IPGeolocation.io

IPGeolocation.io enriches IPv4 and IPv6 observables with IP intelligence from one API request: geolocation, autonomous system, company, threat intelligence and abuse contact.

Key features:

• Threat score and VPN, proxy, residential proxy, Tor, relay, bot, spam and known attacker signals, turned into an OpenCTI score and labels
• Country and city with located-at relationships, autonomous system with belongs-to, operating organization and cloud provider
• Hostname with a resolves-to relationship
• Optional indicator for addresses whose risk score reaches a threshold
• A note with the full enrichment report, including the abuse contact
• TLP checked before any data leaves OpenCTI; works on free plans (location and ASN) and paid plans