Criminal IP

Real-Time Cyber Threat Intelligence Search Engine and Global IT Asset Discovery

Provides a global search engine and comprehensive threat intelligence dataset covering 4.2 billion IP addresses, 300 million domains, and diverse connected assets (IoT, CCTV, servers, ICS), supporting advanced search filtering, asset risk scoring, and access to over a year of historical threat data for deep security trend analysis.

Adversary Infrastructure Tracking and Pivoting

Monitors, maps, and tracks malicious adversary infrastructure, botnets, and C2 servers in real time, enabling security teams to perform seamless pivoting across related entities to trace attacker assets and compromised hosts.

Threat Actor Profiling and MITRE ATT&CK Mapping

Tracks global hacking groups, links indicators of compromise (IOCs) to specific threat actors, maps suspected techniques to the MITRE ATT&CK framework, and delivers detailed behavioral analyses, summary cards, and geographic attack maps.

AI-Powered Threat Risk Scoring and Domain/URL Scanning Engine

Evaluates IP addresses, domains, and URLs across five severity levels using machine learning and behavioral anomaly detection, identifies real-time phishing threats, and provides DOM/HTML structure analysis to support preemptive security responses.

Comprehensive REST APIs and Multi-Platform Integrations Ecosystem

Enables automated operations via a robust, API-first RESTful intelligence engine while integrating natively with SIEM/SOAR platforms, cloud marketplaces, threat-blocking DNS resolvers, Tines automation, and browser extensions (Chrome, Naver Whale).