Threat Intelligence
Search any IP address and get the complete picture: our malicious-reputation verdict combined with live open-source enrichment. Available as a web lookup and as an API.
Everything we know about an IP, in one dossier
The same intelligence view our analysts use internally.
Reputation verdict
Threat score (0-100) with confidence and a severity badge: block, alert, warn, notice or info.
Geo & network
Country, region, city, timezone, ISP, organisation, domain and ASN, with a map link.
Registry & abuse
RDAP registry data: RIR, netname, allocation range, registrant org and abuse contact.
Fleet sightings
Where the IP appears across telemetry: as source vs destination, and any linked assets or devices.
Pivot deep-links
One-click pivots to VirusTotal, AbuseIPDB, Shodan, BGP.he.net and RDAP whois.
API access
The same dossier as JSON, so you can automate enrichment in your SOAR, SIEM or scripts.
Look up an IP right now
Free tier: 5 scans per day, per IP. Need volume or the API? Talk to us.