Criminal IP's Malicious IP Addresses Database

# Provider Overview

Criminal IP is the industry's most comprehensive cyber threat intelligence search engine, powered by AI and Machine learning to grant you visibility into all the risks surrounding your cyberspace.

With its OSINT capabilities, Criminal IP provides detailed information on all internet-connected assets for a better understanding of the risks and vulnerabilities associated with all IP addresses and Domains.

# Dataset Information

This dataset is specifically designed to enhance your cybersecurity posture, focusing on Threat Detection, Incident Response, Network Security, and Vulnerability Management.

## Key Features:

◦ **C2**: Detect IP addresses running command and control software to preemptively thwart cyber threats.

◦ **Score**: Leverage Criminal IP’s sophisticated risk scoring to strategically prioritize and tackle threats based on their potential impact.

◦ **Botnet**: Identify IP addresses connections to botnets, critical for disrupting coordinated cyber-attacks and securing network perimeters.

◦ **Abuse Record**: Track IP addresses with historical abuse records ( i.e. IDS, Malware, Phishing, Ransomware, Blocked IPs, and more).

◦ **Connected Domains**: Evaluate the extent of domain connections to an IP address for a comprehensive understanding of its web interactions.

◦ **SSL Certificate**: Enhance your analysis of IP addresses with SSL certificate detection.

◦ **Country Code**: Determine the geographic origins of IP addresses.

◦ **AS Name**: Understand which autonomous systems are managing the IPs to identify network ownership and potential vulnerabilities.

<p><br/></p>

## Contact Information

For further inquiries or to discuss potential customizations, please contact us at: [e-mail]

<p><br/></p>

## <br/>Disclaimers

-Users accessing this dataset under the free trial will be limited to a maximum of 1,000,000 data entries.

-This dataset features IP addresses that meet specific detection criteria within the last two weeks i.e. Malicious behavior, CVEs, tags, honeypot interactions, and abuse records. It is selectively curated, and as such, some IP addresses may not be available due to the specialized nature of the data collected.

-This data listing is currently provided as a free trial and will soon be offered as a full dataset. Stay tuned!

-This data has been scanned and detected by the Criminal IP search engine: [criminalip.io](https://www.criminalip.io/)

<p><br/></p>

# 提供商概述
Criminal IP是当前行业内最为全面的网络威胁情报（Cyber Threat Intelligence）搜索引擎，依托人工智能与机器学习技术，为用户提供其网络空间周边全部风险的全面可视能力。

凭借其开源情报（Open Source Intelligence, OSINT）能力，Criminal IP可提供所有联网资产的详细信息，帮助用户深入理解与所有IP地址及域名相关的风险与漏洞。

# 数据集信息
本数据集专为强化用户的网络安全态势而打造，聚焦威胁检测、事件响应、网络安全与漏洞管理四大场景。

## 核心特性：
◦ **C2（命令与控制，Command and Control）**：检测搭载命令与控制软件的IP地址，从而预先阻断网络威胁。
◦ **风险评分**：依托Criminal IP先进的风险评分体系，可基于威胁的潜在影响制定策略优先级，有序处置各类威胁。
◦ **僵尸网络（Botnet）**：识别与僵尸网络存在关联的IP地址，这对于破坏协同式网络攻击、加固网络边界安全至关重要。
◦ **滥用记录**：追踪带有历史滥用记录的IP地址（例如入侵检测系统（Intrusion Detection System, IDS）告警、恶意软件、钓鱼攻击、勒索软件、被封禁IP等场景）。
◦ **关联域名**：评估IP地址关联的域名范围，全面掌握其网络交互情况。
◦ **SSL证书（Secure Sockets Layer Certificate）**：通过SSL证书检测功能，深化对IP地址的分析工作。
◦ **国家代码**：确定IP地址的地理起源。
◦ **自治系统名称（Autonomous System Name, AS Name）**：了解管理该IP的自治系统信息，以识别网络归属方及潜在漏洞。

<p><br/></p>

## 联系方式
若需进一步咨询或探讨定制化需求，请发送邮件至：[e-mail]

<p><br/></p>

## <br/>免责声明
- 免费试用期间，用户可访问的数据条目上限为1,000,000条。
- 本数据集仅包含近两周内符合特定检测标准的IP地址，即存在恶意行为、存在通用漏洞披露（Common Vulnerabilities and Exposures, CVE）记录、带有标记、与蜜罐产生交互或存在滥用记录的IP地址。本数据集经过精选筛选，鉴于所收集数据的专业化特性，部分IP地址可能无法被收录。
- 本数据列表目前仅以免费试用形式提供，后续将推出完整数据集，敬请期待！
- 本数据已通过Criminal IP搜索引擎扫描并检测：[criminalip.io](https://www.criminalip.io/)

<p><br/></p>

搜集汇总

背景与挑战

背景概述

该数据集是AI驱动的恶意IP地址数据库，提供C2服务器检测、风险评分、僵尸网络识别等核心功能，助力网络安全威胁防护。数据包含近两周内符合恶意行为标准的IP地址，目前为限量免费试用版。