Criminal IP's Complete IP Intelligence Database

# Provider Overview

Criminal IP is the industry's most comprehensive cyber threat intelligence search engine, powered by AI and Machine learning to grant you visibility into all the risks surrounding your cyberspace.

With its OSINT capabilities, Criminal IP provides detailed information on all internet-connected assets for a better understanding of the risks and vulnerabilities associated with all IP addresses and Domains.

# Dataset Information

This dataset is meticulously designed to enhance your cybersecurity measures, focusing on Vulnerability Management, Threat Detection & Mitigation, Data Loss Prevention, Cybersecurity Posture Assessment, and Infrastructure & Network Security.

## Key Features:<br/>

◦ **Masking Services (VPN, TOR, PROXY, CLOUD, MOBILE, CDN, HOSTING):** Identify various IP masking services including VPNs, Tor usage, proxies, cloud services, and more. This consolidated insight is crucial for understanding how traffic is being manipulated or anonymized.

◦ **Score:** Leverage Criminal IP’s sophisticated risk-scoring system to prioritize and address threats based on their potential impact. The score ranges from 1 to 5, with 5 indicating a high-risk IP.

◦ **TAGS**: Explore tags that provide contextual insights into the nature of IP addresses (ex. Data leak/Compromised/Malicious), enriching your analysis and decision-making.

◦ **PORTS**: Gain visibility into the ports associated with IP addresses, and the technologies and products running on these ports.

◦ **C2 (Command and Control):** Detect IP addresses associated with command and control software, enabling preemptive actions against potential cyber threats.

◦ **CVE:** Utilize the dataset to identify IP addresses associated with known vulnerabilities (CVE), enhancing your vulnerability management efforts.

◦ **Botnet:** Identify connections to botnets, a critical step in disrupting coordinated cyber-attacks and securing network perimeters.

◦ **Abuse Record:** Track IP addresses with historical abuse records, including IDS alerts, malware activity, phishing attempts, ransomware, and blocked IPs.

◦ **Country Code:** Determine the geographic origins of IP addresses for better threat localization and mitigation.

◦ **Mobile Botnet:** Detect mobile devices known to be part of botnets, aiding in the protection of mobile infrastructures.

◦ **SSL Certificate:** Enhance your IP address analysis with SSL certificate detection, providing insights into the security configurations of connected domains.

◦ **AS Name:** Understand which Autonomous Systems are managing the IP addresses, helping identify network ownership and potential vulnerabilities.

<p><br/></p>

## Contact Information

For further inquiries or to discuss potential customizations, please contact us at: [e-mail]

## <br/>Disclaimers:

-Users accessing this dataset under the free trial will be limited to a maximum of 1,000,000 data entries.

-This dataset features IP addresses that meet specific detection criteria within the last two weeks i.e. VPN configurations, CVEs, tags, honeypot interactions, and abuse records. It is selectively curated, and as such, some IP addresses may not be available due to the specialized nature of the data collected.

-This data listing is currently provided as a free trial and will soon be offered as a full dataset. Stay tuned!

-This data has been scanned and detected by the Criminal IP search engine: [criminalip.io](https://www.criminalip.io/)

# 服务商概览
Criminal IP 是业内最为全面的网络威胁情报搜索引擎，依托人工智能（AI）与机器学习技术，可帮助用户全面掌握其网络空间周边的全部风险。
依托开源情报（OSINT, Open Source Intelligence）能力，Criminal IP 可提供所有联网资产的详细信息，帮助用户深入理解各类IP地址与域名相关的风险与脆弱性。

# 数据集信息
本数据集经过精心设计，旨在强化用户的网络安全防护能力，核心覆盖漏洞管理、威胁检测与缓解、数据防泄漏、网络安全态势评估以及基础设施与网络安全五大领域。

## 核心功能
◦ **IP伪装服务（VPN、TOR、PROXY、CLOUD、MOBILE、CDN、HOSTING）：** 可识别包括虚拟专用网络（VPN）、TOR网络、代理服务器、云服务、移动网络、内容分发网络（CDN）、主机托管在内的各类IP伪装服务。此类整合式分析结果，对于理解流量被操控或匿名化的机制至关重要。
◦ **风险评分：** 依托Criminal IP先进的风险评分系统，用户可根据威胁的潜在影响对其进行优先级排序并针对性处置。评分区间为1至5分，5分代表高风险IP地址。
◦ **标签（TAGS）：** 可查看用于提供IP地址属性上下文信息的标签（例如数据泄露/已失陷/恶意行为），丰富分析维度并辅助决策制定。
◦ **端口（PORTS）：** 可查看与IP地址关联的端口，以及这些端口上运行的技术与产品信息。
◦ **命令与控制服务器（C2, Command and Control）：** 可检测与命令与控制软件关联的IP地址，帮助用户提前采取行动防范潜在网络威胁。
◦ **通用漏洞与披露（CVE, Common Vulnerabilities and Exposures）：** 可利用本数据集识别与已知通用漏洞与披露（CVE）相关联的IP地址，强化漏洞管理工作。
◦ **僵尸网络（Botnet）：** 可识别与僵尸网络的关联连接，这是破坏协同式网络攻击、加固网络边界的关键步骤。
◦ **滥用记录：** 可追踪带有历史滥用记录的IP地址，包括入侵检测系统（IDS）告警、恶意软件活动、网络钓鱼尝试、勒索软件以及已屏蔽IP地址。
◦ **国家代码：** 可确定IP地址的地理来源，助力更精准的威胁定位与缓解措施。
◦ **移动僵尸网络：** 可检测已知属于僵尸网络的移动设备，有助于保护移动基础设施安全。
◦ **SSL证书：** 可通过SSL证书检测功能增强IP地址分析能力，提供关联域名的安全配置相关洞察。
◦ **自治系统名称（AS Name）：** 可了解管理IP地址的自治系统（AS）信息，帮助识别网络所有权与潜在脆弱点。

## 联系方式
如需进一步咨询或讨论定制化方案，请发送邮件至：[e-mail]

## 免责声明
- 免费试用期间，用户可访问的数据条目上限为100万条。
- 本数据集收录了过去两周内符合特定检测标准的IP地址，包括VPN配置、通用漏洞与披露（CVE）、标签、蜜罐交互记录以及滥用记录。本数据集经过精选整理，鉴于所收集数据的特殊性，部分IP地址可能无法提供。
- 本数据列表目前仅作为免费试用版提供，后续将推出完整数据集，敬请期待！
- 本数据已通过Criminal IP搜索引擎扫描并检测：[criminalip.io](https://www.criminalip.io/)

搜集汇总

背景与挑战

背景概述

该数据集是Criminal IP提供的综合网络安全威胁情报数据库，包含VPN/Tor识别、风险评分、漏洞关联等11项关键检测功能，涵盖近两周内符合特定威胁标准的IP地址数据。当前提供有限条目的免费试用版本。