IPIP0
1. Basic fields
IP address
The IPv4 or IPv6 address being queried. Associated hostnames are displayed when available.ASN
The Autonomous System Number identifying the network operator or organization. The ASN link opens public BGP information.Location
An estimated country, region and city based on several geolocation databases. Results are estimates and may differ between sources.2. Network types
Home / ISPResidential broadband assigned to consumers, usually associated with ordinary end-user traffic.
HostingCloud or data-center infrastructure commonly used for servers, VPNs and proxy nodes.
BusinessConnectivity assigned to companies and office locations.
EducationNetworks operated by schools, universities and research institutions.
GovernmentNetworks registered to public-sector organizations.
Mobile3G, 4G or 5G carrier connectivity, often shared by many devices.
3. Native and broadcast characteristics
Native IPThe registration country and observed geolocation are consistent.
Broadcast / Anycast IPThe registration and observed locations differ, or the address is announced from multiple locations.
4. Risk score and tags
The score combines threat-list matches, network attributes, proxy signals and exposed-service information. A higher score indicates more evidence of risk.
0% Normal
1–19% Low
20–39% Medium
40–69% High
70%+ Critical
High-risk indicators
- Compromised / Botnet / C2: evidence that the host is compromised or participates in malicious command infrastructure.
- Malware: the address has been associated with malware hosting or distribution.
- Scanner: recent port scanning or vulnerability probing activity.
Anonymity indicators
- Proxy / VPN: an HTTP, SOCKS or VPN exit service was detected.
- Tor / Onion: the address is associated with the Tor network or hidden services.
- Anonymous: one or more sources identify deliberate origin concealment.
Infrastructure and configuration indicators
- Cloud / CDN: cloud-computing or content-delivery infrastructure.
- IoT / ICS: internet-connected or industrial-control equipment.
- Open directory / self-signed / EOL: configuration or lifecycle conditions that may increase exposure.
5. Technical fingerprints
CPE
Common Platform Enumeration identifiers describing detected software or hardware products.Open ports
TCP or UDP services observed on the public address. Sensitive database and remote-access ports can increase risk.IP intelligence is probabilistic. Do not use a single field or score as the sole basis for blocking, payment rejection or identity decisions.