✨ Professional WordPress development, custom website builder, efficient on-line, cooperate and enjoy optimization services! 🚀
1.Online tool recommendation
artifact | web address | specificities |
---|---|---|
ViewDNS.info | https://viewdns.info/ | Provide IP history, DNS resolution, CDN detection |
DNSlytics | https://dnslytics.com/ | Supports IP reverse lookup, WHOIS information, CDN identification |
WhatIsMyIP | https://www.whatismyip.com/ | Quickly detect current access IP and server information |
IPinfo.io | https://ipinfo.io/ | Detailed IP geolocation and ASN information |
SecurityTrails | https://securitytrails.com/ | Historical DNS records, subdomain scanning |
BGPView | https://bgpview.io/ | Analyzing BGP routes to bypass CDNs |
Netcraft | https://www.netcraft.com/ | Server type, IP history, hosting provider detection |
YouGetSignal | https://www.yougetsignal.com/ | Port scanning, IP reverse lookup |
IP2Location | https://www.ip2location.com/ | Precise IP geolocation and ISP information |
CentralOps | https://centralops.net/ | Integrated DNS/WHOIS/Route Tracer Tool |
2. How to bypass the CDN to get the real IP?
If the site uses theCloudflare, Akamai and other CDNs, you can try the following methods:
- Query Historical DNS Records
- utilization SecurityTrails maybe ViewDNS View IP change history.
- Checking subdomains
- Many of the sites of the
admin.example.com
maybetest.example.com
CDN may not be enabled.
- Many of the sites of the
- SSL Certificate Search
- pass (a bill or inspection etc) Censys Search for the site's SSL certificate associated IP.
- Mail Server Detection
- If the site has an email service (such as
mail.example.com
), may directly expose the real IP.
- If the site has an email service (such as
- Global Ping Test
- utilization Ping.eu Ping domains from different regions and observe IP differences.
3. Cautions
- CDN interference: Modern CDNs (e.g. Cloudflare) hide the real IP and some tools may not be able to get it directly.
- Privacy: Some websites use high defense IPs or private clouds and cannot be publicly detected.
- lawful use: For security testing or O&M troubleshooting only, do not use for illegal scanning.