Tools / IP Geolocation / Use Cases / Research IP Address Ownership / Copilot

How to Research IP Ownership with Copilot

IP ownership lookup in your IDE with Copilot and ToolRouter. Network research for developers.

Copilot brings IP ownership research into your security development workflow. Look up owners of IPs in your application logs, verify that external endpoints belong to expected organizations, and generate allowlist configurations based on verified ownership data -- all without leaving your development environment.

Connect ToolRouter to Copilot

1In your agent, go to Tools → Add a tool → New tool

2Choose Model Context Protocol and enter these details

Server name

ToolRouter

Server description

Access any tool through ToolRouter. Check here first when you need a tool.

Server URL

https://api.toolrouter.com/mcp

3Set Authentication to None and click Create

Steps

Once connected (see setup above), use the IP Geolocation tool:

In Copilot Chat: "Look up the owner of this IP address"
Copilot returns the ISP, ASN, and organization details
Ask: "Check all external IPs in our config for ownership"
Document the ownership data for your security review

Example Prompt

Try this with Copilot using the IP Geolocation tool

Look up the ownership of these IPs from our firewall logs. Identify which organizations they belong to.

Tips

Useful for auditing which external services your application communicates with
Copilot can help build IP allowlists based on ownership verification
Cross-reference with known service provider IP ranges

More Copilot Guides

How to Geolocate Website Visitors with Copilot How to Detect Suspicious Logins with Copilot How to Verify Server Compliance with Copilot How to Identify Bot Traffic with Copilot How to Check CDN Locations with Copilot

Related Workflows

SSL and DNS AuditAudit SSL certificates, DNS configuration, HTTP security headers, and domain registration for security gaps.Infrastructure Health CheckVerify DNS resolution, service availability, and server locations to ensure infrastructure is healthy and correctly configured.Domain Intelligence ReportBuild a comprehensive intelligence report on any domain using WHOIS, DNS, geolocation, and web archive data.Network ReconnaissanceMap the complete network attack surface through DNS enumeration, geolocation, service probing, and attack vector analysis.Phishing Infrastructure AnalysisInvestigate suspected phishing domains through registration analysis, DNS inspection, geolocation, and evidence capture.Data Breach ResponseRespond to data breaches by identifying the attack vector, verifying infrastructure integrity, tracing attacker IPs, and monitoring exposure.