IP intelligence, address by address
Every address gets a live verdict from the same pipeline the API serves: VPN, proxy, Tor, and datacenter signals, a 0–100 risk score, and an allow, review, or block decision. Use the free lookup tool to check any address, or open an address page directly at /ip/<address>.
Datacenter space, by provider
One address from each provider's own published range list. The full footprints are in the hosting directory.
Current Tor exit nodes
A sample from the Tor Project's published exit list, which we refresh every four hours. Tor traffic is not fraud by default — but it is worth a second factor before an irreversible action.
What the verdict is for
A score is a starting point, not a decision. Reading a page from a flagged address is unremarkable; redeeming a promotion or completing a checkout from one deserves scrutiny in proportion to what the action costs.
To find out who announces an address rather than whether it is a tunnel, use the ASN directory — that is a different and equally useful question.
One REST call, sub-40ms server-side p95. Free tier, 1,000 requests/hour.