Versioned IP intelligence for lookup-heavy systems.

Sub-100ms lookups that tell you whether an IP is a human, a beneficial AI, or a malicious actor — with a dataset version on every response so your caches never guess. IP intelligence and email reputation, trap-confirmed from our own honeypots.

Get an API key Read the docs

Free tier — 1,000 lookups/mo. First call in under 30 minutes. No card.

GET /v1/ip/8.8.8.8

{
  "data": {
    "ip": "8.8.8.8",
    "prefix": "8.8.8.0/24",
    "asn": 15169,
    "asn_name": "Google LLC",
    "detection": { "datacenter": true, "ai_crawler": false },
    "threat_score": 4
  },
  "meta": {
    "dataset_version": 1487,
    "sources": ["rir", "bgp", "rpki", "honeypot"]
  }
}

99.9%+ ASN accuracy99%+ country geo<100ms p99IPv4 + IPv6Updated dailyTor exits / 15 min

The difference

Trap-confirmed, not aggregated.

IPinfo and MaxMind resell lists. We run our own SMTP, SSH, and HTTP honeypots, spam-trap domains, and a public DNSBL — so when LimesIndex flags an IP, it tripped a trap we control. Evidence, not hearsay.

HoneypotsSpam trapsDNSBLProbers

Capabilities

One call. The whole picture of an IP.

Versioned lookups

Every response carries a dataset version, so caches and clients coordinate deterministically instead of guessing when the data changed.

Prefix-native answers

Lookups resolve against CIDR ranges directly — not brittle string maps or hand-maintained exception lists.

Multi-source consensus

RIR, BGP, RPKI validity, and geo cross-validated on every lookup. Each section is freshness-stamped and sourced.

Detection on every IP

Datacenters, VPNs, proxies, Tor exits, cloud providers, and AI crawlers (GPTBot, ClaudeBot) — with a threat score.

Email reputation

Sender-IP reputation, blocklist status, and SPF / DKIM / DMARC domain grading in the same API.

Edge-aware delivery

Built for cacheable edge traffic, fast refreshes, and deterministic rollout behavior at 10k req/s.

Free, no signup

Public intelligence tools.

Diagnose IP

Reputation, routing, ownership history, RPKI validity, and recent honeypot activity for any IP. Shareable via permalink.

AI-Crawler Firewall

Drop-in rules to block GPTBot, ClaudeBot, PerplexityBot, and Google-Extended for nginx, Caddy, iptables, and Cloudflare.

Email reputation checker

Check sender-IP reputation, blocklist status, and domain authentication grading — no signup.

Browse all tools

Who it's for

Developers & anti-fraud

Classify every request at the edge with one call.

Security & SOC

Trap-confirmed feeds, IP dossiers, and a live threat dashboard.

Email & deliverability

Sender-IP reputation, blocklist status, and domain auth grading.

Start with the free tier.

Self-service signup, instant API access, 1,000 lookups/mo. No card.

Get an API key