Identify malicious infrastructure and behavior.
Send one IP or domain and get ASN, ISP, country, network type, proxy provider, behavior tags, and a 0 to 100 risk score.
- IPv4 and IPv6 lookup
- Provider attribution
- Behavior arrays
- Batch enrichment
Identify residential proxies, VPNs, and bot infrastructure behind your traffic. Put provider attribution and risk signals into your fraud and abuse decisions.
All services healthy
api/v4 successful lookups
All services healthy186 lookups35.4M unique IPs1.1B proxy events today
api/v4 successful lookups
events concentration today
Starred targets, provider movement, and workspace announcements.
Tracking 2,500+ providers
Research
Synthient’s research reveals how the APSolo proxy botnet sources compromised devices for IPWeb. Recovered client and backend source code links the malware to a large residential proxy network whose exits can access localhost and...
Read storyOur latest research reveals how modern residential proxy networks use "AI marketing" to hide a darker reality of global device exploitation. By tracking major proxy botnets, this comprehensive deep dive exposes how unconsenting...
Read storyPricing & access
Four levels of access. All custom quoted.
Compare all featuresIP intelligence for research and investigation.
Bulk data for your warehouse and analysis.
Fresh observations for production detection.
Threat telemetry and access tailored to your team.
Enter a domain to see recent requests, source IPs, proxy providers, ports, and subdomains in a public sample report.