DuckIntel / Security Tools

IP & DNS Lookup

Free IP and DNS lookup tool. Get geolocation, ASN, WHOIS/RDAP, reverse DNS, and DNS records (MX, SPF, DMARC, A, NS) for any IP or domain.

The IP and DNS Lookup tool provides instant geolocation, WHOIS/RDAP, reverse DNS, and full DNS record lookups for any IP address or domain name. Enter a suspicious IP from a log file, an email header, or a threat report and get the country, city, ISP, autonomous system number, and abuse contact in seconds.

DNS reconnaissance is a fundamental step in any threat investigation. When you receive an alert about a connection to an unknown host, the first question is: who owns this IP and what else do we know about it? The IP lookup tool answers that question immediately, returning geolocation data, the full RDAP registration record, reverse DNS hostname, and all DNS records associated with the domain.

SOC analysts use this tool to pivot from a raw IP address to an ASN, identify whether traffic is coming from a hosting provider, VPN, Tor exit node, or residential ISP, and look up SPF, DMARC, and MX records to assess email security posture. All lookups are performed via DNS-over-HTTPS and public RDAP APIs — no data is stored.

Features

IP geolocation (country, city, coordinates, timezone)
ASN and ISP identification
WHOIS/RDAP registration data
Reverse DNS lookup
Full DNS records: A, MX, NS, TXT, SPF, DMARC
Abuse contact information
No data stored — all queries via public APIs

Part of DuckIntel.io — 59 free browser-based security tools for SOC analysts. No login. No tracking. 100% client-side.