IP Intelligence & Attribution Resources

A curated list of IP enrichment, reputation, risk scoring, geolocation, ASN, and network attribution tools.

---

Table of Contents

• IP Reputation & Risk
• IP → ASN / Geolocation
• DNS & Domain Intelligence
• Certificate & TLS Intelligence
• Cloud Provider IP Ranges
• Metadata & Web Fingerprinting
• Contributing

---

IP Reputation & Risk

AbuseIPDB

https://abuseipdb.com
Crowd-sourced IP risk data.

Talos Intelligence

https://talosintelligence.com
IP & domain reputation.

GreyNoise

https://greynoise.io
Distinguish internet background noise from targeted activity.

---

IP → ASN / Geolocation

Team Cymru IP-ASN Mapping

https://www.team-cymru.com/ip-asn-mapping
High-accuracy ASN attribution.

IPinfo.io

https://ipinfo.io
ASN, carrier, and geolocation metadata.

IP2Location

https://ip2location.com

IPStack

https://ipstack.com

---

DNS & Domain Intelligence

RiskIQ (PassiveTotal)

https://community.riskiq.com
Historical DNS and infrastructure OSINT.

ViewDNS.info

https://viewdns.info
Reverse lookups and IP metadata.

---

Certificate & TLS Intelligence

crt.sh

https://crt.sh
Certificate Transparency database.

JARM Fingerprinting

https://github.com/salesforce/jarm

JA3 / JA3S / JA4

TLS fingerprinting.

---

Cloud Provider IP Ranges

• AWS
• Azure
• Google Cloud
• Oracle Cloud

Public JSON feeds for identifying cloud-hosted infrastructure.

---

Metadata & Web Fingerprinting

BuiltWith

https://builtwith.com
Technology stack profiling.

Wappalyzer

https://www.wappalyzer.com
Web fingerprinting for frameworks and services.

---

Contributing

PRs for new IP attribution tools welcome.