IP Intelligence is a free real-time service that determines how likely an IP address is a proxy, VPN, hosting or bad IP, returning a probabilistic value between 0 and 1. It uses machine learning and probability theory with dynamic checks against large datasets. The API requires no key or sign-up, and an optional residential proxy detection flag is available.
Directory
Search results
Published directory entries matching your search.
Cisco Talos Intelligence Group is a threat intelligence operation that publishes threat research and an Intelligence Center with web reputation, content categorization, sender IP and domain reputation, file reputation and IPS/IDS resources. It also offers incident response services for emergency network security needs and proactive intelligence-led services.
IP intelligence tool for checking scan traffic, noisy hosts, and suspicious internet activity.
Intelligence X is a provider of free open source intelligence (OSINT) and forensic tools for investigations. Its toolset supports search across third-party sites, social media intelligence for Facebook, Twitter, LinkedIn, Telegram, and YouTube, and utilities for tasks including email validation, domain lookups, IP lookups, Bitcoin tracing, and image analysis. All listed OSINT and forensic tools are available to use at no cost.
Cisco Talos Intelligence operates an IP and Domain Intelligence Center for real-time threat detection. It publishes threat data including daily volume and volume change metrics for top email and spam sending countries. The service also accepts incident response inquiries for emergency network security needs.
This is a no-longer-maintained Google Sheets resource collection compiled by AaronCTI, with its updated version hosted at OSINTPORTAL.COM. It categorizes links to cyber threat intelligence and open source intelligence resources for lookups including email addresses, IP addresses, social media profiles, and data breaches.
Intelligence X provides a collection of free open source intelligence (OSINT) and forensic tools for investigative use. The tools support lookups for emails, domains, IP addresses, Bitcoin addresses, images, usernames, people, phone numbers, locations, files, VINs, and hashes, alongside social media intelligence tools for Facebook, Twitter, LinkedIn, Telegram, and YouTube, plus AI-powered search features. All third-party lookup services open in pop-up tabs, and the provider disclaims responsibility for third-party service results.
Webscout provides intelligence on IP addresses for defenders of democracies and critical infrastructure. Its platform ingests network and intelligence feeds, adds context, detects threats, and supports investigation and response. It enriches IPs with data on geolocation, network ownership, VPNs, Tor, residential proxies, and provider attribution, delivered by API, bulk feed, or SIEM integration. It also offers honeypots and domain intelligence.
Fortinet threat intelligence portal for security updates, IP reputation, malware, and web filtering data.
Criminal IP is a threat intelligence platform. It delivers AI-powered threat intelligence, IP reputation analysis, attack surface management, fraud detection, and brand protection. Users can use it to discover exposed assets, detect malicious infrastructure, and reduce cyber risk in real time.
The Network Entity Reputation Database IP search is a CESNET page that searches and lists IP addresses with hostname, ASN, country, events, reputation score, threat category, other properties, time added and last activity. It provides links to services including Shodan, Censys, AbuseIPDB, Talos Intelligence Center, Greynoise Visualizer and DShield. Results shown include DShield reports and OTX pulses.
OSINT tool for collecting domain, IP, ASN, and infrastructure intelligence from multiple sources.
Similarweb is an AI-powered digital data intelligence company. It provides real-time market intelligence, competitive insights, and consumer trend data to help businesses accelerate their growth through access to digital market information.
Abusech helps search threat intelligence, IP reputation, domains, and security investigation data.
Abuseipdb helps search threat intelligence, IP reputation, domains, and security investigation data.
Internet intelligence tool for looking up ASN details, IP information, and BGP routing data.
BrightCloud helps search threat intelligence, IP reputation, domains, and security investigation data.
Censys provides a map of the internet that security teams use to defend attack surfaces and hunt for threats. It offers security operations and exposure management with real-time internet intelligence. Products listed include attack surface management, Censys Search and adversary investigation.
DNSlytics is an online investigation tool for viewing information about IP addresses, domain names and providers. It offers DNS lookups, email testing, WHOIS lookups, and reports on AS/BGP, CIDR and TLD data. Premium website access and a premium API provide additional page views, monitors and data.
Threat intelligence search tool for checking internet scan traffic and suspicious IP activity.
Shodan InternetDB lookup for checking open ports, vulnerabilities, tags, and host data by IP.
OSINT.sh IP lookup for checking geolocation, ASN, network, and hosting information.
DB-IP provides an IP geolocation API and database covering IPv4 and IPv6 address spaces, with data on locations and network intelligence. It lists uses including location-aware content, traffic surveys and risk analysis. A free download is offered.
IPLeak.net is a diagnostic page that shows the IP addresses, DNS resolvers, WebRTC and torrent address information a visitor's system exposes to websites. It also explains WebRTC and DNS leaks and lists request details such as user agent and headers.