Cisco Talos provides threat intelligence and directs reputation or categorization inquiries to its support site.
Criminal IP
Criminal IP provides IP reputation analysis, attack-surface monitoring, fraud detection and threat intelligence.
About Criminal IP
Criminal IP provides threat intelligence tools for investigating IPs, domains, and related infrastructure. Its search engine shows ownership, abuse records, malware associations, passive DNS history, and scanner activity, with filters and tags for analysts.
It also offers attack surface management for finding exposed external domains, IPs, ports, and services, and fraud detection that analyzes incoming traffic for bot activity, spoofed IPs, and credential stuffing. Integration is available through API, database, and feeds.
Key features
- Search IPs, domains, and threat infrastructure with filters and tags
- Show ownership, abuse records, and malware associations
- Show passive DNS history and scanner activity
- Discover external domains, IPs, ports, and services
- Analyze incoming traffic for bots and spoofed IPs
- Provide API, database, and feeds for workflow integration
Best for: Security analysts and security teams that investigate threat infrastructure and monitor external assets.
Good for
- Covers investigation, attack-surface monitoring, and fraud detection in one platform
- Provides ownership, abuse, malware, DNS, and scanner context for investigations
- Offers API, database, and feeds for integration into existing workflows
Criminal IP at a glance
- Website
- criminalip.io
- Category
- Privacy & Security › Security Research
- Type
- Website
- Pricing
- Not confirmed. Check the site
- Platforms
- Web
- Open source
- Not stated
- Language
- English
- Last checked
- Oct 5, 2026 · Online when checked
- Listed
- Oct 5, 2026
Criminal IP alternatives
Tools and sites you could use instead, ranked by how closely they match.
ONYPHE scans IPs and URLs at internet scale for attack-surface discovery, management and cyber threat intelligence.
Cisco Talos’ Intelligence Center provides IP and domain intelligence for threat detection.
Coordinate threat intelligence processing and analysis at scale with IntelOwl, an open-source project.
Open sourcePick
24 alternatives
ZoomEye searches internet-connected assets for discovery and cybersecurity research.
Explore threat research, advisories, and security information published by FortiGuard Labs.
Pick
24 alternativesPopular in Security Research
Well-known listings from the same topic.
gofoss.netgofoss.netCounter-OSINT guide for Russiansgithub.com/soxoj/counter-osint-guide-ruaptnotes/datagithub.com/aptnotes/dataDigital Attack Mapdigitalattackmap.comGreyNoiseviz.greynoise.ioShodanshodan.io
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.