terminal for interactive mode, scripting queries to map attack surfaces from IPs alone. Free and omnipresent, it's the quick-glance oracle for anyone verifying origins in a shell session.
Explore →Shodan CLI
Shodan CLI Shodan CLI is the IoT reconnaissance powerhouse that queries its vast database for IP details, open ports, and device banners, turning a single address into a vulnerability roadmap. Auth with your API key and search for host intel, exporting JSON for deeper dives in your tools. Free tier for light use, it's the expansive explorer for individuals scouting exposed assets.
Explore →whatismyipaddress.com
WhatIsMyIPAddress WhatIsMyIPAddress is the straightforward web scanner that geolocates any IP with ISP, hostname, and threat scores, plus a bulk tool for batching addresses in your clipboard. Paste an IP for instant visuals and privacy insights, no accounts needed for core lookups. Free and visual, it's the browser bookmark for quick IP teardowns during casual recon.
Explore →ip-api.com
ip-api.com ip-api.com is the free REST API for geolocating IPs with city-level precision, org names, and mobile carrier tags, rate-limited but generous for personal scripts. Curl it in loops for batch queries, parsing JSON for maps or reports without credits. No signup for basics, it's the reliable endpoint for devs embedding geo checks in their tools.
Explore →MaxMind GeoIP
MaxMind GeoIP MaxMind GeoIP is the database-driven lookup engine with CLI tools for resolving IPs to countries, cities, and ASNs using downloadable MMDB files for offline precision. Query via geoipupdate or mmcli on your machine, scripting against local data for privacy-focused hunts. Free lite databases, it's the self-hosted sage for analysts avoiding cloud dependencies.
Explore →Censys CLI
Censys CLI Censys CLI is the search engine wrapper for probing IPs in its massive scan data, revealing certs, ports, and protocols with historical snapshots for threat intel. Auth and query via search command, filtering for geo or vuln tags in JSON streams. Free with API limits, it's the deep-dive diver for individuals mapping global exposures.
Explore →IPLocation.net
IPLocation.net IPLocation.net is the web-first geocoder that maps IPs to maps with timezone, currency, and proxy detection, plus a free API for scripting lookups in your workflows. Enter an IP for a detailed breakdown or embed the API in curl for automated chains. Free for low volume, it's the visual voyager for testers tracing digital trails with ease.
Explore →Robtex