Subdomain IP History
Enter a domain or subdomain to see the IP addresses it has pointed to over time, when each was last seen, and which one it uses today.
Reading IP history
The address marked current is what the name resolves to right now, checked live. Any address with a recent date that is not current is worth a look: it can be a failover server, a staging box, or an origin server that still answers directly and bypasses the CDN's protection.
Each address links to the reverse IP lookup, to see what else is hosted there, and to the IP reputation checker.
Frequently asked questions
What is IP history used for?
Finding where a site was hosted before it moved, spotting a migration or takeover by the date the IP changed, and finding the origin server of a site that now sits behind a CDN, since its pre-CDN address is often still in the history.
Why are there so many IPs?
Sites behind Cloudflare or another CDN resolve to many edge addresses that rotate. Those are marked, and they belong to the CDN rather than to the site's own server. Up to 500 addresses are shown.
How accurate are the dates?
Each date is the last time the address was observed for this name, recorded without a timezone. Treat it as the right day, not the exact minute. A name that is rarely looked up may have gaps.
Is it safe to scan an old IP from the list?
Not without checking first. Addresses are reassigned, so an IP the domain used years ago may belong to an unrelated company today. Only test systems you are authorised to test.
Free to use within a daily limit per visitor. Use it on systems you own or are allowed to test, see the acceptable use policy.