✨ Professional WordPress development, custom website builder, efficient on-line, cooperate and enjoy optimization services! 🚀
1.Online tool recommendation
| artifact | web address | specificities |
|---|---|---|
| ViewDNS.info | https://viewdns.info/ | Provide IP history, DNS resolution, CDN detection |
| DNSlytics | https://dnslytics.com/ | Supports IP reverse lookup, WHOIS information, CDN identification |
| WhatIsMyIP | https://www.whatismyip.com/ | Quickly detect current access IP and server information |
| IPinfo.io | https://ipinfo.io/ | Detailed IP geolocation and ASN information |
| SecurityTrails | https://securitytrails.com/ | Historical DNS records, subdomain scanning |
| BGPView | https://bgpview.io/ | Analyzing BGP routes to bypass CDNs |
| Netcraft | https://www.netcraft.com/ | Server type, IP history, hosting provider detection |
| YouGetSignal | https://www.yougetsignal.com/ | Port scanning, IP reverse lookup |
| IP2Location | https://www.ip2location.com/ | Precise IP geolocation and ISP information |
| CentralOps | https://centralops.net/ | Integrated DNS/WHOIS/Route Tracer Tool |
2. How to bypass the CDN to get the real IP?
If the site uses theCloudflare, Akamai and other CDNs, you can try the following methods:
- Query Historical DNS Records
- utilization SecurityTrails maybe ViewDNS View IP change history.
- Checking subdomains
- Many of the sites of the
admin.example.commaybetest.example.comCDN may not be enabled.
- Many of the sites of the
- SSL Certificate Search
- pass (a bill or inspection etc) Censys Search for the site's SSL certificate associated IP.
- Mail Server Detection
- If the site has an email service (such as
mail.example.com), may directly expose the real IP.
- If the site has an email service (such as
- Global Ping Test
- utilization Ping.eu Ping domains from different regions and observe IP differences.
3. Cautions
- CDN interference: Modern CDNs (e.g. Cloudflare) hide the real IP and some tools may not be able to get it directly.
- Privacy: Some websites use high defense IPs or private clouds and cannot be publicly detected.
- lawful use: For security testing or O&M troubleshooting only, do not use for illegal scanning.

