7 / 15
IP / Digital Infrastructure
When you need to identify IP addresses, hosting, or technical infrastructure.
Prioritized Sources & Techniques
1st
ShodanA4
Search by organization name, SSL cert, or hostname
2nd
CensysA9
Certificate transparency search — find all certs issued to a domain/org
3rd
theHarvesterA3
DNS enumeration, subdomain discovery, associated IPs
4th
SpiderFootA5
Automated infrastructure mapping from a domain seed
5th
IPinfoA13
IP → ASN, organization, geolocation lookup
6th
GreyNoiseA10
Check if an IP is scanning the internet (noise vs. targeted)
7th
AbuseIPDBA15
Check IP reputation and abuse reports
Recommended Workflow
Start with Shodan/Censys to map exposed services. Use theHarvester for DNS and subdomain enumeration. IPinfo provides ASN/org attribution for any IP. GreyNoise distinguishes targeted activity from internet background noise.